Edit tour

Windows Analysis Report
https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid

Overview

General Information

Sample URL:	https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source
Analysis ID:	1431473
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Executes massive DNS lookups (> 100)

HTML body with high number of embedded images detected

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6016 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveContent-Length: 448sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-amplitude-language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/graphql+json, application/jsonx-amplitude-country: USx-app-origin: decoupledsec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Thu, 25 Apr 2024 07:07:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-46sjq-9234X-Request-Id: a43bfcddb1379a41f13ef4f8e20aab07X-Runtime: 0.001465X-Cache: Error from cloudfrontVia: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: u-2UyWtI16kMRBFDun7wY-zxXkqbZludlIXbhqbTMlDGj7q8-N0vuQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:08 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 b98d9359af9bfef991c5b64e71032a66.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: fJikHaW8iEFlGJV4i_Z9WfpHFnfK-6T3no_m31hl1YDgEzAxoJSRaA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:09 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: pESQYvdND6VAMiw98Zh1iMI-2YR05J3U8-p4aGVUdXAEgkKlasL2HA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:07:10 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-09cce1e47c116b9aeContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:07:15 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 7084Connection: closeDate: Thu, 25 Apr 2024 07:07:15 GMTETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: phXpUouh1N8pYJLt6KU1NfY9os5J-jJ84X-EXzqGaVr9KOBYtyUnLg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:15 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: QZWP9UlInrN0Bqjufo2wgXHDJxxq77HuCXMPfD2O-TaygSsxdfqLzg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:16 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: bIXt43O-6uP9yFRWVx_i5kusHY5U3iurXqDf-6uMLhWxelOHqt6j2g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:16 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: qJ5JdKAL-MB3EBfz9HX0Fg2AZoVf1YwFtcWWp9Nbk40GQhKkTPjinA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Thu, 25 Apr 2024 07:07:32 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-klm97-27587X-Request-Id: a74be5964643b5b6d3142686f0dc087dX-Runtime: 0.001477X-Cache: Error from cloudfrontVia: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: pm0NjUTg-OcD6TKAhe74KGdPHnmlMmaEHDBfDcMC_no5WClQpe4qPg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:33 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 1VBSnp-qBVobiPS7tzz9Wn5l_8fzz10gtrUqJ5k8HeRem_vFLlzEMA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:33 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: nOByPXaSRYuA0gdR84qtvOlpnhPM5lrMaSVnPVQRfoPSPxjDPn7dfg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:07:34 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0fa9aecd8cce758c9Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:34 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: SIaRxxRszwb_geO6uP1hZ-pBFhh0wOcOk01bmC_pPPSmdfcrbbmvOw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:35 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: bEQvySZWtR60oBG-uO4SVe1vz6BT16Vv59-i9Mbxkavf3J6Jtwlotw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:07:37 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:46 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 7gsXch5jz4iBfWqpgpOx-EgohKz8CFlRE4V8lSSjSITYdmvKFVR3-A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Thu, 25 Apr 2024 07:07:47 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-47bsx-42308X-Request-Id: 068e4e6bd08e6f99b68ac45978336617X-Runtime: 0.002834X-Cache: Error from cloudfrontVia: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ZRkHNvlpwK8oWXZgfzdVTu0aQf9gdUYNXlF9W3uPSe9ylvbuNX7HAg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:48 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: QBM_gmeSZ7G39Ppi50dxWOe58c8tVfY9I4EvZeW3qLbVgncc6JwEVQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:07:52 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-042394a46f36ef579Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:52 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 9cc8ba00384b3554aebbfb2dec8eda6a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: xQwTBznz21b9Li7sWunhqAGM_mY6DHjZUIYRdOszgAvFASyNug66rQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:07:52 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:52 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: SVQjkqAVl4WHHjDPAdqckkcaDqq7iQ-tr_mYRUbX_spge7nV_b8ahw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:07:53 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:55 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 89c9a046c7c8ea74876b5a826130e4ca.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: flblH1Ty1wz98U1-i6VA1fD2EBROmov6b630oLAfKJJXCchZeopUmw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:07:55 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 e9832200ff971aca96b461ffc18b3368.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: vPf6yrwtQjfyo4jrJp8XdvagM9gJuIAJxvEt5fB39xtaJUfiq1nveg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:07:57 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Thu, 25 Apr 2024 07:08:02 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-lfn9x-4754X-Request-Id: 96f283af59ec2a9cd0e0f3e4892857adX-Runtime: 0.001524X-Cache: Error from cloudfrontVia: 1.1 ccabcd8388f812f18b0c897b2047fa80.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 6QpF0oHEfse_ImckLEv_8kEUvrvrAnN6TgxrNdd4KA5Tgf0SDvkHqg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:04 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 4b24194db427c7e0a216991d8bb1bfc4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: L0YiG2VcfluqKZjJE31AXsT61DFhPxQCC5iMyAXj9SygCKYuzrj3pw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:05 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 a39699152176bddffd29fe58063d838a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 8-DVpRVoN3hA4GYIqAwJPgC_h_eiHkPAAzDwlvIws5Huy6GqNwQqCA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:08:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0fa9aecd8cce758c9Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:05 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: K2Ihx46jdaQkNETbrwWa-t6TPRrCBeol5nlao0kgzzE_6MMg5jP0wQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:06 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: P7gzQoBDBtQ6_4J2dqO2neLUDaLuAYbQMBVYS4ZOxoHQGeMT_1mYtA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:06 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 793a32fc98b22fca416cf87070f3ac80.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: YMK8sZiWsBXzVs7B7C_j5-LhBDRu3wRrLJYxhFayndabJsoW_RcWXQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Thu, 25 Apr 2024 07:08:07 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w6bmc-230X-Request-Id: f4c9900c8e94763891cc0ead366ac38bX-Runtime: 0.001537X-Cache: Error from cloudfrontVia: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: l67fvDMpCLhUhyqck2dWaqwOEXOVChvCBi0iHjqzsrFqg3X4bUGlLw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:08:08 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:08 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 793a32fc98b22fca416cf87070f3ac80.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 0hZYIeDRFhS3V5U3UhskbdSkR-6fCVoZTD839aIFabGnxMnxw6LuTQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:08:08 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:09 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: zqvpO3KeXmgHEwzoy7pYzdXfnZCGHxB2EXGqGpe3046uZw6eML0Y4g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:09 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 ad663ff6398ba4f8e7f1c844ed264cf8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: Y-1jYVF3CkRjPCExtNyARL6GmYeeYmh9Ck5vg-LXeMArxso1VSLwig==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:08:10 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0f448383330ba9e43Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:10 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 9ccf0420be8414e77edc70962db79938.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: BhsofDLaCk0ZC1G4n_nzaJfSn3f88jW_JQRLt4eXvQhnAJhFzuy0sQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:08:11 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Thu, 25 Apr 2024 07:08:12 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 087f7127038c650d8d2d931d1ea5e14c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P2Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: w78bNFtsI_Ivm-C1wF3AOdY-MNs7C0IQxZx_Rq56eaaalN1z-LS4QA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Thu, 25 Apr 2024 07:08:12 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:08:14 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 879c802f1d0f53b6-ATLCF-Cache-Status: MISSVary: Accept-Encodingreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-download-options: noopenx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: noneX-Request-ID: 879c802f335653b6-ATLx-runtime: 0.001050x-xss-protection: 1; mode=blockX-Zendesk-Zorg: yesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=chhQwRMDmXJHlU4AKKlFJ8TRjPfTd4E%2BS7WAeF7ajP0AJtacNRsr%2FdpH7VwHjqGBIdA%2BMpBztZjGyJDCtmOVi6tHOBCI1I84WLbBE7%2FJwSXe2Z1e8fiBZk2ZULkkyufcLZslp1c%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 07:08:14 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closex-ua-compatible: IE=edgex-zendesk-api-version: v2x-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINcache-control: max-age=0, publicx-zendesk-processed-host-header: help.wetransfer.comstrict-transport-security: max-age=31536000; includeSubDomainsx-zendesk-origin-server: app-server-79bbcddc45-xskmjx-runtime: 0.039229X-Zendesk-API-Gateway: yesCF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pxzXfytWYaW4jfEvW6lMe2G8CNahqfyhCQqjeQSGSsyDVpUKCZt1sRbXi7gmGKGPnvMrRTyeft029Ic8UrRVdgQZf64vMWq94AahycwLv69YGftk%2BlbPkj%2FNpTEwP2WWmdsUNuI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 879c802faa2b4569-ATL

Source: chromecache_324.2.dr	String found in binary or memory: http://bit.ly/sp-js)
Source: chromecache_406.2.dr	String found in binary or memory: http://dbushell.com/
Source: chromecache_579.2.dr	String found in binary or memory: http://javascript.crockford.com/jsmin.html
Source: chromecache_579.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_579.2.dr	String found in binary or memory: http://www.JSON.org/js.html
Source: chromecache_721.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_735.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_579.2.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_307.2.dr, chromecache_676.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_579.2.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_634.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_634.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_353.2.dr, chromecache_719.2.dr, chromecache_399.2.dr, chromecache_431.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000
Source: chromecache_686.2.dr, chromecache_670.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;
Source: chromecache_353.2.dr, chromecache_686.2.dr, chromecache_541.2.dr, chromecache_441.2.dr, chromecache_719.2.dr, chromecache_335.2.dr, chromecache_538.2.dr, chromecache_399.2.dr, chromecache_359.2.dr, chromecache_417.2.dr, chromecache_431.2.dr, chromecache_540.2.dr, chromecache_663.2.dr, chromecache_728.2.dr, chromecache_707.2.dr, chromecache_670.2.dr, chromecache_419.2.dr, chromecache_378.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;o
Source: chromecache_353.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1216680095;gtm=45h91e4
Source: chromecache_431.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1624532806;gtm=45h91e4
Source: chromecache_719.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e4
Source: chromecache_399.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44
Source: chromecache_670.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=1932979712;gtm=45h91e44
Source: chromecache_686.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n
Source: chromecache_378.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=125755985;gtm=45h91e44n0
Source: chromecache_670.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1292084944;gtm=45h91e44n
Source: chromecache_335.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1304650182;gtm=45h91e44n
Source: chromecache_728.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1344285384;gtm=45h91e44n
Source: chromecache_719.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n
Source: chromecache_663.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1441858472;gtm=45h91e44n
Source: chromecache_417.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=158040870;gtm=45h91e44n0
Source: chromecache_540.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0
Source: chromecache_541.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n
Source: chromecache_441.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n
Source: chromecache_686.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n
Source: chromecache_419.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1937571429;gtm=45h91e44n
Source: chromecache_359.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n
Source: chromecache_707.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=2015720746;gtm=45h91e44n
Source: chromecache_353.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=2123488988;gtm=45h91e44n
Source: chromecache_399.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0
Source: chromecache_431.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=383646619;gtm=45h91e44n0
Source: chromecache_538.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0
Source: chromecache_444.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_416.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_322.2.dr	String found in binary or memory: https://assets.zendesk.com/hc/assets/default_avatar.png
Source: chromecache_579.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_449.2.dr	String found in binary or memory: https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1
Source: chromecache_289.2.dr, chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_699.2.dr	String found in binary or memory: https://cdn.brandmetrics.com
Source: chromecache_322.2.dr	String found in binary or memory: https://cdn.statuspage.io/se-v2.js
Source: chromecache_364.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YWRjZmRhMWQ
Source: chromecache_374.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm
Source: chromecache_448.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
Source: chromecache_448.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm
Source: chromecache_484.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm
Source: chromecache_374.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_dbm
Source: chromecache_449.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0
Source: chromecache_322.2.dr	String found in binary or memory: https://collect.bywetransfer.com/
Source: chromecache_322.2.dr	String found in binary or memory: https://collect.wetransfer.com/
Source: chromecache_699.2.dr	String found in binary or memory: https://collector.brandmetrics.com
Source: chromecache_336.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_579.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by/2.0/uk/
Source: chromecache_448.2.dr	String found in binary or memory: https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid
Source: chromecache_635.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_448.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_704.2.dr	String found in binary or memory: https://ekstrom.wetransfer.net
Source: chromecache_723.2.dr	String found in binary or memory: https://email.wetransfer.net/Logos/wetransfer-logo.svg
Source: chromecache_459.2.dr	String found in binary or memory: https://frontsite-nextjs.wetransfer.net
Source: chromecache_579.2.dr	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_286.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_286.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_336.2.dr	String found in binary or memory: https://google.com
Source: chromecache_336.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_634.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_444.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_399.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1131794961&fst=17
Source: chromecache_335.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=131092452&fst=171
Source: chromecache_707.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1568647707&fst=17
Source: chromecache_663.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1627934418&fst=17
Source: chromecache_686.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1683131934&fst=17
Source: chromecache_540.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1740764497&fst=17
Source: chromecache_670.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1861442721&fst=17
Source: chromecache_541.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2020991589&fst=17
Source: chromecache_719.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2053153666&fst=17
Source: chromecache_441.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2084389594&fst=17
Source: chromecache_359.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=657751026&fst=171
Source: chromecache_417.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=73505407&fst=1714
Source: chromecache_353.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=805530157&fst=171
Source: chromecache_728.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=857006901&fst=171
Source: chromecache_378.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=900045151&fst=171
Source: chromecache_431.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=973329454&fst=171
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/de/articles/360043239551-Erfahre-mehr-%C3%BCber-die-WeTransfer-Produk
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/202672713
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/360001302363
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/360034986951
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/360035307151
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/360036942752
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/360043239551-Learn-more-about-all-of-WeTransfer-s-prod
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/4407987115412
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/en-us/articles/4979816378132
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/es/articles/360043239551-Aprende-m%C3%A1s-acerca-de-todos-los-product
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/fr/articles/360043239551-En-savoir-plus-sur-tous-les-produits-de-WeTr
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/it/articles/360043239551-Scopri-di-pi%C3%B9-su-tutti-i-prodotti-di-We
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/hc/nl/articles/360043239551-Lees-meer-over-alle-producten-van-WeTransfer
Source: chromecache_322.2.dr	String found in binary or memory: https://help.wetransfer.com/system/photos/360061272763/ACSquare.jpg
Source: chromecache_344.2.dr	String found in binary or memory: https://htlb.casalemedia.com/openrtb/adtag?s=1077556&r=$
Source: chromecache_364.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_374.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_322.2.dr	String found in binary or memory: https://ideas.bywetransfer.com
Source: chromecache_459.2.dr	String found in binary or memory: https://ideasby.wetransfer.com/downloads/341024b91b6dcdda9b58ccb6de4d6bed20231010131820/d75ac8
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/1DKQNCikVsJ779mAGor3BJ/4da06334bee648a95478c804b4a73715/00
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/2fX0JD7r8aReTKDg7uW7np/6ad98f699a76c530cc83704f7d4c89fe/Me
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/31kt2MzisTJk3jQ0VqQG2E/5e08f607b2829b5b1e0cdf8ed012d7b6/00
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/3ECzOTIn6hnGRtugcEFuUr/dcffc1314f9bae833875084c20f44521/4_
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/3VkYaYW400I3KI3hHbYRzB/a0c7ac728e6dd00b86adac6faab3f7fc/00
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/3oQhRYH8aGYOTDfF3dXO9h/32720195cd8dca344d6ef4d13290b98d/00
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/3wpxPwPlwTMfkQkTlKgvrh/d60007e599154897e45bced89c09e216/00
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/4ZukfcjT8Re5TCMIfFy5cQ/2989d3d84d8105c491d62f02f5ca006e/Bl
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/5CyTvKhfjKh2WcmCWiPW7/9e0a4d291206d90458b7dac214ff20fc/ta_
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/5LL8cPyNzlq9rYWgPCiS8T/4cde91e66ed3c9c52aa4beb24cbed1fe/we
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/60tIt2UOTMJbeWlDgpxqvH/f4c864c8083272e65301ae246e027333/we
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/6N3ZAK1kXYf4dYCLVsqCt9/072e52690f853b7393c0f5ea6f02369f/49
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/6Ulf9RaTZ4hnCZRH9nRYAD/09bb7b5bdb9d07da9e49a5cc46df5735/Im
Source: chromecache_459.2.dr	String found in binary or memory: https://images.ctfassets.net/ozc5on9ss4ee/6tVnPkPsMGB3QD89okLdzC/0deb8824f1d52f31b58dbfc196f09f8a/bl
Source: chromecache_449.2.dr	String found in binary or memory: https://js-sec.indexww.com/ht/htw-pixel.gif?ZioBP9HM4ycAADS8ARFPzgAA%26587
Source: chromecache_329.2.dr, chromecache_625.2.dr, chromecache_364.2.dr, chromecache_630.2.dr, chromecache_461.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_708.2.dr	String found in binary or memory: https://mb.moatads.com
Source: chromecache_708.2.dr	String found in binary or memory: https://mb.moatads.com/o.js?
Source: chromecache_748.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_735.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_735.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_735.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_735.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_735.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_444.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_634.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_518.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_289.2.dr, chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_412.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_444.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_444.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_444.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_634.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_444.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_322.2.dr	String found in binary or memory: https://paper.bywetransfer.com/
Source: chromecache_364.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=adcfda1d-b31b-4940-83bb-df9046f5388a&gd
Source: chromecache_449.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_i
Source: chromecache_449.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privac
Source: chromecache_749.2.dr, chromecache_392.2.dr, chromecache_445.2.dr, chromecache_654.2.dr, chromecache_588.2.dr, chromecache_558.2.dr	String found in binary or memory: https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Source: chromecache_708.2.dr	String found in binary or memory: https://px.moatads.com
Source: chromecache_708.2.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: chromecache_487.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_449.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_635.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.6192ffb7.js
Source: chromecache_449.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user
Source: chromecache_449.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDP
Source: chromecache_280.2.dr, chromecache_305.2.dr	String found in binary or memory: https://stackoverflow.com/questions/4845762/onload-handler-for-script-tag-in-internet-explorer
Source: chromecache_405.2.dr, chromecache_748.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_405.2.dr, chromecache_748.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_416.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_524.2.dr, chromecache_657.2.dr	String found in binary or memory: https://status.wetransfer.com
Source: chromecache_416.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_459.2.dr	String found in binary or memory: https://tagging.wetransfer.com/ns.html?id=GTM-NS54WBW
Source: chromecache_289.2.dr, chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_322.2.dr	String found in binary or memory: https://theme.zdassets.com/theme_assets/63313/0ccc5251e240447c82c5a26b2338f66fa4fe3f80.png
Source: chromecache_374.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2249&pt=n
Source: chromecache_322.2.dr, chromecache_459.2.dr	String found in binary or memory: https://twitter.com/WeTransfer
Source: chromecache_449.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARF
Source: chromecache_484.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doublec
Source: chromecache_459.2.dr	String found in binary or memory: https://wepresent.wetransfer.com
Source: chromecache_393.2.dr, chromecache_322.2.dr, chromecache_723.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/
Source: chromecache_459.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/stories/1-granary-fashion-influencer
Source: chromecache_459.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/stories/aging-as-a-creative
Source: chromecache_459.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/stories/blake-wood-ai-post-photography
Source: chromecache_459.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/stories/tami-aftab-the-rice-is-on-the-hob
Source: chromecache_393.2.dr, chromecache_322.2.dr, chromecache_723.2.dr, chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com
Source: chromecache_322.2.dr, chromecache_723.2.dr, chromecache_344.2.dr	String found in binary or memory: https://wetransfer.com/
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/account/payment?from=marketing
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/blog
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/blog/story/everyones-business-responsible-advertising
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/blog/story/making-a-difference-together/
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/blog/story/we-are-a-bcorp
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/blog/story/why-were-giving-everyone-at-wetransfer-fridays-off-over-the-summer
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/collect
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/emerging-creative-hubs-index-2022
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.com/explore
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.com/explore/careers
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/explore/legal/privacy
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.com/explore/portals-reviews/
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/ideas-report/2022
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.com/legal/terms
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/log-in?_ga=2.266924109.2133833616.1616403830-1646230000.1601886974
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/paper
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/paste
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/pricing
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/pricing?trk=NAV_pricing
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.com/pricing?trk=WT202005_signup
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.pr.co/
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.statuspage.io/
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.zendesk.com
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/auth/v2/host/without_iframe.js
Source: chromecache_639.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/de
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/en-us
Source: chromecache_459.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/en-us?_ga=2.198759020.2133833616.1616403830-1646230000.1601886974
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/es
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/fr
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/it
Source: chromecache_322.2.dr	String found in binary or memory: https://wetransfer.zendesk.com/hc/nl
Source: chromecache_744.2.dr, chromecache_388.2.dr, chromecache_409.2.dr, chromecache_464.2.dr, chromecache_292.2.dr, chromecache_652.2.dr, chromecache_365.2.dr, chromecache_655.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Source: chromecache_289.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_416.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_416.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_416.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_748.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_416.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_444.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_353.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=1479022174&fst=1714028872276&cv
Source: chromecache_399.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=1505750616&fst=1714028866067&cv
Source: chromecache_719.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=1848241577&fst=1714028869092&cv
Source: chromecache_431.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=999589166&fst=1714028867135&cv=
Source: chromecache_735.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_289.2.dr, chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_416.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_322.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_322.2.dr	String found in binary or memory: https://www.instagram.com/wetransfer/
Source: chromecache_324.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_405.2.dr, chromecache_748.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_611.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_473.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_336.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_459.2.dr	String found in binary or memory: https://www.thesupportingact.org/
Source: chromecache_322.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ
Source: chromecache_649.2.dr	String found in binary or memory: https://www.zendesk.com/answer-bot/
Source: chromecache_649.2.dr	String found in binary or memory: https://www.zendesk.com/embeddables/
Source: chromecache_649.2.dr	String found in binary or memory: https://www.zendesk.com/guide/#gallery
Source: chromecache_649.2.dr	String found in binary or memory: https://www.zendesk.com/guide/features/knowledge-capture-app/
Source: chromecache_484.2.dr	String found in binary or memory: https://x.bidswitch.net/syncd?dsp_id=16&user_group=1&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixe
Source: chromecache_708.2.dr	String found in binary or memory: https://z.moatads.com/omidverificationclient/verification-client-v1.js
Source: chromecache_708.2.dr	String found in binary or memory: https://z.moatads.com/px2/client.js
Source: chromecache_708.2.dr	String found in binary or memory: https://z.moatads.com/swf/p6.v3.swf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291

Source: classification engine

Classification label: sus22.troj.win@42/770@446/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6016 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6016 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=105739ad-a66d-4f9a-92ed-090053a26125&batch_time=1714028874189	0%	Avira URL Cloud	safe
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2338799&cp_campaignId=312425209&cp_placementId=514722602&cp_creativeId=526040176&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Image__Static	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=4c0968af-1c90-4442-b24c-94561770e085&batch_time=1714028895169	0%	Avira URL Cloud	safe
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=	0%	Avira URL Cloud	safe
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Custom__Video__Image_accordion	0%	Avira URL Cloud	safe
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0.8%2C2450	0%	Avira URL Cloud	safe
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=c6e04c90-e371-4194-894c-7b77dbd132f9&batch_time=1714028862359	0%	Avira URL Cloud	safe
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=3b67dd6c-674b-44e1-b811-a23e8a54209f&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A08%3A11.344Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=4048%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=4048%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0%2C4000	0%	Avira URL Cloud	safe
https://ideas.bywetransfer.com	0%	Avira URL Cloud	safe
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=aa5364c4-b4f6-47e7-9471-e670c1194806&batch_time=1714028887504	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603	0%	Avira URL Cloud	safe
https://x.bidswitch.net/ul_cb/syncd?dsp_id=16&user_group=1&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dbidswitch_dbm%26google_hm%3D%24%7BBSW_UID_ENCODED%7D	0%	Avira URL Cloud	safe
https://ideas.bywetransfer.com	0%	Virustotal		Browse
https://x.bidswitch.net/ul_cb/syncd?dsp_id=16&user_group=1&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dbidswitch_dbm%26google_hm%3D%24%7BBSW_UID_ENCODED%7D	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
tracker.samplicio.us	3.214.158.55	true	false	high
um.simpli.fi	35.236.220.17	true	false	high
eu01.in.treasuredata.com	3.126.72.131	true	false	high
sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	52.210.6.56	true	false	high
global.px.quantserve.com	192.184.67.40	true	false	high
tag.device9.com	44.198.210.177	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
live.rezync.com	3.161.136.118	true	false	high
wetransfer.zendesk.com	104.16.51.111	true	false	high
bttrack.com	192.132.33.69	true	false	unknown
stats.g.doubleclick.net	172.253.124.157	true	false	high
cdn.w55c.net	52.205.65.239	true	false	high
static.zdassets.com	104.18.72.113	true	false	high
dsum.casalemedia.com	172.64.151.101	true	false	high
cm.g.doubleclick.net	74.125.136.154	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
idaas-ext.cph.liveintent.com	3.237.57.79	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	44.206.160.179	true	false	unknown
ekr.zdassets.com	104.18.72.113	true	false	high
www.google.com	172.217.215.99	true	false	high
cdn.brandmetrics.com	104.26.1.90	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	high
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
publickeyservice.msmt-1.aws.privacysandboxservices.com	108.156.152.125	true	false	unknown
logx.optimizely.com	34.111.140.246	true	false	high
match.prod.bidr.io	52.73.25.103	true	false	unknown
browser-intake-datadoghq.eu	34.149.135.19	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	high
m.deepintent.com	169.197.150.7	true	false	unknown
dna8twue3dlxq.cloudfront.net	3.163.80.98	true	false	high
frontsite-nextjs.wetransfer.net	54.76.94.58	true	false	high
d162h6x3rxav67.cloudfront.net	13.32.230.81	true	false	high
cdn.statuspage.io	13.226.100.99	true	false	high
d1ykf07e75w7ss.cloudfront.net	54.230.252.87	true	false	high
a5565.casalemedia.com	209.204.230.47	true	false	high
a5574.casalemedia.com	209.204.230.56	true	false	high
dualstack.reddit.map.fastly.net	151.101.1.140	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.128.84	true	false	unknown
ssum-sec.casalemedia.com	104.18.36.155	true	false	high
analytics-alv.google.com	216.239.34.181	true	false	high
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.226.31	true	false	unknown
di.rlcdn.com	34.49.212.111	true	false	high
dmp.brand-display.com	34.160.19.107	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
googleads.g.doubleclick.net	172.253.124.156	true	false	high
js-sec.indexww.com	172.64.149.180	true	false	unknown
api.amplitude.com	44.229.205.99	true	false	high
dualstack.pinterest.map.fastly.net	151.101.12.84	true	false	unknown
wetransfer.com	18.160.78.124	true	false	high
td.doubleclick.net	64.233.176.155	true	false	high
tagging.wetransfer.com	13.226.100.21	true	false	high
firewall-external-1524972847.us-east-1.elb.amazonaws.com	52.71.236.203	true	false	high
nolan.wetransfer.net	3.161.188.92	true	false	high
data.ad-score.com	130.211.115.4	true	false	high
user-data-us-east.bidswitch.net	35.211.178.172	true	false	unknown
s0.2mdn.net	64.233.185.148	true	false	high
d3orhvfyxudxxq.cloudfront.net	54.230.31.3	true	false	high
htlb.casalemedia.com	172.64.151.101	true	false	high
ssbsync-use2.smartadserver.com	135.148.152.196	true	false	high
measure.lamp.avct.cloud	34.253.35.38	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	108.156.154.126	true	false	high
adservice.google.com	74.125.138.156	true	false	high
backgrounds.wetransfer.net	3.163.80.106	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
theme.zdassets.com	104.18.72.113	true	false	high
insight.adsrvr.org	52.223.40.198	true	false	high
scontent.xx.fbcdn.net	31.13.65.7	true	false	high
a5594.casalemedia.com	209.204.229.35	true	false	high
ara.paa-reporting-advertising.amazon	3.163.80.24	true	false	unknown
amplitude.map.fastly.net	151.101.2.132	true	false	unknown
sync.srv.stackadapt.com	52.70.223.132	true	false	high
lebowski.wetransfer.com	34.250.238.125	true	false	high
pippio.com	107.178.254.65	true	false	high
ad.doubleclick.net	142.250.9.149	true	false	high
s.amazon-adsystem.com	52.46.143.56	true	false	high
e-prod-alb-s105-us-east-1-01.adzerk.net	44.195.207.107	true	false	unknown
cdn.treasuredata.com	3.163.115.55	true	false	high
prod-cdn.wetransfer.net	54.230.253.37	true	false	high
elb-status-us.statuspage.io	13.33.4.47	true	false	high
cdn.lamp.avct.cloud	18.64.155.15	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	high
donny.wetransfer.com	52.212.176.246	true	false	high
dt-external-217593033.us-east-1.elb.amazonaws.com	54.144.38.225	true	false	high
www.datadoghq-browser-agent.com	18.244.194.101	true	false	unknown
cdn.wetransfer.com	18.160.78.124	true	false	high
auth-session-caching.wetransfer.net	54.76.94.58	true	false	high
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	34.200.65.202	true	false	unknown
ib.anycast.adnxs.com	68.67.161.182	true	false	high
p18.zdassets.com	104.18.70.113	true	false	high
alb.reddit.com	unknown	unknown	false	high
ads.stickyadstv.com	unknown	unknown	false	unknown
z.moatads.com	unknown	unknown	false	unknown
publickeyservice.aws.privacysandboxservices.com	unknown	unknown	false	unknown
pixel.adsafeprotected.com	unknown	unknown	false	high
token.rubiconproject.com	unknown	unknown	false	high
casale-match.dotomi.com	unknown	unknown	false	high
csync.loopme.me	unknown	unknown	false	high
ssbsync.smartadserver.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A30.584%2B02%3A00&epn.hit_timestamp_unix=1714028850584&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028846511-62-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-62-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3963&tfd=5149&richsstsse	false		high
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/v3/?event=pagevisit&tid=2612705757018&cb=1714028824967&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102	false		high
about:blank	false	Avira URL Cloud: safe	low
https://cdn.wetransfer.com/_next/static/chunks/pages/help-6179d85e8f7fbccf.js	false		high
https://wetransfer.com/assets/images/logo.svg	false		high
https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js	false		high
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=4c0968af-1c90-4442-b24c-94561770e085&batch_time=1714028895169	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js	false		high
https://www.facebook.com/tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866542&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&rqm=GET	false		high
https://d9.flashtalking.com/img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1714028833656	false		high
https://help.wetransfer.com/hc/activity	false		high
https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102&dcc=t	false		high
https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid	false		high
https://api.lab.amplitude.com/sdk/v2/vardata?v=0	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://static.zdassets.com/web_widget/messenger/latest/web-widget-84852-7bc1c0f.js	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028868631&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=4&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-110-833348100cc9&tm=2&rqm=FGET	false		high
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=YmI4ZTUyMTctNjNmMC0yNzE2LWQzMWQtZThmZWJkMmNkNDQ5	false		high
https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff	false		high
https://donny.wetransfer.com/i.gif?e=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&s=YgD-gVavCbYVGLFHmA2yjhB6CCg	false		high
https://alb.reddit.com/rp.gif?ts=1714028886767&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=	false		high
https://tracker.samplicio.us/tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1714028886639&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD}	false		high
https://www.google.com/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1866827202.1714028847&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821	false		high
https://donny.wetransfer.com/i.gif?e=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&s=IqGW-zWLtXcEJPRspK0dHKXj-5U	false		high
https://data.ad-score.com/img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213	false		high
https://ad.doubleclick.net/pcs/view?xai=AKAOjst_oZaLdZDI42H9ZztiHtVwg8MgNp0jhJdOx90DcrgeI4Ro61IV0vUuSYQpECzL7Vu8-UM-qfsO8-pw_R2pYgfpzJX1UVfTT8Dli88hKbVdq8fym4Ik4lN86fdJaZw6RjTfvMlejPZJOl0xJy6ayZrLyJV2rPJ188KsHCNbXbRaArmmQeR2ET8a3hKprt45zsCA5Nv_ElmpNSK_YlLhyJME64k1epga7dGtfoslFTzu-sA42_jlD15m0j8bKv_ABYpBSUj6_YYtl-Ln_0HkcDxGV23pHSJtr1dmp5p0HjSHJLHmFPRpe15NWWE3Uv2CuR1XIpEkWvxf0GH7jDXr9S1oTGMaFmmUAdl0FGBbIeTB6vlpxucZWeDGpcmhVmgyCX4jUqznNLrf52TedGQjquc_OWnvxfesqwimLHquZXhhEp1d-90WMARbWs00MVwb9MZpcSlH9bwdObVL5NIQbKn_r1VU77OjxrRz2r55vGMmpIN2YS4YkTS2Y9DD6ZFi7pmopPcrUCsO-rzVZSpMEiPvQp8LFMfIgPyb26LuZjK3pyidQER4hNUV724zSboSCQtDxkZ30FjQRiWU1KKJiTK16z27bF1r1HU3DGCANg9qWnuELh3QTGwELQJBRXEloPqLMvNJt01UdEzPPJOFxmAwI6MV9kcF850bxHJI2O_WPH2llepgsAUbfSRZYOEV_w99yABiLWFvoMDdITSuchiorABzhR4-xIyv8SB8p0A7yMoNKahdV2Rh-EIaIDOzoD9phxH_ZFFteCwh6H1-tsfw3lFYh_LvQxrR8TrbdujEHOEFqL9ZyHZBatZf_0pFPTTAuqseAeBwWo2G3uIEU7IDNhcK_C4JBYUhtAfa2h4nW3biNZYIfsMCFEb-0x-gip-VTa-vgIcfpHDqGmsgf2ezl26bUDD_VM7lsQ0uex2A5pk0MNmQ30ujrdqTOtdE03mnxouRfK7bgTsf4r8M9iaP_sMAiMPGvVvuGCmByMHNGWMe5psHxQR4GZxYEsbu1qX6sU9sFsPLed34DkyeFLfvAK2Ya1wSn7Smu6kEq3kdpmVdcxfAP9AYDpdH_-0vlP75mFP-ZxmBuvgjwzMWI2ecGJpEOC6xWOO9UNTxS60yvxWK9q0rJ6xU0M1D3OubjZVbzFCQWhJtf8Nc3jpVMcFcXortTyhP7Av1Vra4NZXJQSDAulAMpnOENnHRS6ojqWOHlnygk1orwocQyN2C-HLi426hKmdluc05MrZ30QQWaCiJiVlXDbRFQJ3U684e5TRAMHTrXYDI1usyKwj4PTtyKwFMV2924JYJw180NkxwVDM6UYvmmBPHnJdhdo7r9UD7ji03hjaQiwroFXUcRT3nh_86LNiFkzocDikjkDMgtCCpZE-K71H39Yf1qYoEwpnl6qp_MyBvoNwn2P8nGiTNN_Va-HfO10nTAhcHtfkDESIoYj7NSK2YlB-TMFaHVaxNdcLZCu-h_V_tG3N53g&sai=AMfl-YTa-1id5BfXFGvzMveffwd41vWnrcMiHexAZVhq98NHMe_tp4GOr0WDeZrRRZQzcPJo0-gWsIETqwtfwwGaYFO0xgceu_-yTNREBXTWQSD6usQTyuJ3l3X5T-Ic07sN1IBqug9ncNJ5Ui9jXIvmXJxCOJ5TqlyjYQetkAFOlGwwS_GzP-u9CyT_F879gKh7um4&sig=Cg0ArKJSzCD3YwOzOEN5EAE&uach_m=%5BUACH%5D&pr=13:ZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240423.25027&arae=1&ftch=1&adurl=	false		high
https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp	false		high
https://alb.reddit.com/rp.gif?ts=1714028885641&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=	false		high
https://sc26zwwp3c0r.statuspage.io/api/v2/summary.json	false		high
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=105739ad-a66d-4f9a-92ed-090053a26125&batch_time=1714028874189	false	Avira URL Cloud: safe	unknown
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A47.178%2B02%3A00&epn.hit_timestamp_unix=1714028867178&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028863437-80-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=566&tfd=4914&richsstsse	false		high
https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/Tooltip.36a8ac01d72f6916d536.png	false		high
https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=	false		high
https://theme.zdassets.com/theme_assets/63313/e81cbd4c496485e8eb983690b786fbd1141970fa.woff	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028884348&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=691932089.1714028884&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028884348&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&sid=1714028816&sct=1&seg=1&dt=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=aea856b4-45d7-4d25-90ef-642b02d57292&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A08%3A04.423%2B02%3A00&epn.hit_timestamp_unix=1714028884423&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028884348-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028884348-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=892&richsstsse	false		high
https://www.google.com/pagead/1p-user-list/778938880/?random=2053153666&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqaNCFGJtcAyiUhPtgux0TUrXcEFFJSJ5JNkxt8guVPt0ZEcZz&random=2495825286	false		high
https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js	false		high
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2338799&cp_campaignId=312425209&cp_placementId=514722602&cp_creativeId=526040176&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Image__Static	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671	false		high
https://auth-session-caching.wetransfer.net/v1/login-status	false		high
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Custom__Video__Image_accordion	false	Avira URL Cloud: safe	unknown
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0.8%2C2450	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm=&google_sc&google_hm=NzE3NWI4NmJkNDEyYjU0YmMzYjE1YTc5OWVkMjdlYTg=&gdpr=0&gdpr_consent=	false		high
https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing	false		high
https://i.liadm.com/s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZioBP9HM4ycAADS8ARFPzgAA%26587&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=85ee1344445a44919f614be81fcc5250	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=c6e04c90-e371-4194-894c-7b77dbd132f9&batch_time=1714028862359	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028849474	false		high
https://alb.reddit.com/rp.gif?ts=1714028821644&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=	false		high
https://www.google.com/pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=206280928.1714028817&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=MmI4ODgwZjRhYzBkNDJhNjRmYzg2NjlhYzEzOGNiMWQ0ZjNlMWQyOQ	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028894164&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=30&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=5&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-145-833348100cc9&tm=2&rqm=FGET	false		high
https://static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136	false		high
https://donny.wetransfer.com/i.gif?e=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&s=LtrK64oRGXe1amJ-XtQ0Fc33sXo	false		high
https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphNa,pingTime:-2,time:713,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:52,bdZ:892,beA:894,beZ:896,mfA:1575,cmA:1576,inA:1576,inZ:1577,prA:1577,prZ:1579,si:1583,poA:1584,poZ:1594,cmZ:1594,mfZ:1594,loA:1602,loZ:1604,ltA:1607,ltZ:1607,mdA:896,mdZ:909%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:713,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,5~0%5D,as:%5B31~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true%7D&br=c	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-57-833348100cc9&tm=1&rqm=FGET	false		high
https://static.zdassets.com/hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js	false		high
https://www.google.com/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1947097447.1714028864&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821	false		high
https://www.facebook.com/tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821034&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-29-833348100cc9&tm=1&rqm=GET	false		high
https://measure.lamp.avct.cloud/measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=3b67dd6c-674b-44e1-b811-a23e8a54209f&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A08%3A11.344Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=4048%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=4048%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0%2C4000	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=aa5364c4-b4f6-47e7-9471-e670c1194806&batch_time=1714028887504	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/hc/assets/entypo-cd0cc640c9711149dc484d7c26584704..woff	false		high
https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_75e092a1c0d1436ca22cc	false		high
https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=&verify=true	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?	false		high
https://www.google.com/pagead/1p-user-list/778938880/?random=1131794961&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD9Auhd1stGdtdDPqPsSomb3XN2vxAWIkXUM6KxcjY3aUxVGO&random=475300310	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028867236&dep=2%2CPAGE_LOAD	false		high
https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing	false		high
https://x.bidswitch.net/ul_cb/syncd?dsp_id=16&user_group=1&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dbidswitch_dbm%26google_hm%3D%24%7BBSW_UID_ENCODED%7D	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=3&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8686&richsstsse	false		high
https://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.js	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028836192	false		high
https://wetransfer.com/	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028885125	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028849605&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-39-833348100cc9&tm=1&rqm=FGET	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ampcid.google.com/v1/publisher:getClientId	chromecache_416.2.dr	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000	chromecache_353.2.dr, chromecache_719.2.dr, chromecache_399.2.dr, chromecache_431.2.dr	false		high
https://wetransfer.zendesk.com/hc/it	chromecache_322.2.dr	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_364.2.dr	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;	chromecache_686.2.dr, chromecache_670.2.dr	false		high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_448.2.dr	false		high
https://github.com/blueimp/JavaScript-MD5	chromecache_579.2.dr	false		high
https://wetransfer.zendesk.com/hc/nl	chromecache_322.2.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_634.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_634.2.dr	false		high
https://wetransfer.com/emerging-creative-hubs-index-2022	chromecache_459.2.dr	false		high
https://help.wetransfer.com/hc/en-us/articles/4979816378132	chromecache_322.2.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=2015720746;gtm=45h91e44n	chromecache_707.2.dr	false		high
https://wetransfer.com/legal/terms	chromecache_322.2.dr	false		high
https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARF	chromecache_449.2.dr	false		high
https://ideas.bywetransfer.com	chromecache_322.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YWRjZmRhMWQ	chromecache_364.2.dr	false		high
https://wetransfer.com/collect	chromecache_459.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=73505407&fst=1714	chromecache_417.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.161.136.118	live.rezync.com	United States	16509	AMAZON-02US	false
151.101.0.84	unknown	United States	54113	FASTLYUS	false
34.250.136.134	unknown	United States	16509	AMAZON-02US	false
54.230.253.37	prod-cdn.wetransfer.net	United States	16509	AMAZON-02US	false
209.204.230.47	a5565.casalemedia.com	Canada	27381	CASALE-MEDIACA	false
172.217.215.105	unknown	United States	15169	GOOGLEUS	false
151.101.128.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
68.67.179.155	unknown	United States	29990	ASN-APPNEXUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
52.88.79.77	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
52.210.6.56	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
68.67.161.182	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.18.72.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
31.13.88.13	unknown	Ireland	32934	FACEBOOKUS	false
13.226.100.86	unknown	United States	16509	AMAZON-02US	false
209.204.230.56	a5574.casalemedia.com	Canada	27381	CASALE-MEDIACA	false
34.250.238.125	lebowski.wetransfer.com	United States	16509	AMAZON-02US	false
13.226.100.80	unknown	United States	16509	AMAZON-02US	false
173.194.219.148	unknown	United States	15169	GOOGLEUS	false
54.144.38.225	dt-external-217593033.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
107.23.238.117	unknown	United States	14618	AMAZON-AESUS	false
173.194.219.149	unknown	United States	15169	GOOGLEUS	false
35.214.226.31	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
3.161.188.72	unknown	United States	16509	AMAZON-02US	false
13.32.230.81	d162h6x3rxav67.cloudfront.net	United States	16509	AMAZON-02US	false
3.237.57.79	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	p18.zdassets.com	United States	13335	CLOUDFLARENETUS	false
209.204.229.35	a5594.casalemedia.com	Canada	27381	CASALE-MEDIACA	false
151.101.192.84	unknown	United States	54113	FASTLYUS	false
64.233.185.149	unknown	United States	15169	GOOGLEUS	false
64.233.185.148	s0.2mdn.net	United States	15169	GOOGLEUS	false
108.177.122.103	unknown	United States	15169	GOOGLEUS	false
52.46.143.56	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
3.161.188.25	unknown	United States	16509	AMAZON-02US	false
142.250.9.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.9.148	unknown	United States	15169	GOOGLEUS	false
3.126.72.131	eu01.in.treasuredata.com	United States	16509	AMAZON-02US	false
52.205.65.239	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
34.253.35.38	measure.lamp.avct.cloud	United States	16509	AMAZON-02US	false
54.189.132.192	unknown	United States	16509	AMAZON-02US	false
18.244.194.101	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
18.160.78.124	wetransfer.com	United States	3	MIT-GATEWAYSUS	false
64.233.177.157	unknown	United States	15169	GOOGLEUS	false
169.197.150.7	m.deepintent.com	United States	19381	SIMPLY-BITS-LLCUS	false
169.197.150.8	unknown	United States	19381	SIMPLY-BITS-LLCUS	false
64.233.177.154	unknown	United States	15169	GOOGLEUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
142.251.15.148	unknown	United States	15169	GOOGLEUS	false
3.163.80.24	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
54.230.252.87	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.15.149	unknown	United States	15169	GOOGLEUS	false
54.230.31.3	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
54.81.241.151	unknown	United States	14618	AMAZON-AESUS	false
108.156.152.125	publickeyservice.msmt-1.aws.privacysandboxservices.com	United States	16509	AMAZON-02US	false
3.163.80.126	unknown	United States	16509	AMAZON-02US	false
54.158.106.27	unknown	United States	14618	AMAZON-AESUS	false
31.13.66.35	unknown	Ireland	32934	FACEBOOKUS	false
44.235.23.93	unknown	United States	16509	AMAZON-02US	false
3.163.115.55	cdn.treasuredata.com	United States	16509	AMAZON-02US	false
13.33.4.121	unknown	United States	7018	ATT-INTERNET4US	false
44.229.205.99	api.amplitude.com	United States	16509	AMAZON-02US	false
3.161.188.92	nolan.wetransfer.net	United States	16509	AMAZON-02US	false
151.101.1.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
31.13.65.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
64.233.177.148	unknown	United States	15169	GOOGLEUS	false
64.233.177.149	unknown	United States	15169	GOOGLEUS	false
52.71.236.203	firewall-external-1524972847.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.46.130.91	unknown	United States	16509	AMAZON-02US	false
3.163.80.98	dna8twue3dlxq.cloudfront.net	United States	16509	AMAZON-02US	false
108.156.154.126	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false
209.54.182.161	unknown	United States	21719	CHLUS	false
130.211.115.4	data.ad-score.com	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
172.217.215.149	unknown	United States	15169	GOOGLEUS	false
34.149.135.19	browser-intake-datadoghq.eu	United States	2686	ATGS-MMD-ASUS	false
192.184.67.40	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
52.21.237.79	unknown	United States	14618	AMAZON-AESUS	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
8.28.7.83	pug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.70.223.132	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
44.198.210.177	tag.device9.com	United States	14618	AMAZON-AESUS	false
74.125.138.156	adservice.google.com	United States	15169	GOOGLEUS	false
44.195.207.107	e-prod-alb-s105-us-east-1-01.adzerk.net	United States	14618	AMAZON-AESUS	false
3.163.80.106	backgrounds.wetransfer.net	United States	16509	AMAZON-02US	false
3.214.158.55	tracker.samplicio.us	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
104.16.53.111	unknown	United States	13335	CLOUDFLARENETUS	false
135.148.152.196	ssbsync-use2.smartadserver.com	United States	18676	AVAYAUS	false
18.64.155.15	cdn.lamp.avct.cloud	United States	3	MIT-GATEWAYSUS	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.18.38.76	unknown	United States	13335	CLOUDFLARENETUS	false
44.206.160.179	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
34.160.19.107	dmp.brand-display.com	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431473
Start date and time:	2024-04-25 09:06:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.troj.win@42/770@446/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://wetransfer.com/undefined Browse: https://wetransfer.com/legal/ccpa Browse: https://wetransfer.com/pricing?trk=NAV_pricing Browse: https://wetransfer.com/explore Browse: https://wetransfer.com/help

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.139, 142.250.105.100, 142.250.105.113, 142.250.105.102, 142.250.105.138, 142.250.105.101, 64.233.185.94, 173.194.219.84, 34.104.35.123, 216.239.38.178, 216.239.36.178, 216.239.34.178, 216.239.32.178, 173.194.219.97, 184.31.62.93, 74.125.136.97, 108.177.122.113, 108.177.122.102, 108.177.122.138, 108.177.122.100, 108.177.122.139, 108.177.122.101, 108.177.122.155, 108.177.122.154, 108.177.122.156, 108.177.122.157, 13.107.21.237, 204.79.197.237, 142.251.15.156, 142.251.15.155, 142.251.15.157, 142.251.15.154, 40.127.169.103, 199.232.214.172, 192.229.211.108, 52.165.164.15, 20.40.202.2, 69.173.151.100, 23.216.73.113, 142.250.9.155, 142.250.9.157, 142.250.9.156, 142.250.9.154, 142.250.105.155, 142.250.105.154, 142.250.105.156, 142.250.105.157, 151.101.130.49, 151.101.194.49, 151.101.2.49, 151.101.66.49, 173.194.219.132, 198.8.71.131, 64.233.176.94, 64.233.176.156, 64.233.176.155, 64.233.176.154, 64.233.176.157, 23.54.200.176, 8.18.45.140, 142.250.9.100, 142.250.9
Excluded domains from analysis (whitelisted): fp4.ads.stickyadstv.com.akadns.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, update.googleapis.com, www.google-analytics.com, fs.microsoft.com, www-alv.google-analytics.com, pagead2.googlesyndication.com, www.pinterest.com.edgekey.net, edgedl.me.gvt1.com, g11v.fwgtm.akadns.net, clients.l.google.com, h2.shared.global.fastly.net, bat-bing-com.dual-a-0034.a-msedge.net, bmcollector-geo.trafficmanager.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, wildcard.moatads.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e5048.dsca.akamaiedge.net, www.googletagmanager.com, 2-01-37d2-0018.cdx.cedexis.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, sls.update.microsoft.com, a.rfihub.com.akadn
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 06:06:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9775522108408996
Encrypted:	false
SSDEEP:	48:82d3TvPHHUidAKZdA19ehwiZUklqehTy+3:8yDyIy
MD5:	ECE540108A826235F0284673134A11B5
SHA1:	9EBF3F2A828461096816ADFAB49A9AFBF1033CA4
SHA-256:	2B16063812F7793608A14D328E08C968A708AF985AAF1F16166C232EB640F190
SHA-512:	41896EFE53C4D02C062BAFD85460A583141BCF06CF055654ACED726844180C4D9EF36D9530A58D8F6C65201A011412FAA4E531D0AB4EF2EBB46F2CCDA2329ACF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....p..&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.8...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 06:06:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9928456949278504
Encrypted:	false
SSDEEP:	48:8gd3TvPHHUidAKZdA1weh/iZUkAQkqeh4y+2:8MDo9Q1y
MD5:	DDE882E4E9970F02624DEDE78A999C70
SHA1:	2BAAE38AF1E5B2F90B78567A54708325CEE0D48F
SHA-256:	D2F4F5463E8B79E0C7268D7A881C6A297B1BB65871A8C7EA5729D4B5D28D0F8F
SHA-512:	4F3F6D59BE8505CAADC5A4D2911CAC087CC1DB7F663C3317CD6EC55E9EBDE8324E9B71189C48F102F859AD140A00FDAFE4D0D814466E94F3F3CB6D19893E1DDF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....t.&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.8...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004026967840795
Encrypted:	false
SSDEEP:	48:8xwd3TvPsHUidAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xcDlnUy
MD5:	BFBD56F5D959D54FBABAEE86A3E714B6
SHA1:	7B3B48BFD2FF18A96242678772673314E3210E8E
SHA-256:	B9FA6A1E8D6133029E484E5A7C298B002A136164CE679E723C7D016EA8C4502E
SHA-512:	68F264C27E498FCD82324D25ADD5BA4E12A38354BA839AD396EB364E5D13DAAADBA41668F750CB1306AD265B6B673D234EBDE0F3F402AD084E6D2FE1D05008E7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 06:06:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992031896644139
Encrypted:	false
SSDEEP:	48:8ud3TvPHHUidAKZdA1vehDiZUkwqeh8y+R:86DzCy
MD5:	B58F1118371F5EA17AC3BF81D88AB438
SHA1:	9F8964B37DD0ADCDB1C7328F023CF96D1C335BE5
SHA-256:	5AEB6729C7741128F81E6B9D92A2FCC15734D4A4AC0BA919CCE7894EC3BDD16D
SHA-512:	3500E73A2E1C0B0DD6645EF93C2940233FD81313AC6C9C095374366945FE75343C39EC3F2B25460E38C209E8D190281129577500C8336028A6DA1E8780AC7993
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....aD.&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.8...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 06:06:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.982271686800749
Encrypted:	false
SSDEEP:	48:8ocd3TvPHHUidAKZdA1hehBiZUk1W1qehGy+C:8oYDj9my
MD5:	A4B4441D207770A9DAF8C2A671946A63
SHA1:	5934FBF688E9DE8E71F78E3FED2146B3BB6B9949
SHA-256:	06CC2229E1F6A00C9311ADB018D88144F3E24673E4FCFB4A13153082D6B62848
SHA-512:	D006799649AF3C99293857ECCB3D4659F34DD568EEBC41DCF0A7C74C02B132D25F090527C2B7D73EF10FB17FCDCF30F0DAA75A5F3D96EC657A962C25DCCEA68B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....c..&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.8...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 06:06:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.99321964956078
Encrypted:	false
SSDEEP:	48:8HMd3TvPHHUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUy+yT+:8HIDTT/TbxWOvTbUy7T
MD5:	AA34518F6353AF2E03DA2026F0A2049F
SHA1:	30248EAC737B9BEAE1382D31C2F757FB1143B58B
SHA-256:	3E0EF5DFF96D14E6B5130353382AC9AAEBB3ADA83FE844F150117F9622EF2D1F
SHA-512:	8E49EE5765A8573DAFD9C3975AC33C1AAE4F65D79580150DEFCAFA5C3464CAF3444A58D299334082716047255B836F055BA44412FE600004A16E0EE014C5C68C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o].&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.8....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.8....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.8....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.8..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.8...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............/.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1420
Entropy (8bit):	4.111171149485744
Encrypted:	false
SSDEEP:	24:tFfoq1u9zcNXKh4rHQDPq232NrLn51esfiTXU0ZvldBPZ9KfQ4AfC4TYG:PAqdNXDH6P32NnnVuJvlXx9h9TX
MD5:	00AD1A3C159907BD9E404C33214191BA
SHA1:	95C8BC65C264D16E522E908C3820EBDF50056680
SHA-256:	2A09DF6A1186931B120B5270600278790B2B5934089DFFE47692D11EB76AD848
SHA-512:	73C12F269CB439BD7958A860C75C930C877BFA729C1C5E43FEC53178A3087F447BBD94FF74A6C1019189AE614E9B13DEADB43CE6169777043B8FF03213FC7C8A
Malicious:	false
Reputation:	low
Preview:	<svg width="45" height="21" viewBox="0 0 45 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M36.5194 20.5145C39.818 20.5145 42.3314 19.5042 43.6657 18.1066C44.3723 17.3299 45.1981 16.1259 44.6085 15.1934C44.0978 14.3789 43.2337 14.2231 42.2122 14.7283C41.1906 15.2335 40.0521 15.505 38.756 15.505C37.5004 15.505 36.1639 15.0399 35.4573 14.3388C34.5933 13.4842 34.123 12.396 34.123 11.1141C34.123 10.8025 34.3188 10.7647 34.672 11.0362C35.5743 11.735 36.9109 12.0844 38.7177 12.0844C42.0547 12.0844 45.0001 9.87006 45.0001 6.45172C45.0001 2.83976 41.5439 0.160278 36.3214 0.160278C30.4711 0.160278 25.9551 3.88796 25.9551 10.1816C25.9573 16.048 29.8838 20.5145 36.5194 20.5145Z" fill="#000"/>.<path d="M12.3689 14.3722C12.9967 14.3722 13.3499 14.7216 13.782 15.3825L15.6676 18.2957C16.3741 19.4218 16.9636 20.1985 18.3384 20.1985C19.7133 20.1985 20.3411 19.6555 21.0093 18.1399C21.8329 16.2749 22.6969 14.0228 23.4822 10.9939C24.3463 7.61337 24.7378 5.51697 24.7378 3.8078C24.7378 2.09863

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 39243
Category:	downloaded
Size (bytes):	11214
Entropy (8bit):	7.980660611226627
Encrypted:	false
SSDEEP:	192:8hrg3oYWnxKUgzCi0SeLJHs+R+lfgJ3TNBrSuWtlnlavH2syP1ouLksJAD:8hrgYYWnxKTQXYlfgd5gzavVymu4L
MD5:	C4D61FBB6E730A840C7F140CBB9BCD06
SHA1:	E424F981EEF8F250C3C7E0D4B60CF4E39424FC4A
SHA-256:	37D6272EA625E9FEAAD12822FF9099767915BB0DBB4019700E8EABAA95617AFF
SHA-512:	FB3D361F61356EB2DA3A7D9B871973BD081A8A100593DA0047D184817B34273DBBC878319141D7B52CA3C5C962F3F56765D15591A3186EDCED239D316DE7FE09
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8......k]....<.l.XJ..P..+.8.....%.....w?.T..t...kzzF..d.;....P..G..N ....&...X...w;,8."H....8..B....q...u2fR,:Z..U...`zP..\|%`+.#\m...+..PU....qa..na...9..[)y%..V.ga.X.u'p...t[.kk.....a.. {K.-M"...?.A.G.z......#..su.s.............f.j[.D..1.m95.I ..P.....3!.,..X.c....^...jLl]..l.u.O..#.]..V[o.z;B..T...<x..2..8...Ml'..:......Q7.e...7Ec.I(n.x.V.......D.H$(.F9.&z....."{.XTY..5..C...y.wg...?.Yd....i{...JC...'.ZD..j....{.....b=#..q..B-...\|4....+..cg.....6.Z.;...l.v..c9...\|r..3-..S...w.\|.#.H.{)T......T.ah?..M.e.....C...S.w6...4=..&s][j..[.y.<.c.;.D.r...-...........J...v.6_._-.p.....s...>\|.N.......\|...u.\|..-.h.@....R_.A....4..i..D2._......j..O...`6u....v.M..i.Rk.}.H...v.\0.,...QI.I.. .u.....-....3;.>..a..a..*...V,..:........rW.Q..W..f.......J..p.Z`.r.VC.&..8X.LXf...4r......L.uf751......$...-"...[D.....Z...8.c/0.Y.h.f... .9.......,B.?.V.L...?U.S]@$~....y.g...DA."a`.q.-....M.<z.>.cA...........5.3..&..l.G...%]K...^..Q;.#.N.EB.tJ

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21367)
Category:	downloaded
Size (bytes):	21467
Entropy (8bit):	5.52899647681262
Encrypted:	false
SSDEEP:	384:X/T0M0QySBvnkH0R0LPgTw8FkhqfmHAHYKdHf3cYd303QSHZCGdqX2PxhYzV9:P4TQRBsUOLPV8FkhqfbHYKdHEYsTQSI9
MD5:	FF27F27E6F093644D38DF3B19332EE00
SHA1:	96DAFDA621945DB2A6D028A97378A61C917B7CD4
SHA-256:	3A3789D87B04629A3296EF99F693037ADBB8F5C8C76A0D3D76ED31A54BABEB1F
SHA-512:	57D915E5A59574E315531BA51B3C323BF8B647F35B6AF1FAA917523DE5ED18BDD927008B7AD6D779B3BA9769C9E8C3FC0C2043E17F1F831C21A98454A020ACA7
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js
Preview:	/! For license information please see subscribe-bcea9748128daed810dc1d824bcc210d.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[56295,63840],{61425:function(e,n,t){"use strict";var r,o=t(67294);function i(){return i=Object.assign\|\|function(e){for(var n=1;n<arguments.length;n++){var t=arguments[n];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])}return e},i.apply(this,arguments)}n.Z=function(e){return o.createElement("svg",i({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,viewBox:"0 0 12 12"},e),r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M1 7l3 3 7-7"})))}},734:function(e,n,t){"use strict";t.d(n,{v2:function(){return c.v2},j2:function(){return h},sN:function(){return y},Uk:function(){return E},qy:function(){return w},Cl:function(){return g}});var r=t(41266),o=t(73126),i=t(67294),a=t(45697),s=t.n(a),c=t(80956),l=t(55877),u=t.n(l);functi

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028867208&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	61490
Entropy (8bit):	5.353025792185842
Encrypted:	false
SSDEEP:	1536:udS2/Pobzfha4zCDlorEF65WCQBDsGZpICEYg:N2YbbFzCDh+yDYCEz
MD5:	376BC6798D0FC966D689A7111E51F96D
SHA1:	F9D62C303D0DEA144EFD5850BD84FC0A401F0822
SHA-256:	59046090CEFDCBAC952C195B006E596D475ED0FA1CC25C578CC8A57E21075559
SHA-512:	25115A77CB42C2B4BF8B1421A9609F8308D7413A7CFE851F7E47F659B096D338274D1116BA88C1CB76F3DA4134F62A1C0A4D05289E24F402CC2457D640B6BF6D
Malicious:	false
Reputation:	low
URL:	https://fw.adsafeprotected.com/rjss/st/2049676/79562500/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=https://wetransfer.com/
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url += '&anId:' + config.anId \|\| '';........url += '&advEntityId:' + config.advEntityId \|\| '';........url += '&pubEntityId:' + config.pubEntityId \|\| '';........url += '&mobOrTab:' + config.mobOrTab \|\| '';..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=6142091251808246355
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65435)
Category:	downloaded
Size (bytes):	616722
Entropy (8bit):	5.5918614687545425
Encrypted:	false
SSDEEP:	6144:6rEVX+S8ni+vSji+vSQiRnEmSJKas5GZS1z/USuU0ZMeAYS:6rEV8n4lihUKJGZS2SrWMhx
MD5:	8D8BE71CB03AF1F2C20524F69272EFE8
SHA1:	774908FA27A86AECFBD2C85167473F8DAFE011D6
SHA-256:	16D70C996DC5B0E466A7DAADBEA194A0E9E1444CEE7ED288B7B0046107006D80
SHA-512:	BC89FCB53D15346A2D905A5BC9E5C6755C6BB038B5EEE4DBF2EC03FEBDB01E044DFAF7E3DDD1B0226EAFC7B0520C5779C7A43BBB10C3495033C10BAEC189910C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js
Preview:	/! For license information please see hc_enduser-fb88a13df887cd7e3577fa4983341c63.js.LICENSE.txt /.!function(){var e,t,n,r,a={38016:function(e,t,n){e.exports=n(66341)},78701:function(e,t,n){const r=n(73216),a=n(37566);function o(){if(!(this instanceof o))return new o}function i(e,t){!function(e){const t=a.get().files.intl;t&&!window.Intl?r(t,(function(t){t\|\|Intl.Collator\|\|(Intl.Collator=o),e(t)})):e()}((function(){const n=a.get().files,o=e.split("-")[0],i=n["relative."+("no"===o?"nn":o)]\|\|n["relative.en"];i?r(i,t):t()}))}o.prototype.compare=function(e,t){return e<t?-1:e>t?1:0},e.exports=function(e,t){e=(e\|\|"en-us").toLowerCase(),function(e,t){let n=e.length,r=!1;e.forEach((function(e){e((function(e,a){r\|\|(e?(r=!0,t(e)):0==--n&&t())}))}))}([function(t){i(e,t)},function(t){!function(e,t){const n=a.get().files,o=n[e]\|\|n[e.split("-")[0]]\|\|n["en-us"];r(o,t)}(e,t)}],t)}},73216:function(e,t,n){e.exports=function(e,t){const r=document.head\|\|document.getElementsByTagName("head")[0],a=document

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14408
Entropy (8bit):	3.788256429255858
Encrypted:	false
SSDEEP:	192:q/ZVyFcNVJ7hU3Tp0LnzxZeksu2bhtXgkkXqAsDjMjyZLRvYjG+A8q2lIV1aLzZb:6ZVucvJ0iZehZfzvvhRj1avspF57e
MD5:	B2B6891582ACF566C71068BFACBD5629
SHA1:	A80510A6149267D40B912D9B7CEC365129137942
SHA-256:	6DC4274D4C936ABC63DA8F19E6EBC44BD9569D8129CC99BD34492393DF151958
SHA-512:	1CD1A29C57A6C4617DBD39C0DDF788EC71B87396006A803106EA13868430942074CC40AD03EB577E4CCBED499AC20E1F03894ADD9300A37481D59F474F182F05
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/ozc5on9ss4ee/4N6IgU20edopK57bj43GqQ/d034d4aed51e559274a039eeb950c645/wepresent-logo.svg
Preview:	<svg width="823" height="176" viewBox="0 0 823 176" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M155.503 20.9347C152.909 10.8379 151.057 6.76211 148 2.40843V2.13053H166.341V2.40843C164.674 6.02106 164.025 12.8758 166.156 21.5832L177.457 68.3621L191.074 23.4358L190.333 21.0274C187.554 10.8379 185.979 6.85474 182.829 2.40843V2.13053H201.171V2.40843C199.781 5.74317 198.577 12.8758 200.985 21.5832L213.305 67.4358L223.309 27.2337C226.737 13.8947 225.069 6.11369 223.309 2.40843V2.13053H233.684V2.40843C229.516 8.05895 228.682 13.5242 226.366 23.4358L210.341 87.6295H208.581L192 26.7705L173.752 87.6295H171.992L155.503 20.9347ZM238.223 86.7032V86.4253C240.539 79.5705 241.651 74.7537 241.651 67.1579V21.6758C241.651 13.8947 240.539 9.44843 238.223 2.40843V2.13053H278.796L282.223 22.6947L281.482 23.0653C276.851 16.5811 270.459 5.09474 266.661 4.72422L251.84 3.89053V42.8884H259.436C263.789 42.8884 267.217 35.1074 270.366 30.7537H271.2V56.8758H270.274C267.495 52.8 263.604 45.2042 259.343

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7083)
Category:	downloaded
Size (bytes):	219336
Entropy (8bit):	5.554533283380733
Encrypted:	false
SSDEEP:	3072:gzQaf5qZ3fdO+NW68IG1LceF2/eazQthTnXDL9btIM11W3IzU4:GQXlNlYLceF+CTnXP9RIMm3Ir
MD5:	E4D4F1FA190CC9C87E7E9BD2DF2C981F
SHA1:	80B2FCD7F34F0742F9808500B4F7C5346E772F8F
SHA-256:	0B9009A84944B9EB5528DE67487D4FDF10F989B05F06832A52FC80AD16D98E6D
SHA-512:	9AC61810DA42F4C41DD2462E0E6E52A04327EA6835ABF0161C42DFB7AB4617108FD6DC06F453CDD21D3777D35B3411F74FE97FAE5977BCE581E7635987E2B625
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M5NXNZZ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__jsm","vtp_javascript":["template","(function(){return $(\"h1\").attr(\"title\")})();"]},{"function":"__u","vtp_component":"PATH"},{"function":"__jsm","vtp_javascript":["template","(function(){if(-1!==",["escape",["macro",1],8,16],".indexOf(\"articles\")){var a=",["escape",["macro",1],8,16],".split(\"\/\");a=a[a.length-1];a=a.replace(\/-\/g,\" \");return a.replace(\" \",\" - \")}return\"Other Zendesk-pages\"})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){return document.documentElement.lang})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){var a=$(\"h1\").html().replace(\/(^\\s+\|\\s+$)\/g,\"\");return a})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",1],8,

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=P6xreMg7mmgYHZ0oKXZnbpbwInW%2BsmvXon1E3hx260QQ6JnP34JxTWxY0gDLMHRAyLBh4W8lA1iussKF3JtlGcrojjwgQzodtyXzxoNSzB77gDZBfAp1Zrl8jRG%2F6wRtxU0GMXs%2FBxHbQfjf7g4SHCnfZWBg0viDAD6JAuafIzBPiQHUdV5gXvemoyXqEnz5trE%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714527233754
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/casale
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028885641&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164599
Entropy (8bit):	4.913484542083308
Encrypted:	false
SSDEEP:	3072:DnnnWzMk8AaOPvfUKGy4fm7716ibPqmzv2HKV7gYSHvSXxRFb+fIvJ:4mOPpGidi4XN+fa
MD5:	6095C9597989539E31FB82EFBB0997A8
SHA1:	8A955A12EA58493AAA672B56EF68C1F974EB17B9
SHA-256:	AEC09DDA5C1BF802C809A5E6D61E5F7631BA872B26C469B24A67D917DC22B3BB
SHA-512:	E31244719F7869A3D0C7B33DD6794ADBF1A30B478A09D5F0603121E5C6680B01DE9EEB36BDAC7601DA2C974474CBBCBCE1C6E093A0454D2D59BE2E3F4681AB8B
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/8745.743a269fbc05ea1f.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],abbr_day_names:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],month_names:[null,"January","February","March","April","May","June","July","August","September","October","November","December"],abbr_month_names:[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],order:["year","month","day"]},number:{format:{separator:".",delimiter:",",precision:3,round_mode:"default",significant:!1,strip_insignificant_zeros:!1},currency:{format:{format:"%u%n",unit:"$",separator:".",delimiter:",",precision:2,significant:!1,strip_insignificant_zeros:!1},EUR:"\u20ac",USD:"US$",CAD:"CA$",AUD:"aud",GBP:"\xa3",DKK:"kr",NOK:"kr",SEK:"kr"},percentage:{format:{delimiter:"",format:"%n

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEBvhO5c60eweFAbRgcle4rM&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	61409
Entropy (8bit):	5.352358889953544
Encrypted:	false
SSDEEP:	1536:Idf2/Pobzfha4zCDlorEF65WCQBDsGZpICEYg:A2YbbFzCDh+yDYCEz
MD5:	733E29E2D2A80E0096CB1B376C3B7C56
SHA1:	8C0903ECB1CBF2EAA2429DBC88784C370FF6DED6
SHA-256:	DA5A2BB118FF9989DA08E1B9CF41E4D347E4E44546332E7DCA10B049F97B2710
SHA-512:	BC56259F8A47C154CAB9ED16120E260F0BCA9CE17280816B9C34AA46DE4F1F3893A380024A715ED03F69407BD159C5785CD61D82D2866CD322452FFA21223EF2
Malicious:	false
Reputation:	low
URL:	https://pixel.adsafeprotected.com/rjss/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=${SOURCE_URL_ENC}
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url += '&anId:' + config.anId \|\| '';........url += '&advEntityId:' + config.advEntityId \|\| '';........url += '&pubEntityId:' + config.pubEntityId \|\| '';........url += '&mobOrTab:' + config.mobOrTab \|\| '';..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	656132
Entropy (8bit):	7.994007327251022
Encrypted:	true
SSDEEP:	12288:qDRp2Lb3ZpwEMDFa+9kIv05GgU61e2OpgdGhxNkHz3cmC4CI/tTsS/P:qWLXwtFa+i59Y9jNkHjcbiP
MD5:	39EC2AB63FA9A8679ED9063EB5932A8D
SHA1:	CB8EE27F50C817DA69EB889C0EA5897EA90670B5
SHA-256:	6C41A7E7F58D30048599FC565D53FB5E13021EDF9D9990429B001331CDD053CF
SHA-512:	F8AE91DE88B2E15446BA85059A96538EAFA053C4AB2A17A5DAEF16827CB2E1A48C065597F4BDA42F80965B17D7AFFF76D2D192BE2A52EB1F6027B7F4EBF6E1DD
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4:2f757cb87b8e99:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free...mdat..........E...H..,. .#..x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=30 rc=crf mbtree=1 crf=22.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 vbv_maxrate=20000 vbv_bufsize=25000 crf_max=0.0 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00......e...;...h...^a........K..oS,O7..\9........V.@..$..p..v H#..s....fTpy... y.A.T#M.t...D..R1.z^.}...........dX..Vu.!.....g.*....q^f..O..r............[...Sz5..s(R..)..SI.w.I....t.q.:

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24274), with no line terminators
Category:	downloaded
Size (bytes):	24274
Entropy (8bit):	5.439783303384432
Encrypted:	false
SSDEEP:	384:Z6z7ifcDKuDiEB1UDUUeaFV/bSEP4w6bRtZJvW28ZCTUAX+ffSWbs0T:Y7ifcD3NE3ea/Y5h/8ZarOfTX
MD5:	E1AE1E8E526E50AC4D8CE91396726097
SHA1:	B125326B96E78802A1AEC6AEBBD69C10266FA9FA
SHA-256:	BD03B0B6236CB66EB345EF4921D76C8D9BE436EA7CC7C89F9E62163C3E0A4A64
SHA-512:	39A15EBA25DF8FAC9053827E54908531B4916B55916528313692A80EC49BA6EB07064B0F1C5D4082491B0660037AA1A1505DCC02E42E65A21691DE3EB0389B3D
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/moment-4ef0d82f9fc65c8a28f659aa3430955f.js
Preview:	(function(t){var e,n,s=Math.round,r={},i="undefined"!=typeof module&&module.exports,a=/^\/?Date$(\-?\d+)/i,o=/(\-)?(?:(\d)\.)?(\d+)\:(\d+)(?:\:(\d+)\.?(\d{3})?)?/,u=/^(-)?P(?:(?:([0-9,.])Y)?(?:([0-9,.])M)?(?:([0-9,.])D)?(?:T(?:([0-9,.])H)?(?:([0-9,.])M)?(?:([0-9,.])S)?)?\|([0-9,.])W)$/,h=/(\[[^\[]\])\|(\$?(Mo\|MM?M?M?\|Do\|DDDo\|DD?D?D?\|ddd?d?\|do?\|w[o\|w]?\|W[o\|W]?\|YYYYY\|YYYY\|YY\|gg(ggg?)?\|GG(GGG?)?\|e\|E\|a\|A\|hh?\|HH?\|mm?\|ss?\|S{1,4}\|X\|zz?\|ZZ?\|.)/g,d=/(\[[^\[]\])\|(\\)?(LT\|LL?L?L?\|l{1,4})/g,c=/\d\d?/,f=/\d{1,3}/,l=/\d{3}/,_=/\d{1,4}/,m=/[+\-]?\d{1,6}/,y=/\d+/,p=/[0-9]['a-z\u00A0-\u05FF\u0700-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF]+\|[\u0600-\u06FF\/]+(\s?[\u0600-\u06FF]+){1,2}/i,g=/Z\|[\+\-]\d\d:?\d\d/i,w=/T/i,M=/[\+\-]?\d+(\.\d{1,3})?/,D=/^\s*\d{4}-(?:(\d\d-\d\d)\|(W\d\d$)\|(W\d\d-\d)\|(\d\d\d))((T\| )(\d\d(:\d\d(:\d\d(\.\d+)?)?)?)?([\+\-]\d\d:?\d\d\|Z)?)?$/,Y=["YYYY-MM-DD","GGGG-[W]WW","GGGG-[W]WW-E","YYYY-DDD"],k=[["HH:mm:ss.SSSS",/(T\| )\d\d:\d\d:\d\d\.\d{1,3}/],["HH:mm:ss",/(T\| )\d\d:\d\d:\d\d/

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31184, version 0.0
Category:	downloaded
Size (bytes):	31184
Entropy (8bit):	7.984408869327171
Encrypted:	false
SSDEEP:	768:3Vqw85L1MwXzoOBYnTCw2iyjzu2+lwyr3b+NwZ:of9PzoSkTCw2iyjzu2KdjbGwZ
MD5:	F3C9D0AA102428F3C31AF12FF64E4A56
SHA1:	E81CBD4C496485E8EB983690B786FBD1141970FA
SHA-256:	EADDC3FB78D635F6ABE0194B732E54A2FB4FC0C71669B50C98B02AC36FEB813D
SHA-512:	DB276EA2DF8D605865751DCCADF51D91127BDA8413E84A12367D7FB4950904AB51BF89928794EA1B439C691BA3DA8864C08166B0817068C1D24CAFA5F84DF85D
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/e81cbd4c496485e8eb983690b786fbd1141970fa.woff
Preview:	wOFF......y.................................GDEF..h....4...@.].UGPOS..h.......3v..GSUB..td...i........OS/2.......Y...`..a=cmap............+/,jcvt ............T...fpgm.............0.6gasp..h.............glyf......S\.....\|>yhead.......6...6....hhea....... ...$....hmtx...T.......H..l3loca...........&. ..maxp....... ... ....name..f.........fV.2post..hl....... .~.Dprep...T.......}:............:.._.<..........#........h}.Q...F..............x.c`d``......Z.?.....P..0...n..........e...e......./.a...U......x.c`a2e..............B3.c.a..........,....;0(T3@....#......Y..s10.p1\|S``...cbe:....x..8.....x..c..[...9....dlO.....m....m.m~]...s....s.n..:...P..^.jv.U.j5(..T.?@..\en.&@.;R9.....r]g:A.yV.{B;.P..0....l}..`*t._.Fp......{k..T..It:4....)...Y...FCM.&...?..5....=...T.?W..E....{.e...uC....f...>.t.........g!.X..P=..@......`...\.;..h.J..~W..~0.yG..o..$.K...4D....O.JXCOE...+.....Y.z...._.....U.Q.z^U.ngU..pM...V..........Fu/..\...)X..Bq....x..)..U.+...U.?..>R>..uS4$......[#.6.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6142091251808246355&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1593702
Entropy (8bit):	5.787042597766311
Encrypted:	false
SSDEEP:	12288:rjGc+hNjUmSpY8OmUE4QvvfiD8snGKlubyItvxsaqy/alkCnzgMxlxAE999A56BO:99yIffty1RPdsDGOEw
MD5:	1CB6370C120798BFAF71D83B6465B7E8
SHA1:	C71BA77777865ACF4261CF8324E44479E6C42A13
SHA-256:	0E48F3E4D743C37628295E7A87935B77E91776668B200268AEB530A7404053CC
SHA-512:	D3566D43D50B834663E815F45402D04774E1C95F45235274DB19F6930E46114EAE695E70C59A44DB8A2C7F3F858D914E3286187E91C7B4EEC0BD300303B2895A
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6878.ce0a8a7f3f44187c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499),p=n(40672),g=n(33291),f=n(70273),m=n(27497),h={authenticate:m.YR},w=(0,l.$j)(null,h),_=location.pathname,v=function(){var e=(0,r.Z)(a().mark((function e(t){var n,r;return a().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return n=t.authenticate,r=t.navigateTo,e.next=3,(0,g.zD)();case 3:return e.next=5,n();case 5:_===location.pathname&&r(location.pathname);case 6:case"end":return e.stop()}}),e)})));return function(t){return e.apply(this,arguments)}}(),A=w((function(e){var t=e.authenticate,n=e.navigateTo;return(0,s.useEffect)((function(){(0,f.Nz)(),(0,f.ZY)()&&v({authenticate:t,navigateTo:n}).catch(p.Z.error)}),[t,n]),null})),b=n(53073),y=n(29057),x=function(e){return e<y.u.SMALL_MOBILE?y.l.SMALL_MOBILE:e<y.u.MOBILE?y.l.MOBILE:e

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55308), with no line terminators
Category:	downloaded
Size (bytes):	55308
Entropy (8bit):	5.200384847218251
Encrypted:	false
SSDEEP:	768:I+oCY1CZDtQYCmy1m0ZSHAzdjwYToL/0i0znDcvwzQRpLXeyq4PsRrbJiR10:I+Xy1m0ZboL/FKnDcIzQRp7CA9RG
MD5:	1C0B4E457C62548D0E46C380BED9CB82
SHA1:	E88C1D43A8E38227842594E337DA2225ABEAF236
SHA-256:	92C874C0714A983103292E4D1448A44A9EC43DABDA0F6D6ACAF42E4DFE0AB7AE
SHA-512:	81B1181B6EE4A0416257D43444ADA0E62BB44D77A5FC3AAE8B29F510EF2AA0E78D7F8A3B8499E59E33E9A3C5673168422FF915AA1D73F27484BD2E8EDF02E718
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function h(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){g(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function d(e){return d="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.pr

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5165)
Category:	downloaded
Size (bytes):	33993
Entropy (8bit):	5.384168950091156
Encrypted:	false
SSDEEP:	768:6PLzm1jZdFvhzWF+lZBKkRA364qUo0PkMXLLwuCkYYncOhq1:6fmRZdph5leU0PkMhncOc1
MD5:	26F862471513FF5E039271B818FDC8B0
SHA1:	72436EADA9E7134E051F52418B484BA88C1B6A95
SHA-256:	B8101301B8746D7850D44BBA8E5EF8C5F64FB27CB6C47DC724F3AAC100C564E8
SHA-512:	EEE2724863D32593D5DC3D5D38D294BAE9BF7FBE3C54C342D3114717CE87A4F405394B442AD9BE483C01BB060D45C37D7E79021B38EF880A12C2F60F68E69974
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/hc/en-us/articles/360043239551-Learn-more-about-all-of-WeTransfer-s-products
Preview:	<!DOCTYPE html>.<html dir="ltr" lang="en-US">.<head>. <meta charset="utf-8" />. v24446 -->... <title>Learn more about all of WeTransfer's products – WeTransfer Support</title>.. <meta name="csrf-param" content="authenticity_token">.<meta name="csrf-token" content="hc:meta:server:9O9WTC_ysy92QhYl3Toe9i34PfhAHjT0Tv6_B-yVcsHMrpOQI9txylL3CDODrF7LI01twR4uzIE6mMGkOLLypA">.. <meta name="description" content="By now we've been around the block a few times and we've been putting a lot of love into a variety of beautifully obvious tools to keep..." /><meta property="og:image" content="https://theme.zdassets.com/theme_assets/63313/0ccc5251e240447c82c5a26b2338f66fa4fe3f80.png" />.<meta property="og:type" content="website" />.<meta property="og:site_name" content="WeTransfer Support" />.<meta property="og:title" content="Learn more about all of WeTransfer's products" />.<meta property="og:description" content="By now we've been around the block a few times and we've been putting

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 88148, version 1.0
Category:	downloaded
Size (bytes):	88148
Entropy (8bit):	7.996713089238815
Encrypted:	true
SSDEEP:	1536:6RwfdXEJvOReZkmgFILq07rreFcMyfTYycflXfytN0n8SgMW4UV7xfa77ipm:zuvkILdre9gTYyel6sHW4UV7xfaN
MD5:	F9E4D4A5820CB8D9D23104783D01B4BF
SHA1:	2A5AC318F146C43D791C133C36F51A2299C22B31
SHA-256:	1AB121A209FCC0F7776F0613E3C1511FC3C024083F28A684A131B84D322732F4
SHA-512:	C66A1D7A7FE46CBA3AE3B86CD27FBA8C61D0C5AA3305CF14356C232BA7E8E6B2E294AEB89317AABFA400B7749CF8DD2E34F7723F091965F5249DED815956E713
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2
Preview:	wOF2......XT......(...W............................?FFTM..Z...@..(.`..^.....X..!.....6.$.... .......[kS...]..}.(y ...af.Q:..$..b.p.O...d.`..7..!..H..S]A..m....6U.................,....../.$...((Xm.....}......O%.d...v. F.ct...c...@.9..Hb%..V.AIp......'.........Px9.....$W.fq......P9qs..P....i<U........j.@.......F....ZS.F.G.\w...U.f.r...<."..W..nX...QUs.v...=.\|-.C....Q5_..H.\|g..G....;...P?....q)..d.,.5.6..i...y.h..g..E.)FTM.)St..\4..P-..Z..8U...Y.y....K*..h....:.?.d.J...D%W._.<.4z...x[U..O..E.7'...W.LGM..u;..j{K.w.N..D...y..x9N..uJ.u.#...}.%G.3J...o..S.:D......2..=.#c..F...M..2.N..g.u.A...\.'..b.vt=K......+.`..U.5..I......+.\|..1"..dT...K.....3..+....[=....K{.+(Fb(.{8..................+.W..........K.....yC.....b...R.......8...~W.$^.T&'..sT.-..}...(..\.ZI..U...X..<K...........#.^.W..D.(......`5b....5.WEp...T...?..vTi..)...L.H1n...P"....nw..;.....#..g....=.IfzZ_... W...w..........D1....d..E{...{_...O..=.......e..$Z...D.t+.P $2u.Vu......O..A.)9}".D.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65089)
Category:	downloaded
Size (bytes):	79831
Entropy (8bit):	5.494921052305278
Encrypted:	false
SSDEEP:	768:rgNPUNJqCXWAugakpl4R8r6gNKx0qpclDNhs72o7JbvShRV4fkRDnJaA+VFxqeT:sNPUZrqgNKx0qpclDNG/Sn+fSOIeT
MD5:	E779375659F40138431DA5D448C170C1
SHA1:	2A965A0316367EAD74052A88B7EDEC5EC502AF36
SHA-256:	20C33DE3DBBDFED984634455B80E4239B2547D09CD7F0600742F36F5F5E3E36D
SHA-512:	51402A628F4282C786665EE91F01BD84D22D55DEA1E00F855D4654B9D2ADFF01AC3351402B52C2FD423CB9D8AA52BAF24BEFC3A837D24DC857EB24041680912F
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js
Preview:	/*. Skipped minification because the original files appears to be already minified.. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /./!. * Web analytics for Snowplow v3.23.0 (http://bit.ly/sp-js). * Copyright 2022 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,o={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(o[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(t=Object.getOwnPropertySymbols(e);r<t.length;r++)0>n.indexOf(t[r])&&Object.prototype.propertyIsEnumerable.call(e,t[r])&&(o[t[r]]=e[t[r]])}return o}function n(e,n,t){if(t\|\|2===arguments.length)for(var o,r=0,i=n.length;r<i;r++)!o&&r in n\|\|(o\|\|(o=Array.prototype.slice.call(n,0,r)),o[r]=n[r]);return e.concat(o\|\|Array.prototype.slice.call(n))}functi

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603
Preview:	{}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31120, version 1.6554
Category:	downloaded
Size (bytes):	31120
Entropy (8bit):	7.985418175929638
Encrypted:	false
SSDEEP:	768:P75Q02qtpsFozdYYk5SdY8cyynGiYENuQO9h:Nd2wq2zdYYktF5Nc
MD5:	57CBBFDAFC43E0DEECC75A309DD042C6
SHA1:	B9CC2FF331B8520706DE175F5B3FDBA6731A9BFC
SHA-256:	A9117F16BDAA64C953B303BEF951DFCA6316EF59F1B7CA72D5B946B1D815F6A6
SHA-512:	C997D44853DBC86C4A75E123306E504AB88FFDD7449B196AB200018ADF355183A474EF71F31E61F949BE3CB7BAC888D3F3A22AEC4226F9D50BD8B3FBDE1EF13C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff
Preview:	wOFF......y........<........................GDEF..i..........o.]GPOS..i4......3....GSUB..t........8-.jQOS/2.......Z...`..`.cmap............;.<.cvt ...L........T...fpgm.............0.6gasp..i.............glyf......T.....1.head.......6...6.VC.hhea....... ...$...Uhmtx...T.......b..j.loca...........:q.L.maxp....... ... .c..name..g....&....E.j.post..h........ .~.Dprep...........;............1H=S_.<..........#.........P..................x.c`d``>............l@...$.....\|.......e...e......./.a..........x.c`a2c..............B3.c.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....'..^..x....$I....Z......,...9.m...m.m.F..5.=.../.B.{.._/...P..A..j7sTmSZ.*..Uf.R..T.....m.V!..C.\7{...<.....B......P.~.......V..V..X.v_%..j.O..C+<...J.o..R.=..........=.}.#..5\.A{.r.K.c.&.V.3Td...f...>.&t.]S!.{m..5.B...]C-\..#........`#.&`=..AhvF.Te6.w-.b...4..A.lr..\|S.<}.At4..`.=.......`.B.-. ...k.L..F..]/..avU.g;..!...Sp<......I...a........a.T..c...N...\..?..........\|.T...\.6..[+.6.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028850724
Preview:	{}

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2F&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028886775
Preview:	{}

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOC,pingTime:-6,time:1739,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1739,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B5~0%5D,as:%5B5~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1954x1471, components 3
Category:	downloaded
Size (bytes):	694264
Entropy (8bit):	7.794781430269143
Encrypted:	false
SSDEEP:	12288:pvVpjWB/JzXbb81jRBCcFJZtgPjsu2QUI7HepGyfq1d8Jnhomx+LyiF2S:lVkxJDbb8VRBHJfgPjOI7+dE8RhLx+bb
MD5:	8C006C906057FB2AD82D54007C88E1F8
SHA1:	06EA12D33D0D953F680A5392E19FF4D14F4F5579
SHA-256:	4CDDB21A3BD98C155094DD58984168964EB531A25A5225DB276B4F399B9F0623
SHA-512:	0337E5B1553F3BE18A58D25F5C7F8F237976E4F26E441EA0783ABCB07AB5B6E78E1DF95E6FADE06AFC9A305336F6D46037F20FF0AF3487BABDD1AF7716E6F3D3
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/2.35fa86589c24243c6674.jpg
Preview:	......Exif..MM.*.............................V...........^.(.......................i.........f.......H.......H..............0221....................0100................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (623)
Category:	dropped
Size (bytes):	2167
Entropy (8bit):	5.645406178178244
Encrypted:	false
SSDEEP:	48:ja8++eaR+rgveG9rhCaZeaR+rgveG9rwAEp7ZWieG9/Jdi00eA5dR5:+8+/Ds1ZeDsXEp7/tX+95
MD5:	4AB1FB3998E4FDB7E3D28E811D037689
SHA1:	1DD6F49C0D4134D7CC7B50C6EE05ACBD1BE4697B
SHA-256:	7D112F63C7E759A757A454BC4A088200E16A01745539EAEC21446078E37B8D9D
SHA-512:	3162D3A1DD0EE8252731328D8C7624FC461B7864A0F9078E1CAB49FF2A913EAE27F0D1FEC43512CD1C2ED6789961636BED7FA8C46D275768BBE705C67808D7ED
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1304650182;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1304650182;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46334)
Category:	downloaded
Size (bytes):	472710
Entropy (8bit):	5.519749166447925
Encrypted:	false
SSDEEP:	6144:LluL2nQXBN89YLceF+tqTnXP9RIMsHAHJr:LG2nGSUEjYh
MD5:	6454FDBB8124FE4A18C0BA51AE2640B6
SHA1:	08F8BA2900DBA2D2206F18A2B48B0DCE428CE01C
SHA-256:	9F94F235D3289AF1CE310C7BB65B23885C3070C25DA8F5DADFBD888EA9FC5ED1
SHA-512:	2012E0A130A1D12BC42E8BC10CC72D1516CCE401281F328C250F0EA8BF6F1C7F3BE76B2B3AAF74480E331EB7E2E028194712685D238A438D58F3971BE6CB0B60
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtm.js?id=GTM-NS54WBW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"122",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__dbg"},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",2],"vtp_map":["list",["map","key","false","value","G-0M019DTWVR"],["map","key","true","value","G-RXXQE3EDY9"]]},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"G-RXXQE3EDY9","vtp_ignoreCase":true,"vtp_map":["list",["map","key","wetransfer\\.com","value",["macro",3]]]},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",2],8,16],"?!0:void 0})();"]},{"function":"__cid"},{"function":"__ctv"},{"function":"__c",

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://tracker.samplicio.us/tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1714028886639&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD}
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeW5,pingTime:-2,time:614,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2379,bdZ:3860,beA:4971,beZ:4973,mfA:5529,cmA:5529,inA:5529,inZ:5531,prA:5531,prZ:5534,si:5536,poA:5548,poZ:5563,cmZ:5563,mfZ:5563,loA:5576,loZ:5579,ltA:5584,ltZ:5584,mdA:4973,mdZ:4973%7D%7D,sca:%7Bdfp:%7Bdf:2,sz:300.250,dom:img%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:614,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B55~0%5D,as:%5B55~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:121.932f3184-a47e-225f-d172-3d75fdc4f6cf.16_2049676-79562501%7C1211,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:566,sinceFw:36,readyFired:true%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27440, version 1.0
Category:	downloaded
Size (bytes):	27440
Entropy (8bit):	7.992206939859718
Encrypted:	true
SSDEEP:	384:gs433pIbNnWeGf6ZOmKWZdUfbSHyZ3N3r6xESiUp7MkRzArC7ceMc/DDRO81IkRY:dgCi83dUD0EbpDGspywaIQ8QTubs8Ic
MD5:	A618EB8DDD7AF554656002BCFDECFE86
SHA1:	8ACD0B2B765B498BE6E3DDDAA583CD86D43BABB9
SHA-256:	8B271876EBB2CC145871D0DAA6F5D9581947E425338E6BC3DBB604E8A808B81C
SHA-512:	A2CC1024A09DEB79F0414839CF1CF92AA7F80970E327B1FBA73C37B0F5CE606E7683D03D2B90AF9BD26849A220535D76593C1CC0A92B90E0C0FC8D1AA0CA8EC2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2
Preview:	wOF2......k0.......d..j.........................?FFTM...4.....p.`..n..r..W.....4..R..&..6.$..H. ..\..~..3.#.W...H...hm.w.....PB.........=e.....Td.4.i....@.....S..."......n..7.....4...7....i.L...s.....g^...ut3.).-6..-..w..4.%.6!..s...nC..2...@.e..z./.1.Y..V....[.......=.BU"~.<I#i...gd.\..M..M....!......!EGR...h....K..O...yA..Ua.....{.......d.7?._....w..>."0n....G....Y.. .MiJ.h...W].........7......(.9..mp..V.....d.0...H."f.JD<.</.}.}nU}7j`D.30.c)..P.N..].hX......B..S....(\V&..w..Y...X........<...p...I..N.I.c./S{....(..:EP....C1.b.Y=....BW..Z...?s...\....k..EW#p.F&.W..W.k.....p1.1.<3...r.h....+...G<1.p.4.P..@!....\|:'.3NI8..[.k.T..4"...;..Tt:3&..}.E.....=......../_NN.;.$I.$I".....Y.+a...qbF.Qf..........i...5t.}.-..#.....Q.......`.......>D.1.P..VX..+O>.%....5..5..g.....`k...E4.X.{0v'..........^..T"h.uO5....,...L4_6...iw..}. r.3.9..(2D..cc...g.......>.$. .\|.e......9..~.R.M,.!y.!.....;W..]7..B)<.B..n..B!\...@!.....m..J.#..C{.~D?2....rf..y.U

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	4.111171149485744
Encrypted:	false
SSDEEP:	24:tFfoq1u9zcNXKh4rHQDPq232NrLn51esfiTXU0ZvldBPZ9KfQ4AfC4TYG:PAqdNXDH6P32NnnVuJvlXx9h9TX
MD5:	00AD1A3C159907BD9E404C33214191BA
SHA1:	95C8BC65C264D16E522E908C3820EBDF50056680
SHA-256:	2A09DF6A1186931B120B5270600278790B2B5934089DFFE47692D11EB76AD848
SHA-512:	73C12F269CB439BD7958A860C75C930C877BFA729C1C5E43FEC53178A3087F447BBD94FF74A6C1019189AE614E9B13DEADB43CE6169777043B8FF03213FC7C8A
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/95c8bc65c264d16e522e908c3820ebdf50056680.svg
Preview:	<svg width="45" height="21" viewBox="0 0 45 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M36.5194 20.5145C39.818 20.5145 42.3314 19.5042 43.6657 18.1066C44.3723 17.3299 45.1981 16.1259 44.6085 15.1934C44.0978 14.3789 43.2337 14.2231 42.2122 14.7283C41.1906 15.2335 40.0521 15.505 38.756 15.505C37.5004 15.505 36.1639 15.0399 35.4573 14.3388C34.5933 13.4842 34.123 12.396 34.123 11.1141C34.123 10.8025 34.3188 10.7647 34.672 11.0362C35.5743 11.735 36.9109 12.0844 38.7177 12.0844C42.0547 12.0844 45.0001 9.87006 45.0001 6.45172C45.0001 2.83976 41.5439 0.160278 36.3214 0.160278C30.4711 0.160278 25.9551 3.88796 25.9551 10.1816C25.9573 16.048 29.8838 20.5145 36.5194 20.5145Z" fill="#000"/>.<path d="M12.3689 14.3722C12.9967 14.3722 13.3499 14.7216 13.782 15.3825L15.6676 18.2957C16.3741 19.4218 16.9636 20.1985 18.3384 20.1985C19.7133 20.1985 20.3411 19.6555 21.0093 18.1399C21.8329 16.2749 22.6969 14.0228 23.4822 10.9939C24.3463 7.61337 24.7378 5.51697 24.7378 3.8078C24.7378 2.09863

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1401
Entropy (8bit):	4.690890659849824
Encrypted:	false
SSDEEP:	24:yeXYy77g6u9m+CE6pJzbfu6IDKCYNnir54Sk3wvunl+JDi4wFM8ufcdQUR:yc7ss+uJ7CY3Hwol+ti4wFM8ufXUR
MD5:	5C45AD78B7CC3B846F5B5E6E5453A0EC
SHA1:	F3D912BE2BF9CC4A9FE7DCE90B13271AC51B2A4D
SHA-256:	0EE6E5AC0D11128AE25A0D81AB5B7B6D52564F4037DB61DCC6A724AE65083EB4
SHA-512:	6BEE602360DCA337CADEAFE7062E0FFA6793499354ADDB5AAE37BB7C98018F51FCB4429600FC924C0534947E9DE3248D0515E59CD425504E9B02FFDCA18F07D8
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/static/pg-script-poc.js
Preview:	(async function () {. const t = document.currentScript?.getAttribute('timestamp') \|\| Date.now(),. e =. document.currentScript?.getAttribute('deal-id') \|\| 'IX706019987063168193',. n = document.currentScript?.getAttribute('banner-width') \|\| 1,. r = document.currentScript?.getAttribute('banner-height') \|\| 1,. o = {. id: t.toString(),. imp: [. {. id: '1',. banner: {. format: [{ h: Number(r), w: Number(n) }],. height: Number(r),. width: Number(n),. pos: 0,. },. pmp: { private_auction: 1, deals: [{ id: e, at: 1 }] },. },. ],. site: {. domain: 'wetransfer.com',. page: 'https://wetransfer.com/',. publisher: { id: '194052' },. },. user: { ext: { consent: 'true' } },. regs: { ext: { gdpr: !0 } },. at: 1,. tmax: 1e3,. },. c = `https://htlb.casalemedia.com/openrtb/adtag?s=1077556&r=${encodeURIComponent(. JSON.st

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=8T8tKvc4KnrqOnov8T8yePQ-fnnqaigvpjgHSJ9N
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 532
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	7.299462462555026
Encrypted:	false
SSDEEP:	6:Xt7SV2DAIjPvNFTBII03FtDS32EOer0ZI4LrSyFPw6/XqoE2pGVPtzzVCTg33GHo:XPDA2lDIIwOJOOgI4mqMBVxfGH3z0
MD5:	2622D2CC8D57A2734D673AB0D2F1ED10
SHA1:	06A629E11A655B0A534049C474B731FB6D58F25A
SHA-256:	7B1F275A6D0049973F5DA375AA862A1732257F75A9F129B86F51E92BEAAEBB1E
SHA-512:	BA5A928592FFC30C483C1D287F346A36C98318D9345465AF550493BFA2028F5B48D0FCF405F9B794ED291E03AEEF41A6FE3ADD976EFA1D0C45633114EBA61929
Malicious:	false
Reputation:	low
URL:	https://collector.brandmetrics.com/scripts/b.js?pixel=b6c16f0b45ad4f239eab5427c0ff96cc
Preview:	..........u..n.0.D.%..%e..bB.......7.UbG.....^.mUq.wG.o.M.#O.Q.Y7YE.....N....9H.7V.}Fn./6.>.Q.I......<a_..g@.....r....O<.G.Qa.1..D}XD..:.m.ZV...G.^....B..p...Z.]...[...v.k.w]U.N'............M.S#..y..............w..\|NOE.'Vx.W..(1.."....I..wh...(.c.........LK..\.A.5I.3...t..#.1eF.....^j.s#Nv.d..SP[......0[.`B.I.\|.>3.y....

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x968, components 3
Category:	dropped
Size (bytes):	1618888
Entropy (8bit):	7.9911776426842565
Encrypted:	true
SSDEEP:	24576:qlX1rNWiNjaKPzEd23j1F+FhgalmfLY6IHMVWoYSMrSM7WKwychcy:qlygjaKPza23jEgRY6MmWOMeMNEcy
MD5:	9459AB37C159826CC66C30F9F6DF33D0
SHA1:	E105D7136DCA043DE1A93A8204BCA717A068C086
SHA-256:	A6FAACAFAB86717985BBAACD9A1F8F763F1F68C414DBA7246D0FA4E4C9BCF733
SHA-512:	A7AE18E83341F20CCC74A63C76C8BCC4B51733CA5B442CAFC75CACFCD2CBDB61544DA14C816FB2301EF194F7E0ADB627DD8F4CA0D2E8D86AB3DDDEFA982FDBCA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H..........................................................................................................................................................................................................3:z.fo[..5...F;{..Y..^......v.,..tz.I.r......J.....IG.......Y..;.......N.j^...Y..."\9.`.b.~$...g.. ..s.......~Je....e.....J?...-b.../b.A<...\|....Tg.......}.n\.>.`.. ...B_.F..s!.mp..VH..G..,.....b^x.....(P.(....O......;..W...wB.i.....]:-.....'.M:.+.......h\...Y...>....."@\|..ft......z..c.o{..}7..~....q..N..fhVI.....X.\....\|.l.5.]83.#N..V.k...W5...5.L...........>6`..D.....TL....?l......jO_..4.-.Cz...H..?.J..X.,.3...(....r..;.:..h.)..k.MZw..~.c.Fm_.=.#.J.A?.v&....I.bl.).H..3..6.vnI..a?..j...9LG1&.cb.....}.T....-\..R....\|..s_..qS..&:..we...70:..3:z...o<..ffb.w..a.u...~.t...c..j.....-f4.Y.S.z$VIF....Y8..R.Mwy....4r.I.8NW%......NJ.:..w.C7?......I?1(.iW...1.).....cm.gQa.m...8Jve.Ka.T...JR..C..{.#&.cC...O.g.g..{}W.....-.}&2.WO..p....g

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/favicon.ico
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1338)
Category:	dropped
Size (bytes):	5008
Entropy (8bit):	5.581073347812876
Encrypted:	false
SSDEEP:	96:+8+/DH5ZeDHF8+/jSH5ZejSH7Z3aJ+T0WNriNRGEpqJsXZzi5:+8+DZZeDl8+jSZZejSdnNriN5pZI5
MD5:	48B03FC6070A7667C2A8D5403082CC95
SHA1:	08FF441C5841A9267F07E08F5162C66C21B34413
SHA-256:	262708374030147C3B042EA29F39414B4C890E1A1CB5E1DDB9669A780A56DB36
SHA-512:	79C5B83E8E7080D1519055F200C73D500546AC3B056C6083F72821E586ED8D4101C546CAC56D1A978DB853F7312B33A63682D31433AE38723C004088FAEDCB3C
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1216680095;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1216680095;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-3,time:708,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,0~0%5D,as:%5B26~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=NaA18jfKrTaqFvS%2FbJswPNMX6rHUNZVK6zV9uvYGVqa%2BBUGFx14RCPOh03UIUkVcig6zXswsljQJOeWTH%2FKMaOMm2ZasjRseqveTY%2FMaAXNZaYuxKccfFJxnyK0UWeh96lEiVLuhBVUPrNumJaNZGGWp0gCPp9HF1XU%2BZ0L9byteJL%2FipSDA%2FjaK4lDlROzIP6Y%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D18%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijA,pingTime:-3,time:417,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:395%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:417,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B44~0%5D,as:%5B44~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (640)
Category:	downloaded
Size (bytes):	2243
Entropy (8bit):	5.640052751658981
Encrypted:	false
SSDEEP:	48:ja8++e2+QgIeG9r4CaZe2+QgIeG9r1AEpIfW561G9/Jdi00eaz6FldR5:+8+/lyoZelygEpI7sXRa2FB5
MD5:	9CDE58E6FF56B22654D21384F5B7EE54
SHA1:	7761AB718C449B2A0ABD531FCD532FE348EC3542
SHA-256:	B9F40DD6D3404FE7DF77764CDEBF36F028921249775EE20C1FF1F7839B7B6F6F
SHA-512:	A35B1E429D8CAFDE67CA0B6A1672E709AD82CBC247FA6512D334D8F2A9E1F4B821BD3ACFB875851200A3E940B6771ED3542E380DD010EA502CAD2060B06161A3
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028835353&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1487684618.1714028836&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028835353&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A15.435%2B02%3A00&epn.hit_timestamp_unix=1714028835435&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028835353-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028835353-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=7&tfd=1923&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25564, version 1.6554
Category:	downloaded
Size (bytes):	25564
Entropy (8bit):	7.992300675129821
Encrypted:	true
SSDEEP:	768:gww2k0949ooVdrvJspFOiDXv3hGBvRHh0gOJ:j4eSdVspFDGdB6gK
MD5:	36A1D73BFBADC61BBFF427B079548A67
SHA1:	2D023C207C99AF66FFE818A8C13146172D4D9B00
SHA-256:	E159C217E6297A50CB65E1BC27A36ED498E6219D54D3DDE428AC6162928E1CC1
SHA-512:	4F1601AD527CE970747CB2B3798A0DA98A265D0E5E8714727F87997254FABCF5BD0B506F12DB631374401296E06D9CA68AFFEB4D67ECD33CA38459FD8E8A1D77
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/ActiefGrotesque_W_Rg.63479c54248fa038db83.woff2
Preview:	wOF2......c........(..cx...............................8.`.....r..W.....\..;.6.$..b..:.. ..h. ..;...'p.+...f."..K`....P......I`.0`.....YIC...$wU..-.l.0..N....Q................i.g......$.u..N{...............F5.1..i....:C?.._..e3L...s.J.H5^j.h.l/....3.')&..<..G.?.$ADq\!.E........-e.yB.vP.:.........y~...}.....6C1....bcN..t.l3.....E.s../...VW.......g.\|B...Gd..%:@a.&B.\|..,.)...~m.B.\Ds..E.....#..B1.0.oN7unm.`...til............B;...3..,.x.>.Bo.m.....l...{..1.@...jn...6l.p.n,.r.oT.:...z.N,2.D"...J..\y.L....?......v.o.Ud.-..V.:U.`-C./[V.gfos.01...Q(..V.^....T%..-C.8.. ..:..{....k....h........icO.....?.....+..6.,\|i..mY(..(....._SS...Da.z....z.!...yw....?...]..../.m>..e..;..GmY...TA.T..M......+"..o.f..\|....t....(S].......c.Nh..2.2Y..F.6GC]O.eo.?..U.!....^l.ld..._Z.....y...=[.E....lx..{..F^..v......\|$HL ..Cr.<:.r..9.):%............?\|...H.C......#..H )......4kJ. m..q.......Y..I...C.U...y;..]OU8T>...6.2u.......U._...;Kr.......y.~..]S..B..5......JDH.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpiCa,pingTime:-10,time:1569,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028880221%7C%7C81950277cb91e561d2f6a9c05b55d312%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C1aaa3d829ea88044a2c8c22fd46e49d6%7C%7C62fe7ae2293222bce0b0f7e5e73fd73b%7C%7Cffe1f48a49d024933bacde4e4539887d%7C%7Cc5d386b01e658c4018779c1f6879da71%7C%7Cd7195e79f086ec320b9ad905bbb79af0%7C%7C1663701684,im:%7Bimprf:%7Bttecl:1701,ecd:543,tsecr:11%7D%7D%7D"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 73336, version 0.0
Category:	downloaded
Size (bytes):	73336
Entropy (8bit):	7.993379060972102
Encrypted:	true
SSDEEP:	1536:vCn0PiLA25yjfvm9qta2CAFxnNex24rcHTGEHslA63NYghHumVEo3MCvrW:qngIA22vmItEIUrcHTGERiN97MG6
MD5:	066ECCF30E6074ACC1ED82E8CA5E0FF3
SHA1:	3A41FFD4D834E757175D7E1A8B39E7417FA1D50A
SHA-256:	305CFA94BA8DF2D4471EDA00D7F7965E9BEA76C1470B869BBD8E34D0FA5F75A0
SHA-512:	7BF0EABC7D55134879069CB4EA2A45DCF234E34E11A3A9B47BE54FD2B52373C274DA2AD3D6DC6D440C9F5F97FE98FBEDFF101920DC84DAAD0FCEE780E9731AA3
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/3a41ffd4d834e757175d7e1a8b39e7417fa1d50a.woff
Preview:	wOFF.......x.......<........................DSIG...p............GDEF.............C7sGPOS...8......P.FP.QGSUB.."....o..!j...OS/2../....N...`j{..cmap../....u....2<..cvt ...x...o.....^+.fpgm.............6..gasp...p............glyf..3L.......,.4g.head...h...6...6.8HKhhea....... ...$.X.hmtx..............H.loca...H.........q.maxp...h... ... ...Mname.......y......Wpost.......l..._.vL.prep............g.X.x.%..U.A......!$...3.......q"......2.....]....\|c.)..Q.Q....).$pE......3...[....1.qO#.z/......,\...Z...@...3.<..i#_.c.BzC. .i+_.../.L7..=.1....N.........x......A...s..g{.l..Um.m.v....k.7...wf."....Y.Q.......j@..H..wW8....7No.#.6P.c.n..\|..$.&..H$..,e.V.E..?{=.k..i...c...v.b..Q!..k....[.f.X.66H.!.).M...H5n...A.q3!.v..73......`.".Y..8d.7.B..l..0$ ......N.l...`..e.J.....g...;...:.=..Hv";.].d7.[....-zv...M.>....Sab.Y;...b.....t...lG.';...Ndg....Fv+..~.....SABA........."..H.T......A...!`.DCS..>.............k_...b..3.88.=..@...D..Y.....AE.BC..f.....X...O..J.T.:.h

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	938
Entropy (8bit):	5.484910791877162
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WUL8BMUNbpbzbW2wLZY4xJyN0cfMpNrl/nE:si2N1V4NxwZG1QBf09ryCdD/SAY
MD5:	4C4C2D7330F268F96C4FAB0AF9EDFC75
SHA1:	0E168CECC570D0C360A4F9A3EED23384BC661563
SHA-256:	A726032B5D3591233E00EDAF8D608590B0482CFBB763923F068BE4E27241CDB5
SHA-512:	5A88E4F41D9778CBC8405F10A14647C987B46CCF051AEBD781C889CC105F29ABECB993327FD4241A1B19AC881710CA5ECC8F0E2711F9A31C29A2DA0F85AFAA95
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YWRjZmRhMWQtYjMxYi00OTQwLTgzYmItZGY5MDQ2ZjUzODhh&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=adcfda1d-b31b-4940-83bb-df9046f5388a&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715049028875
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66770
Entropy (8bit):	5.338809945057824
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEy3:RIT7OX4s9eZYtj8lt3
MD5:	290ABACE19F4C679DF49241D2A0E4C4E
SHA1:	A25116CC9FDA5D9C0EEC935B90AC47EFFE3A57A7
SHA-256:	CFE5463ED9F743566F37A7FB60D00CC24F765919097E57B498785CFC7584D955
SHA-512:	5038C6FD29530C4AD74DDFF1C27EEAA91BB83511299955EAA2F3852D13B5E2538B7AF611E7301B3F169491FD3721378E739A7200EF90E6752CD78686758653F0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5500
Entropy (8bit):	5.216187399953183
Encrypted:	false
SSDEEP:	96:DU9qH3FeYKvqH3FeYKEArtLqRGqetKRR8uFfVDebYKV2C0YTqnrpeoKr/5DFjSmm:YgOfI
MD5:	D5BFF4ABD7873A524A4E41E35125F873
SHA1:	27E001719132A510CFC063EDF103CB2DFFBF3CB5
SHA-256:	53A3B2FED7FD6B8C3AC1DFF6DA05A8EF823794E78DA107A6E9389DD11A71A2A6
SHA-512:	35ACA0810BEC91A9DB23930C3F84CA808E176FFCD5194825C66BD61062D5A91ACC2814F4E8ACC4993EF3C3A2C738AAAC2A8F50AD34673CCB2295AF29A93A5A26
Malicious:	false
Reputation:	low
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAyVDA3OjAyOjIwLjU4M1oiLCJwdXIiOm51bGx9fQ==--2e63312dfd3f79cc79b8fd0e16db63cb8a51fef112eb5573f9342cff75757675",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	64800
Entropy (8bit):	7.968452513932705
Encrypted:	false
SSDEEP:	1536:4QOgscr/TCQSOvGEAOCMMRlLPylD79UAWAVdv/VPkxFQ2swsuF:4ngscr/Tn8fMMRl479kAbFcxFRnF
MD5:	79FDAD8D65E1C583303DD4E1D6AA809C
SHA1:	28A2D8873662EBDC570FAFF3D76D867A553497EA
SHA-256:	7774940F7AA486F8D0A34CE2A56D4CDA378191A3878016B899378010E774E287
SHA-512:	8B0060B4110EF7B64698CD77B6502A9A46FFE9A779AA7EACFC8257E5371C776C06810B274A58B3E8A3C2419BC483A08DDC5DE1E15925F44BC96CD4759CF390E4
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26464), with no line terminators
Category:	downloaded
Size (bytes):	26464
Entropy (8bit):	5.400813500778424
Encrypted:	false
SSDEEP:	384:BWBiN8VT/jGKuYlW8Qwt7J5SUElnWJFc4xr9Qscbm9YaJEVzSTWKR:BWBig/TVvt7J57E5cXLTcbm6g6KR
MD5:	02CD96AF1FE12399200B70E7BF8FA6CD
SHA1:	C624CF7E36C284B611C9FF15461A04092D000569
SHA-256:	C7E101857CC0358162EB9141CE5FC2898B68CFF3CF037DA40FAAD00D3FD1290B
SHA-512:	37716C1C67AE7B35A8B90E41111BEC0D27D7E6E5806DB68237DE7BF17C10741C44D2852E902E8680F4408A501F53B4CC6435D9C307BF384219FE8DCC678280B1
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/dde21195-2697a3889c46ad74.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{return t.apply(this,arguments)}catch(e){try{self.postMessage({type:"errored",error:e})}catch(a){self.postMessage({type:"errored",error:"".concat(e)})}}}}t((function(){var e=function(){var t=4,e=0,a=1,n=2;function r(t){for(var e=t.length;--e>=0;)t[e]=0}var i=0,s=1,_=2,h=3,l=258,o=29,d=256,u=d+1+o,f=30,c=19,p=2u+1,g=15,w=16,b=7,v=256,m=16,y=17,k=18,z=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),x=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),A=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),E=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Z=512,U=new Array(2(u+2));r(U);var R=new Array(2*f);r(R);var S=new Array(Z);r(S);var L=new Array(l-h+1);r(L

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (490), with no line terminators
Category:	downloaded
Size (bytes):	490
Entropy (8bit):	5.007618834831049
Encrypted:	false
SSDEEP:	12:kxP4L8BM4ZpbWWGZc+L8BM4ZeDWGQL8BM0bpbWWGpkIZcSAhWQ:kDBjGZqBtGVBdGpeSzQ
MD5:	A89A7158C3CF48FE919A242E011855B4
SHA1:	DADFD76EDAE12E78AA6A5BBA287786B73835447D
SHA-256:	C6CCF06CB0A453582B11736475B935BF83D84A6D4C53036CD51B27178552002D
SHA-512:	76EE92129A3B00B7308F00AAB83E9CFE5510207ECA0BC7D70FC47F35D30F40CD266FD3B2AC0763D5331715A988A7193A30236D5B036AAA2FF157E53379E39836
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNVm21DdchzuhTI3w2O4kJshRz_Iz3lZr5Xlm3HX6h_oGBl5II93fcRo_lUur2vK2_QL0RYnlPPvVgV30Yl7ZEDq3nDcFQ
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_dbm" style="display:none;"/><img src="https://token.rubiconproject.com/token?pid=2249&pt=n" style="display:none;"/></body></html>

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1056103
Entropy (8bit):	5.485279165250842
Encrypted:	false
SSDEEP:	24576:sGXTot1srdL+Cir0A3aOH/vOpNztkOlZCnjLuAADQ:sGXi3aOH/vOpNztkuZCWAADQ
MD5:	12E84F18D00FCBAB4BBB6E73A50DB8E6
SHA1:	E83F205E165944A1858293938742AD59A6E09CC1
SHA-256:	1BA64EBC490EB865895C8F395791339D1EEF95E7A0CDD994F258E5DEF714A819
SHA-512:	73DC364FF8EE9FED376EE64113730D30444F0EF7F92425CE148D3234116860A5C8E4FC8480E795716C1BDA8CFBE61F98ED98C2FA6A9C8400670B325DEE898BE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9216.2fed4395c6aaaa86.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=r(90205);e.exports=function(e){return new Promise((function(t,r){var h,v=e.data,y=e.headers,m=e.responseType;function _(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(v)&&n.isStandardBrowserEnv()&&delete y["Content-Type"];var g=new XMLHttpRequest;if(e.auth){var b=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";y.Authorization="Basic "+btoa(b+":"+w)}var x=s(e.baseURL,e.url);function E(){if(g){var n="getAllResponseHeaders"in g?u(g.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"json"!==m?g.response:g.responseText,status:g.status,statusText:g.statusText,headers:n,config:e,request:g};o((function(e){t(e),_()}),(function(e){r(e),_()}),i

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 32104, version 0.0
Category:	downloaded
Size (bytes):	32104
Entropy (8bit):	7.984317052545092
Encrypted:	false
SSDEEP:	768:3mDXAHU8x4Mkc4m8bW4wlwNUwNiL9HGjmUM4DF6ZnG9TexTdk8:3m8Hpnv86lwi9HGjtDYZHp
MD5:	38F0B916552B88B29C0972565E2EF929
SHA1:	62AC892475B0488A09EF229BAC14B6BFD5C637E7
SHA-256:	D88B3D358E709FC9E7691FD77AF0BCAD9D5C8FBE1F408259FE21DE34DFF97E27
SHA-512:	26EDEC2F78EBE6A4CC672AFF3129B3A8D6FD73FA002D1ADB6EB33B005F27662CD35690329C55FFA668FF1EFBDB6E10B12E88A664FC5F43A0F8F8AC9BF04E467B
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/62ac892475b0488a09ef229bac14b6bfd5c637e7.woff
Preview:	wOFF......}h.......$........................GDEF..l ...4...@.].UGPOS..lT......3~....GSUB..w....i........OS/2.......Y...`..aKcmap............+/,jcvt ...8........K.1.fpgm.............0.6gasp..l..........#..glyf......W....l..^.head.......6...6....hhea....... ...$....hmtx...T.......H..f.loca...........&.O.%maxp....... ... .g..name..jp........fV.2post..k........ .~.Dprep...`.......J.-.........J..2_.<..........#........h}.L...F..............x.c`d``......Z......P..0...m..........g...g......./.a..........x.-...@.....w.K;.(w.....m.@...Z ..y."W..>T.. ..@.mF.Ng../.`..._.....R.=...0..'..(o!..:...x....-I....~.m{...f..]{..m.m.m.w.~.....N...sN..........t.D.......4>...[...@.p....>Wy8Le.n...M.m..f.8X..`.....r;..s...L.u...P1>......,./R.Z.....OC.S1Y.}..D..hg.`.....a..j.W.gr...qo........h......[t)s.!V..B...G?..o.o..o......l.X.........>@..............'..j5._..........I..p.f&'..7......4.6.zM.4[.-.9...........[''i......#..i\|..oX.*./..X.'......t..p.&....~.9\|.q.....(.?..9P..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1954x1689, components 3
Category:	dropped
Size (bytes):	367532
Entropy (8bit):	7.978394655785003
Encrypted:	false
SSDEEP:	6144:8wDe7nmrwMXR6KXUxTfENXmo4TR0JFM7UT187Ms6N8o9jgqgALIpWgANbtcDStcq:8w6LEwMXhkxqXmoCsM7ElN8o9jh1I7A7
MD5:	919AFCC9672A5541843A4796383FF076
SHA1:	E5561D495CA28AED8FAE85EDC5BA1CB74F673C78
SHA-256:	21E80FB1CF68A7EBA0640F3E0CC2E86978D47F45ECEDE349C26608967B107D0E
SHA-512:	9ED65DE96BA083B88DFFE1F095BAB876D25C4F5B6772396CF3A8381D7DE442FE10A1A579D6933E3630BEDCCC4F6870002EC4DF46A54F4939AD23A9E64BFE20A1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T..........."..........8.....................................................................E....L.W%&(.D. !0.` a..0S4....i.N..iJ.;b....(.Ee4Fp..H.S.......t&..M<..LW .....x.....Gb...h#(.!..`[ ...D...b@x..J..(.Cj...q....(.@...dB$a.&.+..V.".r.(..U.B4."..x.@..!....iFI..iB....\...S{ $3..f...$.....)..C<.Wb......&.D.f$.\........2..."y...i..J.HSr...#..).......b.)..^.Xa...A. .f..I..G+.... 3a....7;......^jdGdcJ.........0r(.m.A...S.u.H.ZH.$.Y....:.....q..C.,..V0qZj.k....HJ........4V...1.Qb.K,.#.,.j.1.A.X..G1.dWp..CI..Xa..=FBC.4...V..%..$K.I.x...). .E..<].A....B@.b.Q.l..9TZ6.1D. ..$E..f.6..Du.i5&3.w`..2..$...B. FX.b..b.....0..6@..N@...AL.......$..R!.P.4....rQ.8Y @ .... ......,X.`NN.:.n!1....#.....r`.f.#(..Y...i....b......1H....=.rA)..Z...,......T..J.Y.....E..IJP..l...p.xN.WL..s.9 ..."4.V:.....Bj".C..$.].. .!lq.....3.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (637)
Category:	dropped
Size (bytes):	2239
Entropy (8bit):	5.647878461812868
Encrypted:	false
SSDEEP:	48:ja8++eV+QgIeG9r4CaZeV+QgIeG9r1AEptX3W561G9/Jdi00szciLa+zdR5:+8+/0yoZe0ygEptjsX/a+H5
MD5:	49AB2243564A0E81189737F42D510A85
SHA1:	CAC1ED190AFC06894EE4A30853284E7052B0B733
SHA-256:	0D903AB22D823909758CCBE77F68EDCA78554C257633F6D78AE5EB7BCFB05E01
SHA-512:	7E12F08FFC50A53162EC7A25DC1E088E07703E3BE0999E723A49AE2DC6838373406220DD1B34AFE1AAED36227EAC5A10C61CA3BA359075F7DC1D5DCA20195596
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=125755985;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=125755985;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;ua

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37028
Entropy (8bit):	7.501316586529086
Encrypted:	false
SSDEEP:	384:mOWayMNHWO9WwDoQuNjNfGehyoMraSspu6/5ije3gEFo8zEPvA+YCxkbeR/7VdLt:mOWREHnSlIaSszsiQEFo8zEPvCets6
MD5:	62615BECF8831F197E70175A43C41000
SHA1:	E5B34BE17B73F3612BA632EB7D42F8779A027B64
SHA-256:	054C3FD1FB0EA4454A5E70D3530656BDA559E38A08E9F8ACE9BEB8A8EB64839E
SHA-512:	7E41D6DBC7FD5E11A142BF53D011703443DB95F5D1DCC2E21DD1DD982874E2BF2920A1803005C489F31D21FF2ACBF76451A581A98413AE667A77CB08AB949F81
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png
Preview:	.PNG........IHDR...X...h.......~4...kIDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............P..A.............d.k...........\|i.%............i.............TV&X.K.........@sg...M............L....d...Cx..........U.....h`.e.X..........7.C\|^50.r@.................,....<.tDx.A..r.......... .L....\`y....e.\.........@1v......W.4..G.ad.................c.............H..N.._~.....OK)..Y.....;....9..........0~>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yz.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:V..........p.........o{...K.e!.\.I..XY)zK.........rJ..X1.........@...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=utxDhn1gCV1qkWiRCU6eQGMbIXNRSs24NqLQNz9MPrjHtihuXNI%2F6AI7RyUH7zRn8LW8v3IPgsoeiDWThqz%2FlfeCHQjM33JkJYbsGyCMmtvqfOO1%2BmwG1yBoxYlnoC%2BS1qWTDW8%2FjoxykabJb9K47uXNbeGK%2B24rt5R7zUwWd2XOfO5R8YFo3ARAfVJHNI%2B7SWI%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 30776, version 1.6554
Category:	downloaded
Size (bytes):	30776
Entropy (8bit):	7.985440814365276
Encrypted:	false
SSDEEP:	768:W3vsyUi/jdWtvA0kddk7OYfqBPdS1Rzs5:0EyJAtnk3k7OYEVio
MD5:	3E43992E4E2C4420A860C2DCED8CC368
SHA1:	2749C9FD14C8021138214E8E89542C8FF69A6B5C
SHA-256:	04AC8540C5790E80273C2FF1DA99BDDEE617700467EAC8799072EF4424ED086F
SHA-512:	1EEB5EBEBEC9D25DE8C6AAB5063442BD547D70D0F1A479CA44DAFDEEA8FDCE8D48F695DD813A3EF527CB52AA4A14C9735B74CCCC0FA24AD69AC47B1F0D5881C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff
Preview:	wOFF......x8.......<........................GDEF..g..........o.]GPOS..h....r..3v...GSUB..s........8-.jQOS/2.......Y...`..c.cmap............;.<.cvt .......t....O.-.fpgm.............0.6gasp..g.............glyf... ..S.....09.head.......6...6..C.hhea....... ...$.R..hmtx...T.......b.r^9loca...........:...Vmaxp....... ... ....name..f....&....E.j.post..g........ .~.Dprep...p........D.5..........z._.<..........#.........A...J..............x.c`d``>.....k....N.^@...$...$.........`...d......./.a...%......x.c`a.e..............B3.d.a..........,....;0(T..(0.....#.P.._.#..000.a..JL..1q1......:......x...p%K..O.,.`..Y..m.m.m.m..~....Ye..:m.....%.}....(w....<...(8_Ez^enG.A..Py.M..q....u.h.e...TA.......VO.o.5.....N.........".........P..&./k.DV.....,..D...(;L#.mY.m.....O2..$.S..Gm~.h._+. ..`.5..`".=t...._N.4..V.......p...[..h..A.j$...kb0^....].A>.\..[..Omh........;.b.._.L?P.....oI...._.F...i;....5..!.R....gk....A.e.......R..0.F...M...`5..5.5..o.>..l....M'.sU.c......\.-..)os

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A48.620%2B02%3A00&epn.hit_timestamp_unix=1714028868620&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1714028863437-110-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-110-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=1444&tfd=11441&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x1600, components 3
Category:	downloaded
Size (bytes):	51715
Entropy (8bit):	7.922749220822699
Encrypted:	false
SSDEEP:	768:8YyKk8h9YfZMY7l6LTT4UKVtC8ZHhGwhzie1l1dXVk4rF4aCr7Pfw5s5EUB8JXJi:8ju46TsUmC89IwbdXC57I53yYXJi
MD5:	C200983C36307B854101F292C898D4BF
SHA1:	51F039CAD4F6B109F16DC11CDC683A2BE67A9B6B
SHA-256:	537E785AF5D97F5C0F49DA69FE8F0CD10D8614DABCF2CF72C251D794C846668B
SHA-512:	0E608DFC1DFE2877F4AA6EFF8E2637CC837B0FBFBD5D5F0471BE75A74628F9F437D5B4FA6FA415C7F5D332197BFBD12A25A91A8018E3BD155E7C6C336D185285
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2312-photoshop-apac/imagecompare3/1_BG7ymf/before.5f90537f4d6d31567444.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:43dc73f1-88e6-4aaf-9999-445c87cb25a8" xmpMM:DocumentID="xmp.did:8F75D8084F1011EE853F942B15EFBEE0" xmpMM:InstanceID="xmp.iid:8F75D8074F1011EE853F942B15EFBEE0" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e5aae701-4c1a-4aab-9e77-dceacabc5de6" stRef:documentID="adobe:docid:photoshop:c40aa945-d282-1179-870e-a8ae127715e2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntr

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x968, components 3
Category:	downloaded
Size (bytes):	1618888
Entropy (8bit):	7.9911776426842565
Encrypted:	true
SSDEEP:	24576:qlX1rNWiNjaKPzEd23j1F+FhgalmfLY6IHMVWoYSMrSM7WKwychcy:qlygjaKPza23jEgRY6MmWOMeMNEcy
MD5:	9459AB37C159826CC66C30F9F6DF33D0
SHA1:	E105D7136DCA043DE1A93A8204BCA717A068C086
SHA-256:	A6FAACAFAB86717985BBAACD9A1F8F763F1F68C414DBA7246D0FA4E4C9BCF733
SHA-512:	A7AE18E83341F20CCC74A63C76C8BCC4B51733CA5B442CAFC75CACFCD2CBDB61544DA14C816FB2301EF194F7E0ADB627DD8F4CA0D2E8D86AB3DDDEFA982FDBCA
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg
Preview:	......JFIF.....H.H..........................................................................................................................................................................................................3:z.fo[..5...F;{..Y..^......v.,..tz.I.r......J.....IG.......Y..;.......N.j^...Y..."\9.`.b.~$...g.. ..s.......~Je....e.....J?...-b.../b.A<...\|....Tg.......}.n\.>.`.. ...B_.F..s!.mp..VH..G..,.....b^x.....(P.(....O......;..W...wB.i.....]:-.....'.M:.+.......h\...Y...>....."@\|..ft......z..c.o{..}7..~....q..N..fhVI.....X.\....\|.l.5.]83.#N..V.k...W5...5.L...........>6`..D.....TL....?l......jO_..4.-.Cz...H..?.J..X.,.3...(....r..;.:..h.)..k.MZw..~.c.Fm_.=.#.J.A?.v&....I.bl.).H..3..6.vnI..a?..j...9LG1&.cb.....}.T....-\..R....\|..s_..qS..&:..we...70:..3:z...o<..ffb.w..a.u...~.t...c..j.....-f4.Y.S.z$VIF....Y8..R.Mwy....4r.I.8NW%......NJ.:..w.C7?......I?1(.iW...1.).....cm.gQa.m...8Jve.Ka.T...JR..C..{.#&.cC...O.g.g..{}W.....-.}&2.WO..p....g

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 225, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39025
Entropy (8bit):	7.965171260719284
Encrypted:	false
SSDEEP:	768:5cXQOERtdJYO7dEzkLN3ObqzGYyNJKA6vV6FedMEiB/fLt7Y7W6i+AMoX:5cXktkO7+AZ3ObqzGYqYl6kdMEiBbO7w
MD5:	AE3014C64B170B87E558AAAB76E68DBB
SHA1:	CF23719D3A0FAD66AC2B2AD1CBAB694FB7405CB5
SHA-256:	932BB66C5437020592D94FFF49F322ABD2B3BA9542D673DE7940088060674BE2
SHA-512:	34D3FF7848386B569B27EB7071FDF815F977BB22358C9565A0F8DB6966A0E05A4C8A0FE003B37A03868853734CE4D9A1302D1D58C807718FC9BBAEE260978B41
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png
Preview:	.PNG........IHDR.............K..D....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx..}...E.....^z........." M.b(....bAP..W,`...X..%........@..!........:3;.w..}%0.d..rfvv.33g.XXX.8.......r..8..... .2t;..-......}F.,,J.>0.?......Z. .p@....A!V....n..;.=.3Xx..?.. \| 34."....-.R.W.7.w.c].L.....t.........).......p.%....T.......,._...o1d.A..J..d..v..c.W._.S...#.[u.d`.^m...........j.Q.:].V......[j.G.t...c&...:...w@+.J...V........b...v..w...$H..X..?_q#...u...c...9.0"n.m...Q..a...#P..w..../S..>....X...(../..i...+..-........_..=(.%?.lch.....'Vu...F\|..Yi".[..m~hHB. J.....O..?Ej...A..........V.........q#jScA..^.`\..o...,b..v:....mzK.B..0f,t:.y=..Wp7..^N......J.Ym..\..R..q..R..{.4.+j.~3n.....,.p...."e......D........"z=+Z.j(......r.gi..TZp.....g.(....Lb...4.9...Uj../.....e.5.....I...>...=.1..J..2..p..OO+.7f....L....i.V.....um. ...y..Q.O.K...3.....Jg..Cg.[.u.../Q......Q._1.m.hv.S]....9..J.........9..K.Xx.q..z.u.gR...?........T~...7.;._........t.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715020673250
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	98335
Entropy (8bit):	6.061474859685604
Encrypted:	false
SSDEEP:	1536:3jqmrvjbGT0nycT+cm3inizxvZgcSXOT5EmIuwaEfVZgsrR46cdNppxyWtc:mmTGD9hucazayre6yf/Ly
MD5:	B3985AC698F898B5A4C7BEB697ECC384
SHA1:	3474870776956ED6655362412D904EBF309EAE8D
SHA-256:	88802A5682273D9EEB8CA937FAD70768E4E89A47DC1CBE49EB2D8615B4150E13
SHA-512:	CFE5F6A699693331CE74B079FBF3CB8517AEDCC308FD2E7C0AA061CAEA1146DBC989EA9B43B559D9B3B3A7DFB1A97E4BDA11B53853873FE327B98211943CAC68
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AY1pAYipnXdrSE7kkTJ1ggDagZL0Hxayh3ptJAzfIQUTT1XRyLhVimR2m2hUtw1MU1jAqDiam9q6p0XT13uLbTKratfhNfbkDFSNxzxmTxAeP9pWzLelts26T0IiIVktE-x89yYNxSVUsF74G-ml7P3h5DqhG6V8Jb3I0jHoKoS8FKvlbOh9KDOIIIFgtko-Sv-R3TFlljr2El8DHz6kuwFuu3IjAahgdAPz3xZnzKIFUdqxU&dbm_d=AKAmf-BxcV9SiEjr5UNoBkgoUwo0TlishJ7OGSXo7ASOLisIzsr0XK7lzn6A9o5TmY_1zUI6UBYfrDAVs6zuFvm7GnzDABiYPGHE2X_Hz3Yid9VznPeW-3KFtJrn35jMu23rwFeWFM73Zl7TByQQoZm44zdHZmEbvbS-vblZ4ClSmck6e4icfEzfpcb1s7kxs3MdSfEI61xTZ2GikY-eLTuOpgE0nCUo7xR64hQra3HgZgilwaMmben1h1DpdY3XaVxfDDBSwCfHQx7aBsKei0b1I1iXfHm60X0dlFnZlyZre0Fd4jEuaQXT4yFlr6fD6jhVJJlzHsWX4QJTTVjLn4e3Vb2EZv_SdlSfIiaex-BDFAtdfTz4rQdH82QAQokkr5X84rYoG001jZFplm6X1UyfB2sdjda168Bc6FogeTOSf7cDf3uRiJdeZFwhCyVQbKAe3HBZ9Aur-hSkTZcMqQ8xlx37Dr2614x7L_LVe9xMlQk8wsQ383WzgZLt85g2n92ARB1WqndC6Rmm9pNB7Fpdq9PF6TpEjIgq4cavIxW6n8uis7K-oSFr8xqu7wK87P6WtjYijxRkeUaEpO8wb4GjyLyhEehM8g2KuX85E3Ybr9f7vbzKwDXH02fHJDM_a9lrj1Bfi1Q2-kcGIl9m3lyDplc4PpKECrQExcD-3TPe6loy2HWARK8D_lmDjEQ3TlOFqx1_-q4ZTCxBUd_ThBghFwVkYZ3QeYML5vV5IF65rhZoN8wVcB5_sFbYWa3RiQr3tDwj_4cPPQRWojJavpfwB7CFg-1SrFXBiPjX3prukI0_ThXv520sm7Cxr58XLlqyxX-sbYEcFAwryu40BJ6ZycdUf3To_JbNRhm-nnIFSI0FdobSt8uI7xl5ciJkLM0TXmcKh5iScM-P3KqsY4OXDfEg5PnWZTD4IfKmio6UgeudvvWev_FQilBZ-fhyNYtJ91HtvK5aNBhxE56iRK6AXEOz-svUli6oLqP6chLv133dm3lsWYa3HTj1NI_3Nfgk505LupJEX8CNzj-gIC7CnR2K7mlRT2rURmDYmo5pUgE1VS-K-gTtTOluXd2QR2K2zQfJs9qqtlZGGhp6WKPGx8_vdmfAypPcuk2iU2GszKCvR4ZwfXPqRXrp6k-ezueX16WdNTWjURhvcm9MQADOBPUZALefnhD_EhKNbjQ9EXvXmgsIQPvZLkTR4W0WpAfKpoteAaOeUWp61WfATzjhtWfm29CirUT4iPWjXMLvHCMeV3rHRv6y3fFxcVI4g_-jN3dESwCfmbH-4XHXOXoLi9fBDTNo9vnE-ywKZgjqdjT-abQIZmGozQAsA5Go_zzKRPsyqFiqPHvMV0hwpGD0o806dRpSAjzbtnZnqpvKyOsHqne_bLW1R_xFiWkpmipGF4lmKdgvv3dDwQm7h0MKZX1RcCTVAMjM8Eia4L1kx72gm5uO-CL8ENT93VqD_SqYnHv10rblIMJSJbzSm0Sgf-0fwPGiJXJKWPyAsnxgirrV8kKZhgAKj0HNnmwlwgvh8p3GlqVh1KiafSjFRbvCf2Gv6Yhgpe8baB6l1a4jOqvdOPip6BR1nzbcw1tQgIjljyEWMP0fhBfUvT1px3fbIYwYoPOZF3F6zSwwqw-NFn1je1LQWU1ftZSjF4DQ_dABhyXMVItNOdCGSyb99rU0y0dT_LN0nDOLc7WIdynwr5cIkWbAIQtaMPAtnRi07mbptZnqbky6CKWZOr2QgXAaMrjg4rx7w0w0qBzD-yGDctmQ4x_Oh-yMDaObhOrkyGe-gMx0GmDO6ZGpE8K10G1Np-cVXFDuplpfRuhe7xiosbLmItUqWVMOq-2c0OaTWi8xnAP97XaB4o_33n7rl0IMs7YfK0unty2unUsmLQwrgqxqqeh3o3cEjGPbhwErIO1wALa0Jvi4UAOTpAM4AqSxnw-zch2wQyc_3neTtSK8Bl2_SKXQnceWLjkyha3LuvSl3yVXYEYOJOK4EdEgRa-WlEGb32-TgWgPO1-Zw5Ss1SLQXON63XdvUC621jbBL9SmDKVCB4w96Frg1T6gLMS0nYyA41o9WnH4TKELzH4eKPudsaK3Gtt1cg5Euxwp8mGsdJ7Oy8gPhXoSw9Koh04_p5HIGn03By_TeOinh5_5M5QR3ldmT4hV2ci5H8ro3seoPmnuCnvUCSPiEce8RIORzNaeL3YuqTLhpigRUX7F3FFKQOu3-wo2MJlBkf1DskdS6M7154nmvUex6JplsL8o_DRATJZKv45_3tezHEqU5-ORQJ0IJH9HMSWHaL6bdU75BjhDBrCwH1oVG2PQ_BLEW8aAruaPF6EvqmpRimjh-ifAE00DcONJG6z1W_QoSOOyfd4IzqKRo4BXDMjZkCIG6JXcNYSLBfFrZnpc_eLxymfbtyn073dsN86eaIhzq00IaaD35qe0sWIsW9mfLYZAJMaQ32evuasOa7qIhqPfX8-UdyHF7o9sddcLt4KJOGLGc-tbGcM_UXeqzkNAx4TCMwsW_G1AWSGEOs8FaiiZzSr8RkG63PfjR_LQ44YiukwOCiykmfTI1xQo1ddrrh3f4MQDgjLEveQSmjegIT5VOARR65-W3eBj87xamJAfusvHgO841Ih_Bo-rmyF2kfQYyNKjMDHYufqrplNYA54d8X6hJZ9c_CyVPy3DUUkz8dHZaYYdhHV3FgPmJ79kZr_rNm2AsrNEfCqzdv9K1yo_RbHlwoINmrYw7yfei93WfckLRiRJuwhreJO0agOigvHd1tbclyNGO3ybopKeVI2It4zd-69nROAsQiNaAgE5H-bmUGgBsX-cvAbCRAMmFARZqTg0zIqTEhBCzNM4KUdeXKimL7-odsyRXBGxVs41Pnw1WnrtXmDmFiegvlkgrExt8DqvghMuAIA6YbVWq4Kn1oK8H5qh_7l6MaqDifMkwOj7LWseBm_inybmnI7gk8NSDozKp8tJdtBiuAaiXSsSJuIBJemOo78AR5RBcuK-4eGcW0voCaFk9CPuthQO6BqxuRoAwcO8xY46qrpxuubNQ_lyQMFSLLMxeUugYtzs5PhE_nntBCArx_VTRcVbqIiMB-5xmAS61gGLKBdgmOIp2jcv3op9cH2UcsUy3P_GFb1zGcLmXcS00-soDFuGAITuFaSKkJF258UhpV825EdODV7aM_Z7wmWXQOg0dyYE2nw6TTiUoFjXFJZB2tqtWhE4yq2FwrIBfgg4KZyppjQtgnEFRKHv5hErgyyxKRbBdJzefsU7fkAcTDHGDJI38jfd0CjYIlK-8h7AvfTqEnVgcS0ITok67UQaBF1Ui2K06hxZ5SA8d3sOlDefhKFGETH-H29WQjP-_IN2Yn8ftOoB2TbT3CkAxjJwrapsx1_FF9MPsYtRHpLmWmRGPcTVTPtq3sd4syvTudW-I_vl9W0jX2odvlpCXd7AAFNO4DLmm-hLiOpIFLCUdkDHIt3tX1ODdQtE8UoxEnvmFjXd_rGcVE_g_rW_54J0NdQtksD-THT72M6J9rEGShcBV1wUDUZ0TLIGcD9e383HaxDZpUNVN2ynB_gXev-a45L6oogSxjyNXbwsuzpalMhLkNF43rbOBi0UCxnpSZEKVI-2tkm91CCpKkoeE3SUFdybnCCcreSDphWMeU0E3TtUvzy8yCDG59tr2IYCecu09hx4u3mjoSa0dk-M61VQQJJh-e0PUkuM9o7mqG_Te67ezVeQWq88jAehfn5mx-uKNu0EhnwJqVVBRXwQXe1pY3rokkL2qV39YBoKKC1jJbWEu4WOB2pZCjIrFmqm3i4V79V0asBEeJxhiZRiDPk&pr=13%3AZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cid=CAQSGwB7FLtqO5gwISKl9aS74oCjGq4MMhmNK_mD8xgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwetransfer.com&ds=l&xdt=1&iif=1&cor=13918423326970431000&adk=3123349629&idt=938&cac=0&dtd=38
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3751897458"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_PwEqZoO_L92Zrr4Pr8WqoA4"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240423');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fu

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35384), with CRLF line terminators
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	5.351684385876074
Encrypted:	false
SSDEEP:	768:CY2XYmZwOhINHCUUGEs9wtqd2Owr7iBwy:52dZjeJCts5oy
MD5:	DDA723FF3ED7EAF04E02DD8BF51EA41A
SHA1:	8B4CE1B3C7F04112519E9D8A217ACE13C4A45C69
SHA-256:	AD367E536C20C594229B6D90AC4097730886EAC4F8E11B07E908E584A62B1268
SHA-512:	F3DFB0A14A9E98B3A2B16B8013E9D3C34C7BDB3FA29EB92F9BE07B3EE07BA482398A60767ACE2DBFCAC13D2A4C6DA2524157062D1EDD7950A0A327D1216247E5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.32
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return We},get start(){return qe},get stop(){return Xe},get track(){return Ie}}),e=Object.freeze({__proto__:null,get clone(){return an},get compute(){return on},get data(){return Ze},get keys(){return Ke},get reset(){return un},get start(){return nn},get stop(){return sn},get trigger(){return rn},get update(){return cn}}),n=Object.freeze({__proto__:null,get check(){return gn},get compute(){return mn},get data(){return Ge},get start(){return pn},get stop(){return yn},get trigger(){return vn}}),r=Object.freeze({__proto__:null,get compute(){return xn},get data(){return bn},get log(){return On},get reset(){return En},get start(){return kn},get stop(){return _n},get updates(){return wn}}),a=Object.freeze({__proto__:null,get callbacks(){return Nn},get clear(){return Hn},get consent(){return Cn},get data(){return Tn},get id(){return jn},get metadata(){return In},get save(){return An},get start(){return Mn},get stop(){ret

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	4.239227187869127
Encrypted:	false
SSDEEP:	48:0gthO2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+6:zYZnH/l8NhHJ0M2J7dC5
MD5:	638B03103C59F408E100F75B696A497F
SHA1:	946B46B707F494BD9AB7A2B559DF75795E9E5C16
SHA-256:	BDAE9E2F28E40970EC2CE1624CD7C72A17F984FDDC044F1B2AFE8EC1EC9A51D1
SHA-512:	991431E933C59201E37EC3DED0EE91EA24FAE7841FB28706DB2150980278B0C0D1049C76CCD00DB1515A1DB78242F4832D7E3AFFD91536065F0DBBA9E5DE0678
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4562), with no line terminators
Category:	downloaded
Size (bytes):	4562
Entropy (8bit):	5.334921895055784
Encrypted:	false
SSDEEP:	96:nIAc8jsKwObAfJt1Fv0FLvWDlsod8DWh6jWtiVfM3rmcNeTinfGzbgR6A78Rsu1O:IisHOAb0VWD64oWgZI6/NhOZ65sG7XOD
MD5:	34EAE0E4B14BA01EEE4D85C9C6FA8BBD
SHA1:	736E8B5660727E6E8CEF569F2F94532E352DE523
SHA-256:	B61FF9EC819A4E60952AD88E18B4139CFA50F49C8AACDD8C6C5948903521B3F8
SHA-512:	4FFAC9558A5D99F8101DDCE4CE659413E3A223492866169B6E586396E60B41744ADCBFD18923ABC2EA9072D827D136929B75BE2961742DD0441F747E9C43FA51
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/404-2628cd0d85d8ff64.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(14148),i=t.n(o),s=function(e){var r=e.title,t=void 0===r?"Yikes, something went wrong on our end.":r,o=e.children,s=void 0===o?"Perhaps try reloading the page, or coming back later":o;return(0,n.jsxs)("div",{className:i().ErrorState,children:[(0,n.jsx)("a",{href:"https://wetransfer.com",className:i().Logo,children:(0,n.jsx)("img",{src:"/assets/images/logo.svg",alt:"WeTransfer"})}),(0,n.jsxs)("main",{className:i().Wrapper,children:[(0,n.jsx)("img",{className:i().Spiral,src:"/assets/images/spiral.svg",alt:"Image of a spiral"}),(0,n.jsx)("h1",{className:i().Title,children:t}),(0,n.jsx)("p",{className:i().Description,children:s})]})]})}},53145:function(e,r,t){"use strict";t.d(r,{Z:function(){return a}});var n=t(52322),o=t(97729),i=t.n(o),s=

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NjE0MjA5MTI1MTgwODI0NjM1NQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028849398&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 80x80, components 3
Category:	downloaded
Size (bytes):	5417
Entropy (8bit):	7.873073881946618
Encrypted:	false
SSDEEP:	96:YxVBBGPw2BIk06wQ/mFLpnG85dQbh4x/v7frQV3ig6zP0mVVx+eSes2ojgBYfsY+:0BOwSML75chovzrQVEzPrVVxH94jUWb+
MD5:	491AE298FC3BD9E5853DB24BBAF6CD3B
SHA1:	E67B2F5F0CD776AB528A36D94A899450692A8938
SHA-256:	6ED2B9F52D6BB0869D793F69A22F223432AF5C5A6B84B0183A3E42FFD7EA5F80
SHA-512:	FB4776D1114160CE04D71BE9DE055B5C2FE5512075C09FC2CAEB6D888237783660E93AB0BB7C49D797FBE8CBAAC17FB96C94EA73FBD78BCE97652A313D47895C
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/system/photos/360061272763/ACSquare.jpg
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................P.P.............................................4...........................!...1.."AQ..aq..#2BR$..............................'....................!1AQq.a......................?.8........}.........x..PM.7.......~.........S=zgi.&.."....w...y......=..{..Du....}.....}.wL'..h.a..+$...!Pt..j8.&M.].H.1.r.A..U....E`...F..b..5...rz.%..R.?.....e..t!.]...B!......IXS!I..,.l.@...b..h<j.R.nr&..\..?x.b4s}..#9......C.Y\!8.A0.....iv....D.%.(.K.1.x.B..Am......J.(`:K.r.'..,.....d...~..R...).(..Rw.<..w...=.a..on..\|....}.#...._........=..;o^P/......p....Z..Aa..w.K....^......}.I.......?..&.....v.......o..\|f.1.S.yH...k..R..g...F..''.2..........<.S.Y...K...gL.l..T:.sV5b.z..(>5...=m..X..[&.FG...l..D...q1.6;,.........8U.;X.t.(....2(.>R.......$...E.$..c.(..o.N+.=....bo..W...9..?...2..*...@...<.......CQ..X..(r.V.w..L..

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5704
Entropy (8bit):	4.0416850246975065
Encrypted:	false
SSDEEP:	96:Skt2k8rF5uwIEpq1WOnfaeMafWivDurCM5Xwch5k7goYo36zZnCb1msPBCpls5XZ:Skt2k8rPA1Lfae06w5WFd36ds54Wff
MD5:	06FB9D15351DC32C2C1808035D0A8950
SHA1:	365A00272D7B2027A6005CA40800C808C3D81FCC
SHA-256:	BBFC2E0CE4A3B4C213931AF19453D1E9856D76576F8D6CB32C5CAC1801698B44
SHA-512:	81E9337BA7A4359484A851925B47692B424638A58D2D1F98EBD09ED14BDFAF036A9011612DD7A9BDCB4ECDC73FACE243E417616127E49C42388830CC2A7E486C
Malicious:	false
Reputation:	low
Preview:	<svg width="182" height="26" viewBox="0 0 182 26" xmlns="http://www.w3.org/2000/svg">. <path fill="#000" d="M36.7743 1.03516C35.3902 2.45643 34.9812 3.21341 33.9903 5.36077L24.8518 26.0001L18.3872 11.5402L12.0012 26.0001L2.78403 5.37622C1.84029 3.22886 1.41561 2.53367 0 1.03516H11.6866C10.8058 1.76124 10.3497 2.70361 10.3497 3.8777C10.3497 4.71193 10.4912 5.29897 10.9474 6.38038L14.4392 14.5681L17.0187 8.46594L15.5717 5.15994C14.7223 3.25976 14.1246 2.07021 13.2752 1.03516H24.9619C23.8294 1.76124 23.2631 2.70361 23.2631 3.8777C23.2631 4.71193 23.4047 5.29897 23.8608 6.38038L27.4313 14.5681L30.9546 6.38038C31.4107 5.29897 31.5838 4.71193 31.5838 3.92405C31.5838 2.88899 30.8445 1.63765 29.9951 1.0506H36.7743V1.03516Z"></path>. <path fill="#000" d="M48.9175 19.419C47.785 24.239 45.0639 25.8302 41.1159 25.8302C36.6017 25.8302 32.3706 22.6014 32.3706 16.5456C32.3706 10.7215 36.1141 6.59668 41.0215 6.59668C44.2302 6.59668 48.7445 8.21878 48.7445 15.0934H38.0802C38.8195 18.7702 41.2575 20.6

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1324)
Category:	downloaded
Size (bytes):	4995
Entropy (8bit):	5.590171678895117
Encrypted:	false
SSDEEP:	96:+8+/gH5ZegHF8+/MH5ZeMH7ZlaJ+T0WNpisRGEp9vJsX0c5:+8+gZZegl8+MZZeMdpNpis5p9+0c5
MD5:	D06EF7CB46BEEFBB75CB4D7D4FA50754
SHA1:	F08A7465EFF83AFC90A23035B4C80D5F41156588
SHA-256:	3ABBF4C6DE390B2D314DF7ED4D30D2423A76EB08944C187EA1883368477625AD
SHA-512:	ADD39137BB29367BC98A8BD436A17E1C7711037EB2EF694C48C9709A9A796B04F9CE7C07DB840FA79A0A2E1D87012CFFF17ECE027C1D610AADD6F0290FC875F4
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A43.577%2B02%3A00&epn.hit_timestamp_unix=1714028863577&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028863437-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=12&tfd=1669&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44642), with no line terminators
Category:	downloaded
Size (bytes):	44642
Entropy (8bit):	5.470824352879873
Encrypted:	false
SSDEEP:	768:gJj3JFkiE+2jS/hpb+F+zLW50xxUnUQaW8kkHMMpd1NzdMykcb0s0PFZs8:gJ7JFkiGjS/hEF+zk0xxUUQaW8kkHM6U
MD5:	0117DED66314D5D48929F64D97591068
SHA1:	893CFE4C1BFEC063FC7961C5E89DCF5FE621DEB0
SHA-256:	D90ADB7C4B93E66D3309045CA1764CF914D4809EB3B824D141D8BEBC8E82D6AA
SHA-512:	796287B88EB5287233A18FAFE197597133900DC6E217EDE1C07F342FCB6DA8BC793B683BC6AB30DCEA48A23CD40C6B525EAF7D8755E8FE7251FCA13E2292F5AA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/955cc3f7.47e52b23a8132ed3.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e?"object"===typeof e\|\|"function"===typeof e?a[i.call(e)]\|\|"object":typeof e:e+""},t.isArray=Array.isArray\|\|function(e){return"array"===t.type(e)},t.isPlainObject=function(e){var r;if(!e\|\|"object"!==t.type(e)\|\|e.nodeType\|\|t.isWindow(e))return!1;try{if(e.constructor&&!n.call(e,"constructor")&&!n.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(a){return!1}for(r in e);return void 0===r\|\|n.call(e,r)},t.each=function(e,t,r){var a=0,n=e.length,i=l(e);if(r){if(i)for(;a<n&&!1!==t.apply(e[a],r);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.apply(e[a],r))break}else if(i)for(;a<n&&!1!==t.call(e[a],a,e[a]);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.call(e[a],a,e[a]))break;return e},t.data=function(e,a,n){if(void 0===n){v

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CtxjSTLSPBdDzW6I7ecUphSaeFCHteEbVBp05mhAWmBiyMzTL1UXeV8XrFQzZa6rCDQFR0u5KWh0iz0WvjcLqgl-Nui8W2rIPxSl3dTA7wC8sSuj4
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=BIm8pYUwRrfKlgPyYz794bwmoqVEijX1XJN96mzKjMGJ2PWbrPGSx7s3hphkvLACoUrduQYZwwU%2BDv5dVR2GGy79FKU7SUnirY0imw%2Fl%2BXx18CurFnySe%2BlnOedfU74iWdnDt6ueHW9ISaeapTUleONxDedloSueLqloIrUfQeCjOqczqE4Z%2BTuC6LQSTJ%2F8YVs%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	254147
Entropy (8bit):	5.576833290222359
Encrypted:	false
SSDEEP:	6144:JvQX5NzJCYLceF+hYTnXP9RIMGN105YDS1:t+xJfkNC1
MD5:	3B07B02D558A6B9C249FE6EAB2D3BE34
SHA1:	9C5F82E5A6A1009F4C20F9BC5FFFAF704990DE00
SHA-256:	B20627071D6E19886920EBD99F166605968CEF41764CEEF3DC51F8CBC670D887
SHA-512:	8014E24F21AA1AD2C723416F1D72AE83F95A9C8F4D4A22033CE71D5B234D4BB69670F0F9C055390EFBF9E8D549A58C4B3138B25BDFB8CB1ABF5C111838C09B3B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-430CK3TMT9&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","zendesk\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function":"

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47302)
Category:	downloaded
Size (bytes):	50929
Entropy (8bit):	5.044305862208472
Encrypted:	false
SSDEEP:	384:6Up1RByuZAUZhCeqxCNChCX5CjCvmCw6Tm7qUBlFXKJDvmR/kuG8vpcyJcLzeHl3:6dWNZj1kqUBlFXovmSuG8RcpeF3
MD5:	04F3A41483E9DFE36D52404867DC1527
SHA1:	5F7CF28460543AE2F0833DCD67BFDE162C793F6D
SHA-256:	048E8F1532AED4DC14D89CB074D10B7CE86ABC83BA91700223D11424AC65E912
SHA-512:	01E8031B433FCCB00D31DD2F06DA7FEC4449ACC4039E06FE89CA264683BD67F068A1CEAE4B432EC6D6792CA59D1CD5710A3FD66FE15B246A207B39B242A78819
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css
Preview:	figure.wysiwyg-table{display:table;margin:.9em auto}figure.wysiwyg-table table{border-collapse:collapse;border-spacing:0;height:100%;width:100%}[dir=ltr] figure.wysiwyg-table table th{text-align:left}[dir=rtl] figure.wysiwyg-table table th{text-align:right}figure.wysiwyg-table figcaption{caption-side:top;display:table-caption;padding:4px;text-align:center;word-break:break-word}table.wysiwyg-table-resized{table-layout:fixed}figure.wysiwyg-media{margin:0}figure.wysiwyg-image{background:none;border:none;clear:both;display:table;margin:.9em auto;text-align:center}figure.wysiwyg-image img{margin:0}figure.wysiwyg-image-resized img{width:100%}.wysiwyg-image-block-start,.wysiwyg-image-block-end{max-width:calc(100% - 1.5em)}.wysiwyg-image-align-start,.wysiwyg-image-align-end{clear:none}[dir="ltr"] .wysiwyg-image-block-side{float:right}[dir="rtl"] .wysiwyg-image-block-side{float:left}[dir="ltr"] .wysiwyg-image-block-side{margin-left:1.5em}[dir="rtl"] .wysiwyg-image-block-side{margin-right:1.5em}

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064504930
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	501856
Entropy (8bit):	5.3562533607063925
Encrypted:	false
SSDEEP:	6144:2V/EvQ01Siyn+AYX2Eb4E328MOGjkeQG/nn:2NE401vyn+AYjb4E328MOGjkIn
MD5:	7BBF99584CACBC02A1D6EE0813153C1D
SHA1:	C5690A5FD7A2E391EA8B144537CFB87FE259CB57
SHA-256:	8838F444316D5E9808AC6B8320B64408F49DC9E71C9BEBC462A33599FF19D238
SHA-512:	E2EB39DE9EA9768E68E814ADA4A4423ABAE82F05C0908489972A72E7A6A3525BCB72E7326B6D48069D2C19E414D90B1360BDA85CA1A6B95ABA5918889A0E5E3F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/03d589055b9fa8a0.css
Preview:	.WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-display-heading-large-bold__WSfgs,.WallpaperSocialLinks_wt-display-heading-large-narrow__hQtfe,.WallpaperSocialLinks_wt-display-heading-large-wide__inDul,.WallpaperSocialLinks_wt-display-heading-large__D_lV4,.WallpaperSocialLinks_wt-display-heading-medium-bold-narrow__lp7nv,.WallpaperSocialLinks_wt-display-heading-medium-bold-wide__W_K4w,.WallpaperSocialLinks_wt-display-heading-medium-bold__AIoN1,.WallpaperSocialLinks_wt-display-heading-medium-narrow__bkJTb,.WallpaperSocialLinks_wt-display-heading-medium-wide__Wa813,.WallpaperSocialLinks_wt-display-heading-medium__eNOaM,.WallpaperSocialLinks_wt-display-heading-small-bold-narrow__BAncF,.WallpaperSocialLinks_wt-display-heading-small-bold-wide__iQnnQ,.WallpaperSocialLinks_wt-display-heading-sma

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.517395759023966
Encrypted:	false
SSDEEP:	3:YIzGE/Ke8KTNz1VHJSXLjJp2ERh2in:YIX/WIzfH4nJp2Eein
MD5:	0AF94B9851CBD20AE843EF0C26CCEBE0
SHA1:	3D3A1D4256673F9F5286677E0B046D22044E83F8
SHA-256:	65199FF4A61961135B3CB942273A30ABAF3DA3D10246652988A573863D282C8F
SHA-512:	3B31EBA5C84D0B7866E6820DE42CD4023316732AD37D42B02D24B671772EA5C2649C21941D31B835F231C99EC078E3E5A6BC96B310C613CDE75CB19BCE2B588C
Malicious:	false
Reputation:	low
Preview:	{"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	31423
Entropy (8bit):	5.4609683477027
Encrypted:	false
SSDEEP:	768:+lo/z1S5bKFQ3sdrZNQuiKpHUmplWNYtfQd:+lo/zg5b+drZNxTlWNYtfU
MD5:	665205483CC3F8BFB401F8ABC2568AAB
SHA1:	F85725BC930479BBFA9699783E04756BB7CBBA6A
SHA-256:	31E0E4D27F82A2A44476100291DFB745D5E02A9D04EB68B6161FA7DE436FD44F
SHA-512:	2D06F902016FE9452EC8AE1532EDE6A888C80B9665B48A838A610895BEE17E5254FE39F812F6AEA46E62F6962C6CDF7A43A9FEC0AE1E67E983FF92D73D3A48EF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240423/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function r(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28208)
Category:	downloaded
Size (bytes):	28304
Entropy (8bit):	5.300608169901437
Encrypted:	false
SSDEEP:	768:S4W4Z4gZYGSawbdn/bmY4CEPWr9S6wOUMN:SQVYGSawFCY4CbrjXUMN
MD5:	E5F85E6BD463E2E2730EE981ABC816AB
SHA1:	07BA652DD2E8C425759E99EBD55679E759873D4A
SHA-256:	674B5CF8D02B7FCDF3274AFD0363177C7A5016AD6820B53714FD886DA97A38C2
SHA-512:	A76BB511E32AB4997F31EBDB25CD32A564791A84E4FBF0B4BEC90ACDB1C5F8D7B8AA11D2231256F9A41CC15E3603A676AA6BF687A3B4836B42BE35372E49982C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js
Preview:	/! For license information please see 61618-e00125bb003008fb81737a0eb569cb2b.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[61618],{90093:function(e,t,n){var r=n(28196);e.exports=r},15684:function(e,t,n){var r=n(19373);e.exports=r},65362:function(e,t,n){var r=n(63383);e.exports=r},73151:function(e,t,n){var r=n(9534);e.exports=r},45012:function(e,t,n){var r=n(23059);e.exports=r},27700:function(e,t,n){n(73381);var r=n(35703);e.exports=r("Function").bind},16246:function(e,t,n){var r=n(7046),o=n(27700),a=Function.prototype;e.exports=function(e){var t=e.bind;return e===a\|\|r(a,e)&&t===a.bind?o:t}},14122:function(e,t,n){e.exports=n(89097)},69447:function(e,t,n){e.exports=n(628)},60269:function(e,t,n){e.exports=n(76936)},84710:function(e,t,n){e.exports=n(14058)},93799:function(e,t,n){e.exports=n(92093)},89097:function(e,t,n){var r=n(90093);e.exports=r},628:function(e,t,n){var r=n(15684);e.exports=r},76936:function(e,t,n){var r=n(65362);e.exports=r},14

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35884, version 1.0
Category:	downloaded
Size (bytes):	35884
Entropy (8bit):	7.993678658459837
Encrypted:	true
SSDEEP:	768:nTaYaeKDNBe40kOdkMcfwPKNLZWxLJd0yJGMg1QdyAdSk3y:nTtfKRE40je2VJCMiuyAwkC
MD5:	51CBD7213AE115ED59C3F2874014AB69
SHA1:	D8D1A69F5D19C825CD0B44D875C95140C3129E0E
SHA-256:	CBF4D73CCEF8548406B20D54B8792830468541C81BF78B22E0B4D24D811C5F53
SHA-512:	0614AEB0394B101C39A5AA0D5E089158E0F4B351836FF0B64ACA811A5AAF338EEC03404F1B51A04FFDE3FF9F14233468BA72578C66EBBDA1689D35FD49273EF7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2
Preview:	wOF2.......,......{.............................?FFTM..........v.`..n.4........ ..2.....6.$..". ..'..b..'[VW....<.g.>J.!P....UH....Q.y....+....A...+j.....[.E...Af..8:..._5.zL).^F.r..h.$K....`.[..2..6.j..u..Z..+R...1.f.6.z..i..`IHRv...j.-\Dx.D$^.R......msr.n...i..C..\|....E..+]r...y.2....k.... ...].A.......nr..\5.....$!I.......1.......L...6..3[.e.....tj....a..1v..# ..^&.........[OV.F....=...0yYq..........=F4X..;~.v}'...%...?.!.;..Ev.....].%...+N.....:.._...i....A.A...DT.J.......vq..(B..L.Z...N.....-.@I....{...~.0.2....,Q.J$..c.YV.w..&..U....X...I.l.;......W.{...........6..3.....y...Y..l.._....e.u F8tV.zd.>.2........v~._..V.uZ....F..s.q.k..y.S...0.]..-Q..\|.......l.}..9J..[..%X.way..a<......'..c.B..yR.........ON..twMi.TW..^o...#..(BL ql.N=....<gr.....~.@.L.V.I...E*.T.{.../Y7y).f(.8.E...I..Uc..r3a...\e.qz7.."V...w..S..7.UB.........C..}x...!..C.0..&........4..Y......e....d.(....v...R........ax....6y.W..~v.....?..Xd..2.'Z....o{....j>.]r..B....\Z

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (622)
Category:	dropped
Size (bytes):	2164
Entropy (8bit):	5.64790526873095
Encrypted:	false
SSDEEP:	48:ja8++en+rgveG9rhCaZen+rgveG9rwAEprGWieG9/Jdi00sbbg9dR5:+8+/+s1Ze+sXEpr0tXlbgJ5
MD5:	53551DAB3DE6CB40BDB6BE6F0D394B61
SHA1:	FAD936FEF3FD4E926A900C017A21ACDE94CC7486
SHA-256:	2F6DB9E8286669AEDDFC2D4DB164B29578FA778C7FC6AC0E800598AD4D2631DA
SHA-512:	9BE87CDA26AC931095AF874B07A6F5B1AE4FFEFCDC3B1DEE84C258E019079BCB47CD428CF69B8669C37CFD5C762E1F85D6AA7225C79B05DF5BF630A3B41B32EB
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=158040870;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=158040870;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B1

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	2604
Entropy (8bit):	5.53573340432926
Encrypted:	false
SSDEEP:	48:ja8++e8+4A5zgiA5ZUTEtG9riA5ZUTEOCaZe8+4A5zgiA5ZUTEtG9riA5ZUTETi0:+8+/j4otoZKGoZKtZej4otoZKGoZKWR5
MD5:	F1D1344D099CFF15170C220F9A7466C0
SHA1:	2F2BEE2EFD85288705472CC9E2BB88010C8E4355
SHA-256:	214B7FA855D921D550A357C0E8DCD51F7DDD52F347A2BD8EBC01F375C6ED8D12
SHA-512:	7F3AEFFA46B23070F5A5E4C4DD16632BA6140DEDE3659FDD58836F338CAE6366960F1A080C1B11DF6DDBF35E3F70DB8F19EF41E3EC954647651934B5DD566D9E
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1937571429;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/logo.svg
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A46.606%2B02%3A00&epn.hit_timestamp_unix=1714028866606&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1714028863437-39-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-39-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=2667&tfd=4913&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 225, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39025
Entropy (8bit):	7.965171260719284
Encrypted:	false
SSDEEP:	768:5cXQOERtdJYO7dEzkLN3ObqzGYyNJKA6vV6FedMEiB/fLt7Y7W6i+AMoX:5cXktkO7+AZ3ObqzGYqYl6kdMEiBbO7w
MD5:	AE3014C64B170B87E558AAAB76E68DBB
SHA1:	CF23719D3A0FAD66AC2B2AD1CBAB694FB7405CB5
SHA-256:	932BB66C5437020592D94FFF49F322ABD2B3BA9542D673DE7940088060674BE2
SHA-512:	34D3FF7848386B569B27EB7071FDF815F977BB22358C9565A0F8DB6966A0E05A4C8A0FE003B37A03868853734CE4D9A1302D1D58C807718FC9BBAEE260978B41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K..D....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx..}...E.....^z........." M.b(....bAP..W,`...X..%........@..!........:3;.w..}%0.d..rfvv.33g.XXX.8.......r..8..... .2t;..-......}F.,,J.>0.?......Z. .p@....A!V....n..;.=.3Xx..?.. \| 34."....-.R.W.7.w.c].L.....t.........).......p.%....T.......,._...o1d.A..J..d..v..c.W._.S...#.[u.d`.^m...........j.Q.:].V......[j.G.t...c&...:...w@+.J...V........b...v..w...$H..X..?_q#...u...c...9.0"n.m...Q..a...#P..w..../S..>....X...(../..i...+..-........_..=(.%?.lch.....'Vu...F\|..Yi".[..m~hHB. J.....O..?Ej...A..........V.........q#jScA..^.`\..o...,b..v:....mzK.B..0f,t:.y=..Wp7..^N......J.Ym..\..R..q..R..{.4.+j.~3n.....,.p...."e......D........"z=+Z.j(......r.gi..TZp.....g.(....Lb...4.9...Uj../.....e.5.....I...>...=.1..J..2..p..OO+.7f....L....i.V.....um. ...y..Q.O.K...3.....Jg..Cg.[.u.../Q......Q._1.m.hv.S]....9..J.........9..K.Xx.q..z.u.gR...?........T~...7.;._........t.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10704), with no line terminators
Category:	downloaded
Size (bytes):	10704
Entropy (8bit):	6.17114325562417
Encrypted:	false
SSDEEP:	192:SvWg1hvEdI/eYrSPl8WZ25luh0Jc2IQRdI/eYrSPl8WZ25luh0Jc2abpR/5Kga:cWgPvEShePl/2qZuShePl/2qZ3bpR/za
MD5:	EFDB57A56E771D3627A0DA176F61EF9C
SHA1:	9D661F8705461BD9E7B855A66D496B1EE7689FD0
SHA-256:	DDC995B86891916A5A84F54515D3C266C2A7CF6D9053E807E841C068B42CA4B5
SHA-512:	7AECE79D55E4C44B67C5C194DF1DDCF6A8E5C4E82896948917CFD45F8F8084BB46FF9B1FE9158266089A65BAB1552EA677D8045C4FAD5E7628CD92FA7B37052D
Malicious:	false
Reputation:	low
URL:	https://htlb.casalemedia.com/openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028875196%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D
Preview:	<img src="https://a5574.casalemedia.com/impression/v2/1077556/85/col02jj941285q4dgn90/9a641c96-03f1-404a-8d03-04ab58f72f7d?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029478&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CtxjSTLSPBdDzW6I7ecUphSaeFCHteEbVBp05mhAWmBiyMzTL1UXeV8XrFQzZa6rCDQFR0u5KWh0iz0WvjcLqgl-Nui8W2rIPxSl3dTA7wC8sSuj4" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNVm21DdchzuhTI3w2O4kJshRz_Iz3lZr5Xlm3HX6h_oGBl5II93fcRo_lUur2vK2_QL0RYnlPPvVgV30Yl7ZEDq3nDcFQ" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'https://googleads.g.doublecl

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028867182
Preview:	{}

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.436013846526027
Encrypted:	false
SSDEEP:	12:trfmhAuC2jEVdQzhfUQg7nmRucXY7tvzRnK43F7Guz7HfKHrFIjfKZt:tTmyuB4VdIfUQgzeIh7RFHz7/KLBt
MD5:	E8ED1B2102A157CD3606362229DB32E9
SHA1:	AE12C57587F2F929937B7315BE62B00F02B6AE67
SHA-256:	74B451027FC088AA19C079B2BC5421965334C9CE4418068B3B43BFB92AF82E9C
SHA-512:	AD0672048CBC27CFC7E9C1F2E90D405419F3DB8F3696145E88F5344FF7D820EB8522B7F450552B6BCFAC8FFE34E5A7384EC2A07C350777D5A612B8E43098FAAD
Malicious:	false
Reputation:	low
Preview:	<svg width="18" height="20" viewBox="0 0 18 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.66 8.10302L1.79162 8.10302C0.801588 8.10302 1.31687e-07 8.95697 1.19125e-07 10.0104C1.06476e-07 11.0711 0.802134 11.9177 1.79162 11.9177L11.6355 11.9177L7.09008 16.7448C6.39922 17.4785 6.39246 18.6934 7.09385 19.4382C7.80014 20.1883 8.93074 20.1849 9.63005 19.4422L17.2575 11.342C17.6023 10.9759 17.7767 10.4898 17.7777 10.0022C17.7821 9.50808 17.6065 9.02332 17.2575 8.65265L9.63005 0.552454C8.93919 -0.181229 7.79525 -0.188406 7.09385 0.55646C6.38757 1.30652 6.39077 2.5072 7.09008 3.24985L11.66 8.10302Z" fill="#5C5E61"/>.</svg>.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4123), with no line terminators
Category:	downloaded
Size (bytes):	4123
Entropy (8bit):	5.17785866104492
Encrypted:	false
SSDEEP:	48:iXifPq2qt/j6PyCcSt8LZ7Nznxxrt6fPWQWQW2DzkXmamEHzQqOH2RCZz/H2MeMa:iOqtb6Py7SKrt6zzL9E6Ww/WTcUqSxht
MD5:	ADBF776062A00EE2EC709124400DB9D7
SHA1:	1D122EBEB243C62A10C40A34E0B20B8B61D036F7
SHA-256:	E2DE85007C28D01D2A973CBD4EFD90BDA8F52771727EA5DB199BD425F0720A37
SHA-512:	97FE0BA1FD685BE132889CD3190074712012851A9CA847EBC9B1082A8D02556522F9A5BEC4DE6588996B5FF3F753A8A10E7B9DC7686BA523983B2ADEC82663F5
Malicious:	false
Reputation:	low
URL:	https://cdn.statuspage.io/se-v2.js
Preview:	StatusPage="undefined"==typeof StatusPage?{}:StatusPage,StatusPage.page=function(e){if(!(e=e\|\|{}).page)throw new Error("A pageId is required to initialize.");this.apiKey=e.apiKey\|\|null,this.error=e.error\|\|this.error,this.format=e.format\|\|"json",this.pageId=e.page,this.version=e.version\|\|"v2",this.secure=!("secure"in e)\|\|e.secure,this.protocol=this.secure?"https":"http",this.host=e.host\|\|"statuspage.io",this.host_with_port_and_protocol=e.test?"":this.protocol+"://"+this.pageId+"."+this.host},StatusPage.page.prototype.serialize=function(e,t){var s=[],r={sms:"email_sms",webhook:"endpoint"};for(var o in e)if("to_sentence"!==o){var i=o;o=o in r?r[o]:o;var a=t?t+"["+o+"]":o,n=e[i];s.push("object"==typeof n?this.serialize(n,a):encodeURIComponent(a)+"="+encodeURIComponent(n))}return s.join("&")},StatusPage.page.prototype.createStatusPageCORSRequest=function(e,t){var s=new XMLHttpRequest;return"withCredentials"in s?s.open(e,t,!0):"undefined"!=typeof XDomainRequest?(s=new XDomainRequest).open(e,

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5704
Entropy (8bit):	4.0416850246975065
Encrypted:	false
SSDEEP:	96:Skt2k8rF5uwIEpq1WOnfaeMafWivDurCM5Xwch5k7goYo36zZnCb1msPBCpls5XZ:Skt2k8rPA1Lfae06w5WFd36ds54Wff
MD5:	06FB9D15351DC32C2C1808035D0A8950
SHA1:	365A00272D7B2027A6005CA40800C808C3D81FCC
SHA-256:	BBFC2E0CE4A3B4C213931AF19453D1E9856D76576F8D6CB32C5CAC1801698B44
SHA-512:	81E9337BA7A4359484A851925B47692B424638A58D2D1F98EBD09ED14BDFAF036A9011612DD7A9BDCB4ECDC73FACE243E417616127E49C42388830CC2A7E486C
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/365a00272d7b2027a6005ca40800c808c3d81fcc.svg
Preview:	<svg width="182" height="26" viewBox="0 0 182 26" xmlns="http://www.w3.org/2000/svg">. <path fill="#000" d="M36.7743 1.03516C35.3902 2.45643 34.9812 3.21341 33.9903 5.36077L24.8518 26.0001L18.3872 11.5402L12.0012 26.0001L2.78403 5.37622C1.84029 3.22886 1.41561 2.53367 0 1.03516H11.6866C10.8058 1.76124 10.3497 2.70361 10.3497 3.8777C10.3497 4.71193 10.4912 5.29897 10.9474 6.38038L14.4392 14.5681L17.0187 8.46594L15.5717 5.15994C14.7223 3.25976 14.1246 2.07021 13.2752 1.03516H24.9619C23.8294 1.76124 23.2631 2.70361 23.2631 3.8777C23.2631 4.71193 23.4047 5.29897 23.8608 6.38038L27.4313 14.5681L30.9546 6.38038C31.4107 5.29897 31.5838 4.71193 31.5838 3.92405C31.5838 2.88899 30.8445 1.63765 29.9951 1.0506H36.7743V1.03516Z"></path>. <path fill="#000" d="M48.9175 19.419C47.785 24.239 45.0639 25.8302 41.1159 25.8302C36.6017 25.8302 32.3706 22.6014 32.3706 16.5456C32.3706 10.7215 36.1141 6.59668 41.0215 6.59668C44.2302 6.59668 48.7445 8.21878 48.7445 15.0934H38.0802C38.8195 18.7702 41.2575 20.6

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1323)
Category:	dropped
Size (bytes):	4995
Entropy (8bit):	5.5829847087171505
Encrypted:	false
SSDEEP:	96:+8+/+H5Ze+HF8+/DH5ZeDH7ZJWaJ+T0WNpisRGEpOJsXjW5:+8++ZZe+l8+DZZeDdJSNpis5ptjW5
MD5:	DC1EC5D9C6E4534352C3496756EBED65
SHA1:	69F16EF25094351BBE48AF107DF4E93B0D1F061F
SHA-256:	1917C9B24669C98D0CBA65F897C9D48AD7EFD5C531DF547DD8664695BCC9FBC2
SHA-512:	0BCCBC692CCB5BBE81ECE005765DE3442D51CB0C3C49F0FC3305E12E3C4319EC27DB922D2333F38EC387C47163CE212BA66509C96CCFFA6C5DBE30DB1FDD630D
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1624532806;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1624532806;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOy,pingTime:-3,time:1735,type:v,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1735,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B1~0%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43796, version 0.0
Category:	downloaded
Size (bytes):	43796
Entropy (8bit):	7.986945551187073
Encrypted:	false
SSDEEP:	768:Js2Y/kwGIUHolyiDzi0fropS/nxelW9ffiNUqqxQvtSJ4bM6OzAbEV5p:uczlolxnlTopaq09WXbM6ON5p
MD5:	5321545E6FD1CEC2EB1EE4B745F450A1
SHA1:	3CA6BFFA09BB812466BA0CD5196D38B57AC51252
SHA-256:	F95DC7465B90788F8D5CB452B298BB4E6639CEC58821888DA9BE25F353035A8C
SHA-512:	B5D0EAE16E6FE120A128D7D48D44830C2EB5E10F7D0B4F2E324B693F85D4A4FB614C0CBBA09875A456F34EC937FE15CB254DE577B31FE75B92731DE321CB3AFD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Regular.20d77fe0.woff
Preview:	wOFF..............t.........................DSIG................GDEF................GPOS... ...!..6...1.GSUB...D.......^._..OS/2.......N...`hy..cmap...P.......h=j.ccvt .......)...4....fpgm.............6..gasp................glyf..!h..s........head...<...6...6...hhea...t... ...$....hmtx.............\-.loca............_$.emaxp...8... ... .;.Gname...X...Y........post...........b.))aprep...\|........hF.x.-..AC....p.....p....w.-.{......%......>`..-..F....r...!...x..z.#-.M....Z..M:.b..f.g.iC'..e..:.A.........g......;.}...C.X..M.^....x...3..Y..../.m...Zc.]M.41...tA5].}l......7...<.......El?..WF`..H..}.c..a.XZ..$.D....bW..#x.F.52x.N2_..].O.\|.....JVl..X....b.)..1..%..../+.#....6\|. ....%.Tk...(.....I.F...C.5r%.X2...A.e...&.lk.A....:4:$.j...~..S7.?.yj.Z.6.m..#....3.]..V..........<.+W..}...~U.T..h5].Z.^-....55j....3.]..V.....@.o. ..0....8.'....?.n...Y.f~....@(.......6..awu.../.~.?-A.h.......j&l.) ..q..\|.$.....JK..\|.L...\.>O.S"%[.C.d....rYn.[yo\|M..`.7Uf..D.-].C.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1954x1471, components 3
Category:	dropped
Size (bytes):	694264
Entropy (8bit):	7.794781430269143
Encrypted:	false
SSDEEP:	12288:pvVpjWB/JzXbb81jRBCcFJZtgPjsu2QUI7HepGyfq1d8Jnhomx+LyiF2S:lVkxJDbb8VRBHJfgPjOI7+dE8RhLx+bb
MD5:	8C006C906057FB2AD82D54007C88E1F8
SHA1:	06EA12D33D0D953F680A5392E19FF4D14F4F5579
SHA-256:	4CDDB21A3BD98C155094DD58984168964EB531A25A5225DB276B4F399B9F0623
SHA-512:	0337E5B1553F3BE18A58D25F5C7F8F237976E4F26E441EA0783ABCB07AB5B6E78E1DF95E6FADE06AFC9A305336F6D46037F20FF0AF3487BABDD1AF7716E6F3D3
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................V...........^.(.......................i.........f.......H.......H..............0221....................0100................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1954x1469, components 3
Category:	downloaded
Size (bytes):	537972
Entropy (8bit):	7.791823574606919
Encrypted:	false
SSDEEP:	12288:TXf+22+/MVuSg1dL71OwxkmWPQyqg2xnrTE7uhxzK+Dc2W/N:TL/MpyUwxXWYDPNTEKfKJV
MD5:	5B44D2013A07B79E24A7D614CAEE6BF2
SHA1:	01FC3FC5FC0EC5C4DE4049CF941C6A8DAA392AC2
SHA-256:	76871E0874BEDFCBA965C7F93D79D861D8A70998CAFF6C357FFDF25594B10B68
SHA-512:	EE272A1CDC46EDB30ABA11436E1B67AEB18368FAAE6547C52D21341751B101A46B8E9703D2BB2C1E3F3168256757A95B50AF4EB5444999C3F57A7B00A42312F7
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/3.59da582bcc0c43060327.jpg
Preview:	......Exif..MM.*.............................V...........^.(.......................i.........f.......H.......H..............0221....................0100................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028850583&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (623)
Category:	downloaded
Size (bytes):	2168
Entropy (8bit):	5.650090667623045
Encrypted:	false
SSDEEP:	48:ja8++en+rgveG9rhCaZen+rgveG9rwAEp4WieG9/Jdi00d8JdR5:+8+/+s1Ze+sXEpGtXL5
MD5:	0890CD3720434634CCE5C3A093D85275
SHA1:	0EDD681B0CA071B4A0E8F487FE08771E91639199
SHA-256:	F9D4EA683E5A343DDECEEACB8712B13C4EF2937FB971D46798A0B08AFD8BE1E1
SHA-512:	96D6241BFA5DFFFA912377848B9620A5F4DE7C3530E2D0A3F999A469ED81C3261E34FB7E1DCD5FC98C3B18DA18563A6E3548A84AF30241353EDD65BB9BD8904F
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028884348&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=691932089.1714028884&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028884348&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&sid=1714028816&sct=1&seg=1&dt=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=aea856b4-45d7-4d25-90ef-642b02d57292&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A08%3A04.423%2B02%3A00&epn.hit_timestamp_unix=1714028884423&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028884348-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028884348-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=892&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1651 x 1819, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1581902
Entropy (8bit):	7.990999002602228
Encrypted:	true
SSDEEP:	24576:ofzek5WxR2WsKFjXwAmnfzYSUPKT7DyyjrQkSVSuuwVy/INFovuoysCFdkkLsy4:ofzfExEHawrLwumyhSQ/KFo8kIN4
MD5:	9AC36D587B4B3DC54693E4D97C4C76C8
SHA1:	B012F0E8CAD4CCAC03124B6D6E5FF9C1D545EAF3
SHA-256:	290BF92E8DE8FA61783AFB3D307017AE0CFE80B9411CC69C9EA21C80C1DB160A
SHA-512:	BDE89C87099FAF7AB3CF8B435B292CB4EC8DBBE07B4866D1560FB0661FA3FE6D325B89470BFD73DBDCE02C248C241D6CEAC1B2E9610F706B25EE73C7058F220F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/favourited.1e40a57f0213acfb55b7.png
Preview:	.PNG........IHDR...s.........b.D.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a...".IDATx...Y.e.u.=.1...,.......$5\.W.-.^...k[....v.h"...T..A..........B...iQV{.........."..3..B.Y9.yO.]k}..ggVUf..dU.........o..<:.,1.V......\|....[.x..%.......m..+w.w....\|{._...N...a.........x......'.................I.+7.=...._^.t.U..........0.....$.g..m'pn.._.W.......x;.....G\|./...@............#Vd}}.cEQ\|.F.Gd...z............TRGneY..7.....\.r...........p..c..........(.V. .j........q..:r+..z.y.?...?!.........6pG..S.~.....,i.............w.....s...H............jP....#.....Se................z.:.:........n)....9...+.... q......=.H..:"v..'.....K...........6.......;.........LX.DQ.........9..mU>X....0?.d.......%.........-r.d....../.....o-yM.Q+.'.CH......pO..Do..Y..?.....w.w...........o.[bX\Y...Fo.*..........).v......&.........x..m....&.....%...Q...........=Rr-M.f.W...rcc.e..........4>...?.K...D.d.@.......`..tjd........C.........M..:u.w.._W./..V........`N.KG.z..c....h4.6....

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	dropped
Size (bytes):	149568
Entropy (8bit):	5.599999394238197
Encrypted:	false
SSDEEP:	3072:43pY6H8L4ibGqJXGpZpW9gqJ4f3RIRvN/vIafWg7lO8PPx6XwFINR6PLmFI/WuyX:45Y6cL4ibGqJXGpZpWGqmf3RIRl/vLWt
MD5:	FF7506868E352334E780C7E5700C7008
SHA1:	075AA9819DC73EF17C4B34A5133187E7897AF24E
SHA-256:	4D9B19F326AF805503B5A53EF05EFE3CFD293209287781DC7BE45746693E9779
SHA-512:	FFA5AD3DF49510BC8FAA8D356736468C13D15FCAAF1B6562E2EA916AFDF68DBCCBCA4C9F52E1589C07076F0E11A634BF10ADB563E103894C34C52D1430BC0527
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	4.245717149988924
Encrypted:	false
SSDEEP:	48:0gthO2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+S:zYZnH/l8NhHJ0M2J7dCd
MD5:	D933E71C9B455E50BE41E0C02AD72EEC
SHA1:	31BBF584F29E9D3572AFADF50EF480AD957AED0D
SHA-256:	F10ECE59BDDD4D0BFAA5A2675F03962CE1D31916518024609EB22D1393439A94
SHA-512:	54D0037885675BBEA786FF5BAE1947A869C068488E2CDA05ED6E8C458330C65F9256EF8EA4B1BC039135C043CCE328251C2C5E8AA1CCB12F9C8DDB90F7D22F3F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	229619
Entropy (8bit):	5.6590034568509395
Encrypted:	false
SSDEEP:	3072:K6HCxUZK+YAJ/LeHL3NnBxIFiCetJNLXLHOCqOl1A1MqV:K6HCGYAJ/LuDNnBeFlMJNG2sV
MD5:	DAD7E2C18E4A9909920276FE5AFAAA16
SHA1:	4ABE771A5B109EE108197CF03F99D7C10AFE7596
SHA-256:	358909CCF89A41582DC9352A7F0D7DA99CE17147271E5231748054EEDCC3EAEC
SHA-512:	B456F516ED3BD98C653F6140EF8BBB8CD1CC660B43CE7B0421C24EF62C748C17CD60761CC2B68672F2738C8A9C2523A1EC823D4F872DAADA7B0B6AC7DE5D6E45
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/bundle.8109b10fbdcaff69fa1c.js
Preview:	/! For license information please see bundle.8109b10fbdcaff69fa1c.js.LICENSE.txt /.!function(){var t,e,n={854:function(t,e,n){var r={"./circleFilled/index.js":1805,"./circleStroke/index.js":5753,"./default/index.js":9404,"./squareStroke/index.js":6984};function i(t){var e=o(t);return n(e)}function o(t){if(!n.o(r,t)){var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e}return r[t]}i.keys=function(){return Object.keys(r)},i.resolve=o,t.exports=i,i.id=854},4339:function(t){t.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},1805:function(t,e,n){"use strict";n.r(e),n.d(e,{ccOff:function(){return i},ccOn:function(){return r},exit:function(){return o},fullscreen:function(){return l},mute:function(){return s},pause:function(){return a},play:function(){return u},sound:function(){return c}});var r='<svg viewBox="0 0 16 9" fill="none" xmlns="http://www.w3.org/2000/svg">\n<path d="M7.58848 5.47848C7.51168 6.38088 7.19968 7.10088 6.65248

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (663), with no line terminators
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	5.113857668540427
Encrypted:	false
SSDEEP:	12:kxP4L8BMfF6RbWGnWUB6Ax8KBG/9/fSWGQL8BM4FoCpbWWGYsz8KBG6FkKOWQ:kDBBgGnW7fKBG/rGVB7Fo6Gf4KBG6Fkf
MD5:	5CB6721F1F753F276F159DBCB536C9B8
SHA1:	89BD22F64726F803BB28F24669DB41FD8F4B2E49
SHA-256:	962D6DEA088B031CD44D33F937ADB5BA241A9435AA32A8BE667D57482B8BBE1A
SHA-512:	EB44E858375AFBA69F61F2CEDEAD10AAF3B590E583ADD64585BF698C63777F280DA98130079A4A91724CF517186523A2F307DB0DBF5AAF57777A15FD92263CE9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXklqFJkASJ69jFDJs76ppjN_AYALC_l1Ipk-Sb5pBaodZCN2NaHczaoQM3VB9oIXnP7W9Dnn9nhrbmnUNhnb09LbFxOw
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/></body></html>

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1789), with no line terminators
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.324284319440294
Encrypted:	false
SSDEEP:	24:kR1VjSYRuLhrSY52iZ/vqSYJDSYy+gyhtSYYoUGApSYmKOPgE7YSYATSetSYMqg/:kB65hNgfuWzYnPXmRF6AP4t
MD5:	B7E64C8A4DD3BF1A8BE5A38AC7F9A907
SHA1:	8D83C485F4ED26B9B0AA8A51984B0A78F8395F3B
SHA-256:	4AC96368C43FBBD6B2C3FD616E193FF79AEBB9A773727F5D753483EAF9EB9F93
SHA-512:	16A3E0157B12D909D10151C585F89D0F7C0C552343E325F5B84932B85496BDB87359904A61AD53E4DFAF30FD166CCBDB34E3A10F19559260E521F1C104B14A9C
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0
Preview:	<html><head><title></title></head><body><img src="https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d" style="display:none" width="0" height="0" alt="" border="

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpijy,pingTime:-2.1,time:2721,type:a,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2721,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,2013~0%5D,as:%5B2039~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:619,fm:uaWeuhR+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc.40_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true,sis:1327%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (506), with no line terminators
Category:	downloaded
Size (bytes):	506
Entropy (8bit):	5.383977824560852
Encrypted:	false
SSDEEP:	12:fbjmpFLqlxAU7rFFULPdqIbtg+9YQEnc2yWDoum5RXV+e:fbjmpMlxAU7rjULPdqIW+9YIwaXce
MD5:	AD44B89485565E8FEA3631A9C760CB11
SHA1:	943359BA807E531E4900B29DACF35DC5D1B8008B
SHA-256:	24A4FC0E3806AE076285E9A1750D37D5AB8AA119228858E06F8D47C35A059AA1
SHA-512:	5E4F5BA35586F370D86F296A10593FEE09FFAF62A8B3A47282848C30325B393D4172E4CAB4AB6859E720A9C42478DC74F272BCF33E5C57283B45217F79206557
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/index-2f88e58ea095e005.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5405],{21086:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return u(52134)}])},52134:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return a}});var r=u(52322),_=u(19552),e=u(53145),a=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(e.Z,{}),(0,r.jsx)(_.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=21086,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	92460
Entropy (8bit):	5.301101844267614
Encrypted:	false
SSDEEP:	1536:bz0ZWWnIba6epMf3zrBL2N3G5jaBsE6t8A9BI2nQfg6ZUMfnfmMBWh:RAAOPP3meWh
MD5:	06821D0F1E25137C2297502C6CED525D
SHA1:	459FB586F8FC6C7C824E06A4E7B5312622E4BFE9
SHA-256:	E1FC56C5AF917B653BE54D619245C4079C1AFEC0991321F0D358679B1EF529A0
SHA-512:	504D6699839AD90F6316EF9FD8BD72B76784176169EA49BBD8FC33DA380F5D0907D9B0266B4E5A10E15CDE25125824A098BE7E16EE2360ACBA6B2711D14F6EDC
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/jquery-09d07e20ce042ef10e301661ad1f316c.js
Preview:	!function(e,t){function n(e,t){return t.toUpperCase()}function r(e){!s.addEventListener&&"load"!==e.type&&"complete"!==s.readyState\|\|(q(),w.ready())}var i,o,a=typeof t,s=e.document,u=e.location,l=e.jQuery,c=e.$,f={},p=[],d="1.9.1",h=p.concat,g=p.push,m=p.slice,y=p.indexOf,v=f.toString,b=f.hasOwnProperty,x=d.trim,w=function(e,t){return new w.fn.init(e,t,o)},T=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,N=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,k=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,E=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,S=/^[\],:{}\s]$/,A=/(?:^\|:\|,)(?:\s\[)+/g,j=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,D=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,L=/^-ms-/,H=/-([\da-z])/gi,q=function(){s.addEventListener?(s.removeEventListener("DOMContentLoaded",r,!1),e.removeEventListener("load",r,!1)):(s.detachEvent("onreadystatechange",r),e.detachEvent("onload",r))};function M(e){var t=e.length,n=w.type(e);return!w.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|"array"===n\|\|"function"!==n&&(0

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/ht/htw-pixel.gif?ZioBP9HM4ycAADS8ARFPzgAA%26587
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/core-shape.cde027dc.svg
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064519919
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65447), with no line terminators
Category:	downloaded
Size (bytes):	122227
Entropy (8bit):	5.412682968394468
Encrypted:	false
SSDEEP:	3072:p6HC8smTjbK85/f7Iv1XJjkS/+g5Q3djTlXUr62:U/p5/f7Iv1XJjkS//5Q3dj6
MD5:	E93A798E58009C27DD7DA46AC5079E68
SHA1:	4C76A6570C4A818462AE89E29298DE39CAD2F776
SHA-256:	C8B0C1A78E8E8DB2F70D30848F5D7B7217B6AF64C8E1ABC9C261AC921D74D731
SHA-512:	EE2B60D191C75C79E81C0216B8D006B501430A41122AB2BBA3FABB16DB9392E1FB205DCAAF86F0116CA91E502EDC6A9C88A0757C5E5D2DA72D290B8BA497B9BF
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/explore
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="icon" href="/favicon.ico"/><link rel="preload" href="https://cdn.optimizely.com/js/26744370346.js" as="script"/><link rel="preconnect" href="//logx.optimizely.com"/><title>About WeTransfer: File Sharing & Transfer Site</title><meta name="description" content="WeTransfer is the ultimate file sharing and transfer site for sending big files around the world. Learn more about our platform!"/><link rel="canonical" href="https://wetransfer.com/explore"/><meta property="og:title" content="About WeTransfer: File Sharing & Transfer Site"/><meta property="og:site_name" content="About WeTransfer: File Sharing & Transfer Site"/><meta property="og:url" content="https://wetransfer.com/explore//"/><meta property="og:description" content="WeTransfer is the ultimate file sharing and transfer site for sending big files around the world. Learn more about our platform!"

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	98375
Entropy (8bit):	6.065747164542381
Encrypted:	false
SSDEEP:	1536:z+qmrvjbM0nycT+cm3inPkzxJEVkdMOZ5EmIuwaEfVZgsrUnjaM0T8fDhvQc:1mTorENzayrUnjaMZL11
MD5:	C11922A4C9C59EEEF3B635F9BBDBDFF2
SHA1:	C637D6E4DD5CE6FCC46D84A8EA83D4CC67DD5529
SHA-256:	F4C304E460E27648D9D61EED000646E3D6E698E7E1B026F66508DA490A4156CC
SHA-512:	E927697C109F83DBCE4DB3C6252C375F05002A18A3969E4385D3C7B3E6893F74C1C36C20E67ADADD0F64DDF2C47A3AB7B6AAF1EC16709A32D792FC429A29AAE6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AMzfmdz8q1BESAUaZcfUlFivqmz_43weMAVHpL_6_byFaWYJbU8RZm2vbwxzWXFSQVqa837ffKJ-PlONWXGdfiQa0ihY6O6_Q_hyTKQz-8tIM0bz7cDm59qfcK1NH6WP0MKxXdM6u5TZ1Wxc0TKW1SsG5cmiAE7x3wN6j-WDuP70dap81xFnis3JxS5g7FhiU6zs7hYvq0THZZ-yKxlqvrdRH2f5ZKql5RxoQt7skj5RZxUbU&dbm_d=AKAmf-CQ_pIFkx0YNGwc01p62MDBJtbIsPPE1_iLnvt4X34Hw8PEnYzAFdawtEDm_5ws3mePWNygWyVKMz5Ud-smxKyEa4KzyekAOGgUsePdn-IXi7dsvOpMKsIb1Q4ZG2bH50qeMUWlgZ84n_HyZwFC2sMzbUcmYI1lt2RbuH9i7TFOaDo2mpiU0_hMEh61-fIKQmf7hylqjKtC5_jmSfiuCKmS3a-833C6EvJ5mWVyAG9OOb9X6K2HsQFgFQ4fcUU4alG043XpCI3G9Zcz0ZrbyG9kgY5DvgmPtHLlTMUT9t2Jd5q7rjXrd8jLxGJLvZb8N-rQUeEwkVQsAY5MCJoQj-VMPrr_UE1Q2g2IRhCYWCMH6YrupkU9fBpylWPlJ6g4XZy1f_qT0h_fJtlUlW858_AugdRt-q-8IJX0cap9cJ57gE3tDKdp-EedMptw6EauTLOgzXjnoYJjXcgol3k9BorwQ6NExdvzQP20TByz9QIGwZ2Nq9U9vRJjj9Dnqk_A_1F3OmzCZEUDrRhcEeBHftlpGDpM31nq1hcXZzkX7Frm_mtuQOrDOj1jzrVRRr7--PmD-QBqj9ETDou_bbnf1R5YdprcUKa49h2sq-0dn6JAb3aD-fzMn-M5MPZGGvHe1BipmKU-yXTSEN_xRkxJ8xUWM04m-sYTe9VeWq_PVVzc1PoJQpBFuGDDgsCfb54n1BbAcqQ4QGJFaiJ0IHEXjiRh0rZVc_tjFkiA3ZctUPyQI5F1ewJcFejrPO5oILUQWnYNDuUCzPooAz3qjAAV_GWCAxRF1D3Sn0dJMZHKWWrSJ5nrVERhUxU6ktXq5NuR_DCAtX2ArRZ_p1vFl7aIL32hWJCeiNBiW6VozqSYDYaY3EKHKSulTWdziRnkEnOkEXPhTjDMiglrawtiw6XGP57gkAu4cPniap6Pz7gmSNzyH9o0GKPWEud8vPiD2yW9UzA-kCE1AMT9bXsUc6LOJzOD-TTAb6tpBtmYcERvNSmGzpsuoK9lBllgA831Q2AaN63UPDtVp45P8Wiwxm8MR0UoEdh8E6dbXSwwYVz4HZHEc4sTj-BZQmTiXIuAEKb8zW0uvt0uwgKtjSu2NXWIDmmIdvCsW-Ee2TWu5s_uV7vSVj5fZE7OaTeELuKJ4eFzygkvjtNtnwgi_atiEjJS9SiRBw7nTccgEGRVSaMwXmfYBy_41lqzSSuiSKJC2wS9XZxPeRsYtyMAI195gI7waJe9wf8YDCl54TuigRqrKRtkxAXL3Kla4zWP-d3cTyJaJAJNxFxq2EN6JnJfjQpw_UaWTm8TTMll9LqoFw1eaLUyRrvPdC58rrkXS3VKufy0Wif2b1BHiFwOHQHjMywCaBwvZU_3CU25jwtAm8cfuv4pMCGEPfRfkk1EbPQ0YMd33WecLf-P7PdFFGjaoC8sDSJgNYvxu06Nx9H5PSBXClQpDRaZSxzDN-QXS5NIPJNXPhdfY_9TT58ERSZvtZ9M6NYONsiQGZLh_EYKazqRJSYsIqssCxFUIubJBCg8cvaLwDbhBBD60CvQfpEqbE_jkmAg7iET3vndsdQ_G1_f01YgUifT3HLZtGG0zJFfdcaWwuulcagxHhGD806JQp9cKwi5QGTHeFXkaj2zJArmD3daEjgj3Y9ui_BXfNKMHyeszg-CJ1sv_fK1Yy8VH9bnPD3Ny3nHaS9O5FA1uuJ6exaH77uz7UjqCLGAjLu555DKRxhU4RBuNmljEHfvBsNdWWDoGIQ8EbCn5_u9XZCcr9SJTUxFARC9z1AaoUVxLRm_YY0JiTIBTSswq7DYInbP-A8TBHOvohmk4RTcpeDfIXvj_WXzetUc7OJKFKFX6lZHfQRJTy_l5AszdP_aPFbaT9JKsi7o-U4pD3OZfWBhox1RuFqFJQGA5baMRoMOYDgDfEF3Bnl7lsmoCNFAqFYESTQr9SdwbvDP-vMlp7qOwEL-A3gSZC7P95F2EJvg2kjsWG-NWsdRMz82lqi-lK_wfaZOtuq6JfCISOYRcTXXWHwCexw5g0VDpRyXQ0TJoxAu_MLL7JXICfK_bBRrModL0uwVU_CqFyfVejOEWcB6iDfaJP6cjy6oRvrek3g9LF7hN4KybeE-gq3BJvaDf0s5Oh_ZkRrrAR1NZcQTLpaLjx1i1XBw3qOgx5fn59R77CnaldXN33DiyBBczjwcDFVY26JvIvP60PwFLeAfW6v3NPp2ouTQOEORpvB6OP47mdXAa3yBQPeZe7rDLmg5RWsMoytS_PebUTEUFZqg5e0DBjbsepQhFgQ9lNZmhkNol9XYl_8LYOKqSfuav2wJ3P6uj19ke3OcNsXO8zwxLaVtcOPowC4e9MUinlWV_vehc0lcM_1yeC6JBFxHHwBzKc7GVvmMlNdJ3GlHYXpWMWUx_E0eVwB2K74qUCOXb60HFxanQ5qRrLBNu5Tegs1WKRxYJHyoFYEc40geGLpeAQNARliwzqbZKBoudhQf4IguJ0JvSa2Tim4Acj9jSmt7fI2X6sBvsnLmhZdjCiMAFIMca0yWhASs6b91oTztEkE_YVhc2zq7sPh-pgXv3-3AJJcOgUJdk6UB2ihojc4puII40uVGUjXzsKaUt2l4xWH8wSFVTiQMh7sKZOpCEcbAyj_k-ea7mwCbu_y7P0zHMnaVGw4t_rYZGZpdi-dmv02geIMDl4xsNGJ9ArGKsK0Fu1_BTz7uZYDT9IcE2SVnKKhgHbW0OtRJRLwwYsaijeXNGs0_tM9oezomEPozpf3Vx0jBYVw8zURX-SkeHTHgfx724Uh-R8Ksks65A698F9Ao5l4l93RVGdUwi0b3UsD0xiaQUF65d2FKzSg2UEyBDxMymrBCLUU7DdBgZe2URHdQzzvv3DdRxEhh_2RBGYV9B-dn9ePGsEEOrGUIp4vcoH10zVqEaBWvF4cVb3TV_K9hZItHloz7SAuJFNTgvWssl0XRNEG7FFww14-Qc2VBthdEV_38MY9FsYnK86JX7dBJr8qsExJ7YDP1XswWi40PH9Qe7gBZMDcQYX_9JsFk5GX1v14iIo9vopDxj8aDI81p-fAYznAbJk7QH2y0taAUh67cFf-C-o_oeEV9u27h6B_1YXU_mfnNJ0nIG-29oE3hgkWJL8bKEpKQ6LHmv8aphIo0_lo3obA9KovIZGOxkcnXJPz6BE2YS24DO_5-wK46unYhRtdEdbWHeHe13N4LXHiLLvTOusLQ8Lq71pkVT___TqHgKQMqMKZFFUuTEsmVndi-VVzwYyysT5jjqcYy92lBoMSKCWDK7N1uEVCLagRZ9T3Itn4MGW_lE5owxlS9XEP6dEL4IlUjKwNvnpUPW_5P8mRTIl0DXazoqachoHkXVaygbAjCLESaukodGM8qUmy-DG1KhgraM8fV5q59SvtEJiYGbr63_M1zQL2GUNhtrcxvXzu8Fm2poZh-J4-zmdqcwD2w2WVF7JtKqQZBOjhcnyNpoORnjggeT6hbulnXIECdG-Eube0MnUVXcs9ymudjwRtyaROIiwNFntBgoeD5iUGsTMbAEU4F7YAqYTZd_qtLMGAfCBCitH2KAxcuT2r5Xe01sg0v3u9ZfoPb71ma2LNtPE4wqNxJV4EfJ0hH2p8TCvLlQkkvHaXLqcgKAsTCIn3_UWWFWo33YFtv1Rlex8IuvSwVmQtdinTbGaHr8GOlNXOB-RqBHiC8L_ejY7a3BBIS4g6Io0UyQ8lMxbEnh5v2CeQ9XVDGg9zzM91G2duE4x5Jyv5K2jc8UeKfAB-eKwhp80z7r5r36tVwMQb-Kiw51qrbu3JfT8hEPJPW6TZNJSBJpHSWoQPpWS-jD-xHLTKDX_BP&pr=13%3AZioBXQAAAADrWWfAx35EBqra1JfOCaPoPEPMuA&cid=CAQSGwB7FLtqxrqOJpc60ViQtHlHNpDvCHQGDNp0HhgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwetransfer.com&ds=l&xdt=1&iif=1&cor=6080282705931528000&adk=3123349629&dtd=72
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3409850549"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_XQEqZvmmNJiqrr4PyOexyAw"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240423');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fu

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028835450
Preview:	{}

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715048975233
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.6192ffb7.js", last modified: Tue Apr 16 00:18:16 2024, from Unix, original size modulo 2^32 70341
Category:	downloaded
Size (bytes):	22983
Entropy (8bit):	7.991235543566239
Encrypted:	true
SSDEEP:	384:IKJo7s64B9/CGQHNi/HgjWPA7ZuVH7691O0ynxgrEgIAKJ9zWWpcXVLIT:IKm464B9/oHNif5A70Vb69tynEEgIl91
MD5:	693F1816687516917019537449BD881F
SHA1:	64DDE99EFF4CD12DA671B6F5E497444114340E3B
SHA-256:	15F6FB5999F4A9F6E17045912FDCB177AAF94824C66B6E6FB1A5D4B061BEC5E7
SHA-512:	73F591F3A4786815920714FCA8AB18FD6F19E00586128CFF2384B45383106F00E884C9F3279A48BE9A37EDEC5CA0A3B3F726644AC1C3F7409A6BC56042359AC6
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.6192ffb7.js
Preview:	.......f..main.6192ffb7.js..\.s...2g..!...,;.......^.t...:.... ....H...~......H.q..66..............$.6#..q.K..v..{.-T3.fL....3q.....}HB....e.......e.h8..k...v...uF.fM.<...[...27..i.?..B&.e@..S.$....?.\..l.p.K..L..n....,./.,..WL.lK.@/3......u@...K../....W..".".._}...........u.B..tQ...%n..Va....B)j...........~g60.=...V........,....}..X.}q..-..3..f.b.&H............ZX..U.9.1.8r....,..b.K...u.z.k....B..^&\|!q..!......7.P.$.1..U.br..y..<.j....Vl.X..GI.bW.Rr.&KE.s.......<R./ ..jYn.L..}f....../g=.....`wZ_.?m...)...7..G.VJVOe5.../...8..../..../...:.....x4....w4:....h[..............gw._c~.N......au.E.....Y...._..U-L..H....\|.%wxq!.wqAW5.C...MAtg........H.........co6b.. k....EpE......z.D..e..V...H.5...]+..4.e..y..~=...y.L.ub.8..-.,...+P!.z...].^.+.Wl-..I=.D...x0.....M..+K..3&O.q..Wj.-.Q...b.d.X.....%... ..-(Cj...^...".E.m6fKTt..t..x..L....S..[d.jT8v..x.....VR%.Sz...{ \|E._]'...MI..C. .~.,....M.......)q..!u.9}(......5Lr..vR.yJ...NJ.!.w@.].....V.~?...{h..?..@

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	106028
Entropy (8bit):	5.234013803815825
Encrypted:	false
SSDEEP:	1536:9tO3uQXi41oPkvBVacTFMXCB4zwgi8x4XTerYybZ1RGx7JOn:bbQJgkvBpYo04jlA
MD5:	F57F5BBCB09D115F917B0EFAD0E910FA
SHA1:	44E8934F5EC1C8C339FBA195D89821B7F7D73987
SHA-256:	E5041A945EA3027586F51DDC29656F933C80A1E976BFAE9F6FD80687A55E318F
SHA-512:	6B82E8584C4A4E1C1F527CBFDFFB93A703DD7B19AF0F012547690BFCDFF7AA3ABAF66D35BBC7826CD364F0525F878FB52297A6458E98A1922AD826C1CF217016
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,u=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},s=!1;function c(t){s=t}function f(t){return function(){return l(t,this,arguments)}}function l(t,e,n){try{return t.apply(e,n)}catch(t){if(d(t),a)try{a(t)}catch(t){d(t)}}}function d(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];s&&i.error.apply(i,u(["[MONITOR]"],t,!1))}function v(t,e){return-1!==t.indexOf(e)}function p(t){if(Array.from)r

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 44624, version 1.0
Category:	downloaded
Size (bytes):	44624
Entropy (8bit):	7.989230910997391
Encrypted:	false
SSDEEP:	768:XcAQa4bAh3vCwEsHTp7AIF8lzvgeEHY4chTj2x/F1SL:sVaEAhfCwEsHF79Klzvge+9cJ2xN1SL
MD5:	5ADC1C49BE0325A8CDAC239D1B0B05AD
SHA1:	00F7E7221960EB775C51637E600BC510A62925A8
SHA-256:	2D7CA392D9B45723AF1CD44A9178DB19FD0AF6A7AAA49AFD882E3A472201F7B2
SHA-512:	7D9FF77F3DD9810C6A23F194604FE9603F8D720142E0F26F7C4F942AA929A7A0C263F1C8F66C3145D70007A476920E54B372C3E51D6A41FAA61C4ABA9CF0734B
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/entypo-cd0cc640c9711149dc484d7c26584704..woff
Preview:	wOFF.......P.......l........................FFTM...l........b.r.GDEF........... .L..OS/2.......H...V7.t.cmap...............cvt ................fpgm............0...gasp................glyf...........c ..head...h...1...6...Whhea...........$....hmtx...........\|....loca.......@...@.."fmaxp....... ... ...Iname.......N...@...Opost...P........!E..prep.......X...X...x.c```d....6...g..nB...\....x.c`d``..b...`b`d`d...,`......R.x.c`d.c.............B3.g0dd..2.13......0N@.k........A............O..?x..}lMw.....w=.5.Too.9..R..v^;:...XL,2,#{.%b.I..N......JX.D6.M.1..f...6..l..e...w~"$.\.d7......\|....S...B..Ia...+.w.U+x=.p.zJh..'..i..8.#..............>.x.z%z=.........C.......w.;...u..+.un.....:y.^W/..&y.5.&o.'.....v+.T.V.G.BU...A.L.U.j..P..\5O-PUj.Z.j.f.K,I.t.Kg...HO.-...>.W..D..@)..2L.e...1R).e.Li..B...h.-....~...k...@.9...6...-..v/.j...n.S.l;.-%......J.@f........6_-VK.rU..U.@B.&.$C....H..ID..{ [.#.AgkO..m9.2.ej.K-..7..n.l...>h.7.5..&g'g%g&_INKV&{'{&3.[.%....?...5.*.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	326856
Entropy (8bit):	5.507411627674058
Encrypted:	false
SSDEEP:	3072:0EvNv1mNYCSJR0YvoTxvht+Nz1t0x/hgabGpLsev6nsxuqrr5rBH4wWX2QDt:Ls870JrCNvms1Djzw
MD5:	43A224CE59E07EAD9CBB9A19231868D2
SHA1:	65384F5F2481FFF915363784C4BD0AEB9433EEDE
SHA-256:	2C442627A101ED151E72DA8F11443FDEDBBCC34AA1A853BDED8DD5858B230F80
SHA-512:	876F7FDC42003377FAC10433F134EA26D981CC8F0E5160371AA446B08EB2C7BD47DD24248F7FDE44CBBF2BC4EDAC724F3439D0A9E6E0CFBA75823FD276D62A69
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/e893f787.529ff2dd2d297b89.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r(1579),i.encoders=r(8649)},8620:function(t,e,r){var i=r(8996),n=r(1140);function a(t,e){this.name=t,this.body=e,this.decoders={},this.encoders={}}e.define=function(t,e){return new a(t,e)},a.prototype._createNamed=function(t){var e;try{e=r(6144).runInThisContext("(function "+this.name+"(entity) {\n this._initNamed(entity);\n})")}catch(t){e=function(t){this._initNamed(t)}}return n(e,t),e.prototype._initNamed=function(e){t.call(this,e)},new e(this)},a.prototype._getDecoder=function(t){return t=t\|\|"der",this.decoders.hasOwnProperty(t)\|\|(this.decoders[t]=this._createNamed(i.decoders[t])),this.decoders[t]},a.prototype.decode=function(t,e,r){return this._getDecoder(e).decode(t,r)},a.prototype._getEncoder=function(t){return t=t\|\|"der",this.en

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596), with no line terminators
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	5.405465001915209
Encrypted:	false
SSDEEP:	12:fbjiCA1xAU7a5XvGlkVYdqIyd69tNwYQE+XLppnLr2QGjZxom8XYRXZ+e:fbjk1xAU7OXck6dqIyywY8pnLr2QGtaq
MD5:	B3B2EC1AF6E0BB8B2BC3C666C233BD9B
SHA1:	1B6046E3301F4F8D7432D220FF8519F13422A4EF
SHA-256:	F2B6AFD62918732159E740D87809229AA1B99AB91B5E30FF9901A551B5733EF1
SHA-512:	7958559569BEE0D9CEFCD99AA5B6F56906544F8B42A9E91FF6EA19F0F944DDFB11CD664557D1A728009AA1A148AB239FB3015CFDE6643DDECC8DF1EEE510F3E4
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/help-6179d85e8f7fbccf.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1233],{24148:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/help",function(){return e(23947)}])},23947:function(n,t,e){"use strict";e.r(t),e.d(t,{__N_SSP:function(){return _}});var i=e(52322),r=e(19552),u=e(53145),s=e(65835),_=!0;t.default=function(n){return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(u.Z,{title:n.pageTitle,description:s.Z.t("site.descriptions.help")}),(0,i.jsx)(r.Z,{data:n.data})]})}}},function(n){n.O(0,[620,6960,404,5835,9774,2888,179],(function(){return t=24148,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35076, version 2.0
Category:	downloaded
Size (bytes):	35076
Entropy (8bit):	7.993813630003061
Encrypted:	true
SSDEEP:	768:y7Sw0M9wKPCijBY70scDcyPovHhZCcGkMQs0BB7H8moyPF:0jzBzsOgvB4TtQsgxH8HyPF
MD5:	FE06EBE49EA06F5E4FD556B2E296D68C
SHA1:	3FF8CD88093936AE5341B01B5FD98EF467EF4CB3
SHA-256:	D3B4A4755E455892D49894DC911DE6C0FD7A8CDB0EE32F9693E571771B7C87D1
SHA-512:	35A35D5BAC50F4DD752117D2C62FD5392134ECD756C6F70675FAD7E6E8500E450732A73644171D99FA22B18A0566B320CB8B2231BF9E7D7D3C16023FB769647D
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/GT-Super-WT-Super.755cfa9556fcd80148ce.woff2
Preview:	wOF2..............vt..............................8..$..^.`..h.4...........Q.6.$........ ..6..b..'[tRq.\......./....+....vR.}4.l....=..Jx+IQ.....?.c..`.!...U..eb.^.Q...T@V..PmC`t5...b>.,.1.XT.S.E...3=.g......\.2.l.v......T.J."J..)<..^.9....q..d.[..o.Z...J.S~...:.9..z...]VM....F,..pD...(k.~}F.q...Z.../..]......\|...m&t..H...........6.R.'..g..i.-.?<.3.i..o..?48.<........D....G..<......'...G.f...'.?..../....cl..A.5...7.(Gi.Yfaa..9.G#?../..s.M.. H@...qHQ.-....'@M..v.w.Yz..V..z.6..,..f,"..+6`D......V.]`d_..^...6.........H......Jk......L....z..I.%.=..2..&...,Q.g..U.e.2.......s....p.4%R.D..6\|b4D..=....SA...^.2..cm..B.?...t(]C....."..[.,a......Rbg.a.).AQ.....H^_gt...\|z2.1.H..i.`p^.}..PIT.[.H.....a...Ba.N>.q...sL?.^...[Al......y.Q...x...f(I./0.c.#.=!<XM..Q..../.E..........r....:..>U.......J....x...C..A..;.).-jw...<......-"..D..U.m.0e\SxH..<b.j..UX......3sUyV.i>.F.y ....6..P.......p.9..Zo..H........dk.a.8@_..._..`6.....s.....#x.i.J?Y..........C.v..'_l

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	4.825026877054867
Encrypted:	false
SSDEEP:	6:tnrDxmc4slmThCCyG9zipcdGUKNT7QFXrTnQRhqRcmlh/MR1BRDHjME:trDxITwCN9zKUW7EozqRcmP/MNRzjME
MD5:	EEDE3E085DC3122742012C3527BE0671
SHA1:	4CD7C0C69D606B099312BB626E973495CFF7793B
SHA-256:	FD3DB26944A5556032F677B46BA03E72E2EE99ABCF097AD451C686404E815441
SHA-512:	35329C463D80EC2447C55FCBEEC7D9F98585E49F8D26A026161905281A457015A285874CBFFDF6BF309AC18C87D914CF20BB62065EB6BE3E3A372FDAD6A59635
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/4cd7c0c69d606b099312bb626e973495cff7793b.svg
Preview:	<svg width="94" height="94" xmlns="http://www.w3.org/2000/svg"><path d="M75 90h19v4H0v-4L.01543467 0c0 12.8443448-.16098949 23.8004441 2.11389876 38.6480781C7.5004689 73.7024655 33.3174645 90.2790587 74.5944003 89.9954656c.1356558.0009717.2703347.0009717.4055997.0014899V90z" fill="#161616" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10704), with no line terminators
Category:	downloaded
Size (bytes):	10704
Entropy (8bit):	6.16893117870709
Encrypted:	false
SSDEEP:	192:Qg1dXfEjg1ToqUXVyi16TlKlwDl5Rjg1ToqUXVyi16TlKlwDbbpR/5Kga:Qg3fEjQUqIVy3TlKWjQUqIVy3TlKcbpU
MD5:	9413AAD0869278C3C0D82D82B6100844
SHA1:	5D1B136576D11946B4B0EFAFDF9DDBF620AA9C6C
SHA-256:	A7524C05B5724E3F54D76609A1BD05C02C66D0AC6DF83FE86D823DCB0E219B45
SHA-512:	339F3C82389D1558E2DB814B8F3111F10BDDEF421184A8ECE1ADB56CB617E8BED24BC9358C944F645536BBF1EA5E28B57E8EC042D75B0F7F92A514AA84C776D4
Malicious:	false
Reputation:	low
URL:	https://htlb.casalemedia.com/openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028890485%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D
Preview:	<img src="https://a5565.casalemedia.com/impression/v2/1077556/85/col02nd106kd7vk786e0/049ee664-2641-4061-8596-602b5a942986?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029493&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DXwwCKbL9VmOqMsSlemlIui5CNm7Ha0m0v6jrRTg8a8Xm5HpP4pw6MLy4H9sTwCKRrKdniWVlifG3x1haWaG8hU_6JJe6kFc6nN-G4JwBKa-9bwHk" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXSCIR4HnSAc2GWO61etzmBsqfQq1ss94ea6ktsirtHFoh3vMuIg2E-t8HFPGhnNrgdXgS_7SVYvQp8yI9xZ9yRnJP3og" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'https://googleads.g.doublecl

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4544&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x1600, components 3
Category:	downloaded
Size (bytes):	42500
Entropy (8bit):	7.906514815214602
Encrypted:	false
SSDEEP:	768:fYyJdSBUtz5O/lPNzxv4wJN2XKb+5IKS4QNy+/BxNaz/YGegoi:fVkeKbxvfCK7K3QIixYHezi
MD5:	A8BB2D5B56212D9AC3D0EF1A808BA5EB
SHA1:	E4D4DF53BD4207B59F1CF769D8D9CE10BECB7C66
SHA-256:	0B2D3F7318C52EDA6DAC80451EE3AECE51AE337BDD7F69F015935CF7243AE542
SHA-512:	46609BA04DB8B84589750C5D95AD0D4B387804CD650CE66A2015159EB83900E2FBC439A7926762A75C258F5D5E8F327970C0075D84092A4AE5778F9F0957780E
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2312-photoshop-apac/imagecompare3/1_BG7ymf/after.07ea7a400059131eab0c.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:220e5312-8d28-43f0-825f-93d569b286b0" xmpMM:DocumentID="xmp.did:24CA570B4F1611EE853F942B15EFBEE0" xmpMM:InstanceID="xmp.iid:24CA570A4F1611EE853F942B15EFBEE0" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:803b1630-585f-4005-a27d-2d16229808aa" stRef:documentID="xmp.did:220e5312-8d28-43f0-825f-93d569b286b0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (560), with no line terminators
Category:	downloaded
Size (bytes):	560
Entropy (8bit):	5.370188334972567
Encrypted:	false
SSDEEP:	12:kxPBrtj8KBGd+AMWGQL8BMnupbWWGBfJHJK8KBGmUSaOWQ:kFIKBG4eGVBtGlxKBGmUjNQ
MD5:	1AD539BC5EC26C8C4930A9E8BFC6AD98
SHA1:	D2A65277959411897FA80502EC0832C12F638DFC
SHA-256:	B5CA18E2886474B70E2A549F345E739DD25B77D0C0203151582A1F7849047768
SHA-512:	A50BA432BFD7EA0D2FA6E70C45F3E596BC42DFD4587629921AF45405FF77958E23E6120638D4EA7149DC48056414F7D330E1B66E111879B4166BD8618367E2DB
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXSCIR4HnSAc2GWO61etzmBsqfQq1ss94ea6ktsirtHFoh3vMuIg2E-t8HFPGhnNrgdXgS_7SVYvQp8yI9xZ9yRnJP3og
Preview:	<html><head></head><body><img src="https://x.bidswitch.net/syncd?dsp_id=16&user_group=1&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dbidswitch_dbm%26google_hm%3D%24%7BBSW_UID_ENCODED%7D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/></body></html>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a5594.casalemedia.com/impression/v2/1077556/85/col02fc5mqmdtr0llo30/e2b2fe7e-b769-4920-a052-b4a8180e3f3f?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029461&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25404)
Category:	downloaded
Size (bytes):	58921
Entropy (8bit):	5.256475194244875
Encrypted:	false
SSDEEP:	768:8ZUIkY9W8nMMxOKpCK7NiQI2tTOPFt0PHF4bQi65salOPCbYlxN6s13bdLlIBf1m:8ZWWW8MMxOBSN+FeWbQisvoAYlP3nM5a
MD5:	4B9ABB36767431F05495228EB82EDF01
SHA1:	CFE3AFC5D23EAF2F9DB85EFEAB696F57DB948658
SHA-256:	262F87D47643975A4633B675FC224C7A178D99E579E5D767F4A43CA7CC0BB9DE
SHA-512:	3257741AAFA0D0FC4C99185A3B55FACDF5E5F25B7D61DCBB9C0365E41D074E462837731F747725F493B3D2039D068B8D31AB8D7E09DBE18A69B16A94A65EBE3F
Malicious:	false
Reputation:	low
URL:	https://cdn.treasuredata.com/sdk/3.0/td.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=32)}([function(t,e,n){t.exports={forEach:n(35),isNumber:n(44),isObject:n(1),isString:n(8),isA

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=3&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8686&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/globe.1603f8a7.svg
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1211), with no line terminators
Category:	downloaded
Size (bytes):	1211
Entropy (8bit):	5.328339610829277
Encrypted:	false
SSDEEP:	24:fbj0HNxAU7zDtNPOlah5NwbWWNVdWyd0wwYdqIdt9dsznzNXJ:fbgHNxA+n0a1wbWQVdWyTTAEOnn
MD5:	4489DCFE5AA9E9731F58B6ADB251B224
SHA1:	211B07B414ADAB9CE233AB58979B261BE2C94ED4
SHA-256:	F2E5DB0E5B2124005C8C8E8C98ED349913F67AD62417143425798C555DFF92E2
SHA-512:	4AF8D49C50C44CD12147597A489E1E00ED377CDA96D5F7DB51B16B4FFE153BFB4BF81FEC61C92DC28F4AFF15930B20B735B03F503E1AE23A8BA96623C6723697
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D/%5BsecurityHash%5D-8d0f518e97cd79b1.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[438],{89309:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]/[securityHash]",function(){return e(5181)}])},18469:function(t,n,e){"use strict";var i=e(2784);n.Z=function(t){var n=t.metadata,e=t.securityHash;return(0,i.useMemo)((function(){if(null!==n)return{title:n.title?n.title:void 0,description:1===n.files_count?"".concat(null===n\|\|void 0===n?void 0:n.files_count," file sent via WeTransfer, the simplest way to send your files around the world"):"".concat(null===n\|\|void 0===n?void 0:n.files_count," files sent via WeTransfer, the simplest way to send your files around the world"),image:void 0!==e?"/unfurl/".concat(n.id,"/").concat(e):void 0}}),[e,n])}},5181:function(t,n,e){"use strict";e.r(n),e.d(n,{__N_SSP:function(){return u}});var i=e(52322),a=e(19552),r=e(53145),s=e(18469),u=!0;n.default=function(t){var n=t.metadata,e=t.securityHash,u=t.data,o=(0,s.Z)({metadata:n,securityHash:

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVX,pingTime:-6,time:606,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:606,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B47~0%5D,as:%5B47~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net*&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CeKxl0WkBFBwXn06pYndVB3c9CGwH0vVf9x4ewOehFvcZJFa3bgIc9j49kNYAlXhQBDcvfRK6WDB95Vg8zU6PfgqyiRjnLYKTK4n0wEShq2KaMTuk
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=rWELXL63DnS1UAxjdVWSowLFgNrndLnNbLdvCSr65SFMBbv1qTAW5b4XuLDDAzNI025b9DlI%2Fe%2BKp8JYRV4JHtS%2B7djHfS2BWXVSyJf2shfW9qYSpGbchKDOfkPuKI3riJ%2BX16ru%2BCnPzZiA664uSFiQeXXuNH0U1ZoIC5D0FqaaOIIY2yNgCJafgF4uL3hgOtQ%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530), with no line terminators
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	5.401427845765136
Encrypted:	false
SSDEEP:	12:fbjqcUUlxAU7vrf6LPdqIyd6t9JYQEnc2hcDQsm5RX3+e:fbjnplxAU7vryLPdqIy+YIMNsaXOe
MD5:	EFC7D0DDD2FA9D9FC1C6637354E0E698
SHA1:	4E1424DD41F9AEC14F1C6F314872091D76ADA359
SHA-256:	B9EBCFF4A4470EB88AA94CD1DC9CD56873768D945E367CCE16AC8A9822F94791
SHA-512:	3E9A00B3B74DBD84B79EFBBDBAB70FCEDEA04B7DA4B83C66F10D408E5542A98DD3B210A796FEBD4C905B5A8F7F132672129F4206DE6774E65B2AD39C76A78126
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/pricing-43f9c565fe91f700.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var r=u(52322),e=u(19552),i=u(53145),_=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(i.Z,{title:n.pageTitle}),(0,r.jsx)(e.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=19164,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671
Preview:	{}

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181528
Entropy (8bit):	5.256138856765788
Encrypted:	false
SSDEEP:	3072:B48AcQ9ZKjn3y4ASpGLAF0armAMD0OhUyti:BZAcQ9ZKjvASpGXOmAMYOjti
MD5:	30C77F1C465FFEBC4A34178E9E87E6B9
SHA1:	B763FA6E1CB1609EBF91E4FFDF610C89A1EA887E
SHA-256:	96C050F7520ACD3816919BC2E82F19BC0B9161C97C2C128EEEB522D8E1F10C96
SHA-512:	B77DE6B85ADB6561D97D656979A508DAFEB57E7019D0B07688F95F6E41EB4DE6F6034097B979AE47DC69AEFECFC59FE56E761FEFF7697D65432AD4CFD51F4FDD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];Object.prototype.hasOwnProperty.call(r,t)\|\|(t=r.log),o[t].apply(o,e)};function i(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(i){o.error(e,i)}}}o.debug=console.debug.bind(console),o.log=console.log.bind(console),o.info=console.info.bind(console),o.warn=console.warn.bind(console),o.error=console.error.bind(console);var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,o=0,i=e.length;o<i;o++)!r&&o in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,o)),r[o]=e[o]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return f(t,this,arguments)}}function f(t,e,n){try{return t.apply(e,n)}catch(o){if(

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	4.815296460460266
Encrypted:	false
SSDEEP:	6:tnrDxmc4slmczhMQDxN2V/jQhyg2hcdVVVVGi0yRvr57DHjME:trDxI6N2V/jTTh2dht7zjME
MD5:	C57A837E187261D0C55E11579217626B
SHA1:	9F934E3C838343F2B7292F02A08C311C13BBA794
SHA-256:	D92E302A84ADDBF1BFBE00C94F31C46BF714A8DAD66C8E8AB2A5879FBAF249FF
SHA-512:	F569E98087B20842DCF676A99537EC937A25305E6CF784E2E7E58F74B939E0D706300D53C5D56B533237E2E453F543D15382B467C682D011E21A7B52D776A71C
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/9f934e3c838343f2b7292f02a08c311c13bba794.svg
Preview:	<svg width="94" height="94" xmlns="http://www.w3.org/2000/svg"><path d="M94 90v4H0v-4h19v-.0030445c.135265-.0005182.2699439-.0005182.4055997-.0014899 41.2769358.2835931 67.0939314-16.2930001 72.4650669-51.3473875C94.1455548 23.8004441 93.9845653 12.8443448 93.9845653 0L94 90z" fill="#161616" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	137498
Entropy (8bit):	5.315086070700865
Encrypted:	false
SSDEEP:	1536:0JYKyCVB5V3V55gfNqmNu7ysayEXSVLNaWn2SluTL:0tHxmszEXSVPUTL
MD5:	84A46D0B6196FFA368647E975120E17B
SHA1:	9D241624EDB0C49A2327D6637B992C8EBA216C85
SHA-256:	741BE7BD899205EB5E3DEF9266A640BF0A797361F9B5F54320087CDC17514AB8
SHA-512:	A5476116F64EF647C66655806F03DCF139548E8BA691BECB62E9CA7188DD644B804B2582F0AF78B2175804EE3AD76695764A54C1E4E10C6F40139DF52D3D3626
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1627.f2cf297cefb46766.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeError;if("function"!=typeof r)throw new TypeError;for(var o=[],i=0;i<t.length;i++)if(e.call(t,i)){var a=t[i];r.call(n,a,i,t)&&o.push(a)}return o};var e=Object.prototype.hasOwnProperty},468:function(t,e,r){"use strict";function o(t){return o="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"===typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}var i,a,c=r(977).codes,u=c.ERR_AMBIGUOUS_ARGUMENT,s=c.ERR_INVALID_ARG_TYPE,f=c.ERR_INVALID_ARG_VALUE,l=c.ERR_INVALID_RETURN_VALUE,p=c.ERR_MISSING_ARGS,y=r(971),d=r(467).inspect,h=r(467).types,g=h.isPromise,b=h.isRegExp,v=Object.assign?Object.assign:r(203).assign,m=Object.is?Object.is:r(113);new Ma

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51045)
Category:	downloaded
Size (bytes):	51078
Entropy (8bit):	5.141058818793268
Encrypted:	false
SSDEEP:	1536:5ppKcuPIOik/8c1MUd9nK0TdOCnfEBjZp89r:5ppK5Jt
MD5:	CFC33ECAFE0A3D20ED59BA16C0BE3987
SHA1:	69A2A370257DA98E3A9D04D8600CB5CFAE2858B7
SHA-256:	AFD11AAE5379E2C2E70A4929FC43CF784FAD93C96474BCCEDAA953A9F99E8C54
SHA-512:	8BC134F0726F0E57BC0DC710361F5E0A042912CBBFB483C4BC8E25CAFEBB29A7A438BB1B2A4D078D083A3AD397227F61B7EBFE92AC5D6432EC8AFA7253D67159
Malicious:	false
Reputation:	low
URL:	https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Custom__Video__Image_accordion
Preview:	(()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function r(){this.constructor=t}e(t,i),t.prototype=null===i?Object.create(i):(r.prototype=i.prototype,new r)}function i(e,t,i,r){return new(i\|\|(i=Promise))((function(n,o){function s(e){try{c(r.next(e))}catch(e){o(e)}}function a(e){try{c(r.throw(e))}catch(e){o(e)}}function c(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(s,a)}c((r=r.apply(e,t\|\|[])).next())}))}function r(e,t){var i,r,n,o,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function a(a)

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10187), with no line terminators
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	5.17908949611252
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCx37YoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkoxrpN
MD5:	C0053B411B753138AF468DB1BD3B19F3
SHA1:	7C3A187AA58F2B9E5446EDB761B3D4D2BA506FE7
SHA-256:	CE337EC7DDA4B3A741363A2673C7EDCE5C736F1660E2AA908131ECFD9DD1343F
SHA-512:	E0EAF480CC88817BCE216614F9813C10D7FC3930A8899F4C7C68B442E90846AABE0B5A536D9B273570671B7E8DDE614B347891839BD6699EDA355EC8B5FB1852
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/ekr/snippet.js?key=web_widget/wetransfer.zendesk.com
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31554), with no line terminators
Category:	downloaded
Size (bytes):	31554
Entropy (8bit):	5.3137056116895405
Encrypted:	false
SSDEEP:	384:eLY909am6eTnSE73zhW4X86I+4TesAOSEqiQtO3pJ5kGthylQSm9cThgsS1yNAzO:oMMjk4X8x+geFOSEqCrOZAEuyz01wHp
MD5:	A5E9E0BD25747C28AF2C8919506692FF
SHA1:	070899FA44E808C97613DEF2DB7E221190F15D01
SHA-256:	A47C47A549C7BBD0E0575A8E5B63FB34EA953CFD878EF25AA14E3A6557BE710D
SHA-512:	3FA7EC8C68A5C9A38EE2A108985337FEB538B61C12C2670BBE986714FF6CEC9807F9C65525A1AB8B6285E501E2107485BB16AD11B9DCB4C749CE4C92BC071106
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css
Preview:	.panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48px}}.panel__topbar.showBackground{border-bottom:none}.panel__topbar.showBackground,.pricing-page__background{background-image:url(/_next/static/media/PricingBackground.74fe38a7.svg);background-size:cover}.pricing-page__background{position:absolute;top:0;right:0;bottom:0;left:0;background-position:0 -60px;background-repeat:no-repeat;z-index:-1}.pricing-page+footer.footer{max-width:1440px;padding-left:24px;padding-right:24px}@media(min-width:768px){.pricing-page+footer.footer{margin:0 auto}}@media(min-width:1200px){.pricing-page+footer.footer{padding-left:48px;padding-right:48px}}.Collapsible{color:#333;outline:none}.Collapsible__header{display:flex;justify-content:space-between;align-items:center;cursor:pointer}.Collapsible__header-text

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8685&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 80x80, components 3
Category:	dropped
Size (bytes):	5417
Entropy (8bit):	7.873073881946618
Encrypted:	false
SSDEEP:	96:YxVBBGPw2BIk06wQ/mFLpnG85dQbh4x/v7frQV3ig6zP0mVVx+eSes2ojgBYfsY+:0BOwSML75chovzrQVEzPrVVxH94jUWb+
MD5:	491AE298FC3BD9E5853DB24BBAF6CD3B
SHA1:	E67B2F5F0CD776AB528A36D94A899450692A8938
SHA-256:	6ED2B9F52D6BB0869D793F69A22F223432AF5C5A6B84B0183A3E42FFD7EA5F80
SHA-512:	FB4776D1114160CE04D71BE9DE055B5C2FE5512075C09FC2CAEB6D888237783660E93AB0BB7C49D797FBE8CBAAC17FB96C94EA73FBD78BCE97652A313D47895C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................P.P.............................................4...........................!...1.."AQ..aq..#2BR$..............................'....................!1AQq.a......................?.8........}.........x..PM.7.......~.........S=zgi.&.."....w...y......=..{..Du....}.....}.wL'..h.a..+$...!Pt..j8.&M.].H.1.r.A..U....E`...F..b..5...rz.%..R.?.....e..t!.]...B!......IXS!I..,.l.@...b..h<j.R.nr&..\..?x.b4s}..#9......C.Y\!8.A0.....iv....D.%.(.K.1.x.B..Am......J.(`:K.r.'..,.....d...~..R...).(..Rw.<..w...=.a..on..\|....}.#...._........=..;o^P/......p....Z..Aa..w.K....^......}.I.......?..&.....v.......o..\|f.1.S.yH...k..R..g...F..''.2..........<.S.Y...K...gL.l..T:.sV5b.z..(>5...=m..X..[&.FG...l..D...q1.6;,.........8U.;X.t.(....2(.>R.......$...E.$..c.(..o.N+.=....bo..W...9..?...2..*...@...<.......CQ..X..(r.V.w..L..

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3236)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.311110515964322
Encrypted:	false
SSDEEP:	192:OdjQ65BDl+S5XfHfFuSeNRURvyVOYjmekLihBvEtg38lTjLky3RqUJgFVTB2:O2oX+S1p+OYjmjg38bbgFl4
MD5:	94A17D5B2E6EFAC02E9C2F138E6486BC
SHA1:	62A6BDE488CC46BA768FB2AD6D494498BCE1EF6F
SHA-256:	1804CC3E872D5BD50D9420A574023B889944AB3DB2DEFD25613DD30ABE4786BC
SHA-512:	EC31C81DB81A86234C496EED5F494FDA2F0A97A56E62976AF7C5150868D5C6F70B270298ECDC2B9C38465F962F3AE7ADE26682A3807139A938CA6585AB8DC97B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240423/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 310 x 672
Category:	downloaded
Size (bytes):	900465
Entropy (8bit):	7.96885120115221
Encrypted:	false
SSDEEP:	24576:/B80e/A7EMqHtfxlR9TSZte7Bvhwbt6n/175ZxwqYakC48:i0j7FAX/TSLe7B6bt6n/13t48
MD5:	120E94358F3ABB69DEE05095C9EEF86D
SHA1:	5686D1F4D2B6C9E25E3933C3802E8F221914B152
SHA-256:	28F237BEFD6044897E061A5199763643E8B3C78F584C191ABB43BFEDE46AC653
SHA-512:	A5D6C494E529627F923DD530D97A72150BC6CAEFC05D7EC19684D2087B1D4D9B0FA0AA03B1265AA13AA7B78A040B73F7D3F728C194DDDBEFEA4F77E0CD188821
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/hc/article_attachments/17132409245330
Preview:	GIF89a6.............. ..J.................b.............................1.......$v........2.........................A...........>.".""%B&A.&G.'..(..(N.&)+".+(++N.-)1/V.2..3134..4\.6[.6`.6c.6d.6e.6e.7g.8,&8g.8g.9V.9f.9g.9h.9i.:h.;55<i.<j.<n.=..=_.=k.>>J>a.>n.@=@@j.A-.Ao.Bg.Ca.Dm.El.GDGJd.Jg.KFGL`.N$.N<.Nl.Ns.OLNOLOPMPRf.TPSW6.YVYZ~.]I._\__..bz.d-.dcqfcfgE.gr.j\Qj..mjmpm.pv.qW.q..q..tjeuoov;.vsvw..xtwyvyzR.zwzz..}z}.N..i,.........}s....d$.nJ.......<..}J._.....yP.z$..................z....O"../..a....t...g...........9.......>.....]...............`>............<....i....................J.E8....`..............)..........>......................&..q...............H:..I.........................................................o................................!..NETSCAPE2.0.....!.......,....6............ ..J..............b.............................1.......$v........2.........................A...........>.".""%B&A.&G.'..(..(N.&)+".+(++N.-)1/V.2..3134..4\.6[.6`.6c.6d.6e.6e

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/ie
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (642), with no line terminators
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	4.960373981896047
Encrypted:	false
SSDEEP:	12:WzfNVO0C/8Vk2WUeo4TYVk2Gem+KJ63By4Ccdn4AcPr:WzfNVHq8VCYV3KuX/cT
MD5:	8D4F9217B0A240021FF284C2C66E02C5
SHA1:	1AB4CB1A1EDD3AF88470C1B4F7A33AC843796F5C
SHA-256:	9B989A0D8ED40295D069249821975AEC4D2599E0B6E155FA64563B210C323B07
SHA-512:	041991F051CCB201ADFE97183FD0BF142A43BF2D54432F6FC6E6577CDD030816B4A4178D1321B87F99C054B9E0255165BBCEE8E936E30993BB584CB7922E3973
Malicious:	false
Reputation:	low
URL:	https://frontsite-nextjs.wetransfer.net/_next/static/css/bf5318e875434d25.css
Preview:	.banner_banner__euRk0{position:fixed;z-index:100;top:0;right:0;left:0;display:flex;height:64px;align-items:center;justify-content:space-between;padding:20px;border-bottom:2px solid var(--button-background-dark);margin-bottom:80px;background:#161616;color:var(--button-background-light)}.banner_banner__euRk0 a{display:flex;align-items:center;justify-content:center;padding:8px 20px;border-radius:100px;background-color:var(--button-background-dark);transition:opacity .25s}.banner_banner__euRk0 a:hover{opacity:.8}.banner_banner__euRk0 select{padding:1rem 2rem 1rem 1rem;border:1px solid #3e3e3e;border-radius:1rem;background:#222;color:#fff}

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D9%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4052
Entropy (8bit):	5.036390454095997
Encrypted:	false
SSDEEP:	48:YtG9HVgN4VzWQ4mAxXI5m3RkHpbGHVzwuugt/hUokYft12vG:uusYCQ4mAxXImRi4Vzw0ZhUoku3wG
MD5:	125EC7B42D8B49040A027D473A09CC4F
SHA1:	E7D358B49894046CBB3F03AEC31B9B6397E21135
SHA-256:	A18CCFD7D80DAF140290C0B24133E2B9E3938ED585F72A75B6ED45FADD3040E8
SHA-512:	284D4DFD29D52BD6CD9DFC6D29A141ED277D4CB836C4F808C56CAB6880C0D0D3BFD442F62E193FC10A3CD1F2A9462309F858FEA3BC0161ABCF752B1FF1AC4720
Malicious:	false
Reputation:	low
URL:	https://sc26zwwp3c0r.statuspage.io/api/v2/summary.json
Preview:	{"page":{"id":"sc26zwwp3c0r","name":"WeTransfer","url":"https://status.wetransfer.com","time_zone":"Etc/UTC","updated_at":"2024-04-25T05:42:25.634Z"},"components":[{"id":"w08rk28xj3p3","name":"Website","status":"operational","created_at":"2016-03-24T15:21:38.890Z","updated_at":"2024-04-12T18:58:32.474Z","position":1,"description":"The wetransfer.com website","showcase":true,"start_date":null,"group_id":"44hk7t6xnx2x","page_id":"sc26zwwp3c0r","group":false,"only_show_if_degraded":false},{"id":"44hk7t6xnx2x","name":"WeTransfer","status":"operational","created_at":"2021-02-18T15:52:21.188Z","updated_at":"2021-02-18T15:56:48.617Z","position":1,"description":"wetransfer.com - Share ideas","showcase":false,"start_date":null,"group_id":null,"page_id":"sc26zwwp3c0r","group":true,"only_show_if_degraded":false,"components":["w08rk28xj3p3","mf2v9qp4mcxz","ckf5fh8lf5vt","8mnt3h18wtzn","61l8bdb8h6g2","nh9l6h7pld3r"]},{"id":"sbyx4393d931","name":"Journal Store","status":"operational","created_at":"2

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1954x1469, components 3
Category:	dropped
Size (bytes):	537972
Entropy (8bit):	7.791823574606919
Encrypted:	false
SSDEEP:	12288:TXf+22+/MVuSg1dL71OwxkmWPQyqg2xnrTE7uhxzK+Dc2W/N:TL/MpyUwxXWYDPNTEKfKJV
MD5:	5B44D2013A07B79E24A7D614CAEE6BF2
SHA1:	01FC3FC5FC0EC5C4DE4049CF941C6A8DAA392AC2
SHA-256:	76871E0874BEDFCBA965C7F93D79D861D8A70998CAFF6C357FFDF25594B10B68
SHA-512:	EE272A1CDC46EDB30ABA11436E1B67AEB18368FAAE6547C52D21341751B101A46B8E9703D2BB2C1E3F3168256757A95B50AF4EB5444999C3F57A7B00A42312F7
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................V...........^.(.......................i.........f.......H.......H..............0221....................0100................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11239), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	49261
Entropy (8bit):	5.202191380353316
Encrypted:	false
SSDEEP:	768:fMyiXqxbUZk5wG0HvPRvzH7jV00d2Ntm08:UD1Yw7yDmB
MD5:	49CCFE1681AF85D1A63F3AB5B982B9DB
SHA1:	2BE57F82DCA5367D79C3ABA68FD08197DF8C0F21
SHA-256:	AF2BA5341C04F3DD6C934FFC13E2533C69665CBB662EE675EF03FEFEB4727941
SHA-512:	96819E351EAB5A268669B0850E25770BD6A0A38994267352412234FA788B9DFC595EB8EBBFEECC02CBBA93283EB103FE3A7B39F4C59D325AE0EEBD08A3BCEEBB
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US
Preview:	"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function(){return c&&c.isInitiated},e.prototype.hasConsent=function(){return!0},e.prototype.addEventListener=function(e){"ready"===e.event&&this.isReady()?e.handler({api:this}):m.on(e)},e.prototype.triggerSurvey=function(o){var a,n=this,s=!1;void 0!==(null==o?void 0:o.timeout)&&0<o.timeout&&(a=setTimeout(function(){d(!(s=!(b=!1))),m.emit("survey_loaded",{available:!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dtName},e=!1,t=[];if("none"!==f.storage&&y){var r=y.state(),i=0,c=0;for(var v in r)if(r.hasOwnProperty(v)){var l=r[v];if(!0!==u.isTest&&

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028836136&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36189
Entropy (8bit):	7.469539129680351
Encrypted:	false
SSDEEP:	768:JEM9uTjYhl6NkG3WRX4XpKrkq5UJf/WpCWwpeqkg:59uH8l6NkGmRXoKrkiUliCWwhkg
MD5:	998A47703D2BD3C00DB0BC1BE6E30A11
SHA1:	0471BC53270FBE8826A30F2095576C35473BA739
SHA-256:	5AC4138920826CE9FFC12752D6C6954E970C14C95C3C9197212C481847FC28FF
SHA-512:	D2CE11C56F7993478657DFF38A0A50E92311F92C4962579B9D295890DA6C6AA9484F14E442701D9910F8A2FC9D7CD468F4D55D705E759E0B2706E83EEE06A453
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png
Preview:	.PNG........IHDR...X...h.......~4...$IDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............qW..G.............d............&X..........k...i.............TV&X.K.........@sg...M............L....d..Tx...........U.....h`.e.X............C\|^50.r@.................,....<.tDx.A.H........... .L....\`y....e.\.........@1v......W.4..G9....................c.K......>3...H..N.._~.....OK)..Y.....;....9............>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yx.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:...........q.........o{...K.e!.\.I..XY)zK.........rJ............VL...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	4.606544918787549
Encrypted:	false
SSDEEP:	24:2VB6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHQ1:3bwMlGbFWLT9f0W2dZNw1
MD5:	7D53C302929B29B84DDF7B7B4F916E47
SHA1:	EA2CE4181E88C60688511A4FC824D756110305A2
SHA-256:	39A6FB319CFAEDD656DC1DD9E9EB41E9B6BA564E9654934F4543447178BF307F
SHA-512:	05AD009350224AD184F9769314B0E6F5EE24D5656A772BDC5A144CCD9D6C0B8B3F06C9D19031E0307D8F341336F476BFFD9260FD5C0A15942CB9B98AFFFF82C3
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/56335302.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.insightsuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.webinsights('set', '_uetmid', m);.. w.webinsights('metadat

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27984, version 1.0
Category:	downloaded
Size (bytes):	27984
Entropy (8bit):	7.9917050547850605
Encrypted:	true
SSDEEP:	768:LHRy3jX6kwUDehXOjqYEYcxOLzgP7sKm4E:9ImXUDeheeiMOfYVE
MD5:	0E2EE02874D250D7602AE70E15E174C6
SHA1:	E1AE348778A4318680B6C7FF26AE216C348F0BB3
SHA-256:	AE3F0597EF34719D83D8153EC6A734D18C28098264F903424112BE85354E78CB
SHA-512:	469CA42C8C9DA54E161B7A826EF48240762AD42E94060458BF8D6F73F618956BF0FFDEA875C03E2FADEEA72493ADE9BAB32B70DECFC4754F066FD9AA93E02DE5
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2
Preview:	wOF2......mP.......(..l.........................?FFTM...4..8..p.`..n..r..W...........&..6.$..H. ..\..~..}.E.gpn:~.Q..."s...4<.6..NJ.!a.......O.^.....%.8,.Y.k....\.<.......i......L...Ek...D....{..\8Nt.]t.I>k6.\|g.. 3.....I..T.H8wz:.......Q..gs9;dS.PF...7m!;.d.. .m............D........a_.$......R.[..."Ks..\f....R_.@.W....nD...A..f../.5.....z.~.&..>t<....h.....Q.AL..p.2.....z$.Br..d..C..........<..?...`...(b.b4`.(.+...c.).....^e...../...X..?..=...^tX.Mpm....^...E4V.Y=p......P.Qo....M.....i....+....3[>.r..'.v.iQQQQQQQQ7..M.K...d5.:N...i.'...RJ3...E.y...;Tu.(..@...v....l.F{...O.m8.....1......0M.Z'._..kta.J$......+G..r.."...!d.j...+....Q('.P(3...../..{.=..E..PU.7...,.<gt.,.t6.]C.0..@.r.^ .c.....f... ..h:+.bI...6&Mr..E+4.8^.X.+..7...8&k..o..3.f...T....M~...w.....R..IC9...P..u..e...#<...0Y-Of..lJ.V.eo...."..{.4.G.=F).X!.4n...".Br..Pk.:.q. ....op....Y..5.....`...Ym*..'m>..=j.n..2.....]vB.V....7j3kf...N..^.(....F............[w9..-x.d..............].[.{}

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=2015720746;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34592)
Category:	downloaded
Size (bytes):	35730
Entropy (8bit):	5.226602105438823
Encrypted:	false
SSDEEP:	384:C1NpkslDFLmy+/XFsjIPd3w1jr21lKJCngCZyzI56ul6OY9g4+7mZ9kvnTLvPfUz:aLk6q/2jCBlLW+HsESrp
MD5:	40097CDF413C1F1F303C66489742CB44
SHA1:	210051D7B3A5F9E2BB2400793350C0C9C0F9467D
SHA-256:	D19B7AF86A35DFDA3A91657FB0F532541AD1BF34B75C68BB9992A374CD5FD5F2
SHA-512:	9C551182ECAA04E85FD566A2BC5A9B7F16D9993940A0AB0617740EBFFB45BD5B9EC889B70C09A2F2DAB7C5CB1275DB028D6C37E67EA942614AE0D50FB1F4B74B
Malicious:	false
Reputation:	low
URL:	https://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1
Preview:	!function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])})(t,r)};./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7084), with no line terminators
Category:	downloaded
Size (bytes):	7084
Entropy (8bit):	5.6439767654353
Encrypted:	false
SSDEEP:	192:HWr+DWDb3XanHnxq7tFkWTFkGtvNMlPS4SmkpDGRFlaH16RhxcJ9/q:HWr+DWDb3XanHn8FkW5kGaPS4SPp9H1w
MD5:	9BC454B78703C124880F97850F0D0384
SHA1:	22A621FEC72AC20EA2268E97442EC19B3DDBD80C
SHA-256:	C48D94B7A374E5BD4C861D57DB4474B622705F0A658EC5074895C61D13DC3757
SHA-512:	FE0C7C02C737A5717E77D1A7229338C842435A38FF6C58B5272D6D6DA5CF1B60B6204FC0B83D19B57F4E6158AD2FD41DAC88768EF6C8EC82869D0C0C8D9D1C27
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/undefined
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="referrer" content="origin"/><meta property="og:title" content="WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free"/><meta property="og:description" content="WeTransfer is the simplest way to send your files around the world"/><meta property="og:image" content="/wt-facebook.png"/><meta property="og:type" content="website"/><meta property="fb:app_id" content="265125293564341"/><title dir="ltr" data-testid="page-title">WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free</title><meta name="description" content="WeTransfer is the simplest way to send your files around the world. Share large files and photos. Transfer up to 2GB free. File sharing made easy!"/><meta name="author" content="WeTransfer"/><

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1144)
Category:	downloaded
Size (bytes):	2606
Entropy (8bit):	5.551687754384312
Encrypted:	false
SSDEEP:	48:ja8++e2p+4A5zgiA5ZUTEtG9riA5ZUTEOCaZe2p+4A5zgiA5ZUTEtG9riA5ZUTEN:+8+/2g4otoZKGoZKtZe2g4otoZKGoZKk
MD5:	54BE608EB2E1AE8774F52D972999AFA0
SHA1:	8A8E4FDD153377AF8CD52F3890994A95B623953D
SHA-256:	8C86A9CB1235801899F04B8E8A31152716C8682EFB6963FD00C4AFB95F371343
SHA-512:	54364788E7C6BE6CF8511C9B4F6B2809EDE1C55E5C9E800DC1059D9B890FAFA5219F9F8673DEA3C197734F7F8AB7DD45C00C0D5E3CBFCEA3A41AE12315AD38B5
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1714028814330&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A01.129%2B02%3A00&epn.hit_timestamp_unix=1714028821129&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028814330-69-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028814330-69-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4186&tfd=8732&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e62

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	63664
Entropy (8bit):	7.897277805746561
Encrypted:	false
SSDEEP:	1536:mLePkHFlxOPPUNCLio/yNzzcf0eVLpCpARlbzxFD0/SJe7Ggz/yK:aFSPPa8/y5Ql2ARdzxp0Me7Ggzr
MD5:	55384393C16280C117D4A3D12F2B595E
SHA1:	12AAB590F0269F52370AC4642AE4F0702EFB3A42
SHA-256:	BEC1E73A34D3B2B0BB3E9B257425060A3A304C85D1B88B6DA3BA08E7B323B57D
SHA-512:	3D7D9B646D69214FCF6A65BEFDB6DE7287FF5E8958B748C524FF1AC3C0DA971CA596997FD4ECBCBA4630ADAEA957E171C8AA534CCDA7FA6CFE8F543082E353E6
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4:2f757cbaa67242:1
Preview:	N.#l.i...:.....B.O.#...F..<}..~...i)..Bp2.d.l..G..zq.uh...,....,.k..2D6R......`.B?.[.h....!..1_-..d'm...T`fn,...M7...t}R.j<.Vc.j..e.y.[g"l...3..%..q.t5.gy.a.x...{...C.J.R7.J.V.:....IM.._A....{.1.......<..8..T....xfy.x...5..LL..a.......q.....IC...]@.';mT.3......I...8...bm....h.....g...,la......#.o...u.8.......l..\|.+h....c.J..`.J..W..\A-..h..f#O.._#..w+.q.......z...+.$[L.p...l.].X.!p..a..[..\bN.Xu.]..5h3..b1....,....6... .....Xb.`ue.w7......#_.^XP.v...y"......}....i...Xk..)b..\.a.0H~...M..(-_y...?2..2/R3..^D=.%jB.....6.....-C&..]XdlM.yC.v4A.+...v.[..,.....&....%.iP.-.jN..N..=...e...3..p.6..5......3SYt..H(.GX,."..4..'N%W.f_.?.....<Y...p."+/..h.L.G\|..#"...=...c}%..y.]...v...kw.36/#A...i\..n.Z..9./Z...ub..z.k....s4.I.oT!.~^(.+......a...)x..`.\...S=..2x.g.......T0.55.r...B.s..avA.v`g.....6{!`..%...)....y<{s...@.lE.w.DiZ*y@..Sh.Z.Duw.=.M.E....6...d..8^..9.x~............rm.Z..2...Y...^.U=...B......F.....B("...M9#..,.s.?.`.0%.go.2..S..;. mK.._.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (648)
Category:	downloaded
Size (bytes):	2261
Entropy (8bit):	5.619794754765884
Encrypted:	false
SSDEEP:	48:ja8++eC+hgteG9ruICaZeC+hgteG9rulAEpO2WY61G9/Jdi00yP4KdR5:+8+/J47ZeJ45EpOrsXxD5
MD5:	DA26A22CC0B26023C7E00050B0373DD8
SHA1:	B85AE4EAFBA85222542994484BA2982D762DA4DA
SHA-256:	EB32B789707C03046A3FB22B91D4EDAB8A92A99505046BDE59528091B0820467
SHA-512:	48B39EED1956CFEDAEEFF0902D9F58E563A9794F1F16EE98574BC51DD0E88D668C6707FB7A5482A4D17A7DB080193BF44726F192EF969B21D34F0AB1BD54C543
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A26.641%2B02%3A00&epn.hit_timestamp_unix=1714028846641&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028846511-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1172&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (649)
Category:	downloaded
Size (bytes):	2265
Entropy (8bit):	5.635737212266143
Encrypted:	false
SSDEEP:	48:ja8++ey+hgteG9ruICaZey+hgteG9rulAEptWY61G9/Jdi005oClTXdR5:+8+/547Ze545EpGsXsoC9D5
MD5:	25A839B605FC7FE1944ADD8D5C184A35
SHA1:	CD965B23CB26C81E4F7503D0CFF5FD673D5966EC
SHA-256:	386EB04E552A01B202573F41EFB170EF2FDC85B06374E1536950CC26B032612D
SHA-512:	232978FE869853AC819F800FAAC7D41056CF0F295C2ABBCA482FF7D07D37A92D9BE51EAA8CC62598DB2BD4D142537AA96D731241711203C3012CA34E06473282
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A30.584%2B02%3A00&epn.hit_timestamp_unix=1714028850584&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028846511-62-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-62-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3963&tfd=5149&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102
Preview:	{}

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/spiral.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65442)
Category:	downloaded
Size (bytes):	180046
Entropy (8bit):	5.756001709531048
Encrypted:	false
SSDEEP:	3072:2nObdvkLKt40JQ3AhuFXIXo+Bgfs0NYWe/enqdXigyBtE7y99i9QA:yObc24iOYXo+BgU0NYQn+igyBt3L05
MD5:	488F87C26A52060914792B3A55398913
SHA1:	11CF859EA5A7ADE6E7E9B18033742716947E975B
SHA-256:	AEB8A5C81283D7463DC96141351CA86637EF82344FE4D01AA944D94759C4F9A4
SHA-512:	C13984E50785CCCC199B6D10B101D9146141B5BB27DAC3FF775A6874EAFFE5D30FB5D75FAD841AD60FDD5A3B9D61E342A9F11C622D76170A5272E5D16F89EDE1
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/bundle.5131ec90dd1db1689128.js
Preview:	/! For license information please see bundle.5131ec90dd1db1689128.js.LICENSE.txt /.!function(){var t,e,n={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:["interactive","mask"]}},2274:function(t,e,n){"use strict";let r;n.r(e),n.d(e,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return M},hideCloseButton:function(){return h},initialize:function(){return o},onBlur:function(){return v},onEnterFullscreen:function(){return T},onExitFullscreen:function(){return L},onFocus:function(){return N},onSafeAreaUpdate:function(){return m},sendTrackingEvent:function(){return y},sendTrackingVAST:function(){return j},setCloseButtonColor:function(){return d},setStatusBarColor:function(){return g},showCloseButton:function(){return p},startUpgradeProcess:function(){return l}});let i={};const o=async()=>{try{const{Marco:t}=await n.e(441).then(n.bind(n,4441));r=new t((t=>{let{availableListeners:e}=t;e.forEach((t=>{r.listene

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028867209&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28644, version 1.0
Category:	downloaded
Size (bytes):	28644
Entropy (8bit):	7.992787664504082
Encrypted:	true
SSDEEP:	768:lMH76XTJb9Di5l3gc3e1YnJWfIZO2p2PG07:076XVbJint3a6WIZOe2
MD5:	FBE81375A88B68A2A2D7FFC63E6A0D8D
SHA1:	5410C67EFEF252A2AEAF77C118CB184E179CDD48
SHA-256:	4C9CEA7B804803A1A27B183E485C684934480E009E0F999F64ABC6C26F14AF0C
SHA-512:	1FEC84CDAFD8CE9892B6CE72B6887B361FCEBA3BF9E677DB9E5388B08948CE50D6618AFF158F5DE504F81EA62E81E92AD2F3D6D235E13511E1AE042F370FCF16
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2
Preview:	wOF2......o........<..oy........................?FFTM...4..:..p.`..n..r..W.....T.._..&..6.$..H. ..\..~..J...7dnNx'(.......bi.......>ed ..(......'&.9,w.K..........s.K...9......P&..k.....uo0v.@...8!b[W.T+. "x....j...A..N.....}...J.....[.:d.M.t:D.B...v2.WXM...Y./.=...a.......VI.......b.....@.5}..E.[..78.dB..AA.s'.l..v<.....}.......S/.<......$.I....3pJ..x~n.....iaL...............F.............E..s..`.....2X.#...d.....c.."i`a%v.~..../.k......^....^..........f".....:..D......`..p....x5....i....R.0.._;...]..\|.[..o.S^...x.2,.v..s\|.i.]'..Q.t..e...S.Tt.6`zE..o..il...K..<..KY.lwM!..4..m.W@R@._.Z.........o.. '3.>u.e!.J..z<..........i....\|....O....PL.o......W^.N}.,..o.z...[<...D...IL.3.V#.D.<..6x..w....{........9co8..-gM..Y.I..9.....E.oq.....w`==}B.9..T3...jj.....$......$..8NNN.....W..)`....Un.R...n.p.$@FH....NY3e.)S......Z. ...v...7J....v.i.....DV.....T...f.?...J2(.w.#t9...vV......_.._..H"1.....U.@....@...2.dU.+.9...9A...x.9Tr.B........+\.....T.......

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17274), with no line terminators
Category:	downloaded
Size (bytes):	17274
Entropy (8bit):	5.523574327087312
Encrypted:	false
SSDEEP:	384:iJvPnYxIh54XHw2WDTaEWgG0frqJY+qt02XhOwuG7+B6:iJvPYxCYogEOJctlXhOwuG7+B6
MD5:	227DCD2826F29B0374C5CDA69996B745
SHA1:	40E979435BFF146FE9B50B1B8949A224E71DCF95
SHA-256:	27C216F4A43D47B8BC0B446D13B1FCFC6A93D728FCFCE136C65A1CAE07136662
SHA-512:	BDA6333B0FF8A83289B1BC606A9A0827F23276CD7721CE48B52C76A48A2DD7647B12AD6834F5343C001ED70735A6E405537068D9E12EC3816C62DFB245CC6B0D
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/404-d60ba40552f46991.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(72169),d=n(78967),_=n(49034),f=n.n(_),p=function(){return(0,o.jsx)("div",{className:f().AppLoader,children:(0,o.jsx)("svg",{viewBox:"0 0 33 15",className:f().Loader,role:"img",children:(0,o.jsx)("path",{fill:"#d8d8d8",fillRule:"evenodd",d:"M25.883 15c2.336 0 4.143-.62 5.2-1.75.5-.538 1.056-1.44.64-2.12-.362-.592-.974-.705-1.697-.338-.723.367-1.585.565-2.502.565-1.585 0-3.225-1.328-3.225-3.248 0-.2.165-.17.388 0 .5.422 1.53.76 2.808.76C29.86 8.87 32 7.32 32 4.833 32 2.206 29.61.2 25.91.2c-4.14 0-7.394 2.655-7.394 7.23 0 4.265 2.67 7.57 7.367 7.57zM4.497 15c.973 0 1.418-.593 1.752-1.13l1.5-2.372c.306-.48.556-.735 1-.735.446 0 .696.255 1.002.735l1.5 2.372c.335.537.78 1.13 1.753 1.13.89 0 1.334-.395 1.723-1.214.64-1.384 1.25-2.966 1.89-5.48

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090), with no line terminators
Category:	downloaded
Size (bytes):	46090
Entropy (8bit):	5.4071519094390865
Encrypted:	false
SSDEEP:	768:EyRywZgW+Zx/AFh32HXBbRW33OKdZAsI9Hmxv+23i2D+FRPTM7z2+:EYMZx/A732HXBbRWGGxv+23i2D+FRPT4
MD5:	6D2B1124D8D986D756B08F0472FAFE16
SHA1:	2F9FB43C2BC571D911BA6BA200DAD84C7176CE25
SHA-256:	73280A5585F71A966D118203D402213832F3A7FB3208638EFC2BED11183C41D0
SHA-512:	B912A8FA2C9DF3CA17CE12488413DF70DD1625375DFEB513313A1E002CFBF60BD485664FF2CBCD402B4FCA4428913F4708F642E59CD90B410C92597FAABEBF3C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google.com/store/account/subscriptions",n="https://wetransfer.zendesk.com/hc/en-us/articles/4563370515988"},29975:function(e,r,i){"use strict";i.d(r,{Z:function(){return n}});var a=i(90581),t=i(8870),n=function(){function e(){(0,a.Z)(this,e)}return e.isOn=function(){return this.currentVariant()===this.variations.on},e.isControl=function(){return this.currentVariant()===this.variations.control},e.currentVariant=function(){var e=(0,t.bB)(this.key,{value:this.variations.control}),r=e.payload,i=e.value;return this.payload=r,i},e}();n.key="us-price-change",n.variations={control:"control",on:"on"},n.payload=void 0},67568:function(e,r,i){"use strict";var a=i(86368);r.Z=a.Z},86368:function(e,r,i){"use strict";var a=i(70865),t=i(96670),n=i(2784),l=i(

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	641
Entropy (8bit):	4.436013846526027
Encrypted:	false
SSDEEP:	12:trfmhAuC2jEVdQzhfUQg7nmRucXY7tvzRnK43F7Guz7HfKHrFIjfKZt:tTmyuB4VdIfUQgzeIh7RFHz7/KLBt
MD5:	E8ED1B2102A157CD3606362229DB32E9
SHA1:	AE12C57587F2F929937B7315BE62B00F02B6AE67
SHA-256:	74B451027FC088AA19C079B2BC5421965334C9CE4418068B3B43BFB92AF82E9C
SHA-512:	AD0672048CBC27CFC7E9C1F2E90D405419F3DB8F3696145E88F5344FF7D820EB8522B7F450552B6BCFAC8FFE34E5A7384EC2A07C350777D5A612B8E43098FAAD
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/ae12c57587f2f929937b7315be62b00f02b6ae67.svg
Preview:	<svg width="18" height="20" viewBox="0 0 18 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.66 8.10302L1.79162 8.10302C0.801588 8.10302 1.31687e-07 8.95697 1.19125e-07 10.0104C1.06476e-07 11.0711 0.802134 11.9177 1.79162 11.9177L11.6355 11.9177L7.09008 16.7448C6.39922 17.4785 6.39246 18.6934 7.09385 19.4382C7.80014 20.1883 8.93074 20.1849 9.63005 19.4422L17.2575 11.342C17.6023 10.9759 17.7767 10.4898 17.7777 10.0022C17.7821 9.50808 17.6065 9.02332 17.2575 8.65265L9.63005 0.552454C8.93919 -0.181229 7.79525 -0.188406 7.09385 0.55646C6.38757 1.30652 6.39077 2.5072 7.09008 3.24985L11.66 8.10302Z" fill="#5C5E61"/>.</svg>.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51227)
Category:	downloaded
Size (bytes):	52466
Entropy (8bit):	5.704846966702599
Encrypted:	false
SSDEEP:	1536:jaRc8FTQ1tiKKWohpNimqJlJPD1867N33jymYtjvYUo:Uc8FTQ1k/hpg/VD18uN3EtjvYUo
MD5:	010B3CFB78871D71AC3C9D3546C24435
SHA1:	E8A87A47569B51FAF8B9CDB1A33731A7FCF79D57
SHA-256:	F3BA4CFFB951981FA0111DFF656E543F3EB25DE1F39893601198B467E71038C7
SHA-512:	A0D934F5EE8C4B7A6895DC968C0BAD05695558878437B821ABCD06D0C3D2C8F02E071D6F2629852E1E08B8FAFCA3ACC71C667C1FBAB760739BA74968A260ABE9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/87pM_7lRmB-gER3_ZW5UPz6yXeHzmJNgEZi0Z-cQOMc.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(B){return B}var S=this\|\|self,e=function(B){return d.call(this,B)},y=function(B,J,V,K,w,h,P,k,b,O,H,t){for(O=(t=55,B);;)try{if(t==K)break;else{if(93==t)return k;if(t==J)return O=B,k;50==t?(O=B,t=19):19==t?t=S.console?26:J:1==t?(O=54,k=b.createPolicy(h,{createHTML:e,createScript:e,createScriptURL:e}),t=J):t==V?t=b&&b.createPolicy?1:93:55==t?(b=S.trustedTypes,k=P,t=V):26==t&&(S.console[w](H.message),t=J)}}catch(G){if(O==B)throw G;54==O&&(H=G,t=50)}};(0,eval)(function(B,J){return(J=y(14,78,6,89,"error","bg",null))&&1===B.eval(J.createScript("1"))?function(V){return J.createScript(V)}:function(V){return""+V}}(S)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9u

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (911), with no line terminators
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	5.144668855875399
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5LR:0E1JBaYcfICAK
MD5:	E434B9481E572CE66AAAF238A1F3BE93
SHA1:	D89798424A7EE87276EF5A8431E458A31FD917F9
SHA-256:	00C602D4C83975BB9D9C9133D537E5FB93104A2F5A5C11957D62538A30153B11
SHA-512:	27104F7BF2823584B50D359902838E9CE78CF82B1C2B7D712E04DFB2909D78861802094847BFA2AC32860747DC8989A12BBA47E92FA2FF39460FCA723FD21DC2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7ec742af40df2646.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2884
Entropy (8bit):	4.251795863687538
Encrypted:	false
SSDEEP:	48:0gthO2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+Iw:zYZnH/l8NhHJ0M2J7dCU
MD5:	44D977DF5526260BF9C8F105121AC969
SHA1:	8EDE0805AC652578B1455412401BF4DE4EA3E1DA
SHA-256:	DA5F3206C50D6684BAA938400451CD8E2AF09491244BAF4129E5C7BF4BF512EE
SHA-512:	9AF15E923508BC4A34C107BE477579E88C90F497C7CC042971386B0EFE29F6D3703D25370837855AE9E2A14A9315DC0FBCDEC376B3D0343FF1308E1A2F9ABD38
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2312-photoshop-apac/imagecompare3/1_BG7ymf/GB/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18513), with no line terminators
Category:	downloaded
Size (bytes):	18513
Entropy (8bit):	5.362349540732293
Encrypted:	false
SSDEEP:	384:gQ1XNfNr1zRGgbCI3TMsD4h9YAHbT8NsWDVYs8a/Q48MO2KzuaqS7+nKzSdZq4Qf:gQ1XNfNr1zRGHI3QsD43YW8NzDes8STc
MD5:	56B11DEE72DF8E44C1E72BFD66E237AB
SHA1:	47EAD25BFA65C2BD1E0D77C1F388B3174B514263
SHA-256:	43312930CB4FC5A30F3A9C23A047948B181ECE20BE883E817E5A737475600E54
SHA-512:	4EC983B4ECA5BB6381EB2C7169392807F40407E340B82BEE0C229184B0F68041C8F56EA4CF7E8D09064632E3F18614A9475FEBA7E97C2E0671C9537B342F62F8
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js
Preview:	(()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{clickOut:()=>j,openPanel:()=>x,rotation:()=>H,sendAction:()=>L,sendError:()=>U,sendEvent:()=>M,sendTiming:()=>F,showDropzone:()=>$,timer:()=>W,ui:()=>D,vast:()=>k});const n=e=>{if(!e)return;(new Image).setAttribute("src",e)};const r={clientTracking:{},timings:[],initFromClient(e){this.clientTracking={...e}},init({envName:e,serviceName:t,version:n,sampleRate:r,applicationId:i,clientToken:a,useCrossSiteSessionCookie:o=!1}){i&&a&&window.DD_RUM&&window.DD_RUM.init({applicationId:i,clientToken:a,site:"datadoghq.eu",service:t,env:e,version:n,sessionSampleRate:r,useCrossSiteSessionCookie:o})},trackError(e,t){return this.clientTracking.tra

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37028
Entropy (8bit):	7.501316586529086
Encrypted:	false
SSDEEP:	384:mOWayMNHWO9WwDoQuNjNfGehyoMraSspu6/5ije3gEFo8zEPvA+YCxkbeR/7VdLt:mOWREHnSlIaSszsiQEFo8zEPvCets6
MD5:	62615BECF8831F197E70175A43C41000
SHA1:	E5B34BE17B73F3612BA632EB7D42F8779A027B64
SHA-256:	054C3FD1FB0EA4454A5E70D3530656BDA559E38A08E9F8ACE9BEB8A8EB64839E
SHA-512:	7E41D6DBC7FD5E11A142BF53D011703443DB95F5D1DCC2E21DD1DD982874E2BF2920A1803005C489F31D21FF2ACBF76451A581A98413AE667A77CB08AB949F81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...h.......~4...kIDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............P..A.............d.k...........\|i.%............i.............TV&X.K.........@sg...M............L....d...Cx..........U.....h`.e.X..........7.C\|^50.r@.................,....<.tDx.A..r.......... .L....\`y....e.\.........@1v......W.4..G.ad.................c.............H..N.._~.....OK)..Y.....;....9..........0~>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yz.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:V..........p.........o{...K.e!.\.I..XY)zK.........rJ..X1.........@...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (416)
Category:	downloaded
Size (bytes):	84373
Entropy (8bit):	5.044443978264067
Encrypted:	false
SSDEEP:	1536:VISM9HxNz9F9Pl6YrV30ZdsVsh/4nJ9Yt7dNToMA8hlyAK871F7w86rUfTLnQCpn:EnGnWa6Efccn/HTtytHwtaX8
MD5:	D9A2B9D2CA4B242E3495342F20FE0EE1
SHA1:	D0E665F774A6DEC4B8ACAF9C5DE161DB97B6E34E
SHA-256:	63D1D58B3DBFB76964F6A3BFA0B795359E4AECDFFB58D602E9BA05E3D6B8DCA9
SHA-512:	BD1084B060DB17A43C783FF685E7508AE242BF034150F260229E8AEB5BB3E0917449F722AC854777658E7DA59EDA1ABDCA16DAEB9EA4AF71FD13BF64E7229B7F
Malicious:	false
Reputation:	low
URL:	https://p18.zdassets.com/hc/theming_assets/63313/439936/style.css?digest=18384406773778
Preview:	/.Theme Name: WeTransfer Theme 2020 MVP (1.0.9).Author: Mikey Casalaina, Studio.Description: This theme uses elements of the old theme, elements of the 2020 Brand Home (about.bywetransfer.com), and elements of Zendesk's Copenhagen theme. If that sounds like some sort of Frankenstein's monster, that's because it is. Originally meant as a quick style update, the pages ended up needing substantial reworking. This is a working MVP, but there is plenty of extra code and room for improvement here..Version: 1.0.9./../! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /.html {. line-height: 1.15;. -webkit-text-size-adjust: 100%;.}..body {. margin: 0;. min-width: 320px;.}..main {. display: block;. /* min height set to full height minus footer height */. min-height: calc(100vh - 9rem);. width: 100vw;.}..hr {. box-sizing: content-box;. height: 0;. overflow: visible;.}..pre,.code,.kbd,.samp {. font-family: Consolas, "Andale Mono WT", "Andale Mono", "Lucida Cons

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpi35,pingTime:-10,time:1700,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028878046%7C%7C1425b7da8930335f3cec37a6bf29203a%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C75bf83fbd6e4dfa1962435da92142deb%7C%7C666e8a34ab0ab089bd5e6dbd45fe12fe%7C%7Cedd64f7adecd27ee04be4aa405afc3df%7C%7C374b15d2d59cb060f1a86252387bf7c5%7C%7C9d5cb65a61332e0d9059cf7e90e3fd9f%7C%7C1663701684,im:%7Bimprf:%7Bttecl:2169,ecd:636,tsecr:1%7D%7D%7D"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:IvOKPUe:IvNUe
MD5:	53FAB767ECBD3BF07990B10246BEFBD4
SHA1:	49044085BB137D175D261B5FB9617C6F0F302C49
SHA-256:	BDEED1E1C0751610C8F3DC2A5C78C93F841C366B36A7F7A54F5E6752C2656C05
SHA-512:	B77C74696CD64C96E177CC32890BA8B666E13578C038BE4E4E5D4AB0438CB8E2B7B3539AD4089F9AD987C1BD53926B279EF7ADD30C690DC2592C5C4239465559
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.js
Preview:	"ad placeholder";

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43188, version 0.0
Category:	downloaded
Size (bytes):	43188
Entropy (8bit):	7.98710296602658
Encrypted:	false
SSDEEP:	768:x94SBRGblSQhMXU2pewGKB6kuvBkW3fsNPSghXI+Ktehv2hMobEh5p:xhBcBoU2plBIBvODFy4hehMl5p
MD5:	55576599A2D772F9297C5036D355B1FB
SHA1:	C52E4F9A59137105DEB12A3DE25EE7D5A15FD286
SHA-256:	1E3D5D86432B9BFCDF25CE0E35FD23667CEA86F6FA71FA920CD84ABB70258F73
SHA-512:	8270B97F43FFBE59405D81A988A5C194B15DCB3159D49FF7C37560C90069F1EEF67BAB8E15C2DCCE69FB5CF51810D4D4834AF69DB6B6571BC3D0464C5D6B6514
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Super.3397811e.woff
Preview:	wOFF..............v.........................DSIG................GDEF.............\!.GPOS... ......4.A.d.GSUB...........^._..OS/2...p...N...`j{..cmap...........h=j.ccvt ...,...)...4.M.zfpgm...X.........6..gasp...$............glyf......s(.....fc.head.......6...6.G..hhea...8... ...$.S.Fhmtx...X.........."!loca...8........w.^maxp....... ... .>.Mname.......]...6R5..post...T.......b.))aprep............hF.x.%..A.a...p.....p.....p...L........$..5....3.)...f..d.+..R.t.m..{.\|..}6.u.hd....f.1.Xd.eV.EF..C_.1..Z..P....'.....W?L.4..C...c.......x.,..l.`............m.6....FXD./^\|.b-.b-.'_.{....x-n[.[ye};/.vV.y??..H=v.?.T....X.K.#xk....X.YyL....].[.Ai.........F0..T..nc}y...M......Epo.l<!.8..yJ..s..P.L..9a$.....I2...D.l:...$.t^^.E.....h.H.[^[.D.x..e.,...^..n9(..&V.-.rU.J.<...Z.J.. ?.......,......N.\..D.+Ke.....W..Y.w.O..cy-o._.e...6b.[....a.2333333333ch.L........?s.t.....<.=..Oyw._Y..$;y..!.._....VV.VK..DvX.........z...a7..`.b/8.Wa.g^.Q.T.5n...:..6..%..H..8.1s...2\...Z.\.9.

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x968, components 3
Category:	dropped
Size (bytes):	514648
Entropy (8bit):	7.988656448669567
Encrypted:	false
SSDEEP:	12288:alOr0gBBMts7mJEair9shsDUKXRjnmLsahzgfBatPu/:AOrzsts7SDirS+d0Dzg4PC
MD5:	F714ED5C817117AA20B0CAA4BAC76725
SHA1:	ED0E72BE4DA41315A54FB1F384B15E19442EFB17
SHA-256:	AE534A756B4E8DE5913000FB20BEF2B94F8C35282FD0979B1383C13FAD309C0B
SHA-512:	7F84860E904729E6ED676392C380E17D337E0AFD990C14615831F6B9B11E626FBBD8F4E5A35F11159E91CF026FC61115DF6993AAE165728299B48EE7B048A0BD
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=dXOQQTDezfjFPzebOKcJfm1%2BUZbbCKI0Xk3GpfxlgPDm0sJ5eLI%2F5KB46CUoRYawBvpds2KtODLS1LYDuIgSwo32LrWDrxQMwiABHK6VgIX4nV%2FIOTfkH5dN6d237j8CSgew4y8Z431ndy4yAjzXhAHx%2FmEVxEfBA3QD95B%2Fek%2F4snkH0%2BUDEESBvBoXkh9GEss%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028884444
Preview:	{}

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	217740
Entropy (8bit):	5.732396324650163
Encrypted:	false
SSDEEP:	3072:h6/QzhroKetFI/uFBTWisniuipaQRv7h5c8xZ:h6/QPMKuFBqiW4c8xZ
MD5:	EF2D82DD3B036301486A6404BB563EEA
SHA1:	A9DD864019BECFA21F0BF8209724BCA2B8C35CAD
SHA-256:	5E98BE5A6280EDF751DD03DB7276ED4170746365AA5069A07F1D86E90696B549
SHA-512:	51DB9DCA50805023A60A4BEEC5F0064692E31FA4DA3AEA78D03890BF8F0E6228E9C7D1D64D8450ADFEFEC5DFACE8BE9A8794DECBE8B73BC2432F3A2F4A7143B0
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/bundle.4507bb975b4fb0667dff.js
Preview:	/! For license information please see bundle.4507bb975b4fb0667dff.js.LICENSE.txt /.!function(){var t,e,n={7296:function(t,e,n){var r={"./circleFilled/index.js":8696,"./circleStroke/index.js":6596,"./default/index.js":7428,"./squareStroke/index.js":312};function i(t){var e=o(t);return n(e)}function o(t){if(!n.o(r,t)){var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e}return r[t]}i.keys=function(){return Object.keys(r)},i.resolve=o,t.exports=i,i.id=7296},1176:function(t){t.exports={title:"",platform:"desktop",variants:["1","2"],tags:[],deployPathOverride:!1}},8696:function(t,e,n){"use strict";n.r(e),n.d(e,{ccOff:function(){return i},ccOn:function(){return r},exit:function(){return o},fullscreen:function(){return l},mute:function(){return s},pause:function(){return a},play:function(){return u},sound:function(){return c}});var r='<svg viewBox="0 0 16 9" fill="none" xmlns="http://www.w3.org/2000/svg">\n<path d="M7.58848 5.47848C7.51168 6.38088 7.19968 7.10088

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=COT_r5Ln3IUDFdEvigMdAtgP8g;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1714028870147;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeMo,pingTime:-10,time:5445,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028865479%7C%7C8ac481bf0e1a7f304f293d4029761e87%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7Cb900e8bdf8358bf79ea11260a27fe2d2%7C%7Ccf55e76124fefb919c08c040283a13f3%7C%7C8fc692ffc3881ae8ae143b1dbd34cbaa%7C%7Ccf5b7198bc15b786119e4294fa50d240%7C%7C9eec2d5e74e1050bbb6c60514836d874%7C%7C1663701684,im:%7Bimprf:%7Bttecl:6727,ecd:1606,tsecr:2167%7D%7D%7D"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
URL:	https://d9.flashtalking.com/img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1714028833656
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028880625&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26279)
Category:	downloaded
Size (bytes):	93606
Entropy (8bit):	5.429955848388857
Encrypted:	false
SSDEEP:	768:Jyo+RL6DqK9cdmcRURCHZRaycS3HZysOJkVkONnw6yCw8zHO9ZHXB8cTcT2/Mu41:JYB6DqfjRz3wsgkCONw6yCw8zH0ZA2a1
MD5:	1F3488247C90BB5DE253D3D0CB3B7458
SHA1:	6CFD5FFD2668B160CBD61B20AC59629E8F83C1DB
SHA-256:	01CEE6A7A3F1444680B188AB84052E2B6C85966F53A718D3926135EBCC832FFD
SHA-512:	1AABDAF8778F046DB77F2549A3B74A4BE9F197786D8CE7820A8864D5DBFF1BE47A3387897665EC9272BAC5695D8539DF589AAB0BEC7F48A8F8958F4B5999E072
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/sca.17.6.2.js
Preview:	/* .json2.js.2014-02-04.Public Domain..NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..See http://www.JSON.org/js.html.This code should be minified before deployment..See http://javascript.crockford.com/jsmin.html...JavaScript MD5.https://github.com/blueimp/JavaScript-MD5.Copyright 2011, Sebastian Tschan.https://blueimp.net.Licensed under the MIT license:.http://www.opensource.org/licenses/MIT.Based on.A JavaScript implementation of the RSA Data Security, Inc. MD5 Message.Digest Algorithm, as defined in RFC 1321..Version 2.2 Copyright (C) Paul Johnston 1999 - 2009.Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet.Distributed under the BSD License.See http://pajhome.org.uk/crypt/md5 for more info....base64 encode library from http://www.webtoolkit.info/.distrubted under creative commons license 2.0:.https://creativecommons.org/licenses/by/2.0/uk/.*/..window.zyx123bldtmstp=1663701684,window["87809293129bldvrsn1663701684"]="17.6.2",window.pou987bldnm="sca",window["6789

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a&google_gid=CAESEG_gxsiPJj6fH2PskJq3N8w&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516), with no line terminators
Category:	downloaded
Size (bytes):	516
Entropy (8bit):	5.412572612885734
Encrypted:	false
SSDEEP:	12:fbjMlxAU7likLPdqIOG3tgqaKYQEnc2jDoum5RXu4X+e:fbjMlxAU78kLPdqIR6qJYIsaXOe
MD5:	442C1398C605B69D6CC3349439D63049
SHA1:	E618B018BD6C0EBC5D651E69538D3B7438C52EA0
SHA-256:	E64C2B1C12738D96943899C7A0D35CCA60839DC079E8ABA7D60C9433E350EE56
SHA-512:	C0BA0F10B8C8D3CA8D2881D49E4B4DA4AD7291EFD108E7ACE1123318FE10927682A4E4C67455733E97C61EA74E02ADD74CD045DE936C66CD1DEB9CC424A82C65
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});var r=u(52322),_=u(19552),a=u(53145),c=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(a.Z,{}),(0,r.jsx)(_.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=79711,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x968, components 3
Category:	downloaded
Size (bytes):	514648
Entropy (8bit):	7.988656448669567
Encrypted:	false
SSDEEP:	12288:alOr0gBBMts7mJEair9shsDUKXRjnmLsahzgfBatPu/:AOrzsts7SDirS+d0Dzg4PC
MD5:	F714ED5C817117AA20B0CAA4BAC76725
SHA1:	ED0E72BE4DA41315A54FB1F384B15E19442EFB17
SHA-256:	AE534A756B4E8DE5913000FB20BEF2B94F8C35282FD0979B1383C13FAD309C0B
SHA-512:	7F84860E904729E6ED676392C380E17D337E0AFD990C14615831F6B9B11E626FBBD8F4E5A35F11159E91CF026FC61115DF6993AAE165728299B48EE7B048A0BD
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	4.246559100144723
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+j:zMZnH/l8NhHJ0M2J7dCi
MD5:	A0B8AD15ECFACACDF3AD96111E7BF70A
SHA1:	9C4AC39A3E4E5F5688C384031684CC14796E2B09
SHA-256:	37B1C61A98681DE59B50AA5C7FE587BF2D128837491082DE7B9D6A4B839F3D38
SHA-512:	9DAE31B57E033A78F1E57AF44CE9A8F1D8529880FCC3A5B51BB2BCF610A31295DF52B2FF7D1C555F306107C48AFEC5412F2772890000D485BD19AA9FAA4B3ADC
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/dolce-and-gabbana/2404/static/1_yEBReB/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	125
Entropy (8bit):	4.904360113533345
Encrypted:	false
SSDEEP:	3:tRBRNqhwMO+BIZDmJS4RKb5KVEriqGUHbq4VNRNdDMHqQJ9rKgZN0:tnr8woBI9mc4slTDHWUoKME
MD5:	100CAB5DDC5A071CD7287A6AA6D4D44D
SHA1:	29F039F56F644EEB03555DEF96263D4278CD10C7
SHA-256:	C3DEFB57C9AD7007712D914E2611F01883EFB1573EA18217698CA6956B385B06
SHA-512:	A40978F10B76CA40D1DC6814ECEC51684F0A551BE72A082F03509F126B034ECC17516804F8171E7D6926B6C5D97B388247456CA03F5914B6E674157B52BC6568
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/63313/29f039f56f644eeb03555def96263d4278cd10c7.svg
Preview:	<svg width="4" height="4" xmlns="http://www.w3.org/2000/svg"><path fill="#161616" d="M0 0h4v4H0z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=WsOWC%2Fti4O0ceE%2FBAu0IwYmZzdCGpZVua1FRXoDn2dctXWq2PSoTkNzSNfW12b07hGahUEhRCVGN467rq2RHJGZ1uviocoypxTfoo2KZoFXYiczEsJZQOo2BCDBZVQu9b%2BA%2FvOyICvx8goC8LWlMb8Cm2cGow4CGpbunrb73T83fWRGkmR89Ar4yrr75ifYAdJQ%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1651 x 1819, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1581902
Entropy (8bit):	7.990999002602228
Encrypted:	true
SSDEEP:	24576:ofzek5WxR2WsKFjXwAmnfzYSUPKT7DyyjrQkSVSuuwVy/INFovuoysCFdkkLsy4:ofzfExEHawrLwumyhSQ/KFo8kIN4
MD5:	9AC36D587B4B3DC54693E4D97C4C76C8
SHA1:	B012F0E8CAD4CCAC03124B6D6E5FF9C1D545EAF3
SHA-256:	290BF92E8DE8FA61783AFB3D307017AE0CFE80B9411CC69C9EA21C80C1DB160A
SHA-512:	BDE89C87099FAF7AB3CF8B435B292CB4EC8DBBE07B4866D1560FB0661FA3FE6D325B89470BFD73DBDCE02C248C241D6CEAC1B2E9610F706B25EE73C7058F220F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...s.........b.D.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a...".IDATx...Y.e.u.=.1...,.......$5\.W.-.^...k[....v.h"...T..A..........B...iQV{.........."..3..B.Y9.yO.]k}..ggVUf..dU.........o..<:.,1.V......\|....[.x..%.......m..+w.w....\|{._...N...a.........x......'.................I.+7.=...._^.t.U..........0.....$.g..m'pn.._.W.......x;.....G\|./...@............#Vd}}.cEQ\|.F.Gd...z............TRGneY..7.....\.r...........p..c..........(.V. .j........q..:r+..z.y.?...?!.........6pG..S.~.....,i.............w.....s...H............jP....#.....Se................z.:.:........n)....9...+.... q......=.H..:"v..'.....K...........6.......;.........LX.DQ.........9..mU>X....0?.d.......%.........-r.d....../.....o-yM.Q+.'.CH......pO..Do..Y..?.....w.w...........o.[bX\Y...Fo.*..........).v......&.........x..m....&.....%...Q...........=Rr-M.f.W...rcc.e..........4>...?.K...D.d.@.......`..tjd........C.........M..:u.w.._W./..V........`N.KG.z..c....h4.6....

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14408
Entropy (8bit):	3.788256429255858
Encrypted:	false
SSDEEP:	192:q/ZVyFcNVJ7hU3Tp0LnzxZeksu2bhtXgkkXqAsDjMjyZLRvYjG+A8q2lIV1aLzZb:6ZVucvJ0iZehZfzvvhRj1avspF57e
MD5:	B2B6891582ACF566C71068BFACBD5629
SHA1:	A80510A6149267D40B912D9B7CEC365129137942
SHA-256:	6DC4274D4C936ABC63DA8F19E6EBC44BD9569D8129CC99BD34492393DF151958
SHA-512:	1CD1A29C57A6C4617DBD39C0DDF788EC71B87396006A803106EA13868430942074CC40AD03EB577E4CCBED499AC20E1F03894ADD9300A37481D59F474F182F05
Malicious:	false
Reputation:	low
Preview:	<svg width="823" height="176" viewBox="0 0 823 176" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M155.503 20.9347C152.909 10.8379 151.057 6.76211 148 2.40843V2.13053H166.341V2.40843C164.674 6.02106 164.025 12.8758 166.156 21.5832L177.457 68.3621L191.074 23.4358L190.333 21.0274C187.554 10.8379 185.979 6.85474 182.829 2.40843V2.13053H201.171V2.40843C199.781 5.74317 198.577 12.8758 200.985 21.5832L213.305 67.4358L223.309 27.2337C226.737 13.8947 225.069 6.11369 223.309 2.40843V2.13053H233.684V2.40843C229.516 8.05895 228.682 13.5242 226.366 23.4358L210.341 87.6295H208.581L192 26.7705L173.752 87.6295H171.992L155.503 20.9347ZM238.223 86.7032V86.4253C240.539 79.5705 241.651 74.7537 241.651 67.1579V21.6758C241.651 13.8947 240.539 9.44843 238.223 2.40843V2.13053H278.796L282.223 22.6947L281.482 23.0653C276.851 16.5811 270.459 5.09474 266.661 4.72422L251.84 3.89053V42.8884H259.436C263.789 42.8884 267.217 35.1074 270.366 30.7537H271.2V56.8758H270.274C267.495 52.8 263.604 45.2042 259.343

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51045)
Category:	downloaded
Size (bytes):	51078
Entropy (8bit):	5.141058818793268
Encrypted:	false
SSDEEP:	1536:5ppKcuPIOik/8c1MUd9nK0TdOCnfEBjZp89r:5ppK5Jt
MD5:	CFC33ECAFE0A3D20ED59BA16C0BE3987
SHA1:	69A2A370257DA98E3A9D04D8600CB5CFAE2858B7
SHA-256:	AFD11AAE5379E2C2E70A4929FC43CF784FAD93C96474BCCEDAA953A9F99E8C54
SHA-512:	8BC134F0726F0E57BC0DC710361F5E0A042912CBBFB483C4BC8E25CAFEBB29A7A438BB1B2A4D078D083A3AD397227F61B7EBFE92AC5D6432EC8AFA7253D67159
Malicious:	false
Reputation:	low
URL:	https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video
Preview:	(()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function r(){this.constructor=t}e(t,i),t.prototype=null===i?Object.create(i):(r.prototype=i.prototype,new r)}function i(e,t,i,r){return new(i\|\|(i=Promise))((function(n,o){function s(e){try{c(r.next(e))}catch(e){o(e)}}function a(e){try{c(r.throw(e))}catch(e){o(e)}}function c(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(s,a)}c((r=r.apply(e,t\|\|[])).next())}))}function r(e,t){var i,r,n,o,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function a(a)

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5500
Entropy (8bit):	5.216187399953183
Encrypted:	false
SSDEEP:	96:DU9qH3FeYKvqH3FeYKEArtLqRGqetKRR8uFfVDebYKV2C0YTqnrpeoKr/5DFjSmm:YgOfI
MD5:	D5BFF4ABD7873A524A4E41E35125F873
SHA1:	27E001719132A510CFC063EDF103CB2DFFBF3CB5
SHA-256:	53A3B2FED7FD6B8C3AC1DFF6DA05A8EF823794E78DA107A6E9389DD11A71A2A6
SHA-512:	35ACA0810BEC91A9DB23930C3F84CA808E176FFCD5194825C66BD61062D5A91ACC2814F4E8ACC4993EF3C3A2C738AAAC2A8F50AD34673CCB2295AF29A93A5A26
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/api/v4/nu_subscriptions/tiers?country_code=US
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAyVDA3OjAyOjIwLjU4M1oiLCJwdXIiOm51bGx9fQ==--2e63312dfd3f79cc79b8fd0e16db63cb8a51fef112eb5573f9342cff75757675",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10769), with no line terminators
Category:	dropped
Size (bytes):	10769
Entropy (8bit):	6.166673051817148
Encrypted:	false
SSDEEP:	192:Kng1T7EbE9NIrRi3gRLkRqOce+5QLKmjWGIR9NIrRi3gRLkRqOce+5QLKmjWCH8y:wgmbEqJag45RGqJag45hcbpR/za
MD5:	4F9E7160EAB0FD4C3F1D95F3BA379A67
SHA1:	6689E4052C5C5DFE10CEF8EB4E53033CE0BE2F9C
SHA-256:	6E64898E9AE436EEE9F36863F4A2B79C43DA3775C9E6E7E01FF9A40FB7B076EC
SHA-512:	1313EB390D8A67FC555727D1E30053B38568DE01CA8BCA941208917D479B0DE2C7981860F744E43DC5EB3BD9D510C4E04D2AAF1CB83FA0CBE5CB1FFB6D587115
Malicious:	false
Reputation:	low
Preview:	<img src="https://a5566.casalemedia.com/impression/v2/1077556/85/col02jupncmpfqo7igbg/da6f74c2-5046-462a-919b-c259ec4a4e7d?verifieD=1&userID=ZioBP9HM4ycAADS8ARFPzgAA&cmpro=587&deviceType=2&expiryTime=1714029479&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-B0_dL1RBD9oIbb8hTQZC8OZnqjqozxkzB8a5UqNt0CUmVAyrywJrD9NY9LAq5fA4DsFVHg-FJprwcXRfNcOBdfS53QmQ52McXcYXcSb3P8jx25UM4" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNW_oNFpZORa7uM0y0knc9jgnl5aIXCryK31hc3NQ6USrm_kLX7SI0WVtw1ixME0vHYwfQ4EcRRLVNpFaOSZ9bGBKjpW5g" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'ht

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028821644&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	326846
Entropy (8bit):	5.474381751507248
Encrypted:	false
SSDEEP:	6144:djNiljOaFp6Arw1tZW/BjyMTFnrBT6hILpHzwa:dajDFT8tZW/BjySrVHzp
MD5:	2217B5831A2455996A829BD1C8072B92
SHA1:	AFE47F50DC23A3463EA4A6876F8EC480DC1EEB5E
SHA-256:	161E1586C865777BA37949EEA9FB1C564E91856144FFEC4CFE36BFFA346B46E2
SHA-512:	D35EA9572E30660518297A474372A33B596B052E4FDFE02B11A2FBE3BBF0663515ECFE2B4EE1004B18321A140AB499958D3C185E8D72FFE21C15DCE4CC0F8BF6
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/js/26744370346.js
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={7584:function(n,t,i){var e;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",h="vendor",v="version",p="architecture",g="console",m="mobile",_="tablet",w="smarttv",y="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Firefox",R="Google",k="Huawei",N="LG",D="Microsoft",C="Motorola",O="Opera",x="Samsung",P="Sharp",M="Sony",L="Xiaomi",U="Zebra",V="Facebook",F=function(n){for(var t={},i=0;i<n.length;i++)t[n[i].toUpperCase()]=n[i];return t},z=function(n,t){return typeof n===s&&-1!==G(t).indexOf(G(n))},G=function(n){return n.toLowerCase()},j=function(n,t){if(typeof n===s)return n=n.replace(/^\s\s*/,""),typeof t===u?n:n.substring(0,350)},B=function(n,t){for(var i,e,r,u,s,f,l=0;l<t.length&&!s;){var d=t[l],h=t[l+1];for(i=e=0;i<d.length&&!s&&d[i];)if(s=d[i++].exec(n))for(r=0;r<h.length;r++)f=s[++e],typeof(u=h[r])==

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 889 x 470, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	36557
Entropy (8bit):	7.959310313415264
Encrypted:	false
SSDEEP:	768:n0RwLpaTDuIdy4QJSbEe1x7ZO/xpl4JLNd6eERYlE:TpwDuIdrQZQx7ZO/xplE76ey
MD5:	D7083C13DBD98E28BAA42E9E7EF3094B
SHA1:	07791630BBDC3C4145587278E174A472F4BEE3DA
SHA-256:	6571A99236F6CE65397C3D5AFC5D201D88B9C6318C03324DF57F14F260B4EA89
SHA-512:	4096765D19ED49D59E4086F2146684E8A18D4CC3BAC3D32071C64F6BC04FCAB22EAEBCE9DD0FAF42F3B9796067EE671D3D2DEF68C004BD1F8AA8961DBB601FC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...y.................gAMA......a.....sRGB.........PLTEGpL..............................................................y.`...........................<7g....".....................................@..57............/1(,.'24(8:,........;.._;>0.....b..rX.....^..]..))&c.....]....f14,.t..~...l...]..AD0381...g......x...2=8....j.....{.<C>..~p.........h..=?+.d{9OK...........rv.w...EC "...?YUAbbLNMNQ-...........U\T,0/-..bb`{..+7.Z_2 }.I............Gz.K.........>lr6....CN?&LQ...F..hn4.......#......u....Nmiw.......]..MHttst-X].Tg...)en...W..............%......kji..Swu\|w.g........{\|+.$....f..bvWx.^.........y....5...^.~v.G...6G....w.v....y).'a...w....t..ml.......\....bz}........._^i.......EH....w....8....h.wM..X.....jf.dL.n6GTY..f......M..2..L.-'.....U......L.=6.z..m..z...S[.4.........Q..K!aO.82... tRNS..........+...7...Pb....n..v.z.+h.... .IDATx...Kk.X...Z.<n....$..-lK.:2H.Z.@.N...!.` ..BKv-...l.(Y....B.O.....dK.u.....283....9..^A.. ..C.... ..

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Homepage&ts=1714028879988
Preview:	{}

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	320
Entropy (8bit):	4.815296460460266
Encrypted:	false
SSDEEP:	6:tnrDxmc4slmczhMQDxN2V/jQhyg2hcdVVVVGi0yRvr57DHjME:trDxI6N2V/jTTh2dht7zjME
MD5:	C57A837E187261D0C55E11579217626B
SHA1:	9F934E3C838343F2B7292F02A08C311C13BBA794
SHA-256:	D92E302A84ADDBF1BFBE00C94F31C46BF714A8DAD66C8E8AB2A5879FBAF249FF
SHA-512:	F569E98087B20842DCF676A99537EC937A25305E6CF784E2E7E58F74B939E0D706300D53C5D56B533237E2E453F543D15382B467C682D011E21A7B52D776A71C
Malicious:	false
Reputation:	low
Preview:	<svg width="94" height="94" xmlns="http://www.w3.org/2000/svg"><path d="M94 90v4H0v-4h19v-.0030445c.135265-.0005182.2699439-.0005182.4055997-.0014899 41.2769358.2835931 67.0939314-16.2930001 72.4650669-51.3473875C94.1455548 23.8004441 93.9845653 12.8443448 93.9845653 0L94 90z" fill="#161616" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	137983
Entropy (8bit):	5.289406868283081
Encrypted:	false
SSDEEP:	3072:SJhgjBhOC1t7qPvVqUTpnX/tIh56IrjL0z:S7Cn2nVqYpnvtI/6H
MD5:	369B985D745FD3BACA53908699104A02
SHA1:	3407D673566B7804A561811BB6BD6D6252D73207
SHA-256:	84F0BDD85FEF21051F9A2592BF767BA112D745949315A860B8D9AF9B12ED4E5C
SHA-512:	34152DA86B2302EDEB00716364C0AEC33B26C9832B9EF27E22182EC2DF2B9EFAD043B39CE581C90DFDF27067ACEBEADC8AF5C6A21EE9671A6924A98734EDAEB4
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/react-59929afd541f3d4213b2a81d773e1d73.js
Preview:	/! For license information please see react-59929afd541f3d4213b2a81d773e1d73.js.LICENSE.txt /."use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[75514],{38698:function(e,t,n){var r=n(27418),l=n(67294);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var o=60106,i=60107,u=60108,s=60114,c=60109,f=60110,d=60112,p=60113,h=60120,m=60115,g=60116,v=60121,y=60117,b=60119,w=60129,k=60131;if("function"==typeof Symbol&&Symbol.for){var S=Symbol.for;o=S("react.portal"),i=S("react.fragment"),u=S("react.strict_mode"),s=S("react.profiler"),c=S("react.provider"),f=S("react.context"),d=S("react.forward_ref"),p=S("react.suspense"),h=S("react.suspense_list"),m=S("react.memo"),g=S("react.lazy"),v=S("react.bloc

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 32124, version 1.6554
Category:	downloaded
Size (bytes):	32124
Entropy (8bit):	7.98651557872162
Encrypted:	false
SSDEEP:	384:9KqyAC8A/DfD+jM4dELqNANmz6tHTp9cQkHusYuItzXpWiwhXG+l9dmUbggofHJ5:9JY8A/74miY9uQATzi8t9dmMgdU8p7j
MD5:	868AEDEEFE7669E8A4F7196F7DF5D058
SHA1:	45BD20EF2C6B717A2526EFD98A01207979B2A623
SHA-256:	D8700B022EF56752CD12FF224B3F409E84AEB8A43AC68BA052167096BAF46555
SHA-512:	45557B3F328F014FCBF09A848B2F22E66C41968B03523976F66F9381B0408461766F1B837CAAA67A26C4B707EA81EF32CF59776244D19BF0D569C63753B5C0B6
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff
Preview:	wOFF......}\|................................GDEF..m..........o.]GPOS..m4......3....5GSUB..x........8-.jQOS/2.......Z...`.5`.cmap............;.<.cvt ...d........K.1.fpgm.............0.6gasp..m.............glyf......X.....Z![.head.......6...6.qC.hhea....... ...$.8.khmtx...T.......b.8d.loca...........:#..Omaxp....... ... .q..name..k....&....E.j.post..l........ .~.Dprep...........J.-...........o._.<..........#.........I...(..............x.c`d``>.............@...$.............g...g......./.a..........x.c`ard..............B3.f.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....M.....x....%9...$.m.=.....m.m.m..n....V...AW}...9.Ob~.........Fh.+..4...h.F#.D.Y.q.eND%...S..C....Hg[....n.@&....wk.`y..Hf.?..^d.5..!a.C.B].L#..$.....QcO.NE.A}.........v...m..3...v.p..i.D........Y..~....9...1..d......?..`<~.n.mc...3..~.A......l.<.}.m.o.'...{~..3.....j.o!.xO>.>4....O...B..wJ].F.d&.=..1..'}..E:.....3.-..(..8..=.~...;A.&S..)$sI..c......t....d..~..\|....fVG..o.B.....,

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26436, version 1.6554
Category:	downloaded
Size (bytes):	26436
Entropy (8bit):	7.992337192043556
Encrypted:	true
SSDEEP:	768:REnKzHyU1T2vJu71RK3Q7x1jU6T1PR0hnx:RBzHyvvyHKg73Tv0hx
MD5:	FB6EE6D06C40EF384895F47AA20F7EF0
SHA1:	03C22B984EB7B415D54925C467B8F1C21DC11964
SHA-256:	63A33D04AD4493FE01A8C7EA254188E3771C9E0CD7D9F23EA93278CE87668614
SHA-512:	0DC1847DB0B6F6DED493A72EC8D6ACF6134329E2855B0D52CA2EA74D375E4658E54AA40C97A07FCE555548D0EDDDD5BD61C32F84654F9472FB167708B8A50B00
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/ActiefGrotesque_W_Md.23817d3ab6c377c0a652.woff2
Preview:	wOF2......gD..........f................................8.`.....r..W.....l..l.6.$..b..:.. ..h. ..J....dN........^.......?.(.................V.=.v.29T.......%..Jl$.H.b...h..>.76.8.#....~....KO..>..?._EO.P.......W...K.....M.......}.gQ.i...[.#Z.\?...36...........P........Aq..dVO..3....#.......JR.X....2....l....GK..@..t..(^.f.{(..Y.. ..t..-?.o...,....`-.........`..../2.....XT...J..Q...... ..dMA.....z.D3W.n.................M3.D(.>..$.....#........+.:...[CT.'QE...B..<.c...v.J..~..BV.....0;=..r..5....%..........W8N...eL..5.k.Z....`..1G.1..t.3111./.F.@...H..fE...K../m..v.K].nuM!.........,.{_.R.nh.0...X.W=^hB.\|.z.+...r...Z...R.......@2.$..;..p..}R.....I.c./S_....S.XP.X.l:.B..!d..rL.0.`z....T....%AB.!.....u..\..h..........P....A..J .;A.xG@.........*... k@R.y...S.B.:7.k....B[{\.s......}.......r..z,.B.=..7.s....C.a...^$...%.]ev.Y..nW....4.Z#k......j...S..-.7..E.BP.4-it1.Hx....G.L....p...zk-.N.#.....e......R.3....Nf.$.".7'.\|p......H..Y1..'...0.RC..Y..

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41124, version 1.0
Category:	downloaded
Size (bytes):	41124
Entropy (8bit):	7.994839727326459
Encrypted:	true
SSDEEP:	768:CXcd5UJ6OaPyIndJDDluXbNe4/7OtL+AtigJYqEDVPLibj8zwK+v4ndmO:jfa6OeVnT4/7wL+ljxZ+YdmO
MD5:	D747E7E3DB3ECF479E1164662F582A12
SHA1:	70F9EEF4CBE65A3EC004633C9B335C83E26ACF85
SHA-256:	CEEC4C22C6C72197C803EEF5EE16E0D09B601AE3D88C2B6B33FE810850083039
SHA-512:	86D5755E44C56843BCC36AA2A07FAB14B7E120622B4E047EE1933053A5215D295F2991915B385E90541CDD4EC27CC9811FB272D326C80A1711F3C6C607ED5C80
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/LandRoverWeb-Medium.4427ee73c2ac6d6a97d7.woff2
Preview:	wOF2..............= ...C...........................v...`.......#..............6.$..(. .._.....[[Y......."....6...:5.....cl =,=..)..P.7}(n...;.........G..1....'....j...n.G...L..`....F>.....c)e.Fa.X...g,[...(g...#.......(..."z..2D...dj..B..TZ......v...mD.i.%...bM..%Q.')'DF.2.....\x%..fZ T.....J.".(...=..".'a..<..8[....;.T....W.5.L"".X.....Q.a^.V.7..Li..sY.5..].L.t.Y..9..D..+.eu5..\|_.xOe.V..1A.1w......1..u...0'S...8......:\n=.v...G3...v.8>N...9././...>......3}...[.....c.@.....).....Tz.ww...u`".9,.6.\I...?....=.....E.......V.25.....jpt.\...$...S).K.p...'.!$?v..";.f.\...S{....AF....m...u).\5s.C..(.S`82........-5.X..`...[.#G......V.....#......Fa"6fyC.wT..._..7...P.M.....@.f.L.78'..A.+]....i.BR.:..B...e)..r...Y .zc.S......v..<!....^~.......~"....o6.G..t.5f.BD..B...I.6.....T.F....t..j.......k.sf......1...^...^...].....P...!I......o.Y!.i.j%.c.b..F..?..m..K.....7..4...N.e.p_)..s..........x\|5}..I.u.}k?...I!.......^.GT.....V.....-...L#.e..n......

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijG,pingTime:-6,time:423,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:423,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B50~0%5D,as:%5B50~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net*&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10327), with no line terminators
Category:	downloaded
Size (bytes):	10327
Entropy (8bit):	5.113381938908243
Encrypted:	false
SSDEEP:	192:4v6U5M2p7pBrfCpfqFk8GCpTmSy4OxxhkHONIR/:4v68M2p7DCJfCVmpxuONk/
MD5:	4B0B7D731B18D770C7C8E83CCBB777F8
SHA1:	964049D22CDCA011868EB2C04BC0CCB00A618B1C
SHA-256:	D9D514698510CE26A6EE97639D1E85562B24F6D2DECBCB0671C4B8BBC0D60FB8
SHA-512:	1F2884DCCE819FB86527978BBAB1658D75BC4D116E6B949A73A048D4F680399D0314E9BE5B92F24E0C4B8DB7F2ECC9C09583CFD17E45078BE4792DB71DD69197
Malicious:	false
Reputation:	low
URL:	https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/packs/",n(n.s=150)}({150:function(e,t,n){"use strict";n.r(t),function(e){n.d(t,"WallpaperApi",(funct

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVV,pingTime:-3,time:604,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:605,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B46~0%5D,as:%5B46~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168399
Entropy (8bit):	5.548360604120223
Encrypted:	false
SSDEEP:	3072:mA95TZmETDjAjT8M+z4VrenF6xvX9fFdffS:mAPdm0HAjIIfq
MD5:	5439E51F20378DE7D73BA350C0B4B85B
SHA1:	2BFA3D60287D28A0F536FA1D020BFE52CA1395F1
SHA-256:	912D615762F03B1F694F98FF9F3E7A59D0D8F1CA3732F67BE89DF8D2E3F38ADB
SHA-512:	6C9DDD77FDF111CFAB5D6086A497334F274E20F3AF8DE2D116DED4988E57EA3DDA9FB90AA6EB7945173879ACFE1AA2C9601CA47C0F738BFB8A654E4FEC20556E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/03a1f34a.cb7471b34076195a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.prototype.hasOwnProperty,l=e=>s(e,"__esModule",{value:!0}),f=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports),d=e=>((e,t,n)=>{if(t&&"object"==typeof t\|\|"function"==typeof t)for(let r of c(t))!g.call(e,r)&&"default"!==r&&s(e,r,{get:()=>t[r],enumerable:!(n=a(t,r))\|\|n.enumerable});return e})(l(s(null!=e?i(u(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e),h=f((e=>{!function(e){"use strict";function t(e){for(var t=0,n=Math.min(65536,e.length+1),r=new Uint16Array(n),o=[],i=0;;){var s=t<e.length;if(!s\|\|i>=n-1){var a=r.subarray(0,i);if(o.push(String.fromCharCode.apply(null,a)),!s)return o.join("");e=e.subarray(t),t=0,i=0}var c=e[t++];if(0==(128&c))r[i++]=c;else if(192==(224&

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu9erm9IZYDZqhwsknVDeH2nU6bOPL4gFRDVWLkcVKePl45zjpuyGvBRK0Nb_vsEIFxwu1sysMjjCs_8czf9Pz4uR_I9JmCfinOL-FS3RGJo6UAxZE2OKRvddokAeZAl-XkKzAguCPFW2TYQ3S05AOQ&sig=Cg0ArKJSzP2ltlvxohHzEAE&id=lidartos&mcvt=0&p=0,0,0,0&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240424&bin=7&avms=nio&bs=0,0&mc=0&if=1&vu=1&app=0&itpl=32&adk=0&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=996166600&rst=1714028860498&rpt=6124&ec=1&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeVO,pingTime:-2.1,time:6029,type:a,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D,%7Bvs:o,r:f,t:2335%7D,%7Bvs:i,r:,t:5404%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1206,o:4825,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B579~75%5D,as:%5B579~1280.907%5D%7D%7D,%7Bsl:o,t:2335,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:1,reas:f,bkn:%7Bpiv:%5B3069~75%5D,as:%5B3069~1280.907%5D%7D%7D,%7Bsl:i,t:5404,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B630~75%5D,as:%5B630~1280.907%5D%7D%7D%5D,slEventCount:5,em:true,fr:false,e:,tt:rjss,dtt:542,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.352a73fb-dc2b-63bc-a842-a419586c3a8b.36_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true,sis:5422%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 889 x 470, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	36557
Entropy (8bit):	7.959310313415264
Encrypted:	false
SSDEEP:	768:n0RwLpaTDuIdy4QJSbEe1x7ZO/xpl4JLNd6eERYlE:TpwDuIdrQZQx7ZO/xplE76ey
MD5:	D7083C13DBD98E28BAA42E9E7EF3094B
SHA1:	07791630BBDC3C4145587278E174A472F4BEE3DA
SHA-256:	6571A99236F6CE65397C3D5AFC5D201D88B9C6318C03324DF57F14F260B4EA89
SHA-512:	4096765D19ED49D59E4086F2146684E8A18D4CC3BAC3D32071C64F6BC04FCAB22EAEBCE9DD0FAF42F3B9796067EE671D3D2DEF68C004BD1F8AA8961DBB601FC3
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/hc/article_attachments/360056475392
Preview:	.PNG........IHDR...y.................gAMA......a.....sRGB.........PLTEGpL..............................................................y.`...........................<7g....".....................................@..57............/1(,.'24(8:,........;.._;>0.....b..rX.....^..]..))&c.....]....f14,.t..~...l...]..AD0381...g......x...2=8....j.....{.<C>..~p.........h..=?+.d{9OK...........rv.w...EC "...?YUAbbLNMNQ-...........U\T,0/-..bb`{..+7.Z_2 }.I............Gz.K.........>lr6....CN?&LQ...F..hn4.......#......u....Nmiw.......]..MHttst-X].Tg...)en...W..............%......kji..Swu\|w.g........{\|+.$....f..bvWx.^.........y....5...^.~v.G...6G....w.v....y).'a...w....t..ml.......\....bz}........._^i.......EH....w....8....h.wM..X.....jf.dL.n6GTY..f......M..2..L.-'.....U......L.=6.z..m..z...S[.4.........Q..K!aO.82... tRNS..........+...7...Pb....n..v.z.+h.... .IDATx...Kk.X...Z.<n....$..-lK.:2H.Z.@.N...!.` ..BKv-...l.(Y....B.O.....dK.u.....283....9..^A.. ..C.... ..

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fhelp&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphNa,pingTime:-2,time:713,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:52,bdZ:892,beA:894,beZ:896,mfA:1575,cmA:1576,inA:1576,inZ:1577,prA:1577,prZ:1579,si:1583,poA:1584,poZ:1594,cmZ:1594,mfZ:1594,loA:1602,loZ:1604,ltA:1607,ltZ:1607,mdA:896,mdZ:909%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:713,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,5~0%5D,as:%5B31~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2709)
Category:	downloaded
Size (bytes):	96160
Entropy (8bit):	5.518629584665947
Encrypted:	false
SSDEEP:	1536:NGutnTqYCDzPzJeUAU3zSy8PFu+3sgUD1LL6WfQg:nnTq7zkUAwzS9L3sgWLLLfN
MD5:	E5DB9525F3D7EFD966AE63ABA86669E0
SHA1:	EF9DADB1023BAC903273F17E8DDE163D0FD7CF1E
SHA-256:	CDB7911DD984DC9B0840A0A94E711600B05DD72D612465FDB18ECFB67EA9E66C
SHA-512:	988E944410D6700C1265A5F2BF315F5B4A9051DE79ADEB38D43B38F0B0E43326D2CB3F87C750C9C5F0C8175BEE4625BA4F3FF6234A8D05CEB83AB4471ECF76FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Mb=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Mb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4777), with no line terminators
Category:	downloaded
Size (bytes):	4777
Entropy (8bit):	5.434966429442297
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwNLMpn02MGkdt6zex1pecbt:9++2y7CpRNyfMKz6wcbt
MD5:	157038E34123CC34939C37EF460356F4
SHA1:	BC65C9C0071A0D483A78FF7D5ABE5F2500B265C1
SHA-256:	62E7CB03E8F65CEB4F43A5A56A3B9C3950158FAE3FEA85699E3F4C68672F4C2F
SHA-512:	0A7B0A1B0F4AB0CF153F2B231649296475DCA6307583D455A682D904E07DC931A9F5EDA676564DCB8303584481CE67971157FF9E134055146D2EE71C4F64FD55
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	17116
Entropy (8bit):	4.865524986500256
Encrypted:	false
SSDEEP:	384:CZNVsRGSiwihXijir59vokdCDD9N203x+ZxkLOdLWC0Le6VTeweaOerjeweadenG:KSG7NhSG1Cl3x+ZxQOVWC0Le6VTeweah
MD5:	7AFADCBA932F39ADF041D8A726783302
SHA1:	BE1C3A3BC707DF60E9EA24BDE1CFC1C83204B1A5
SHA-256:	22A1AB91E561D1359766E0EE48244E946A01A80DDCCB22C317DDA81DEF52F983
SHA-512:	9E6E764EA66403F44064FF977050EE7D09CE4907927E617D9420AB3C48A58EFB38684269E4B5587F16B56B7FDAC8697090A5859543817277E6C858BFBE7CA7C6
Malicious:	false
Reputation:	low
URL:	https://p18.zdassets.com/hc/theming_assets/63313/439936/script.js?digest=18384406773778
Preview:	// Mobile menu from 2020 Brand Home.class MobileMenu {. constructor(element) {. this.openButton = element.querySelector('button');. this.openMenu = element.querySelector('.slider');. this.rightSide = element.querySelector('.slider__right');. this.open = false;. this.openButton.addEventListener('click', this.toggle.bind(this));. this.rightSide.addEventListener('click', this.toggle.bind(this));. }.. toggle() {. this.open = !this.open;. this.openMenu.classList.toggle('slide');. this.rightSide.classList.toggle('animate');. const closeButton = document.querySelector('.slider__x');. closeButton.classList.toggle('fade-in');. }.}..window.onload = () => {. . const menu = document.querySelectorAll('.header');. menu.forEach((el) => new MobileMenu(el));. . // Add status from StatusPage api..var sp = new StatusPage.page({ page : 'sc26zwwp3c0r' });. sp.status({. success: function(data) {. let statusWrapper = document.getElementById('status__wrap

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=MmI4ODgwZjRhYzBkNDJhNjRmYzg2NjlhYzEzOGNiMWQ0ZjNlMWQyOQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58253), with no line terminators
Category:	downloaded
Size (bytes):	58253
Entropy (8bit):	5.415335549957313
Encrypted:	false
SSDEEP:	1536:dN7qIHbb3fmatiEsWtNMx3VNW5hATqe3lqe:PWI7b3ftsUNMx3jOM3t
MD5:	633A43876F294113B67A16BAC7C21511
SHA1:	BF8890FBC058EC22431A37F9D4B2319F218C1E9D
SHA-256:	7F2AE99BB573FFEAE39EB900E6EF4230D1522AA22BCB23F7F7074823173A1A58
SHA-512:	C229C582369587C979CCAE141C785F8B5901C091431968DB40AB72CA34FBFA1EDB42761AC9A4ED6A1948988988FA2888A16927CC025A992F7BFFB5A1E68DF3C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==typeof globalThis?globalThis:"undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{},o=function(e){try{return!!e()}catch(t){return!0}},i=!o((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),a=i,u=Function.prototype,s=u.call,c=a&&u.bind.bind(s,s),f=a?c:function(e){return function(){return s.apply(e,arguments)}},l=f,h=l({}.toString),p=l("".slice),d=function(e){return p(h(e),8,-1)},v=o,g=d,m=Object,y=f("".split),b=v((function(){return!m("z").propertyIsEnumerable(0)}))?function(e){return"String"===g(e)?y(e,""):m(e)}:m,w=function(e){return null===e\|\|void 0===e},S=w,P=TypeError,E=function(e){if(S(e))throw new P("Can't call method on "+e);return e},

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65503), with no line terminators
Category:	downloaded
Size (bytes):	142733
Entropy (8bit):	6.146156369716797
Encrypted:	false
SSDEEP:	1536:GfFddpUYjWhBQfyYpKQjuEaD6ABJpmJIF7OIWeCCG7juIsP7xRh3DdSNGY2kkPZT:CpmHeKQKf6wncabW5fjT+BDdDTk8ZCsN
MD5:	0393361091135B8F1E1E6D026FF6114E
SHA1:	9320423AA1E26E6608E1E131412E43CE640C6D07
SHA-256:	625B1FB64EF414A9A39946E67C32311121E8309E66FA2F885B815EE08A773751
SHA-512:	68B309FB6F990D863B23CF1DEC3FD7FEEBD92543061DECB89A28035B2AD89517EF4469E1D023DB732A7851613202E1ABD4A06E01DF4A5B40E2672FD3403A8AEA
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/bundle.42c7ef449bf19536f366.js
Preview:	!function(){var e,t,n={418:function(e){e.exports={platform:"desktop",deployPathOverride:!1,variants:["one","two"]}},4627:function(e,t,n){var r=n(7373),A=n(6927),a=TypeError;e.exports=function(e){if(r(e))return e;throw a(A(e)+" is not a function")}},7106:function(e,t,n){var r=n(493),A=n(6927),a=TypeError;e.exports=function(e){if(r(e))return e;throw a(A(e)+" is not a constructor")}},7713:function(e,t,n){var r=n(2712),A=n(2091),a=n(3567).f,o=r("unscopables"),i=Array.prototype;null==i[o]&&a(i,o,{configurable:!0,value:A(null)}),e.exports=function(e){i[o][e]=!0}},9223:function(e,t,n){var r=n(1218),A=String,a=TypeError;e.exports=function(e){if(r(e))return e;throw a(A(e)+" is not an object")}},6148:function(e,t,n){var r=n(6867),A=n(6912),a=n(6702),o=function(e){return function(t,n,o){var i,c=r(t),l=a(c),u=A(o,l);if(e&&n!=n){for(;l>u;)if((i=c[u++])!=i)return!0}else for(;l>u;u++)if((e\|\|u in c)&&c[u]===n)return e\|\|u\|\|0;return!e&&-1}};e.exports={includes:o(!0),indexOf:o(!1)}},6446:function(e,t,n){

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3594), with no line terminators
Category:	downloaded
Size (bytes):	3594
Entropy (8bit):	5.194843444325048
Encrypted:	false
SSDEEP:	96:wrtnIBIwWpou6Tcf6695+Wpk6jfALbAwrH:w5nIBIqcy0M6jmcwrH
MD5:	35166401913BC433E702156B229ABB6D
SHA1:	45A86719273893BDAE5649D711C1D0BE844C539A
SHA-256:	7F919BB8DB7A2FE7126380D85836C540C3FC883CC4DFF3F44AE1ECC697027A6C
SHA-512:	4474D15E615B579B01AF6EB736381777360A1AC74C1A98F49ECAC4AA39BFEE53F64B5BCD657C5945865213EF6E5EAF4145BD0603818022DDD5C830E3E2EE3B71
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js
Preview:	(()=>{var t={78:(t,e,r)=>{var n=r(427);t.exports=function(t,e){if(!t)throw new Error("Missing elm");var r={};return(e\|\|[]).forEach((function(e){var o="data-"+n(e),i=t.getAttribute(o);/^(true\|false)$/.test(i)&&(i="true"===i),/^\d+$/.test(i)&&(i=parseInt(i,10)),null!==i&&(r[e]=i)})),r}},427:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"-".concat(t.toLowerCase())}))}},462:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"_".concat(t.toLowerCase())}))}},54:(t,e,r)=>{function n(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function o(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?n(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):n(Obje

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pdata=sid%3D2%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92&pid=712597&redirect=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-6,time:708,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,1~0%5D,as:%5B27~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	217399
Entropy (8bit):	4.773635873435981
Encrypted:	false
SSDEEP:	6144:fSBUfE13F8MqHPwSzeDtRjQ2YWKF2GxEBSDF:lyD+
MD5:	05A4D042DE4A0BD7E0E4CB23B83ADCF1
SHA1:	15F6F2B6AA1457678F40A155C9BCAA559095C43E
SHA-256:	E873D10F5F0F3A84766221F56B36A47BDF76A5D974704653744914862C0DAEF9
SHA-512:	54AC1331762036F4D4E7D0002DB8D55F7777306D82FB75EFF3FFBC41E930AD0C9CBE1B4E635ADBC5250E5E265EE7655E410B3432B47FD7C63025377D0BE0D4B0
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/en-us.05a4d042de4a0bd7e0e4.js
Preview:	!function(){window.I18N=window.I18N\|\|{};var e,t={locale:"en-us",direction:"ltr",translations:{"activemodel.attributes.request.anonymous_requester_email":"Anonymous requester email:","activemodel.attributes.request.recaptcha":"Recaptcha:","activemodel.errors.models.topic_form.attributes.base.topic_limit":"You have reached the maximum number of topics for your account: %{topic_limit}","activerecord.attributes.comment.body":"Comment:","activerecord.attributes.community_comment.body":"Comment:","activerecord.errors.format":"%{attribute} %{message}","activerecord.errors.full_messages.format":"%{attribute} %{message}","activerecord.errors.messages.could_not_save":"Could not save file","activerecord.errors.messages.not_an_integer":"must be an integer","activerecord.errors.models.access_policy.attributes.manageable_by.inclusion":"Must be `staff` or `managers`","activerecord.errors.models.access_policy.attributes.viewable_by.inclusion":"Must be `everybody`, `signed_in_users`, or `staff`","activ

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715049028241
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 637 x 198, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8466
Entropy (8bit):	7.823233079189584
Encrypted:	false
SSDEEP:	192:/cuzEQlL8ADBvIyaRFEc/e67d7Z7oaX700wuIwvlWJy6:0uztL8ADBgyaRFle6tZ7/hwuJvYr
MD5:	D178E8892B1BDB15F35913FDF57BD493
SHA1:	A8BC85773269B7CD7C78B1866A5CF20C69163BB9
SHA-256:	238864304AFC9202A5717E1AF032711271FF312D807C0FE408541C7ED269F720
SHA-512:	2ABCE09A2DF645ABADFF0133CB825DB27F5D0793235000757A406024BA6DDC88D6C8071752BD3EB1D0E752C71936872EF6318ADE411E9D09B55D6999E6BB1560
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/Tooltip.36a8ac01d72f6916d536.png
Preview:	.PNG........IHDR...}...........6R....pHYs..!8..!8.E.1`....sRGB.........gAMA......a... .IDATx...K.....S}!.fc..r$;.,..!..... ...,...(dr......Y0`e.(...,....Pf......^.pX.....Z.+..Y..+...n.....TUwu..#].......s.....W.=....s.S...%nW...._ow...(k-...}.&n...5WQ.".9.n.}.O...n....Fd..J.o.>..Wb...A.z...z%I.w.......0Mof......9..={Y....=....Z..<z89h..S..O?J.\_r........Ds..e...^......=..#....h.-.}w.....{..-./g.^q...h.$q.?.z........>....R..M..4..&.....\..2....}........`...r?q.._.q.B.M.t....O..........oc..v.........=............,.....v.PrY.....R...`qd../...t.....,...AO_........%..sW.q. .K........Y....].....1..ch...`.i....`/u.A......K../.........J..{}v....XhI.....>.....*.s...Xx.}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....p.....[.....I..w.nK.u...m..._...e_........O{..;`.......}.mk..5o..mPQ.._.._...y............<s..N..M..

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.228622051779168
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+6:zMZnH/l8NhHJ0M2J7dCp
MD5:	F05235538F0C742E45C43C011A5B2FEC
SHA1:	77A8DFB16CF8AE8EAD93C45F10C418A8DDE84926
SHA-256:	264CBD890553AFDD57C81E05D4EF0EE6EA80FD355F47FAB94C3D097B81A3F7E1
SHA-512:	3051ADA61B5509578F3DEB9DB5CBB5E0C21E9EE0AF97C5DD14F1899C567FE28D535FB5341E8054867A08F928E5FD4A1C35043CEF439315CD5C0367986668C9CE
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064485338
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40618), with no line terminators
Category:	downloaded
Size (bytes):	40618
Entropy (8bit):	5.08152387664912
Encrypted:	false
SSDEEP:	384:YHYXH5SC5THdXJCmtYTOWGJZb6yisExTwySnoSoChvJ:WORTi9a
MD5:	48E85EA4C997BAA64BEB1DB3BB8CE763
SHA1:	72BBA20F3431EE7D9E6D615EEB5DDF0FF5F9B93E
SHA-256:	B05AF2C08FC328A3106ABFBB1B66AFC0317C497B3AFC4B39B06D6C7E93E994C7
SHA-512:	919BBD51D919C28F45E9365222C82BC0D56CFD61EAFBC3D370946F1DCD689888D3BD750B2127656A5C1D0AA95FE086EB769D3C29E834ADC4014F3C47D702712B
Malicious:	false
Reputation:	low
URL:	https://frontsite-nextjs.wetransfer.net/_next/static/css/259caa46cf3a8fe3.css
Preview:	html{height:100%;-webkit-tap-highlight-color:rgb(0 0 0/0)}main.is-preview{padding-top:64px}body{min-height:100vh;padding:4rem 2rem;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:antialiased;font-smoothing:antialiased}button{border:none;color:inherit;font-size:inherit;font-weight:400}*{padding:0;margin:0}:root{--spacings-m:1rem;--spacings-l:1.5rem;--spacings-xl:2rem;--spacings-2xl:4rem;--spacings-xxl:5rem;--spacings-3xl:6rem;--spacings-4xl:10rem;--black-custom:#232323;--core-white:#fff;--custom-white:#f9f9f9;--button-background-light:#ebedff;--button-background-dark:#5268ff;--button-text-light:#f9f9f9;--button-text-dark:#3741d9}.splide__container{box-sizing:border-box;position:relative}.splide__list{-webkit-backface-visibility:hidden;backface-visibility:hidden;display:flex;height:100%;margin:0!important;padding:0!important}.splide.is-initialized

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4052
Entropy (8bit):	5.036390454095997
Encrypted:	false
SSDEEP:	48:YtG9HVgN4VzWQ4mAxXI5m3RkHpbGHVzwuugt/hUokYft12vG:uusYCQ4mAxXImRi4Vzw0ZhUoku3wG
MD5:	125EC7B42D8B49040A027D473A09CC4F
SHA1:	E7D358B49894046CBB3F03AEC31B9B6397E21135
SHA-256:	A18CCFD7D80DAF140290C0B24133E2B9E3938ED585F72A75B6ED45FADD3040E8
SHA-512:	284D4DFD29D52BD6CD9DFC6D29A141ED277D4CB836C4F808C56CAB6880C0D0D3BFD442F62E193FC10A3CD1F2A9462309F858FEA3BC0161ABCF752B1FF1AC4720
Malicious:	false
Reputation:	low
Preview:	{"page":{"id":"sc26zwwp3c0r","name":"WeTransfer","url":"https://status.wetransfer.com","time_zone":"Etc/UTC","updated_at":"2024-04-25T05:42:25.634Z"},"components":[{"id":"w08rk28xj3p3","name":"Website","status":"operational","created_at":"2016-03-24T15:21:38.890Z","updated_at":"2024-04-12T18:58:32.474Z","position":1,"description":"The wetransfer.com website","showcase":true,"start_date":null,"group_id":"44hk7t6xnx2x","page_id":"sc26zwwp3c0r","group":false,"only_show_if_degraded":false},{"id":"44hk7t6xnx2x","name":"WeTransfer","status":"operational","created_at":"2021-02-18T15:52:21.188Z","updated_at":"2021-02-18T15:56:48.617Z","position":1,"description":"wetransfer.com - Share ideas","showcase":false,"start_date":null,"group_id":null,"page_id":"sc26zwwp3c0r","group":true,"only_show_if_degraded":false,"components":["w08rk28xj3p3","mf2v9qp4mcxz","ckf5fh8lf5vt","8mnt3h18wtzn","61l8bdb8h6g2","nh9l6h7pld3r"]},{"id":"sbyx4393d931","name":"Journal Store","status":"operational","created_at":"2

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4861984360693410835&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	dropped
Size (bytes):	2261
Entropy (8bit):	5.640269160454123
Encrypted:	false
SSDEEP:	48:ja8++eQ+hgteG9ruICaZeQ+hgteG9rulAEp8TWY61G9/Jdi00TWORWLbm8dR5:+8+/f47Zef45Ep8YsXSWSumW5
MD5:	2B9598DBB08DF35C06121AE789928FDA
SHA1:	D4F33B83AF3BB179379C7916503B1FE4312108EA
SHA-256:	9941E423702DF8F9CE2C2EB8F54A06A74E414E028BA272C04F9404ADAAB2D722
SHA-512:	CEA3C0D568A5EB4269E614506571B2A8E327827624A85F033896FF3593686AEF17C17E1513C63BEDF50E36A533B38B7F099ACBE4F0BCE9E699980C80ECF6A9D8
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1441858472;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1441858472;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	22140
Entropy (8bit):	7.989330596881242
Encrypted:	false
SSDEEP:	384:DMm7Gj9jSPOzSoAyV0cbchS5zhJ22SN03QgE7uFG1I5hYHuzN9BNuavsRIA9r:+j9jSCSo3YGlzSFjiFG1EJJ9Lu9
MD5:	1AC622908C72EB05313DBA1E55B5707D
SHA1:	94282E7E76B5A7C6196F315A994013E36DF7F1F9
SHA-256:	17F7E475BA4150D2FD33E209ED815A8754B12C63E5C44EB7364F33AD5CD32023
SHA-512:	960BFFD2E2AF9988734AB5474F833653E3E9471ABF8C60D74118AE1A73B780B390927AF9567D542A9DBCD099627DB929BF0D6F001876E418A415AD9E00D4127E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.......f.....PLTE---..........DI....tRNS.........V.IDATx....C.......MP....E../.............[Z.h..i.U../........Zm.m.w..&fe.M.5+..l{u...i{/......<..<l.}..z+.....y.I.......c..}.....=.\|.Vj.,G........#...>....h....b. 2.e....3..u....6....A.?.......O8z'.........i...Ld..jO\..\|).......=6O.....9.u.Z.....N.....ml...S7N.3.'.....H.a.Ve..X>..Z!T^..dm......J....]y.Ad...Vv.....Q..u...n"R..9<.'..:.-....F..(R.t.......p.G......%M9.0.....1%_.....I../yo..z.....t.f._."....?.>L..OS../2i..k....."...=_....-...o.Eq.....d...[..\..eW..Y.q2....Q.=.{!....j..A.Q.a.p.y.i.g......p....o..t/0.a.....Q]P...K...M%.%....%.7.<.....M....=".+.g ...0..&....0..J.<k#.$....a....q.K.Q...K.E<....L...e..FYq...dD...CE.....[S b.+....">:.S..V.......5;^.y..Y......1fnS.1...yC.....G<.Qa..wh~Y..O....D.g3R[.~.L.C.~L.}.1+..g.R0.k.4...wd...Y....0.b.j...6F.m.7..-.....C}\..'.F-g......R...S9DZ.9.P.U.aM.....=.6e.F.......+\|&<'.$_..~q.b.3qi....v4 .x..,..w1..D.^)..Q(c.....S..dH.*..

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=7bbbc448-fa0a-0bb5-9142-f138a6df44b6&tv=%7Bc:aSplMC,pingTime:-3,time:994,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:922%7D,%7Bpiv:0,r:l.f,t:992%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:996,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:922,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B96~1,4~0%5D,as:%5B100~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeycM+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:924%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	22140
Entropy (8bit):	7.989330596881242
Encrypted:	false
SSDEEP:	384:DMm7Gj9jSPOzSoAyV0cbchS5zhJ22SN03QgE7uFG1I5hYHuzN9BNuavsRIA9r:+j9jSCSo3YGlzSFjiFG1EJJ9Lu9
MD5:	1AC622908C72EB05313DBA1E55B5707D
SHA1:	94282E7E76B5A7C6196F315A994013E36DF7F1F9
SHA-256:	17F7E475BA4150D2FD33E209ED815A8754B12C63E5C44EB7364F33AD5CD32023
SHA-512:	960BFFD2E2AF9988734AB5474F833653E3E9471ABF8C60D74118AE1A73B780B390927AF9567D542A9DBCD099627DB929BF0D6F001876E418A415AD9E00D4127E
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/grain.2c6cfe7dc5dab33d9c07.png
Preview:	.PNG........IHDR...,...,.......f.....PLTE---..........DI....tRNS.........V.IDATx....C.......MP....E../.............[Z.h..i.U../........Zm.m.w..&fe.M.5+..l{u...i{/......<..<l.}..z+.....y.I.......c..}.....=.\|.Vj.,G........#...>....h....b. 2.e....3..u....6....A.?.......O8z'.........i...Ld..jO\..\|).......=6O.....9.u.Z.....N.....ml...S7N.3.'.....H.a.Ve..X>..Z!T^..dm......J....]y.Ad...Vv.....Q..u...n"R..9<.'..:.-....F..(R.t.......p.G......%M9.0.....1%_.....I../yo..z.....t.f._."....?.>L..OS../2i..k....."...=_....-...o.Eq.....d...[..\..eW..Y.q2....Q.=.{!....j..A.Q.a.p.y.i.g......p....o..t/0.a.....Q]P...K...M%.%....%.7.<.....M....=".+.g ...0..&....0..J.<k#.$....a....q.K.Q...K.E<....L...e..FYq...dD...CE.....[S b.+....">:.S..V.......5;^.y..Y......1fnS.1...yC.....G<.Qa..wh~Y..O....D.g3R[.~.L.C.~L.}.1+..g.R0.k.4...wd...Y....0.b.j...6F.m.7..-.....C}\..'.F-g......R...S9DZ.9.P.U.aM.....=.6e.F.......+\|&<'.$_..~q.b.3qi....v4 .x..,..w1..D.^)..Q(c.....S..dH.*..

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	223553
Entropy (8bit):	5.406860696691629
Encrypted:	false
SSDEEP:	3072:pT/L5hCPULmoMlbyjj20a5Pk7Jc+xY58FhYUXJVZ:pMT0j20a3+TZ
MD5:	FA6DE7DCEFC3499FE291B30908E6B762
SHA1:	CF869DABF48D895CD4995CD94B764FDFFCBE9D71
SHA-256:	54CD4ED31797696A7833201FBC2E19664898975E28E425117DFA77184D787FE6
SHA-512:	8ABDAD36A3A7C8FD41C3EABD6A0CD7367849F6DC7B0777AD30AAC787A3CD7F6F18708A1568BEDB2B619787021C671CD86BB374E62716B146F6C9EF10BA3DC020
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/main.19.8.499.js
Preview:	__IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.499"]=__IASScope.__IntegralASExec["19.8.499"]\|\|{},__IASScope.__IntegralASExec["19.8.499"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({storeModelName:e,key:t,value:n,timeStamp:r}){this.logs.push({storeModelName:e,key:t,value:n,timeStamp:r})}getHistory(){return this.logs}logHistory(){}}class i{constructor({storeModelName:e}){this.storeModelName=e,this.storeModelHistory=new r}set(e,t,n={locked:!0}){try{Object.defineProperty(this,e,{value:t,writable:!n.locked,configurable:!1}),this.storeModelHistory.add({storeModelName:this.storeModelName,key:e,value:t,timeStamp:Date.now()})}catch(e){}}get(e){return this[e]}getHistory(){return this.storeModelHistory.getHistory()}logHistory(){this.storeModelHistory.logHistory()}}class o extends i{constructor(){super({storeModelName:"jsConfigRequest"}),this.contentType="",this.url="",this.verificationParameters={},this.contentType=""}buildRequ

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36189
Entropy (8bit):	7.469539129680351
Encrypted:	false
SSDEEP:	768:JEM9uTjYhl6NkG3WRX4XpKrkq5UJf/WpCWwpeqkg:59uH8l6NkGmRXoKrkiUliCWwhkg
MD5:	998A47703D2BD3C00DB0BC1BE6E30A11
SHA1:	0471BC53270FBE8826A30F2095576C35473BA739
SHA-256:	5AC4138920826CE9FFC12752D6C6954E970C14C95C3C9197212C481847FC28FF
SHA-512:	D2CE11C56F7993478657DFF38A0A50E92311F92C4962579B9D295890DA6C6AA9484F14E442701D9910F8A2FC9D7CD468F4D55D705E759E0B2706E83EEE06A453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...h.......~4...$IDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............qW..G.............d............&X..........k...i.............TV&X.K.........@sg...M............L....d..Tx...........U.....h`.e.X............C\|^50.r@.................,....<.tDx.A.H........... .L....\`y....e.\.........@1v......W.4..G9....................c.K......>3...H..N.._~.....OK)..Y.....;....9............>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yx.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:...........q.........o{...K.e!.\.I..XY)zK.........rJ............VL...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	dropped
Size (bytes):	3406
Entropy (8bit):	5.576485894195963
Encrypted:	false
SSDEEP:	96:+8+/QSysZeQSy+8+/kysZekykEpisX0NN5:+8+9HZe9P8+kHZek6p9YN5
MD5:	0963DE25A41BB9CE83DEA0BE07368572
SHA1:	7C83F0B11EFF22FF698E1866B7A3A74572C15D58
SHA-256:	F208C7563D3E329D106E2EEB9AD66E7185840EFC73CF17569DF307A00087D07A
SHA-512:	DF705539A8440E67E37B30E99B7C2F821FC8537D001B53BA95D9673ED392C8DA5067AD7CE3B75C63082BEC78746C9972B5D97E5AE327598CF09CAF4E76D8C8E8
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=1932979712;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=1932979712;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7C

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	318
Entropy (8bit):	4.825026877054867
Encrypted:	false
SSDEEP:	6:tnrDxmc4slmThCCyG9zipcdGUKNT7QFXrTnQRhqRcmlh/MR1BRDHjME:trDxITwCN9zKUW7EozqRcmP/MNRzjME
MD5:	EEDE3E085DC3122742012C3527BE0671
SHA1:	4CD7C0C69D606B099312BB626E973495CFF7793B
SHA-256:	FD3DB26944A5556032F677B46BA03E72E2EE99ABCF097AD451C686404E815441
SHA-512:	35329C463D80EC2447C55FCBEEC7D9F98585E49F8D26A026161905281A457015A285874CBFFDF6BF309AC18C87D914CF20BB62065EB6BE3E3A372FDAD6A59635
Malicious:	false
Reputation:	low
Preview:	<svg width="94" height="94" xmlns="http://www.w3.org/2000/svg"><path d="M75 90h19v4H0v-4L.01543467 0c0 12.8443448-.16098949 23.8004441 2.11389876 38.6480781C7.5004689 73.7024655 33.3174645 90.2790587 74.5944003 89.9954656c.1356558.0009717.2703347.0009717.4055997.0014899V90z" fill="#161616" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/PricingBackground.74fe38a7.svg
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	179
Entropy (8bit):	5.13628962461118
Encrypted:	false
SSDEEP:	3:XzOYNRfdHhOYNRfcZqVRNqXVSJbPYfxP5DebYfNDebYfXecEPYfe2dqYfbMMYf2:XzjbdHhjbzrqFuPIxP5AINAIXD4IxAI1
MD5:	67FA077BA9AAC616309835EC3D822DBB
SHA1:	24F1263B9A442ACA1BF2A18D9378BFDD19D96D9D
SHA-256:	AEA8789655048C94CB0FD004BE64E6D5E5A9FDFB6696BCDA1FE227F0C64A24E1
SHA-512:	B64C62DA92FC1DAC420C5CBC5E2AD2A88829AF01FA6644D43BF2AF5E9DAEDF613216E8FEEDA111ED624A3E228BE1AFAAFB253E07C7292A0A113CB57B028AEAA7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999786054218737
Encrypted:	true
SSDEEP:	12288:ilnav+9jVjaW5FwvTL0TaFOM9KwIdijlkQaJXJnHedifLztOOuJmD/DwzF8xFbN7:QY+95aKsqEO2K4jW/vI4ZDD+ebBfSmP
MD5:	AA47E0C063E5B8DAE04844E180BB62CA
SHA1:	6DE031EE1DC1726D9B6A70FAB2F58F075FE443D9
SHA-256:	7D0352F0B0752F56F73018EAFC724D5561E876E83E5A4CA660CBDC1F20AB8802
SHA-512:	6EFB6A26578B5ECC09061C764A2CC9C60ED615674A519C6CAF8D02AFE45428305BB3D77B908F5095DAAAE513EC5CA47A8B98DEC44A8478AFEC08D58891709571
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4:2f757cbaa67242:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free....mdat!..@h.!..@h.!..@h....r....n.E...H..,. .#..x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=30.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50......e..$.G...$...E."i...i.}.].../]..H...>...U........Y..0...)V.C..LP./.......\|..[..I..Oh,....U..%..7W).....'.9........JdSJ.d....1=....&<s......+O...E.XX.K..q.h..mz.7.<..%. ~..t.DsR>w.o.m.6/...`F...5..._.../.E.&.\+.S.,.Z....0.,.X$^.U\.q.i.-.mU.P.{...c$..>m.'T.vf....I....a.[u.......3Z...

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729840067&external_user_id=83afbb03-ff0d-4d32-b1b6-358821c16544
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOU,pingTime:-2,time:1757,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2875,bdZ:4179,beA:4180,beZ:4184,mfA:5804,cmA:5806,inA:5807,inZ:5812,prA:5812,prZ:5819,si:5829,poA:5830,poZ:5853,cmZ:5853,mfZ:5853,loA:5919,loZ:5926,ltA:5937,ltZ:5937,mdA:4184,mdZ:5113%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1,o:1756,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B1~75%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:3,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=JYLGLwUk487OH1UaGbsEs1exOU9rGzONdpcWBB8tn2ijYFZC%2F6w6DWY%2BsAjJ6dqwGQ0eVet2AEp1uU5sGiO%2B8YAolRoUBf%2F8Vhccibxd6FYYrWQo6h8zgWNqN4zzEIDQTH8%2FueUz34XWEtLZ4dOJsKEluKnIiuKHhekAx7iM3MXiGguRubYO87MqwV5XsfsxNQY%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	3408
Entropy (8bit):	5.564628952819544
Encrypted:	false
SSDEEP:	96:+8+/0ysZe0y+8+/fysZefykEplsXuo+DC5:+8+0HZe0P8+fHZef6pyHqC5
MD5:	24EF06EBC0BBF5A9085CD8320DA0AEB9
SHA1:	E6026EBE772CE41C5193D9DBEF28E8808521BB73
SHA-256:	3D2510C8E995100764AF8BEF940924E9B728B078A6B620D47E01382F9F017DF8
SHA-512:	933F089E2486CD331E7388F5088BCE365CDF07AF7844F85102940DBDB78A4C158124E94F1DD0ED47602CE3777809E286845F78CC00AF91A9A3976BCD7B2F9879
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028879910&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1734018447.1714028880&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028879910&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2F&sid=1714028816&sct=1&seg=1&dr=https%3A%2F%2Fwetransfer.com%2Fexplore&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=18&ep.hit_timestamp_local=2024-04-25T09%3A07%3A59.966%2B02%3A00&epn.hit_timestamp_unix=1714028879966&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028879910-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028879910-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=612&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNo

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10662), with no line terminators
Category:	dropped
Size (bytes):	10662
Entropy (8bit):	6.166774252435006
Encrypted:	false
SSDEEP:	192:Lg19eEOAkhQ9uL1I8vODoLV3pSROAkhQ9uL1I8vODoLV3pKbpR/5Kga:LgXeEfIYuL1WoRZQfIYuL1WoRZKbpR/O
MD5:	6C4A4BFFD2972432E3D214C44C3ED3BE
SHA1:	DFAEC297F4811121FA0DEC06976B68D464149E93
SHA-256:	625B35A394716228C3E5E605FC9F90DB516C6C748C59A717F0D25586A94A1F8B
SHA-512:	0918BF2653C569F80566160767EC8DF80108C035AFF04C89DA1564BE62B605DE2837EA4E7982753EBFB0C5A1610BF2FD32F103D711207B124E46647D574D651E
Malicious:	false
Reputation:	low
Preview:	<img src="https://a5563.casalemedia.com/impression/v2/1077556/85/col02fv87d3ovkcf8v4g/abefc798-b8d9-4c46-8cd5-1ff5a7d90eb1?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029464&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DMmYe8OzZUfUpTFP3cirIPTWGUbn8dackHHwJQr_Ugk6MQOfLpyIKH2onDekUOopqOyzy2aWL7Xf4jMl5W9QMusg2eIn1oHDuvmdKmBfJS7W5MEcY" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXcqtgWXEvwPkrxrSd4Af_PVBIT2od6UrdqZe-keva6-uOGl1ISYbtyj7ZIQwHFBQC-NXEYDIy00dAYvkIqpp6s16XKCw" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'https://googleads.g.doublecl

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=2AjnXQ3ZhJkqRsxF9L6IE%2Bml1v5%2B30CzjXFLLVq5jxmvOfzJf7133DpiRnH%2FNnj6FYOkoxUtbZvWxsAuabGvcDgsguAEj2qpP58wBCaAKyDqZ4mDai3TMRsb%2BcjgdpKyAtvCUm%2FfXw4nrDKtLlcnyzHc37xTxNc9iI%2FHKaTsC%2FVrGLJ0d%2FdwMt%2Bpw9zEC9ur9mc%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	125
Entropy (8bit):	4.904360113533345
Encrypted:	false
SSDEEP:	3:tRBRNqhwMO+BIZDmJS4RKb5KVEriqGUHbq4VNRNdDMHqQJ9rKgZN0:tnr8woBI9mc4slTDHWUoKME
MD5:	100CAB5DDC5A071CD7287A6AA6D4D44D
SHA1:	29F039F56F644EEB03555DEF96263D4278CD10C7
SHA-256:	C3DEFB57C9AD7007712D914E2611F01883EFB1573EA18217698CA6956B385B06
SHA-512:	A40978F10B76CA40D1DC6814ECEC51684F0A551BE72A082F03509F126B034ECC17516804F8171E7D6926B6C5D97B388247456CA03F5914B6E674157B52BC6568
Malicious:	false
Reputation:	low
Preview:	<svg width="4" height="4" xmlns="http://www.w3.org/2000/svg"><path fill="#161616" d="M0 0h4v4H0z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
URL:	https://d9.flashtalking.com/img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1714028886639
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 874 x 462, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	37105
Entropy (8bit):	7.963161232444271
Encrypted:	false
SSDEEP:	768:QhTQYPNnliSyFMc7YhkusKdMLrZYW2l4cJ5IcHp1dA8qG8DHn:OBn5mYOusiUlYW6HLIadA8QD
MD5:	942954B3E07212D161A1E99359B59713
SHA1:	B674B45A1C0EE61474E5A8A59A5E7BBE5D8D4DC8
SHA-256:	28E1CA4C881DB68512AFB765DD848D4101B9BD849C005490064599D3DE016799
SHA-512:	F6BDB169D53C0F422814F68959F465FB5ED1CA1356D7A0FC28D838D0844881D894B9068A25521E21BA1BA61058C15F339520389916BD3D490FDBEC8BE7BD773E
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/hc/article_attachments/360056623751
Preview:	.PNG........IHDR...j.................gAMA......a.....sRGB.........PLTEGpL......................................................................332...........)yyx210--,...//.........))(...#"",++.....................$$#.......................................(.[............'&&%......................&........'............(.%....%\|\|{...............#......GGE.z...Ofm...."...566dT?9Sa.....^......vvu.................g.J.l....`:;:....essr('$....a..&.h@@?...........!.mI...zKAt..c......XXV.........jnnl..SSR..%..g..jjh..........u?6]]\.......LML.....ffe.........aa`.!..........A...8HJYJ5....><5,R80..... ....6.O..........E..s....w.l<........h.&....k.Y.............'..]P... .........Y.\7....{.xLc..[....$..L.h9l]4..x..<i....^..E.H5\..6.....#..2".uuB&&.....]...............tRNS................/^.......... .IDATx....j.X....{.......)...b;$E.xV..Z....C...*.....j[.V0k=D/......9.a.\|.cY.lYG..swCwU..._..9.........M>d x..8./.I

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a5565.casalemedia.com/impression/v2/1077556/85/col02nd106kd7vk786e0/049ee664-2641-4061-8596-602b5a942986?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029493&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=w8FkgRMn1RZTd75
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4378), with CRLF line terminators
Category:	downloaded
Size (bytes):	4830
Entropy (8bit):	5.225692850574263
Encrypted:	false
SSDEEP:	96:GbJ0U8jqkSfDw5g51b5CBlE7yows1QpeAj:GbJ9ky/1FuCjw+QpBj
MD5:	C79FBD7BDF5042E43E8E71245C42D72C
SHA1:	236A327186D189F27687244698E1B23EFFB973B3
SHA-256:	45E86B464822C869746666535FD086B0542895A969CC15313587840B255328E2
SHA-512:	9F90036AAD726549EC4550509CEBFDD5996C002123003B5CD36D6BB3E75452A769772346E41AD38409CA33155C1A441956BDE8C5054A9030A5BFDB06A67265EE
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US
Preview:	"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(l){if(void 0===l.api){l.api=null;var n,r="unknown";l.bootstrap=function(e,t,n){void 0===n&&(n=!1);var o=function(){window._brandmetrics_initiated&&window._brandmetrics_initiated(window.brandmetrics.api),t&&t(window.brandmetrics.api)};"unknown"===r\|\|n?(r="strapping",i(e,function(e,t){var n;if(e&&!(null===(n=window.brandmetrics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function(){return!0}},o()}})):o()},l.register=function(e){o[e.id]=e.ctor,n&&n(e)},l.getModule=function(e){return o[e],o[e]},l.defaultOption

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/rum?cm_dsp_id=65&external_user_id=AAAMvzG-WejzUANqRLfzAAAAAAA&expiration=1714115281&is_secure=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 637 x 198, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8466
Entropy (8bit):	7.823233079189584
Encrypted:	false
SSDEEP:	192:/cuzEQlL8ADBvIyaRFEc/e67d7Z7oaX700wuIwvlWJy6:0uztL8ADBgyaRFle6tZ7/hwuJvYr
MD5:	D178E8892B1BDB15F35913FDF57BD493
SHA1:	A8BC85773269B7CD7C78B1866A5CF20C69163BB9
SHA-256:	238864304AFC9202A5717E1AF032711271FF312D807C0FE408541C7ED269F720
SHA-512:	2ABCE09A2DF645ABADFF0133CB825DB27F5D0793235000757A406024BA6DDC88D6C8071752BD3EB1D0E752C71936872EF6318ADE411E9D09B55D6999E6BB1560
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...}...........6R....pHYs..!8..!8.E.1`....sRGB.........gAMA......a... .IDATx...K.....S}!.fc..r$;.,..!..... ...,...(dr......Y0`e.(...,....Pf......^.pX.....Z.+..Y..+...n.....TUwu..#].......s.....W.=....s.S...%nW...._ow...(k-...}.&n...5WQ.".9.n.}.O...n....Fd..J.o.>..Wb...A.z...z%I.w.......0Mof......9..={Y....=....Z..<z89h..S..O?J.\_r........Ds..e...^......=..#....h.-.}w.....{..-./g.^q...h.$q.?.z........>....R..M..4..&.....\..2....}........`...r?q.._.q.B.M.t....O..........oc..v.........=............,.....v.PrY.....R...`qd../...t.....,...AO_........%..sW.q. .K........Y....].....1..ch...`.i....`/u.A......K../.........J..{}v....XhI.....>.....*.s...Xx.}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....@.......}....p.....[.....I..w.nK.u...m..._...e_........O{..;`.......}.mk..5o..mPQ.._.._...y............<s..N..M..

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2880 x 1555, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1322189
Entropy (8bit):	7.968491791546379
Encrypted:	false
SSDEEP:	24576:lD1wRQezdkzGZh+p4d/DKNDXDTFcFruHNSJvfSe2ABQ3DyR3gRnt:lD1PexHP5d/DKBZcMsyCiyR3gRt
MD5:	F64E4C0694C65AD543B0B1477991F5F1
SHA1:	466E234C8EB11221C70E155EC0807FD3AD4ABBFD
SHA-256:	6EB02F59D4C9C637E63436C060A77B721E48904C9DBB8B6AC7F2FF7DCB904C3F
SHA-512:	3E78F75C367B85AB9CEDDD6B6D10F3AE713BA62222B1E6287561FE48392E22242C862AFFF6105E194560A7C3FD65B65191C005490D50AE098A9C7BBF0D781DC7
Malicious:	false
Reputation:	low
URL:	https://help.wetransfer.com/hc/article_attachments/17132409229074
Preview:	.PNG........IHDR...@.........`......@iCCPICC Profile..H..W.XS...[......H..."R.H....^..!..J...bG..\....."...;bgQ.}AEAY..v.M..\|.\|.........s...~.+.g.....%1...qI..R7@.......YQQ........&.v.A.....j.\|A...$..T~./....U<.$....7../.a...&..B.NW..NU.r...6.-..P.\I:.jW .(.C..>..D\|...u..>99.\|.S ..>b.e....t....:....a.\.. ..gs.......-..a..5C..#.3....0..B.+J...X...B...b..!..W....<6........... QvD..OM..q .+..&...A...BA^`..g.$7F...O..YJ.<W".+..P...R...p...ZaF\"...-......A......S......Hcd.[@.#...+...4IP..4'op...!'B...g.(.....\.+..+~PG.7.\|p.\|A@.b.X.@..... ...Q..)..(.?n&....f.........pA..4q~T."O.0......_..........rA&...6..+EO....H...d.G$.{D........@..8.y...@....8:.4yo.\|D.x.q.....Z.%.....@F...\.x0.l.d....d.3,.+..`D...'1..@.!..mq.........6g..{...?.)....p..A.3YX$.).....)k..c-p+.....P...p.]`....#.B...[V..O.....wC.Gv"..ad?...#...\.Td...>.\S......9>.....9.gOl!v.;....`G....N`.X+vL..V.......#.'.....o.....T....E./.&{G.v.x.D....`./......G0...]..}_...7.............'....\|.BO....

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601), with no line terminators
Category:	downloaded
Size (bytes):	1601
Entropy (8bit):	5.547222245066974
Encrypted:	false
SSDEEP:	48:oXQwJEK/mH1nwOK+YG4Xfu4JWoSoCd9ntsg8QtM:oAwJ9yjK+Y3lJub9ndz+
MD5:	C606E09C6B90B4BB085A58EF18C40AD7
SHA1:	A3FA8FF5C425F51BE24973BB61245F403C157A40
SHA-256:	03C3BEC22645FD080A1812F3B5E06D76A220551EB1581AF1EEBD5E1F89D16BC7
SHA-512:	A6B68D88F7AC7585FB8D78E29B5BE2FD4FAD5837863B52C6CDEAE98C91585EBB77C9F04A758005DDBBF3636C5F1F45511997D58E5EE21C5C5E4152533834C995
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js
Preview:	(function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLIC_AMPLITUDE_EXPERIMENTS_PROXY_DOMAIN":"experiments.wetransfer.net","NEXT_PUBLIC_SAFETY_DOMAIN":"safety.wetransfer.com","NEXT_PUBLIC_AUTH_DOMAIN":"auth.wetransfer.com","NEXT_PUBLIC_LD_CLIENT_ID":"5b82f23280914154b163996e","NEXT_PUBLIC_PROFIT_WELL_API_TOKEN":"1a33eb12b20b92f6b89c398e023e2ca1","NEXT_PUBLIC_DD_RUM_APPLICATION_ID":"8ad3b331-fdf8-4935-a93a-63500a0ac535","NEXT_PUBLIC_CUSTOM_WALLPAPER_SERVICE_URL":"https://ekstrom.wetransfer.net","NEXT_PUBLIC_PORTALS_DOMAIN":"portals.wetransfer.com","NEXT_PUBLIC_AUTH_CLIENT_ID":"dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc","NEXT_PUBLIC_SNOWPLOW_NAMESPACE":"0497","NEXT_PUBLIC_LD_ENABLE":"true","NEXT_PUBLIC_REVISION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_AUTH_AUDIENCE":"aud://transfer-api

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (623)
Category:	downloaded
Size (bytes):	2160
Entropy (8bit):	5.643325545922024
Encrypted:	false
SSDEEP:	48:ja8++eV8+rgveG9rhCaZeV8+rgveG9rwAEpoWieG9/Jdi0068kh9pJdR5:+8+/Vjs1ZeVjsXEp2tXt8kb5
MD5:	2B44D29C4CCF3ADA7EB574021278092D
SHA1:	D4913C49C65E132AAE9AB45ACD644055B7C01CEB
SHA-256:	AB18ED3AB47625276C84E25ECD98C5BF6653A77131A4960CDF7EDDF6C97CDA88
SHA-512:	247A9E08CEBEFF9A4CC60FFA1F374BEBC25970A153343338CDA09A1BB454B6AD554A26A5CCC21F5FC29E4B54DB11EB1AB8586F2B5C9FA949141E39AFE4169E99
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028884348&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=691932089.1714028884&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028884348&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&dt=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=aea856b4-45d7-4d25-90ef-642b02d57292&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A08%3A06.767%2B02%3A00&epn.hit_timestamp_unix=1714028886767&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028884348-61-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028884348-61-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=2299&tfd=3196&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=2015720746;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=2015720746;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	327216
Entropy (8bit):	5.597886950405377
Encrypted:	false
SSDEEP:	6144:KnBB2AxJGDI0sN6CcwsN6Njxx2c9sN6Nsd6Hj7xlsd8Xj7xtJ+fIPXddO/wLDC95:wrGDI0sN6CcwsN6Njxx2c9sN6Nsd6HjE
MD5:	AAA8F2C6387138702E0BBCF502FACABD
SHA1:	7AB87AF689B9AE95A5C2F3112B6BA149DF22887D
SHA-256:	84456382157F610AD3CFE910A483C23E179EAFD769367843E98A1406C5AC71FC
SHA-512:	C06581795AB079192ED5E182B6A570DBBBA3FEC1F028580E752FCB2860F78C79B43D19D32ECBD4222FD21B0724B8C97C66A25C78049C793AE41F0D5020BBEB37
Malicious:	false
Reputation:	low
URL:	https://z.moatads.com/wetransferadzerk716769425458/moatad.js
Preview:	/Copyright (c) 2011, 2024, Oracle and/or its affiliates. All rights reserved./.try{(function(D,w){function Qb(b){if(a.b.x())return AB_SCAFFOLD.sampling.onReady(function(){qb(b)});qb(b)}function qb(b,n){a.n.a.sxaz("trackingReady",{callback:Qb});if(!a.b.x()\|\|!AB_SCAFFOLD.sampling.tagShouldNotTrack()){ab=z.h;z.h++;z.i[ab]=!1;"undefined"===typeof b&&(b=a.y.e&&a.y.e(P,"display"));var r=b&&a.w.b(null,b,{},null,!0);r&&r.qs&&r.qs.d&&"string"===typeof r.qs.d&&(a.j=r.qs.d.split(":")[0]);r=null;r=!1;rb&&(delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0);if(r=a.b.x()?!AB_SCAFFOLD.sampling.isEnabled():.a.d.aa().isInApp&&!a.d.cw())delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0;a.b.x()&&(AB_SCAFFOLD.sampling.isActiveSampling()?a.h=1:(delete a.h,delete a.i));rb&&(delete a.h,delete a.i);r&&(delete a.h,delete a.i);a.h&&(qa=!0);a.r.v()?a.v.n()():a.v.i();a.d.aw.c\|\|(a.d.aw.c=!0,a.d.bd?z.dcsx.ynds(window,"pagehide","unload-"+a.d.aw.a,"unloadFn"+a.d.aw.a):a.d.bc&&(z.dcsx.ynds(windo

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10768), with no line terminators
Category:	dropped
Size (bytes):	10768
Entropy (8bit):	6.1690775567188885
Encrypted:	false
SSDEEP:	192:ng15FhCBEBQw3pk2Tu6WwbAJKyJaAlWjDRRBQw3pk2Tu6WwbAJKyJaAlWjjebpRm:ngjCBEBQqK2Tu6iJKeX8jXBQqK2Tu6iY
MD5:	625E1C47EFD372D20EB4EC768969B895
SHA1:	0B291B60B8046C159415C3A00F26CFEFC8810137
SHA-256:	444CEB933D370411E5D539732144A9700B0B2DE20A9AAE96921D7F5A579ECD9E
SHA-512:	9C7450D2442029A694AA490EFA541CC4475C78602BD8D9F1796149ABB6289FCD506FA6D6DA35944D1EC551AE3B3FC351BE6352F45DD2B125415BA1A8F96F5D3C
Malicious:	false
Reputation:	low
Preview:	<img src="https://a5585.casalemedia.com/impression/v2/1077556/85/col02nenoik97jbo8ijg/038f9e1c-92de-4c5a-8324-c292993bc1db?verifieD=1&userID=ZioBP9HM4ycAADS8ARFPzgAA&cmpro=587&deviceType=2&expiryTime=1714029493&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-A-zLEvHf6pV1nWMxGtIgumGbmG3xBMQlH2WB2O_EmclZ9_Y4CH9bYGZSviA9tKJbR5A8-J2JV8JloPNI6dgCsIUg7HX9FkqJt7FFLTiBBuAql-pOI" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXqXpG752CifPV-S8IvtoGWfTA2XZbUOc8jq1_vUe15ZCLA3inBAZnFitTWiTQ_XVounyZwS-xd414XduBSV6OKIQICqg" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'ht

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a5574.casalemedia.com/impression/v2/1077556/85/col02jj941285q4dgn90/9a641c96-03f1-404a-8d03-04ab58f72f7d?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029478&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
URL:	https://auth-session-caching.wetransfer.net/v1/login-status
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028821638&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1954x1689, components 3
Category:	downloaded
Size (bytes):	367532
Entropy (8bit):	7.978394655785003
Encrypted:	false
SSDEEP:	6144:8wDe7nmrwMXR6KXUxTfENXmo4TR0JFM7UT187Ms6N8o9jgqgALIpWgANbtcDStcq:8w6LEwMXhkxqXmoCsM7ElN8o9jh1I7A7
MD5:	919AFCC9672A5541843A4796383FF076
SHA1:	E5561D495CA28AED8FAE85EDC5BA1CB74F673C78
SHA-256:	21E80FB1CF68A7EBA0640F3E0CC2E86978D47F45ECEDE349C26608967B107D0E
SHA-512:	9ED65DE96BA083B88DFFE1F095BAB876D25C4F5B6772396CF3A8381D7DE442FE10A1A579D6933E3630BEDCCC4F6870002EC4DF46A54F4939AD23A9E64BFE20A1
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/1.54cf34588a1445a7e768.jpg
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T..........."..........8.....................................................................E....L.W%&(.D. !0.` a..0S4....i.N..iJ.;b....(.Ee4Fp..H.S.......t&..M<..LW .....x.....Gb...h#(.!..`[ ...D...b@x..J..(.Cj...q....(.@...dB$a.&.+..V.".r.(..U.B4."..x.@..!....iFI..iB....\...S{ $3..f...$.....)..C<.Wb......&.D.f$.\........2..."y...i..J.HSr...#..).......b.)..^.Xa...A. .f..I..G+.... 3a....7;......^jdGdcJ.........0r(.m.A...S.u.H.ZH.$.Y....:.....q..C.,..V0qZj.k....HJ........4V...1.Qb.K,.#.,.j.1.A.X..G1.dWp..CI..Xa..=FBC.4...V..%..$K.I.x...). .E..<].A....B@.b.Q.l..9TZ6.1D. ..$E..f.6..Du.i5&3.w`..2..$...B. FX.b..b.....0..6@..N@...AL.......$..R!.P.4....rQ.8Y @ .... ......,X.`NN.:.n!1....#.....r`.f.#(..Y...i....b......1H....=.rA)..Z...,......T..J.Y.....E..IJP..l...p.xN.WL..s.9 ..."4.V:.....Bj".C..$.].. .!lq.....3.

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	136430
Entropy (8bit):	5.519278490867739
Encrypted:	false
SSDEEP:	1536:bSQY4Bun6nH4NH4X+OmB9ECYWcWvpsDttmNaYxWBUFywAS0mcDCh3c4lH3CDRJkA:hY4S6nH4gwY/DDScBUFyBmcWlHyDKh5m
MD5:	8B29558CC488619DAC69A609557AF1ED
SHA1:	A3501782DB0F9EA30D1FC1842AFAEDE02007F615
SHA-256:	698F10E6959B49DC6D7041622C2E6DFC2AB8598D0DD1A6CF617EF82454B9957A
SHA-512:	7B4FF9F319FC0586919A40EE38F59A0A2A626FC8257C272436F8DD709D022905451337E4DA57F0782143F7A76E530C5299C9C281F501CBD93E879936FEC38A05
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2312-photoshop-apac/imagecompare3/1_BG7ymf/GB/bundle.108c75fe45548116d31b.js
Preview:	/! For license information please see bundle.108c75fe45548116d31b.js.LICENSE.txt /.!function(){var t,e,n={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:["GB","FR"],tags:[]}},2274:function(t,e,n){"use strict";let r;n.r(e),n.d(e,{clickOut:function(){return c},enterFullscreen:function(){return l},exitFullscreen:function(){return h},hideCloseButton:function(){return d},initialize:function(){return o},onBlur:function(){return x},onEnterFullscreen:function(){return y},onExitFullscreen:function(){return b},onFocus:function(){return w},onSafeAreaUpdate:function(){return T},sendTrackingEvent:function(){return m},sendTrackingVAST:function(){return _},setCloseButtonColor:function(){return g},setStatusBarColor:function(){return v},showCloseButton:function(){return p},startUpgradeProcess:function(){return f}});let i={};const o=async()=>{try{const{ChildFrame:t}=await n.e(122).then(n.bind(n,199));r=new t((t=>{let{availableListeners:e}=t;e.forEach((t=>{r.listeners[t]((

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10663), with no line terminators
Category:	downloaded
Size (bytes):	10663
Entropy (8bit):	6.1584389510428865
Encrypted:	false
SSDEEP:	192:Xlg1v1TEsfqtxUw0YT/i085L8BXC4esr9qxRsfqtxUw0YT/i085L8BXC4esr9oE3:XlgZ1TEsaxJTe8FCzsr0DsaxJTe8FCzu
MD5:	3A01122E58627E12ABEC888626A44455
SHA1:	2A7AA3D3E06ADBECAD3A39A7DD8201739727C562
SHA-256:	E7497F9A09CABF944EB608EED94CBDA4595E15B4961DAE5F8B66DA1E123D4E2A
SHA-512:	4BC51FB9D465086D1713CE229308529DAF735D82181A4CE75402F3E557F889B2852BA4521E34CC7A9611493662864D4F63FE928552FC4BB35B049BFFE47B8646
Malicious:	false
Reputation:	low
URL:	https://htlb.casalemedia.com/openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028855715%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D
Preview:	<img src="https://a5594.casalemedia.com/impression/v2/1077556/85/col02fc5mqmdtr0llo30/e2b2fe7e-b769-4920-a052-b4a8180e3f3f?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029461&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site" style="display:none" width="0" height="0" alt="" border="0" /><DIV STYLE="position: absolute; left: 0px; top: 0px; visibility: hidden;"><IMG SRC="https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CeKxl0WkBFBwXn06pYndVB3c9CGwH0vVf9x4ewOehFvcZJFa3bgIc9j49kNYAlXhQBDcvfRK6WDB95Vg8zU6PfgqyiRjnLYKTK4n0wEShq2KaMTuk" BORDER=0 WIDTH=1 HEIGHT=1 ALT="" STYLE="display:none"></DIV><iframe title="Blank" src="https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXklqFJkASJ69jFDJs76ppjN_AYALC_l1Ipk-Sb5pBaodZCN2NaHczaoQM3VB9oIXnP7W9Dnn9nhrbmnUNhnb09LbFxOw" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'https://googleads.g.doublecl

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1338)
Category:	downloaded
Size (bytes):	5017
Entropy (8bit):	5.580912755042065
Encrypted:	false
SSDEEP:	96:+8+/HH5ZeHHF8+/TH5ZeTH7ZVaJ+T0WNriNRGEpZJsXt3c5n5:+8+HZZeHl8+TZZeTd5NriN5p8655
MD5:	9F32339DC7E5C655E22C6F23C9D81C16
SHA1:	A7BD8B592FD31A69189AF3667486C9266D6D05AB
SHA-256:	E8230429035B05039BA533E2A5D086726A49F968EE514B5DF019AEAB6EB668AC
SHA-512:	CAA27B37626F09F3073A4553AEB64B16B8339A050BCC876220517866DF3887F63831E862CB39CA04B520A5A6B5C6EA4940BB4C387DF0F86C2A54E00913B79168
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A47.178%2B02%3A00&epn.hit_timestamp_unix=1714028867178&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028863437-80-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=566&tfd=4914&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	874
Entropy (8bit):	4.875686790492149
Encrypted:	false
SSDEEP:	24:hYdKgqF2VQtczlSZYOJDzZnoX3OHYZY6CLNlMU:UK2WYOF1oX3RY6qNl5
MD5:	1FD37564188B6300561C262233E5A63B
SHA1:	29CCC2EFBDBC9CB12EE903DEDAEABE33AD40855A
SHA-256:	6EBEE5330E31DBE7FA90DE512912913BC8C4370B5BEE82E345C9B2C9AE8CAE0D
SHA-512:	DBBB744DF7CB69D833CDFCEAE4857E20C80CB7507F3AE0CAB9D5EB7A4B622C60D88B7E687758A25B0D632C2CFDD65B7BAFD8A7CEB1B8D7E00F52130933F47457
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8" />. <title>The page you were looking for doesn't exist (404)</title>. <meta name="viewport" content="width=device-width,initial-scale=1">. <link rel="stylesheet" media="all" href="/css/error-page.css">.</head>..<body>. <div class="error-page error-page-404">. <a href="https://wetransfer.com" class="error-page__logo">. <img src="https://email.wetransfer.net/Logos/wetransfer-logo.svg" alt="WeTransfer logo" />. </a>. <div class="error-page__content">. <img class="spiral" src="/images/404-spiral.svg" alt="Something went wrong">. <h1>Yikes, that page can.t be found.</h1>. <p>Head back to <a href="https://wetransfer.com/">wetransfer.com</a> or cheer up your eyes with some <a href="https://wepresent.wetransfer.com/">nice things we wrote</a>.</p>. </div>. </div>.</body>.</html>.

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714028886767&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZioBUgAAMFcu8QAF&_test=ZioBUgAAMFcu8QAF
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (649)
Category:	dropped
Size (bytes):	2268
Entropy (8bit):	5.645720908186629
Encrypted:	false
SSDEEP:	48:ja8++eas+hgteG9ruICaZeas+hgteG9rulAEpoWY61G9/Jdi00CjuUzadgbdR5:+8+/g47Zeg45EppsXPiU/5
MD5:	52E093DDD34C52BB977595373F83BC5B
SHA1:	915D65BBA77C6C1DD56B3985CAA6B03A2A6A6F52
SHA-256:	0D903AD00CCD9298FA0EC63086695D238518CCFE15B46E110C96C6BFD4114D1B
SHA-512:	D7EFE429E8A018BCA28FB4D5ECBA618278890BD81B1F5AD7EEDDC7EDA33E584ACB3BE64290CA1611A90691FD5544517203A8CFA2CB79D4437E166C35F669E532
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1344285384;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1344285384;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 532
Category:	downloaded
Size (bytes):	316
Entropy (8bit):	7.280756015430302
Encrypted:	false
SSDEEP:	6:XtziAR+d5p8Q95mn2EkAc/X3ooVz0VgkANRz09Hd2d0gG02Q56gsRQyFNr:XYAUd78Q95GkAOHDzaqR49gY02QZsCyn
MD5:	89DE92EC88923DEEEB670787238B8024
SHA1:	6AC9E00244F553527B37FC2EE2CC19E4297A0182
SHA-256:	8DCB5754E5E1BEE68F8C10A512FDB0094299FB9448C544B024BA56AD995C154A
SHA-512:	42DAE736A8FD96D6B1DFF3886DD2697E7B15DD9686F7138C2DBD8FCD30B2AE13A1C665B4AB59589CF076DF745F9F26978753A774D476A6964B6A6B052D8F4FD3
Malicious:	false
Reputation:	low
URL:	https://collector.brandmetrics.com/scripts/b.js?pixel=d267b2f7ee2d470cabb48697cd65d041
Preview:	.............N.0.._%.!.....$...#..EcG..UU..q.@.T...;..fX.1...&VO...d..(N{.2.$g...:.......(z+.J..........X.2.c..J{....;..S.}.Xe...Y...3.u.,.%...VM..[..o.l5O....a.#..Gv.....\.~E.jUt>..cT.........%."....y..H.E...0.H...)c.....&(...vta.v.X.E.>.K)....9SZcG...)..&}c...R.[..w;.Rp#@.P./R.(a2.`S.\....tn....

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 874 x 462, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	37105
Entropy (8bit):	7.963161232444271
Encrypted:	false
SSDEEP:	768:QhTQYPNnliSyFMc7YhkusKdMLrZYW2l4cJ5IcHp1dA8qG8DHn:OBn5mYOusiUlYW6HLIadA8QD
MD5:	942954B3E07212D161A1E99359B59713
SHA1:	B674B45A1C0EE61474E5A8A59A5E7BBE5D8D4DC8
SHA-256:	28E1CA4C881DB68512AFB765DD848D4101B9BD849C005490064599D3DE016799
SHA-512:	F6BDB169D53C0F422814F68959F465FB5ED1CA1356D7A0FC28D838D0844881D894B9068A25521E21BA1BA61058C15F339520389916BD3D490FDBEC8BE7BD773E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...j.................gAMA......a.....sRGB.........PLTEGpL......................................................................332...........)yyx210--,...//.........))(...#"",++.....................$$#.......................................(.[............'&&%......................&........'............(.%....%\|\|{...............#......GGE.z...Ofm...."...566dT?9Sa.....^......vvu.................g.J.l....`:;:....essr('$....a..&.h@@?...........!.mI...zKAt..c......XXV.........jnnl..SSR..%..g..jjh..........u?6]]\.......LML.....ffe.........aa`.!..........A...8HJYJ5....><5,R80..... ....6.O..........E..s....w.l<........h.&....k.Y.............'..]P... .........Y.\7....{.xLc..[....$..L.h9l]4..x..<i....^..E.H5\..6.....#..2".uuB&&.....]...............tRNS................/^.......... .IDATx....j.X....{.......)...b;$E.xV..Z....C...*.....j[.V0k=D/......9.a.\|.cY.lYG..swCwU..._..9.........M>d x..8./.I

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1718), with no line terminators
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	5.232778425215442
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5Lxj2OjE8TVVaYMU5m0sWt:0E1JBaYcfICA6PjDVaYxRXt
MD5:	7BC594D2F21C7B14C2BBB8EA785276A0
SHA1:	09AF153336077FE213A635BB0C525B393C74D85C
SHA-256:	785DE61722B87A114F1B7FD56B9985DB96AE470FF3BB6D2516A2A34F3BCD02F0
SHA-512:	D27883B73933A5504C12649C8DA60A917E32072A43F633B9E099F32D4AF313A4C02CC798441A276943FCB1A1688DFF73B9C451C973707E4E2F76CBAE18CABC34
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}.AppLoader_AppLoader___e83q{height:100vh;width:100vw;z-index:0;background:#fff;display:fl

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	98431
Entropy (8bit):	6.06315886173207
Encrypted:	false
SSDEEP:	1536:3tqmrvjbB+0nycT+cm3inOYx48Dg/4c0O75EmIuwaEfVZgsr6MMAJ9dIwpQXHnc:QmTB+uDmwzayr6FAvB
MD5:	57C4FBA7D119DBC264852852A92EF199
SHA1:	2476C7475DFC6EA4D6D968B2DB663490861E8052
SHA-256:	75BBF32D2328E5D347781BE418B0F5DF971B1E4BA9CC55DD5CD47749510602B1
SHA-512:	DFF0DC623FD750A0E5D28187C7EA9838952F9D9905591A052498130A46F4BCE870637D0C7FF74906C6317866C3C87B46F6685FA9860B8F9B041CF2EE947E7B64
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-ArW-HEn8RUvBXFPztM0VQJczpKYOTzAICes3cvh8Q27UM5t1ZyOC9ii0_p9AjJJ-yWsY5BxgytZIoLydNt8ijBk8Bzv9zFUMsRHTpCgsENQf-QTRm9Yng2TpqwpghFlULa0im2C4Ngqb_94intwyBbd3zP1fa8b-RJ2Z82W8NtXNzXdH_Gr31KMFsg2IA06pClCLIidq5X5JAhevfO5uQZEhPDsuDr0qBA-mgBqECpVx5eCzo&dbm_d=AKAmf-BjemhnpRGeyMotUw4NKitilyUn3WfyOrFA_HFqicla34xJAlbkbtoCvb4ok4Ppg-iXgU_NLTYhbIfmdVGlm2ryTFtZlcmV5asQZWAVBGaCxAttcjNbGgD8v6dR916bElpCFCED8ZXV4kDydw52E61fM_LNmnoaFW_MzK2EslpWWl8yaQ9OjuOtSmEykze1_4SyyY_RCP6o9MH90mr0MdIiv2rTVu7fDN2FEwvFDMjAu8HYzpYyqoHO5IKrI7A3DSKMuliq2VsXbv8EwTTvrQHxA9m71LDzAka3uni11sJHFqJeWWA24JHHRQ6ifzJhKacS7WjJQg5asfLQZ0eyngNDyKR6PmBuI0Ef-SoQjbeyjsEsaHOy24f7rGeoIcJlSqhy8koYYrPVyxJDKyqPegq0xaeT3697NVk6-qODV38mXZ9IllSa-QIruDGH-O0Ahtl9xTHCMcQn4NxcalyZPNN3qIX7wptg-rdIstSSsJJ00kaNsOs6X7-U0AWgZhXFjzxrClnb5TmzMJTyulvdh4weNC-dA7KW5yvyvq34yPO6-2voyVU3uzXwJa88X0vpgUIomrP42YEaIi2xTj-CClB18xmoO5UC_tUhzOdPEgtDrj9OKnWSlEx-nPLiM6T4bzhQlg4UETu8E2DAo_J31e5QhGD60KZpr_-DmI2CwV0ttGd7znWlYIqR8zpxDssbWOW8KU8qjFPXSLgg98PmuOvhvuU7cqlxAStY_QUZ2pWBzO1Psmy74SyJf8OHnc1knLQXrgW6dIXpB9BPjezQCd19pG6BPkvNJRAY9KKZzp3mk-MpIcwTz8RokVhBLwa4jOByEMF9KOb2iIl9SN5XOvzY-bozLOu1VAMewQfp6EjiJQcKrt1WrPzpJQBrrVwMEvVSApBHNQ-6JY_2xhsF7jUqWbTKQvu3D67LMmBppoFfvjm9jw2ewntPMToJA8AWDPpKp3dp7nnocLffzsquxxAwCUA3G-Vl-rqyo7LGaePg-hzdnUfiWzq7DUsp951pKY3JYky_BpHhWhzuIABXgJ52uiPdLLtkBnMNbYGcb-mDuGT8IFrq6TLTg49EQLeny3HwbxcXFVVUhLBy4gq4pYMpHW0uQM0DFIDORXzXe7ktkJGCm8K2IySjJvrHK8txJg6G8qBjcNMpdCnZz9uT1H82uyOXbKYbHSxpda_PxgBX2wZnHbVEQnp_a29UxpT5Yy8MCDb9GGOxILt4L-gwkL04cj0aCMYJI8SExHquII0MPmfMYJzIxqzvzgm7xsSnj5u2-akBe1cNoVxyo6aZPaU4xUL72GdfoK2DUkiMj_5OpDiIxZ7kUBjcLz3efE4ikNz0ZM7nOvrhylnBTdkoHHFl8tRPokZuWHWqRf7fc7svgQ9qIa8kshYgZudWd5eE0Lp_vCUZYrs_SNp68cFxEeT1NjXiJZDZMeBblosg9whoRiGvbS6-4Ax9XchdanqHICt-Rc6j3w4_Rybs4RfIXqazayY_2QPTtHwouW3Zt7b4cTQ4wDW8ZSk-8M5xbmrUJHeQ8kTr_sTdEQIsvkaSUwD7F7YTg-648rzSxSnAnBmrqyyUBV2oM1dOC2SENjbxGuqiUFMFj7zTP0hFxNTJYpxkAyd_Gh9EhApR1tukgvzVRBxHDnsv1Xz9YvyCs--01-tHaOSqPdpFeoACYhQ0gunADk1s49IIOXJw2VjJu2xcWPUkcucXWidWlZmvQFU-LRsALNXI8L3FYurTUtRFC5opPZrcfauMgfVUggxU3zemOPkAUORxgxDg3mTJIDk7AY4u0UlGlGw9Qi2kfjtF56w7jGjR_2eytHJ131yCIW4Kr5t3B17k15y2-arONj6gaQqP-DDYV4sqloPqa0gEy3KIMYWtVIO6-WE2CWd2w5N3MEG9PTEw-FfOxLIJOkM9I8EFnHcyPLartm64HOFRincw126snLrxTIYqysqIJrzVc9vvzNTMMBo_20-oLGanDRONNBrMT46tTPXwPF_ZENAU0quaPhvAb95WEBBiNWozR2Q9mhjupUO4TgJFoInYSnKpBMn1xKT4DO0NLENY3zW2Xio6jPw6hSIpubODI72J5WOpG_oRfYYSZFSBK2phGVkbGxbWJ1ecveVNDeEYVe-ebjMZWVpEU3VNIDjf2m1PAYxoFX-435SdfxjqCqbmK5rVWbaoWaA3sxTMvJGuPLELdLR0BnYF5esg2xnhnX_Bx-yhDI5qU0S-76IbZdBRifydotc11ed_QyIjDIpP7pMr5z0w4bnFl74fbDsdG2RQ4kElq05Hw85fAvJOSApcXHIXsc72qrPdDcDAFBSG11dY-Kp9l5lln_qMA3-E016cxlwO8nWwDtpfVSgh-Z06hQpjNK7r9UbnEmW5zgx-VFAclcxzsoTqFCB8U_nO5IKsEKBzraGXmAl9lGdXj6NtnYWkXzD1FJes2e_v9Y9iwCd-vXmAPoR_1A3Z3DPLGw-hyE6WVBujXESdaRPQ9bu3YI67h6AYxVLn2loFN-_X6U-0QQzd6d5VEMHZqs_xaqO54WbC9yGLoqtfvxU1apnHYtA5zPuF7cR1B_9knuETyavJPRYWIEpCU49XUqCeM5w9CBzWzvIQuQDxjVlzK_z5ZMrj4dDkBydNLNjo8NBTE45tubtOw6NSvYFk_yBBiSCaJ7cSrc4OdQaeLu9tqV6B7qzUHEz2eCrUWfR4PhkpDERkCB7zINgE9obTzPES-YtHE18EaNqWlVdEQAHiloH_qdmV1rbvXA1_epe9Z-lsMzEugO_J5R9KnPzudVHzTYZqr1L0wZTqZQFGa5YtBCrJ25ctUqeSkLCuOR4hReH5_q1Oqrf_0Vc6dlQxKsra8D9Tm7U-1oub2XAW_Ha7ETrvMxBYhCnl3XqWHDpkIJ7CatrsUHqSznsRhpzY8Xyjbm3PP_MgJfukaoEWsmKy6Jst6igm0VXXG2RpRvBAlXzHGRVXiPgl6oyvhUf5Pt0VXOJkHTtMR37X15x3BzBLoVPyk1zlFHJbRp42ovIQOXCjgCnRjBiZ8y9yJzyMUgzQAd9FpVz2cXPUGsDnZ9topCgUQZ-WGigMYzHQUYF8RyyMKLBru7mJTx6EOPHj7II52nwjD1NQae2fgVoySoASh3v6jUPKb-n7DL_4W96AHOiuUWH2MmhNwTGABz-rTYAodsXRdyusiGKD8TJ3cV2ydeeFQZ3sDGRjYV1lDTYrTtoHQkucDSBD3NBfivifWzgRycRGF-qIHyUNPxeehzX-3VAXm3bUETNhgyTZHW7X_4mUol1Kqvq7SAzzpyemNVUHC6li79Fh9NO5vuoidCk5oBKpgH1Pqez2RzY_nb9U6921PCBSRk9yJVYD5eFEG2DHK46muJ16eONTyp83e8Lw9NHYz0cH1WEb0WOrMok3UeRpkKixXd50phev0fZkbEvLkmgjUjWv1bZX7hGbVGPxGH8oi7wtSVhjrBPH6MDKiGD-ioWw2-x2m4AXAXdLu_i9d873GlFq5BZFkgDLeVeVm9dsELDxxFORZ-zkX6iFh0C0p1XRYtQ3Qms43N-IHQlNBR_mrpfLAPaN2-OC0hmvdCn7d7ii6B930xaSgPctS-1f6UeT1jtiHkeiB1TFwZX9SHCDtHpQuhKti8wHkPHwc9z4hLrYEaVzzN0tLsusurZP17N0jSrlIWQ78CJrUK-xIT_Tm8R867cLekIdmWyUtIxOaJwH2nU_lGfo5CsGVIEHHfs7O3RcrrDsVw_HrykSDPl7fhNMfHYAPEqmxzGAednLNzsdMjCfwOeZUO3r5Aq0DesX_TD73uJrL2S2ZLlqCuT48I5nXn0FaJ1RaqBONQz8D_CF6bUM&pr=13%3AZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cid=CAQSGwB7FLtqP4v5zx2vv0gJopZ_NeQbNrX9etdUmBgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwetransfer.com&ds=l&xdt=1&iif=1&cor=3750748680651662000&adk=3123349629&dtd=23
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_2127758409"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_TgEqZuuION2Zrr4Pr8WqoA4"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240423');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fu

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	218938
Entropy (8bit):	5.415736669991316
Encrypted:	false
SSDEEP:	6144:vR9Um9Yw3sA5L7ncPidHslXWfXbl01A/d9S:PnOr4l0CfS
MD5:	856501D11FCD34EC85F3D45B2567CE92
SHA1:	54023FD129DB426E23556FBC52DCBC60E6F172E7
SHA-256:	B47638E2B3E5A0F28AC238700ECD6A54D333BD521A54B20BB873A565FEC58687
SHA-512:	F16252ABBED2559FBE8A44DC0095D0FC4F4F00BED9B73B422CB1D051D4A3B3302894A1922C3ACA83AADC9A3608F66DEAE426E5FD368A6B1E170A0AC03AD45E5C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9369)
Category:	downloaded
Size (bytes):	9380
Entropy (8bit):	5.246192322737003
Encrypted:	false
SSDEEP:	192:MBkGhABoM9fu9nQ9I9dy9XdLdXsoMWq/RmJLbb:MhyBFf2wYdwtVYW/
MD5:	359C3FCE9769020F14763E4E3615597D
SHA1:	A286AE2741ADCF0274D0129F8704C382B8E47E81
SHA-256:	836316444E9CEDE5CE83CFE98734B9C8AB27192A9634A59B82C118A8E6792037
SHA-512:	4E24FE8D51EA331F73157791CD98361A65C0AAC7C1B2751E792C797D0C4F196E2B200AF11CAF5A8195894819A98DF7AA3559C95C76DB9BB8280A8CCF84E45454
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/theming_v1_support-e05586b61178dcde2a13a3d323525a18.css
Preview:	/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inheri

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51417)
Category:	downloaded
Size (bytes):	52699
Entropy (8bit):	5.742234233962539
Encrypted:	false
SSDEEP:	1536:jsv3ydH/3WCd4Gsq9f1AOeOnHjCF445id:I/o3WMRhPjEQ
MD5:	8028715972153561F2B0BC585B0E5470
SHA1:	2A4125F7A552E88C2263126D45CA80390603FA23
SHA-256:	EACD732CE3B4418A8235B5474A388F2BC3E0C36ABDCE29AAE74CD330B0810C43
SHA-512:	2A829931E4B64F2ECEA0FE3985DAF16ED92CDF1BFC0916DB7510DD4FDCE3D71AC30EA3356C3C6EF45625C8308679616D21DE53D05C76100DF99F3143EA722961
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/6s1zLOO0QYqCNbVHSjiPK8Pgw2q9zimq50zTMLCBDEM.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(W){return W}var q=function(W){return d.call(this,W)},Z=function(W,w,k,C,m,T,S,g,L,y,J,V){for(y=(J=k,16);;)try{if(92==J)break;else if(85==J)J=b.console?41:W;else if(96==J)J=L&&L.createPolicy?C:99;else if(J==C)y=51,g=L.createPolicy(S,{createHTML:q,createScript:q,createScriptURL:q}),J=W;else if(J==w)y=16,J=85;else if(41==J)b.console[T](V.message),J=W;else{if(99==J)return g;if(J==k)L=b.trustedTypes,g=m,J=96;else if(J==W)return y=16,g}}catch(t){if(16==y)throw t;51==y&&(V=t,J=w)}},b=this\|\|self;(0,eval)(function(W,w){return(w=Z(84,90,91,34,null,"error","bg"))&&1===W.eval(w.createScript("1"))?function(k){return w.createScript(k)}:function(k){return""+k}}(b)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	64800
Entropy (8bit):	7.968452513932705
Encrypted:	false
SSDEEP:	1536:4QOgscr/TCQSOvGEAOCMMRlLPylD79UAWAVdv/VPkxFQ2swsuF:4ngscr/Tn8fMMRl479kAbFcxFRnF
MD5:	79FDAD8D65E1C583303DD4E1D6AA809C
SHA1:	28A2D8873662EBDC570FAFF3D76D867A553497EA
SHA-256:	7774940F7AA486F8D0A34CE2A56D4CDA378191A3878016B899378010E774E287
SHA-512:	8B0060B4110EF7B64698CD77B6502A9A46FFE9A779AA7EACFC8257E5371C776C06810B274A58B3E8A3C2419BC483A08DDC5DE1E15925F44BC96CD4759CF390E4
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/12869299199225834669
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71691
Entropy (8bit):	5.290510613874029
Encrypted:	false
SSDEEP:	1536:m2uB0DdnFpVMQfuhkGT0iCfWXRFGY+9Ti:WAVm6GT0BuhFSTi
MD5:	42EACEAA10CED1BC091C1D9097C4897F
SHA1:	15DF0C2CCF5DB8E1A2705BA4DC4F60F0DE01FC49
SHA-256:	4CD6686277A3ABE85C63ED695019CAC862CC54702184108DE1DA819271B1FCA0
SHA-512:	980ADC2F8AC61BF853E250C83405716DDE44592A0D1ABC7A41A35E52A9CF366100CD4CFA95DDDD4BB031A46986387516C3B9ED0D18D9990DB4CC471184BB08EA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/2edb282b.45c56c19221816df.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=NaN,g=4294967295,y=[["ary",s],["bind",1],["bindKey",2],["curry",8],["curryRight",a],["flip",512],["partial",c],["partialRight",l],["rearg",h]],d="[object Arguments]",b="[object Array]",w="[object Boolean]",m="[object Date]",x="[object Error]",j="[object Function]",A="[object GeneratorFunction]",k="[object Map]",O="[object Number]",I="[object Object]",E="[object Promise]",R="[object RegExp]",z="[object Set]",S="[object String]",C="[object Symbol]",W="[object WeakMap]",L="[object ArrayBuffer]",U="[object DataView]",B="[object Float32Array]",T="[object Float64Array]",$="[object Int8Array]",D="[object Int16Array]",N="[object Int32Array]",M="[object Uint8Array]",F="[object Uint8ClampedArray]",P="[object Uint16Array]",q="[object Uint32Array]

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136
Preview:	{}

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21801), with no line terminators
Category:	downloaded
Size (bytes):	21801
Entropy (8bit):	5.424702702668222
Encrypted:	false
SSDEEP:	384:Xk27rQKtjGGjcVDLC4AWxohaHCK3xo9ECML04M8OVMvC5n:Xk27rQKtjGGw9eaeMLUBDd
MD5:	FC8D876A973A29258C6F89B62BED455A
SHA1:	2B90A982E34633074A6A5F7F97545FF5AE1F39B9
SHA-256:	DCCE4E8FB0B6FC709858B0A571E511FABBF585BEFA8AF7CF142833DDDD28F48A
SHA-512:	823266DF71FC66E6CF5ED01CB3328082BD78B97B5DB83DFF983D774A42835F12930DCFA55ADAA5ACB2A73E8183B187982E2E48F5E048794DBEC161C085A99EBF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/5835-418bbb9fccea5315.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/translation.json":[94180,3,4180],"./da.js":[85921,9,5921],"./de":[41879,9,1879],"./de-DE/translation":[96703,3,6703],"./de-DE/translation.json":[96703,3,6703],"./de.js":[41879,9,1879],"./en":[8745,9,8745],"./en.js":[8745,9,8745],"./en/translation":[89123,3],"./en/translation.json":[89123,3],"./es":[51716,9,1716],"./es-419":[79073,9,9073],"./es-419.js":[79073,9,9073],"./es-ES/translation":[2816,3,2816],"./es-ES/translation.json":[2816,3,2816],"./es-LA/translation":[24287,3,4287],"./es-LA/translation.json":[24287,3,4287],"./es.js":[51716,9,1716],"./fr":[62870,9,2870],"./fr-FR/translation":[81880,3,1880],"./fr-FR/translation.json":[81880,3,1880],"./fr.js":[62870,9,2870],"./index":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715069653329
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://tracker.samplicio.us/tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1714028833656&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD}
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	255676
Entropy (8bit):	5.612664880480326
Encrypted:	false
SSDEEP:	6144:dRQX5NzJW5YLceF+hYTnXP9RIMAl5Y0KL:H+xJWokUL
MD5:	82B8C3E2D4EA8C19A67DFF3F9480F4F2
SHA1:	8AC3B191DCFD0D470E9D84CC3AAE842FA7AE9863
SHA-256:	69FA0FE342ECC26B3B0E1D84FA9EA66C65903896BD8AF246FDEDF76A06C3D1AF
SHA-512:	936EA4646F80FC5CF0A31EFF6EF6B5EE63E2E142BA671F6F6277F977A344A0D61FD59FD6B8C2BC5A545683148957C9CA3AA51263B1AACE3EE23CD7930AB8B40A
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=8c8133538b24d00656c88071370d77584492721062c4a9cb8f4dcd2825f7e3eb_20240425
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":18,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":17},{"function":"__ogt_cross_domain","priority":18,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","accounts\\.google\\.","appleid\\.apple\\.com","accounts\\\\\\.youtube\\\\\\.","paypal\\.com"],"tag_id":20},{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":21},{"function

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	4.243340738755346
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+l1:zMZnH/l8NhHJ0M2J7dCQ1
MD5:	6DC803641E593E617E0EA42C5820F6C8
SHA1:	5BC239DF0E619745367F4E26E524DA3A709AEF30
SHA-256:	67BF40E5594FF7FFFB353041327FC103E658FB05D44BD6226BA01742881E5EE1
SHA-512:	8BC6E3C2ACDDC2D9AF0AFC209C10C57AB0F41B916467C75C04450D70042EAF8DEC1F66007210E90070EB746334302A3B831BB121F82D36B558C5F0AE7BE2352F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/asset-manifest.json
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 09:06:53.849839926 CEST	192.168.2.5	1.1.1.1	0xe0d4	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:53.849966049 CEST	192.168.2.5	1.1.1.1	0xd58e	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:06:54.727610111 CEST	192.168.2.5	1.1.1.1	0x3be4	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:54.727909088 CEST	192.168.2.5	1.1.1.1	0xa4ec	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:06:55.808324099 CEST	192.168.2.5	1.1.1.1	0xf4e0	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.808700085 CEST	192.168.2.5	1.1.1.1	0xdcca	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 25, 2024 09:06:55.809086084 CEST	192.168.2.5	1.1.1.1	0x40f7	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.809220076 CEST	192.168.2.5	1.1.1.1	0xcf6b	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:06:56.762459993 CEST	192.168.2.5	1.1.1.1	0x4fa5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.762909889 CEST	192.168.2.5	1.1.1.1	0x7282	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:06:59.627146006 CEST	192.168.2.5	1.1.1.1	0x594c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.627276897 CEST	192.168.2.5	1.1.1.1	0x3146	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 25, 2024 09:06:59.627756119 CEST	192.168.2.5	1.1.1.1	0xbd30	Standard query (0)	public.profitwell.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.627901077 CEST	192.168.2.5	1.1.1.1	0x386f	Standard query (0)	public.profitwell.com	65	IN (0x0001)	false
Apr 25, 2024 09:06:59.700937986 CEST	192.168.2.5	1.1.1.1	0x612c	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.701209068 CEST	192.168.2.5	1.1.1.1	0xd976	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:00.074517965 CEST	192.168.2.5	1.1.1.1	0x5d3a	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:00.074806929 CEST	192.168.2.5	1.1.1.1	0xf372	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:01.044357061 CEST	192.168.2.5	1.1.1.1	0xb2c3	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.044574976 CEST	192.168.2.5	1.1.1.1	0xe181	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:01.837604046 CEST	192.168.2.5	1.1.1.1	0x733	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.838061094 CEST	192.168.2.5	1.1.1.1	0xd552	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.398405075 CEST	192.168.2.5	1.1.1.1	0x34e8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.398550987 CEST	192.168.2.5	1.1.1.1	0x8889	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.454292059 CEST	192.168.2.5	1.1.1.1	0xb434	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.454495907 CEST	192.168.2.5	1.1.1.1	0x410b	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.455969095 CEST	192.168.2.5	1.1.1.1	0x92dc	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.456193924 CEST	192.168.2.5	1.1.1.1	0xd108	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.458652020 CEST	192.168.2.5	1.1.1.1	0x20b9	Standard query (0)	cdn.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.458986998 CEST	192.168.2.5	1.1.1.1	0xf215	Standard query (0)	cdn.treasuredata.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.909903049 CEST	192.168.2.5	1.1.1.1	0x7a9e	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.910270929 CEST	192.168.2.5	1.1.1.1	0xcfbf	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:02.936630011 CEST	192.168.2.5	1.1.1.1	0x31ab	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.940165043 CEST	192.168.2.5	1.1.1.1	0xab67	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.004847050 CEST	192.168.2.5	1.1.1.1	0x2374	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.005074024 CEST	192.168.2.5	1.1.1.1	0xb4ac	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.214102030 CEST	192.168.2.5	1.1.1.1	0x8d5f	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.214495897 CEST	192.168.2.5	1.1.1.1	0x4736	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.227303982 CEST	192.168.2.5	1.1.1.1	0x313e	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.227724075 CEST	192.168.2.5	1.1.1.1	0xddd8	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.278306961 CEST	192.168.2.5	1.1.1.1	0xd1b2	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.278479099 CEST	192.168.2.5	1.1.1.1	0x810b	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.302264929 CEST	192.168.2.5	1.1.1.1	0x8e25	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.302604914 CEST	192.168.2.5	1.1.1.1	0x9b1f	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.487870932 CEST	192.168.2.5	1.1.1.1	0xd123	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.488013029 CEST	192.168.2.5	1.1.1.1	0x70e9	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:03.842864990 CEST	192.168.2.5	1.1.1.1	0xfe2d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.843024015 CEST	192.168.2.5	1.1.1.1	0x396d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:04.022804976 CEST	192.168.2.5	1.1.1.1	0xfb9e	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:04.023171902 CEST	192.168.2.5	1.1.1.1	0xeb97	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:05.573015928 CEST	192.168.2.5	1.1.1.1	0xef97	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.573893070 CEST	192.168.2.5	1.1.1.1	0x580a	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 09:07:05.588248968 CEST	192.168.2.5	1.1.1.1	0xc904	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.588584900 CEST	192.168.2.5	1.1.1.1	0x83f0	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:05.805764914 CEST	192.168.2.5	1.1.1.1	0x4d2b	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.806113005 CEST	192.168.2.5	1.1.1.1	0x9e	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:05.841975927 CEST	192.168.2.5	1.1.1.1	0xc350	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.842237949 CEST	192.168.2.5	1.1.1.1	0x12b6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:05.850435019 CEST	192.168.2.5	1.1.1.1	0xa710	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.850800991 CEST	192.168.2.5	1.1.1.1	0x24ae	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:07.014426947 CEST	192.168.2.5	1.1.1.1	0xa7e0	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.015063047 CEST	192.168.2.5	1.1.1.1	0xc750	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:07.283387899 CEST	192.168.2.5	1.1.1.1	0xac5d	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.287858009 CEST	192.168.2.5	1.1.1.1	0x7acf	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:07.484761953 CEST	192.168.2.5	1.1.1.1	0xbcb2	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.484879017 CEST	192.168.2.5	1.1.1.1	0x30a2	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 25, 2024 09:07:07.928330898 CEST	192.168.2.5	1.1.1.1	0xaae0	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.928939104 CEST	192.168.2.5	1.1.1.1	0x4805	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:07.989649057 CEST	192.168.2.5	1.1.1.1	0xd4fa	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.990072012 CEST	192.168.2.5	1.1.1.1	0x89ac	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.311295033 CEST	192.168.2.5	1.1.1.1	0xf532	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.324239969 CEST	192.168.2.5	1.1.1.1	0x9b61	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.351622105 CEST	192.168.2.5	1.1.1.1	0x5eeb	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.352183104 CEST	192.168.2.5	1.1.1.1	0xbc49	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.357110977 CEST	192.168.2.5	1.1.1.1	0x46fd	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.357389927 CEST	192.168.2.5	1.1.1.1	0xbc63	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.363322973 CEST	192.168.2.5	1.1.1.1	0xc11e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.363609076 CEST	192.168.2.5	1.1.1.1	0xfd5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.370575905 CEST	192.168.2.5	1.1.1.1	0x5688	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.371309996 CEST	192.168.2.5	1.1.1.1	0xfdf3	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.373074055 CEST	192.168.2.5	1.1.1.1	0x2b46	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.373704910 CEST	192.168.2.5	1.1.1.1	0xc60c	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.379391909 CEST	192.168.2.5	1.1.1.1	0x7e77	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.379801035 CEST	192.168.2.5	1.1.1.1	0x66e1	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.381519079 CEST	192.168.2.5	1.1.1.1	0x244a	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.381982088 CEST	192.168.2.5	1.1.1.1	0x3288	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.384579897 CEST	192.168.2.5	1.1.1.1	0xc9cb	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.385096073 CEST	192.168.2.5	1.1.1.1	0xaa26	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.387274027 CEST	192.168.2.5	1.1.1.1	0xa97b	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.387732983 CEST	192.168.2.5	1.1.1.1	0xf684	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.395121098 CEST	192.168.2.5	1.1.1.1	0x2c87	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.395931005 CEST	192.168.2.5	1.1.1.1	0x6a98	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.404319048 CEST	192.168.2.5	1.1.1.1	0x3e35	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.404489040 CEST	192.168.2.5	1.1.1.1	0xe9ac	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.417085886 CEST	192.168.2.5	1.1.1.1	0x6df2	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.417556047 CEST	192.168.2.5	1.1.1.1	0x3faf	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 25, 2024 09:07:08.923655987 CEST	192.168.2.5	1.1.1.1	0xcb3c	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.924236059 CEST	192.168.2.5	1.1.1.1	0x2dca	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:09.624763966 CEST	192.168.2.5	1.1.1.1	0x8705	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.625289917 CEST	192.168.2.5	1.1.1.1	0xbdea	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:09.824600935 CEST	192.168.2.5	1.1.1.1	0x72ae	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.824835062 CEST	192.168.2.5	1.1.1.1	0x7a63	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:09.826702118 CEST	192.168.2.5	1.1.1.1	0x1f30	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.826970100 CEST	192.168.2.5	1.1.1.1	0x30cd	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:10.598157883 CEST	192.168.2.5	1.1.1.1	0x2b3a	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.598619938 CEST	192.168.2.5	1.1.1.1	0xbdd3	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:11.564616919 CEST	192.168.2.5	1.1.1.1	0x9ae	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.565054893 CEST	192.168.2.5	1.1.1.1	0x215f	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:11.594198942 CEST	192.168.2.5	1.1.1.1	0x7949	Standard query (0)	cdn.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.594424009 CEST	192.168.2.5	1.1.1.1	0x25bd	Standard query (0)	cdn.brandmetrics.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:12.778316975 CEST	192.168.2.5	1.1.1.1	0x6aaf	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:12.778534889 CEST	192.168.2.5	1.1.1.1	0xb8d8	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:14.254265070 CEST	192.168.2.5	1.1.1.1	0x535a	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.254657030 CEST	192.168.2.5	1.1.1.1	0xa8c6	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:14.257366896 CEST	192.168.2.5	1.1.1.1	0x6f2f	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.257519007 CEST	192.168.2.5	1.1.1.1	0x12a5	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:14.845889091 CEST	192.168.2.5	1.1.1.1	0xfdeb	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.845889091 CEST	192.168.2.5	1.1.1.1	0xb770	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:15.789684057 CEST	192.168.2.5	1.1.1.1	0x4ae1	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:15.789684057 CEST	192.168.2.5	1.1.1.1	0xd4bb	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:16.473223925 CEST	192.168.2.5	1.1.1.1	0x2a98	Standard query (0)	browser-intake-datadoghq.eu	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.473359108 CEST	192.168.2.5	1.1.1.1	0x7956	Standard query (0)	browser-intake-datadoghq.eu	65	IN (0x0001)	false
Apr 25, 2024 09:07:16.689313889 CEST	192.168.2.5	1.1.1.1	0x4300	Standard query (0)	prod-cdn.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.689512968 CEST	192.168.2.5	1.1.1.1	0x2a7a	Standard query (0)	prod-cdn.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:16.877608061 CEST	192.168.2.5	1.1.1.1	0xc44a	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.877742052 CEST	192.168.2.5	1.1.1.1	0x4a6e	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:18.082602978 CEST	192.168.2.5	1.1.1.1	0xcb4b	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.082734108 CEST	192.168.2.5	1.1.1.1	0x1d8b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 09:07:18.099159002 CEST	192.168.2.5	1.1.1.1	0x7c81	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.099303961 CEST	192.168.2.5	1.1.1.1	0x9065	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:18.899832964 CEST	192.168.2.5	1.1.1.1	0xbd83	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.899983883 CEST	192.168.2.5	1.1.1.1	0x6490	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 09:07:19.143656015 CEST	192.168.2.5	1.1.1.1	0x9797	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.143801928 CEST	192.168.2.5	1.1.1.1	0xcae0	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:19.494622946 CEST	192.168.2.5	1.1.1.1	0x8f99	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.494769096 CEST	192.168.2.5	1.1.1.1	0xd723	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:19.513353109 CEST	192.168.2.5	1.1.1.1	0xc8d2	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.513494968 CEST	192.168.2.5	1.1.1.1	0x22e1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:19.651536942 CEST	192.168.2.5	1.1.1.1	0x8d56	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.651669025 CEST	192.168.2.5	1.1.1.1	0xf6f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:22.368869066 CEST	192.168.2.5	1.1.1.1	0x2ba	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.369056940 CEST	192.168.2.5	1.1.1.1	0x2ec9	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:22.372761011 CEST	192.168.2.5	1.1.1.1	0x6395	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.372905016 CEST	192.168.2.5	1.1.1.1	0x1b0b	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:22.374677896 CEST	192.168.2.5	1.1.1.1	0x323b	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.374819994 CEST	192.168.2.5	1.1.1.1	0x372d	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:22.376766920 CEST	192.168.2.5	1.1.1.1	0x77	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.376904964 CEST	192.168.2.5	1.1.1.1	0xcb12	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.060394049 CEST	192.168.2.5	1.1.1.1	0x510e	Standard query (0)	tracker.samplicio.us	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.060533047 CEST	192.168.2.5	1.1.1.1	0xce8f	Standard query (0)	tracker.samplicio.us	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.063939095 CEST	192.168.2.5	1.1.1.1	0xb674	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.064264059 CEST	192.168.2.5	1.1.1.1	0x142d	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.123585939 CEST	192.168.2.5	1.1.1.1	0xc281	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.123720884 CEST	192.168.2.5	1.1.1.1	0xee4c	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.559727907 CEST	192.168.2.5	1.1.1.1	0x1737	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.559809923 CEST	192.168.2.5	1.1.1.1	0x83b	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.708363056 CEST	192.168.2.5	1.1.1.1	0x379c	Standard query (0)	tracker.samplicio.us	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.708514929 CEST	192.168.2.5	1.1.1.1	0x914c	Standard query (0)	tracker.samplicio.us	65	IN (0x0001)	false
Apr 25, 2024 09:07:23.892136097 CEST	192.168.2.5	1.1.1.1	0xe112	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.892287970 CEST	192.168.2.5	1.1.1.1	0xe9b2	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:24.134393930 CEST	192.168.2.5	1.1.1.1	0x10a2	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.134531021 CEST	192.168.2.5	1.1.1.1	0x9905	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:29.968317032 CEST	192.168.2.5	1.1.1.1	0xf43	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:29.968600035 CEST	192.168.2.5	1.1.1.1	0x6dce	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:31.660193920 CEST	192.168.2.5	1.1.1.1	0xc7f9	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:31.660624027 CEST	192.168.2.5	1.1.1.1	0x5c50	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:32.923974037 CEST	192.168.2.5	1.1.1.1	0x2fce	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:32.924144983 CEST	192.168.2.5	1.1.1.1	0xeaf0	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:32.935230970 CEST	192.168.2.5	1.1.1.1	0xdf8f	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:32.935369968 CEST	192.168.2.5	1.1.1.1	0x852e	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:33.036712885 CEST	192.168.2.5	1.1.1.1	0xa2de	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.036909103 CEST	192.168.2.5	1.1.1.1	0x1964	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:33.347600937 CEST	192.168.2.5	1.1.1.1	0x680	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.347743988 CEST	192.168.2.5	1.1.1.1	0xec6f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:40.266288996 CEST	192.168.2.5	1.1.1.1	0x3508	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.266469955 CEST	192.168.2.5	1.1.1.1	0xf934	Standard query (0)	pixel.adsafeprotected.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:40.267019987 CEST	192.168.2.5	1.1.1.1	0xe959	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.267323017 CEST	192.168.2.5	1.1.1.1	0xe3c6	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:40.268672943 CEST	192.168.2.5	1.1.1.1	0xc8fd	Standard query (0)	cdn.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.268964052 CEST	192.168.2.5	1.1.1.1	0x3bc	Standard query (0)	cdn.lamp.avct.cloud	65	IN (0x0001)	false
Apr 25, 2024 09:07:41.115794897 CEST	192.168.2.5	1.1.1.1	0x9e04	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.115930080 CEST	192.168.2.5	1.1.1.1	0x3fdc	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:41.349484921 CEST	192.168.2.5	1.1.1.1	0x2ef7	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.349762917 CEST	192.168.2.5	1.1.1.1	0xcd2a	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 25, 2024 09:07:41.468358040 CEST	192.168.2.5	1.1.1.1	0xfe2f	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.468739033 CEST	192.168.2.5	1.1.1.1	0x7910	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:41.939477921 CEST	192.168.2.5	1.1.1.1	0x6ff4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.939805984 CEST	192.168.2.5	1.1.1.1	0xfc3b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:41.941319942 CEST	192.168.2.5	1.1.1.1	0xaa78	Standard query (0)	a5594.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.941485882 CEST	192.168.2.5	1.1.1.1	0xd02e	Standard query (0)	a5594.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.349090099 CEST	192.168.2.5	1.1.1.1	0x1787	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.349231958 CEST	192.168.2.5	1.1.1.1	0xc974	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.350318909 CEST	192.168.2.5	1.1.1.1	0x6500	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.351571083 CEST	192.168.2.5	1.1.1.1	0x3d7b	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.354899883 CEST	192.168.2.5	1.1.1.1	0x9c7f	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.355134010 CEST	192.168.2.5	1.1.1.1	0x386	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.358841896 CEST	192.168.2.5	1.1.1.1	0xe77d	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.358990908 CEST	192.168.2.5	1.1.1.1	0xd6b9	Standard query (0)	dt.adsafeprotected.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.466202021 CEST	192.168.2.5	1.1.1.1	0xf1f0	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.669953108 CEST	192.168.2.5	1.1.1.1	0xf202	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.670284033 CEST	192.168.2.5	1.1.1.1	0x4376	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.682782888 CEST	192.168.2.5	1.1.1.1	0x7f61	Standard query (0)	a5594.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.683044910 CEST	192.168.2.5	1.1.1.1	0x7325	Standard query (0)	a5594.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.824805021 CEST	192.168.2.5	1.1.1.1	0x3656	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.825108051 CEST	192.168.2.5	1.1.1.1	0x4c4	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:44.707494974 CEST	192.168.2.5	1.1.1.1	0xba38	Standard query (0)	fw.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.707631111 CEST	192.168.2.5	1.1.1.1	0x609e	Standard query (0)	fw.adsafeprotected.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:44.720187902 CEST	192.168.2.5	1.1.1.1	0x658d	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.720381021 CEST	192.168.2.5	1.1.1.1	0xeff6	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:44.783857107 CEST	192.168.2.5	1.1.1.1	0x1f52	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.783981085 CEST	192.168.2.5	1.1.1.1	0xe481	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.147291899 CEST	192.168.2.5	1.1.1.1	0xee46	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.147428036 CEST	192.168.2.5	1.1.1.1	0xe7d0	Standard query (0)	dt.adsafeprotected.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.341747046 CEST	192.168.2.5	1.1.1.1	0x22fd	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.341892958 CEST	192.168.2.5	1.1.1.1	0xa6cd	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.480062962 CEST	192.168.2.5	1.1.1.1	0xf7cf	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.480195999 CEST	192.168.2.5	1.1.1.1	0x3ce5	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.481147051 CEST	192.168.2.5	1.1.1.1	0xea9c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.481266975 CEST	192.168.2.5	1.1.1.1	0xd34e	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.481760025 CEST	192.168.2.5	1.1.1.1	0x948c	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.481898069 CEST	192.168.2.5	1.1.1.1	0x4ec3	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.482283115 CEST	192.168.2.5	1.1.1.1	0x89b3	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.482393026 CEST	192.168.2.5	1.1.1.1	0x79e6	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.482836962 CEST	192.168.2.5	1.1.1.1	0x4fee	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.482971907 CEST	192.168.2.5	1.1.1.1	0xda	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.483413935 CEST	192.168.2.5	1.1.1.1	0xfbaa	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.483788013 CEST	192.168.2.5	1.1.1.1	0xc870	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.484210014 CEST	192.168.2.5	1.1.1.1	0xe159	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.484333992 CEST	192.168.2.5	1.1.1.1	0x3cba	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.846826077 CEST	192.168.2.5	1.1.1.1	0x8b84	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.846976042 CEST	192.168.2.5	1.1.1.1	0x4a20	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:46.847248077 CEST	192.168.2.5	1.1.1.1	0x6aa2	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.847363949 CEST	192.168.2.5	1.1.1.1	0xc8e3	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.003217936 CEST	192.168.2.5	1.1.1.1	0x77ee	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.003478050 CEST	192.168.2.5	1.1.1.1	0xf41a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.006386042 CEST	192.168.2.5	1.1.1.1	0x8244	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.006603003 CEST	192.168.2.5	1.1.1.1	0xaeba	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.184258938 CEST	192.168.2.5	1.1.1.1	0x5a1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.184763908 CEST	192.168.2.5	1.1.1.1	0x5911	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.385855913 CEST	192.168.2.5	1.1.1.1	0x35f2	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.385987043 CEST	192.168.2.5	1.1.1.1	0x7650	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.588329077 CEST	192.168.2.5	1.1.1.1	0x7225	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.588457108 CEST	192.168.2.5	1.1.1.1	0x239	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.601836920 CEST	192.168.2.5	1.1.1.1	0x14d4	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.601963997 CEST	192.168.2.5	1.1.1.1	0xc4eb	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:47.867657900 CEST	192.168.2.5	1.1.1.1	0xd2f3	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.867789030 CEST	192.168.2.5	1.1.1.1	0xa620	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:48.004591942 CEST	192.168.2.5	1.1.1.1	0xb357	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.004713058 CEST	192.168.2.5	1.1.1.1	0x1d37	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:48.045859098 CEST	192.168.2.5	1.1.1.1	0x1c9a	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.046103954 CEST	192.168.2.5	1.1.1.1	0x4d35	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:48.202410936 CEST	192.168.2.5	1.1.1.1	0x88f2	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.202701092 CEST	192.168.2.5	1.1.1.1	0xa0a4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:48.277384043 CEST	192.168.2.5	1.1.1.1	0xf3fa	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.277580023 CEST	192.168.2.5	1.1.1.1	0x8f41	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:48.512674093 CEST	192.168.2.5	1.1.1.1	0xd44f	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.512810946 CEST	192.168.2.5	1.1.1.1	0x34f7	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:50.031347036 CEST	192.168.2.5	1.1.1.1	0x352	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:50.031544924 CEST	192.168.2.5	1.1.1.1	0x1070	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:50.032557011 CEST	192.168.2.5	1.1.1.1	0x1487	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:50.032691002 CEST	192.168.2.5	1.1.1.1	0xc437	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:51.653496981 CEST	192.168.2.5	1.1.1.1	0x786e	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.653654099 CEST	192.168.2.5	1.1.1.1	0x2487	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:52.117063999 CEST	192.168.2.5	1.1.1.1	0xacbf	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:52.117202997 CEST	192.168.2.5	1.1.1.1	0x93c1	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:54.786345959 CEST	192.168.2.5	1.1.1.1	0x9e15	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:54.786472082 CEST	192.168.2.5	1.1.1.1	0x9708	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:58.506078005 CEST	192.168.2.5	1.1.1.1	0xf3a3	Standard query (0)	a5574.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:58.506294966 CEST	192.168.2.5	1.1.1.1	0xecd4	Standard query (0)	a5574.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.162199020 CEST	192.168.2.5	1.1.1.1	0x6a6c	Standard query (0)	a5574.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.162282944 CEST	192.168.2.5	1.1.1.1	0xf642	Standard query (0)	a5574.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.190295935 CEST	192.168.2.5	1.1.1.1	0xedc	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.190483093 CEST	192.168.2.5	1.1.1.1	0x2cf7	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.195229053 CEST	192.168.2.5	1.1.1.1	0xd471	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.195410013 CEST	192.168.2.5	1.1.1.1	0xc9a0	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.905230045 CEST	192.168.2.5	1.1.1.1	0xef10	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.905397892 CEST	192.168.2.5	1.1.1.1	0xeb42	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.911089897 CEST	192.168.2.5	1.1.1.1	0xb650	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.911243916 CEST	192.168.2.5	1.1.1.1	0x4970	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.918201923 CEST	192.168.2.5	1.1.1.1	0x195b	Standard query (0)	frontsite-nextjs.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.918366909 CEST	192.168.2.5	1.1.1.1	0xe174	Standard query (0)	frontsite-nextjs.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.958739996 CEST	192.168.2.5	1.1.1.1	0x1a34	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.958956957 CEST	192.168.2.5	1.1.1.1	0x7b4d	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.959436893 CEST	192.168.2.5	1.1.1.1	0x2f83	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.959616899 CEST	192.168.2.5	1.1.1.1	0xd369	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 09:07:59.979706049 CEST	192.168.2.5	1.1.1.1	0x64f7	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.979856014 CEST	192.168.2.5	1.1.1.1	0x2dd3	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.026304960 CEST	192.168.2.5	1.1.1.1	0xee94	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.026443958 CEST	192.168.2.5	1.1.1.1	0xac9f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.142551899 CEST	192.168.2.5	1.1.1.1	0xfff5	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.142836094 CEST	192.168.2.5	1.1.1.1	0x3f12	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.145684004 CEST	192.168.2.5	1.1.1.1	0x218d	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.145828962 CEST	192.168.2.5	1.1.1.1	0x1d5b	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.147231102 CEST	192.168.2.5	1.1.1.1	0xc1a7	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.147367001 CEST	192.168.2.5	1.1.1.1	0xe497	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.497107983 CEST	192.168.2.5	1.1.1.1	0x2114	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.497237921 CEST	192.168.2.5	1.1.1.1	0xd4c3	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.500485897 CEST	192.168.2.5	1.1.1.1	0x59dc	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.500622034 CEST	192.168.2.5	1.1.1.1	0xafde	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.501920938 CEST	192.168.2.5	1.1.1.1	0x9696	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.502063036 CEST	192.168.2.5	1.1.1.1	0xfced	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.503463030 CEST	192.168.2.5	1.1.1.1	0xc73e	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.504030943 CEST	192.168.2.5	1.1.1.1	0x3015	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.642095089 CEST	192.168.2.5	1.1.1.1	0xa71	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.642221928 CEST	192.168.2.5	1.1.1.1	0x13d	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.742137909 CEST	192.168.2.5	1.1.1.1	0x7280	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.742260933 CEST	192.168.2.5	1.1.1.1	0x1b17	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.743833065 CEST	192.168.2.5	1.1.1.1	0xaaa7	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.744039059 CEST	192.168.2.5	1.1.1.1	0xf27	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:00.845607042 CEST	192.168.2.5	1.1.1.1	0x9377	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.846616983 CEST	192.168.2.5	1.1.1.1	0x63bd	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:01.488325119 CEST	192.168.2.5	1.1.1.1	0x364	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.488512039 CEST	192.168.2.5	1.1.1.1	0xa2d9	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:01.867793083 CEST	192.168.2.5	1.1.1.1	0x6182	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.867919922 CEST	192.168.2.5	1.1.1.1	0x7031	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:01.914437056 CEST	192.168.2.5	1.1.1.1	0xeff1	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.914705038 CEST	192.168.2.5	1.1.1.1	0x6035	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.100631952 CEST	192.168.2.5	1.1.1.1	0xfdf5	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.101069927 CEST	192.168.2.5	1.1.1.1	0x4fdd	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.315320015 CEST	192.168.2.5	1.1.1.1	0x8c19	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.315473080 CEST	192.168.2.5	1.1.1.1	0x857e	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.323765993 CEST	192.168.2.5	1.1.1.1	0x8d71	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.323892117 CEST	192.168.2.5	1.1.1.1	0x1c5f	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.703320980 CEST	192.168.2.5	1.1.1.1	0xb6fa	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.703634024 CEST	192.168.2.5	1.1.1.1	0x5eb0	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.765495062 CEST	192.168.2.5	1.1.1.1	0xbc1c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.765753984 CEST	192.168.2.5	1.1.1.1	0xeb8e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:02.802356005 CEST	192.168.2.5	1.1.1.1	0x6352	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.802484035 CEST	192.168.2.5	1.1.1.1	0xde65	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:03.922019005 CEST	192.168.2.5	1.1.1.1	0x9936	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.002206087 CEST	192.168.2.5	1.1.1.1	0x108a	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.002326965 CEST	192.168.2.5	1.1.1.1	0x436a	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:04.182032108 CEST	192.168.2.5	1.1.1.1	0x67ae	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.182279110 CEST	192.168.2.5	1.1.1.1	0x8c84	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:04.748554945 CEST	192.168.2.5	1.1.1.1	0xf52a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.748790979 CEST	192.168.2.5	1.1.1.1	0x8a2c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:05.933948040 CEST	192.168.2.5	1.1.1.1	0x7e70	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:05.934159994 CEST	192.168.2.5	1.1.1.1	0x36a2	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:06.457381964 CEST	192.168.2.5	1.1.1.1	0x6887	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.457470894 CEST	192.168.2.5	1.1.1.1	0x6c20	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:06.535495996 CEST	192.168.2.5	1.1.1.1	0x22d8	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.535685062 CEST	192.168.2.5	1.1.1.1	0xfe59	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:06.567588091 CEST	192.168.2.5	1.1.1.1	0x76b6	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567718029 CEST	192.168.2.5	1.1.1.1	0xf833	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:07.041099072 CEST	192.168.2.5	1.1.1.1	0x6001	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.041291952 CEST	192.168.2.5	1.1.1.1	0x7636	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:07.055979013 CEST	192.168.2.5	1.1.1.1	0x95b4	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.056171894 CEST	192.168.2.5	1.1.1.1	0x4fa3	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:07.428139925 CEST	192.168.2.5	1.1.1.1	0x15cb	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.428585052 CEST	192.168.2.5	1.1.1.1	0x8126	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.213035107 CEST	192.168.2.5	1.1.1.1	0xf199	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.213268995 CEST	192.168.2.5	1.1.1.1	0xace	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.256994009 CEST	192.168.2.5	1.1.1.1	0x9c0f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.257128954 CEST	192.168.2.5	1.1.1.1	0xdedc	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.275760889 CEST	192.168.2.5	1.1.1.1	0x8eb5	Standard query (0)	wetransfer.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.276448011 CEST	192.168.2.5	1.1.1.1	0xcbc3	Standard query (0)	wetransfer.zendesk.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.301758051 CEST	192.168.2.5	1.1.1.1	0x1654	Standard query (0)	cdn.statuspage.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.302325010 CEST	192.168.2.5	1.1.1.1	0x87f1	Standard query (0)	cdn.statuspage.io	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.566579103 CEST	192.168.2.5	1.1.1.1	0x114b	Standard query (0)	wetransfer.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.567003012 CEST	192.168.2.5	1.1.1.1	0xd072	Standard query (0)	wetransfer.zendesk.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.666196108 CEST	192.168.2.5	1.1.1.1	0xaa83	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.666376114 CEST	192.168.2.5	1.1.1.1	0x8102	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.879972935 CEST	192.168.2.5	1.1.1.1	0xd426	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.880018950 CEST	192.168.2.5	1.1.1.1	0x544f	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.882647038 CEST	192.168.2.5	1.1.1.1	0x7fc4	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.882786036 CEST	192.168.2.5	1.1.1.1	0x93c9	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:08.929855108 CEST	192.168.2.5	1.1.1.1	0x2940	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.929986000 CEST	192.168.2.5	1.1.1.1	0x6f3d	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.112957954 CEST	192.168.2.5	1.1.1.1	0xf9ce	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.113173008 CEST	192.168.2.5	1.1.1.1	0xca5a	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.120830059 CEST	192.168.2.5	1.1.1.1	0xfa10	Standard query (0)	sc26zwwp3c0r.statuspage.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.120987892 CEST	192.168.2.5	1.1.1.1	0x59f0	Standard query (0)	sc26zwwp3c0r.statuspage.io	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.213810921 CEST	192.168.2.5	1.1.1.1	0xfbd7	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.213944912 CEST	192.168.2.5	1.1.1.1	0x24ce	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.218907118 CEST	192.168.2.5	1.1.1.1	0xba3a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.219075918 CEST	192.168.2.5	1.1.1.1	0x92e3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.510267019 CEST	192.168.2.5	1.1.1.1	0x2915	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.510494947 CEST	192.168.2.5	1.1.1.1	0xb48e	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.536638975 CEST	192.168.2.5	1.1.1.1	0xec71	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.536772013 CEST	192.168.2.5	1.1.1.1	0xdbea	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.680454969 CEST	192.168.2.5	1.1.1.1	0x2a5e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.680583000 CEST	192.168.2.5	1.1.1.1	0x8b7c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.740814924 CEST	192.168.2.5	1.1.1.1	0xde6d	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.740953922 CEST	192.168.2.5	1.1.1.1	0xf5e2	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.746102095 CEST	192.168.2.5	1.1.1.1	0xef04	Standard query (0)	help.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.746272087 CEST	192.168.2.5	1.1.1.1	0xa303	Standard query (0)	help.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:09.804095984 CEST	192.168.2.5	1.1.1.1	0xf693	Standard query (0)	sc26zwwp3c0r.statuspage.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.804230928 CEST	192.168.2.5	1.1.1.1	0x74b1	Standard query (0)	sc26zwwp3c0r.statuspage.io	65	IN (0x0001)	false
Apr 25, 2024 09:08:10.263447046 CEST	192.168.2.5	1.1.1.1	0x66ed	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.263598919 CEST	192.168.2.5	1.1.1.1	0xf9ec	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:10.661042929 CEST	192.168.2.5	1.1.1.1	0xb423	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.661169052 CEST	192.168.2.5	1.1.1.1	0x2397	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:11.608571053 CEST	192.168.2.5	1.1.1.1	0xab74	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.608705997 CEST	192.168.2.5	1.1.1.1	0xd39b	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:11.609329939 CEST	192.168.2.5	1.1.1.1	0x698b	Standard query (0)	p18.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.609505892 CEST	192.168.2.5	1.1.1.1	0xacc7	Standard query (0)	p18.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:11.610095978 CEST	192.168.2.5	1.1.1.1	0xd2ca	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.610224962 CEST	192.168.2.5	1.1.1.1	0xda28	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:12.248404026 CEST	192.168.2.5	1.1.1.1	0x6190	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:12.248533964 CEST	192.168.2.5	1.1.1.1	0x55b7	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:13.147945881 CEST	192.168.2.5	1.1.1.1	0x606d	Standard query (0)	help.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.148122072 CEST	192.168.2.5	1.1.1.1	0xe9b1	Standard query (0)	help.wetransfer.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:13.441834927 CEST	192.168.2.5	1.1.1.1	0xdabd	Standard query (0)	a5565.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.442027092 CEST	192.168.2.5	1.1.1.1	0xae55	Standard query (0)	a5565.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:13.641941071 CEST	192.168.2.5	1.1.1.1	0x4dcb	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.642158985 CEST	192.168.2.5	1.1.1.1	0xaabf	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:13.982737064 CEST	192.168.2.5	1.1.1.1	0xb237	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.982981920 CEST	192.168.2.5	1.1.1.1	0x3a43	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.062139034 CEST	192.168.2.5	1.1.1.1	0x4721	Standard query (0)	a5565.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.062460899 CEST	192.168.2.5	1.1.1.1	0x3a71	Standard query (0)	a5565.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.073163986 CEST	192.168.2.5	1.1.1.1	0x6b4b	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.073304892 CEST	192.168.2.5	1.1.1.1	0x7dbe	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.359456062 CEST	192.168.2.5	1.1.1.1	0xa38	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.359617949 CEST	192.168.2.5	1.1.1.1	0x5a7e	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.431354046 CEST	192.168.2.5	1.1.1.1	0x7bca	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.431586981 CEST	192.168.2.5	1.1.1.1	0x8925	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.913764954 CEST	192.168.2.5	1.1.1.1	0x59f1	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.913811922 CEST	192.168.2.5	1.1.1.1	0xbc99	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.923790932 CEST	192.168.2.5	1.1.1.1	0x4732	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.923933029 CEST	192.168.2.5	1.1.1.1	0xca62	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.926426888 CEST	192.168.2.5	1.1.1.1	0xcf31	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.926704884 CEST	192.168.2.5	1.1.1.1	0xf558	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:14.927145958 CEST	192.168.2.5	1.1.1.1	0x11b5	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.927268982 CEST	192.168.2.5	1.1.1.1	0x53f6	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:15.582792044 CEST	192.168.2.5	1.1.1.1	0x9366	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.582989931 CEST	192.168.2.5	1.1.1.1	0x5e02	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.006648064 CEST	192.168.2.5	1.1.1.1	0xc619	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.006793022 CEST	192.168.2.5	1.1.1.1	0xb407	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.161675930 CEST	192.168.2.5	1.1.1.1	0x62a2	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.161859035 CEST	192.168.2.5	1.1.1.1	0x7a2a	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.162256956 CEST	192.168.2.5	1.1.1.1	0xb6f4	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.162419081 CEST	192.168.2.5	1.1.1.1	0x44a7	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.276773930 CEST	192.168.2.5	1.1.1.1	0x2f7d	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.276911020 CEST	192.168.2.5	1.1.1.1	0xfb32	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.750200033 CEST	192.168.2.5	1.1.1.1	0x4baa	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.750547886 CEST	192.168.2.5	1.1.1.1	0x9353	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.751007080 CEST	192.168.2.5	1.1.1.1	0xbc2d	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.751183987 CEST	192.168.2.5	1.1.1.1	0x53c	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.753151894 CEST	192.168.2.5	1.1.1.1	0x3bfa	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.753348112 CEST	192.168.2.5	1.1.1.1	0x85b4	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:16.955614090 CEST	192.168.2.5	1.1.1.1	0x3e3e	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.955840111 CEST	192.168.2.5	1.1.1.1	0x34a0	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Apr 25, 2024 09:08:17.090836048 CEST	192.168.2.5	1.1.1.1	0x6039	Standard query (0)	wetransfer.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:17.090996981 CEST	192.168.2.5	1.1.1.1	0x876c	Standard query (0)	wetransfer.zendesk.com	65	IN (0x0001)	false
Apr 25, 2024 09:08:21.471287966 CEST	192.168.2.5	1.1.1.1	0xe88c	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:21.471407890 CEST	192.168.2.5	1.1.1.1	0xd532	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 09:06:53.960499048 CEST	1.1.1.1	192.168.2.5	0xe0d4	No error (0)	wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:53.960499048 CEST	1.1.1.1	192.168.2.5	0xe0d4	No error (0)	wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:53.960499048 CEST	1.1.1.1	192.168.2.5	0xe0d4	No error (0)	wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:53.960499048 CEST	1.1.1.1	192.168.2.5	0xe0d4	No error (0)	wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:54.838321924 CEST	1.1.1.1	192.168.2.5	0x3be4	No error (0)	cdn.wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:54.838321924 CEST	1.1.1.1	192.168.2.5	0x3be4	No error (0)	cdn.wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:54.838321924 CEST	1.1.1.1	192.168.2.5	0x3be4	No error (0)	cdn.wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:54.838321924 CEST	1.1.1.1	192.168.2.5	0x3be4	No error (0)	cdn.wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918078899 CEST	1.1.1.1	192.168.2.5	0xf4e0	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918078899 CEST	1.1.1.1	192.168.2.5	0xf4e0	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918078899 CEST	1.1.1.1	192.168.2.5	0xf4e0	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918078899 CEST	1.1.1.1	192.168.2.5	0xf4e0	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918078899 CEST	1.1.1.1	192.168.2.5	0xf4e0	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.918414116 CEST	1.1.1.1	192.168.2.5	0xdcca	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:55.920339108 CEST	1.1.1.1	192.168.2.5	0x40f7	No error (0)	tagging.wetransfer.com		13.226.100.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.920339108 CEST	1.1.1.1	192.168.2.5	0x40f7	No error (0)	tagging.wetransfer.com		13.226.100.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.920339108 CEST	1.1.1.1	192.168.2.5	0x40f7	No error (0)	tagging.wetransfer.com		13.226.100.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:55.920339108 CEST	1.1.1.1	192.168.2.5	0x40f7	No error (0)	tagging.wetransfer.com		13.226.100.86	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872162104 CEST	1.1.1.1	192.168.2.5	0x4fa5	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:56.872756004 CEST	1.1.1.1	192.168.2.5	0x7282	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:06:59.737479925 CEST	1.1.1.1	192.168.2.5	0x594c	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:59.737479925 CEST	1.1.1.1	192.168.2.5	0x594c	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.737538099 CEST	1.1.1.1	192.168.2.5	0x3146	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:59.738540888 CEST	1.1.1.1	192.168.2.5	0xbd30	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:59.738540888 CEST	1.1.1.1	192.168.2.5	0xbd30	No error (0)	dna8twue3dlxq.cloudfront.net		3.163.80.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.738540888 CEST	1.1.1.1	192.168.2.5	0xbd30	No error (0)	dna8twue3dlxq.cloudfront.net		3.163.80.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.738540888 CEST	1.1.1.1	192.168.2.5	0xbd30	No error (0)	dna8twue3dlxq.cloudfront.net		3.163.80.128	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.738540888 CEST	1.1.1.1	192.168.2.5	0xbd30	No error (0)	dna8twue3dlxq.cloudfront.net		3.163.80.69	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.751918077 CEST	1.1.1.1	192.168.2.5	0x386f	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:06:59.812819958 CEST	1.1.1.1	192.168.2.5	0x612c	No error (0)	tagging.wetransfer.com		13.226.100.86	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.812819958 CEST	1.1.1.1	192.168.2.5	0x612c	No error (0)	tagging.wetransfer.com		13.226.100.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.812819958 CEST	1.1.1.1	192.168.2.5	0x612c	No error (0)	tagging.wetransfer.com		13.226.100.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:06:59.812819958 CEST	1.1.1.1	192.168.2.5	0x612c	No error (0)	tagging.wetransfer.com		13.226.100.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:00.186219931 CEST	1.1.1.1	192.168.2.5	0x5d3a	No error (0)	wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:00.186219931 CEST	1.1.1.1	192.168.2.5	0x5d3a	No error (0)	wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:00.186219931 CEST	1.1.1.1	192.168.2.5	0x5d3a	No error (0)	wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:00.186219931 CEST	1.1.1.1	192.168.2.5	0x5d3a	No error (0)	wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.169599056 CEST	1.1.1.1	192.168.2.5	0xb2c3	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.169599056 CEST	1.1.1.1	192.168.2.5	0xb2c3	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.169599056 CEST	1.1.1.1	192.168.2.5	0xb2c3	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.947357893 CEST	1.1.1.1	192.168.2.5	0x733	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:01.947357893 CEST	1.1.1.1	192.168.2.5	0x733	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:01.948196888 CEST	1.1.1.1	192.168.2.5	0xd552	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.508573055 CEST	1.1.1.1	192.168.2.5	0x8889	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.508594036 CEST	1.1.1.1	192.168.2.5	0x34e8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.508594036 CEST	1.1.1.1	192.168.2.5	0x34e8	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564176083 CEST	1.1.1.1	192.168.2.5	0xb434	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564176083 CEST	1.1.1.1	192.168.2.5	0xb434	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564176083 CEST	1.1.1.1	192.168.2.5	0xb434	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564176083 CEST	1.1.1.1	192.168.2.5	0xb434	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564176083 CEST	1.1.1.1	192.168.2.5	0xb434	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.564748049 CEST	1.1.1.1	192.168.2.5	0x410b	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.565712929 CEST	1.1.1.1	192.168.2.5	0x92dc	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.565712929 CEST	1.1.1.1	192.168.2.5	0x92dc	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.565712929 CEST	1.1.1.1	192.168.2.5	0x92dc	No error (0)	dualstack.pinterest.map.fastly.net		151.101.12.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.566339016 CEST	1.1.1.1	192.168.2.5	0xd108	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.566339016 CEST	1.1.1.1	192.168.2.5	0xd108	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:02.569219112 CEST	1.1.1.1	192.168.2.5	0x20b9	No error (0)	cdn.treasuredata.com		3.163.115.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.569219112 CEST	1.1.1.1	192.168.2.5	0x20b9	No error (0)	cdn.treasuredata.com		3.163.115.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.569219112 CEST	1.1.1.1	192.168.2.5	0x20b9	No error (0)	cdn.treasuredata.com		3.163.115.94	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:02.569219112 CEST	1.1.1.1	192.168.2.5	0x20b9	No error (0)	cdn.treasuredata.com		3.163.115.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.020183086 CEST	1.1.1.1	192.168.2.5	0xcfbf	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.021050930 CEST	1.1.1.1	192.168.2.5	0x7a9e	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.021050930 CEST	1.1.1.1	192.168.2.5	0x7a9e	No error (0)	d1ykf07e75w7ss.cloudfront.net		54.230.252.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.046497107 CEST	1.1.1.1	192.168.2.5	0x31ab	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.046497107 CEST	1.1.1.1	192.168.2.5	0x31ab	No error (0)	dg2iu7dxxehbo.cloudfront.net		108.156.154.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.050018072 CEST	1.1.1.1	192.168.2.5	0xab67	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.114829063 CEST	1.1.1.1	192.168.2.5	0x2374	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.114829063 CEST	1.1.1.1	192.168.2.5	0x2374	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.114829063 CEST	1.1.1.1	192.168.2.5	0x2374	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.114829063 CEST	1.1.1.1	192.168.2.5	0x2374	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		44.229.205.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		52.39.50.194	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		44.224.131.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		35.165.187.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		54.200.174.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		34.213.231.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		54.218.244.204	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.324047089 CEST	1.1.1.1	192.168.2.5	0x8d5f	No error (0)	api.amplitude.com		52.41.216.34	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.337964058 CEST	1.1.1.1	192.168.2.5	0xddd8	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.338224888 CEST	1.1.1.1	192.168.2.5	0x313e	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.338224888 CEST	1.1.1.1	192.168.2.5	0x313e	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.338224888 CEST	1.1.1.1	192.168.2.5	0x313e	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.338224888 CEST	1.1.1.1	192.168.2.5	0x313e	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.338224888 CEST	1.1.1.1	192.168.2.5	0x313e	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.389949083 CEST	1.1.1.1	192.168.2.5	0xd1b2	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.389949083 CEST	1.1.1.1	192.168.2.5	0xd1b2	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.412182093 CEST	1.1.1.1	192.168.2.5	0x8e25	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.412182093 CEST	1.1.1.1	192.168.2.5	0x8e25	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.412182093 CEST	1.1.1.1	192.168.2.5	0x8e25	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.412182093 CEST	1.1.1.1	192.168.2.5	0x8e25	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.412182093 CEST	1.1.1.1	192.168.2.5	0x8e25	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.413053989 CEST	1.1.1.1	192.168.2.5	0x9b1f	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:03.597744942 CEST	1.1.1.1	192.168.2.5	0xd123	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.597744942 CEST	1.1.1.1	192.168.2.5	0xd123	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.597886086 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952898979 CEST	1.1.1.1	192.168.2.5	0xfe2d	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:03.952959061 CEST	1.1.1.1	192.168.2.5	0x396d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:04.132819891 CEST	1.1.1.1	192.168.2.5	0xfb9e	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.682995081 CEST	1.1.1.1	192.168.2.5	0xef97	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.682995081 CEST	1.1.1.1	192.168.2.5	0xef97	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.682995081 CEST	1.1.1.1	192.168.2.5	0xef97	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.682995081 CEST	1.1.1.1	192.168.2.5	0xef97	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.698086977 CEST	1.1.1.1	192.168.2.5	0xc904	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.699363947 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.699363947 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.699363947 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:05.915683031 CEST	1.1.1.1	192.168.2.5	0x4d2b	No error (0)	adservice.google.com		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.915683031 CEST	1.1.1.1	192.168.2.5	0x4d2b	No error (0)	adservice.google.com		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.915683031 CEST	1.1.1.1	192.168.2.5	0x4d2b	No error (0)	adservice.google.com		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.915683031 CEST	1.1.1.1	192.168.2.5	0x4d2b	No error (0)	adservice.google.com		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.915904999 CEST	1.1.1.1	192.168.2.5	0x9e	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:05.951680899 CEST	1.1.1.1	192.168.2.5	0xc350	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.951680899 CEST	1.1.1.1	192.168.2.5	0xc350	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.952241898 CEST	1.1.1.1	192.168.2.5	0x12b6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:05.960176945 CEST	1.1.1.1	192.168.2.5	0xa710	No error (0)	googleads.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.960176945 CEST	1.1.1.1	192.168.2.5	0xa710	No error (0)	googleads.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.960176945 CEST	1.1.1.1	192.168.2.5	0xa710	No error (0)	googleads.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.960176945 CEST	1.1.1.1	192.168.2.5	0xa710	No error (0)	googleads.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:05.961065054 CEST	1.1.1.1	192.168.2.5	0x24ae	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125006914 CEST	1.1.1.1	192.168.2.5	0xa7e0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125418901 CEST	1.1.1.1	192.168.2.5	0xc750	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125418901 CEST	1.1.1.1	192.168.2.5	0xc750	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.125418901 CEST	1.1.1.1	192.168.2.5	0xc750	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.393691063 CEST	1.1.1.1	192.168.2.5	0xac5d	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.393691063 CEST	1.1.1.1	192.168.2.5	0xac5d	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.393691063 CEST	1.1.1.1	192.168.2.5	0xac5d	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.398416996 CEST	1.1.1.1	192.168.2.5	0x7acf	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:07.594995022 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.594995022 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.594995022 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:07.594995022 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.053251982 CEST	1.1.1.1	192.168.2.5	0xaae0	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.053251982 CEST	1.1.1.1	192.168.2.5	0xaae0	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.053251982 CEST	1.1.1.1	192.168.2.5	0xaae0	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137021065 CEST	1.1.1.1	192.168.2.5	0xd4fa	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137021065 CEST	1.1.1.1	192.168.2.5	0xd4fa	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137021065 CEST	1.1.1.1	192.168.2.5	0xd4fa	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137021065 CEST	1.1.1.1	192.168.2.5	0xd4fa	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137021065 CEST	1.1.1.1	192.168.2.5	0xd4fa	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137305021 CEST	1.1.1.1	192.168.2.5	0x89ac	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.137305021 CEST	1.1.1.1	192.168.2.5	0x89ac	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.421528101 CEST	1.1.1.1	192.168.2.5	0xf532	No error (0)	stats.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.421528101 CEST	1.1.1.1	192.168.2.5	0xf532	No error (0)	stats.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.421528101 CEST	1.1.1.1	192.168.2.5	0xf532	No error (0)	stats.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.421528101 CEST	1.1.1.1	192.168.2.5	0xf532	No error (0)	stats.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.461850882 CEST	1.1.1.1	192.168.2.5	0x5eeb	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.461850882 CEST	1.1.1.1	192.168.2.5	0x5eeb	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.461850882 CEST	1.1.1.1	192.168.2.5	0x5eeb	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.461850882 CEST	1.1.1.1	192.168.2.5	0x5eeb	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.461850882 CEST	1.1.1.1	192.168.2.5	0x5eeb	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.462129116 CEST	1.1.1.1	192.168.2.5	0xbc49	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.466810942 CEST	1.1.1.1	192.168.2.5	0x46fd	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.466810942 CEST	1.1.1.1	192.168.2.5	0x46fd	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.466810942 CEST	1.1.1.1	192.168.2.5	0x46fd	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.466810942 CEST	1.1.1.1	192.168.2.5	0x46fd	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.466810942 CEST	1.1.1.1	192.168.2.5	0x46fd	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.467355013 CEST	1.1.1.1	192.168.2.5	0xbc63	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473218918 CEST	1.1.1.1	192.168.2.5	0xc11e	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.473315954 CEST	1.1.1.1	192.168.2.5	0xfd5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:08.480505943 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.480505943 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.481029034 CEST	1.1.1.1	192.168.2.5	0xfdf3	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.482980967 CEST	1.1.1.1	192.168.2.5	0x2b46	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.484168053 CEST	1.1.1.1	192.168.2.5	0xc60c	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.484168053 CEST	1.1.1.1	192.168.2.5	0xc60c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.484168053 CEST	1.1.1.1	192.168.2.5	0xc60c	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.489914894 CEST	1.1.1.1	192.168.2.5	0x7e77	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.489914894 CEST	1.1.1.1	192.168.2.5	0x7e77	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.489914894 CEST	1.1.1.1	192.168.2.5	0x7e77	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.489914894 CEST	1.1.1.1	192.168.2.5	0x7e77	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.489914894 CEST	1.1.1.1	192.168.2.5	0x7e77	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.490303040 CEST	1.1.1.1	192.168.2.5	0x66e1	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		52.88.79.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		35.167.71.175	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		52.26.253.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		44.224.167.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		35.164.189.43	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		54.185.3.142	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		54.71.245.89	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.492065907 CEST	1.1.1.1	192.168.2.5	0x244a	No error (0)	api.amplitude.com		35.82.142.224	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.494576931 CEST	1.1.1.1	192.168.2.5	0xc9cb	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.497560024 CEST	1.1.1.1	192.168.2.5	0xa97b	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.497560024 CEST	1.1.1.1	192.168.2.5	0xa97b	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.504774094 CEST	1.1.1.1	192.168.2.5	0x2c87	No error (0)	adservice.google.com		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.504774094 CEST	1.1.1.1	192.168.2.5	0x2c87	No error (0)	adservice.google.com		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.504774094 CEST	1.1.1.1	192.168.2.5	0x2c87	No error (0)	adservice.google.com		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.504774094 CEST	1.1.1.1	192.168.2.5	0x2c87	No error (0)	adservice.google.com		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.505712032 CEST	1.1.1.1	192.168.2.5	0x6a98	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:08.516088009 CEST	1.1.1.1	192.168.2.5	0x3e35	No error (0)	cdn.wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.516088009 CEST	1.1.1.1	192.168.2.5	0x3e35	No error (0)	cdn.wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.516088009 CEST	1.1.1.1	192.168.2.5	0x3e35	No error (0)	cdn.wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.516088009 CEST	1.1.1.1	192.168.2.5	0x3e35	No error (0)	cdn.wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.527189970 CEST	1.1.1.1	192.168.2.5	0x6df2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.527189970 CEST	1.1.1.1	192.168.2.5	0x6df2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.527189970 CEST	1.1.1.1	192.168.2.5	0x6df2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:08.527189970 CEST	1.1.1.1	192.168.2.5	0x6df2	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.033433914 CEST	1.1.1.1	192.168.2.5	0xcb3c	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.033433914 CEST	1.1.1.1	192.168.2.5	0xcb3c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.033433914 CEST	1.1.1.1	192.168.2.5	0xcb3c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.033433914 CEST	1.1.1.1	192.168.2.5	0xcb3c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.033433914 CEST	1.1.1.1	192.168.2.5	0xcb3c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.034392118 CEST	1.1.1.1	192.168.2.5	0x2dca	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.735126019 CEST	1.1.1.1	192.168.2.5	0x8705	No error (0)	nolan.wetransfer.net		3.161.188.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.735126019 CEST	1.1.1.1	192.168.2.5	0x8705	No error (0)	nolan.wetransfer.net		3.161.188.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.735126019 CEST	1.1.1.1	192.168.2.5	0x8705	No error (0)	nolan.wetransfer.net		3.161.188.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.735126019 CEST	1.1.1.1	192.168.2.5	0x8705	No error (0)	nolan.wetransfer.net		3.161.188.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.935168982 CEST	1.1.1.1	192.168.2.5	0x7a63	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.935604095 CEST	1.1.1.1	192.168.2.5	0x72ae	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.935604095 CEST	1.1.1.1	192.168.2.5	0x72ae	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.935604095 CEST	1.1.1.1	192.168.2.5	0x72ae	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.968383074 CEST	1.1.1.1	192.168.2.5	0x1f30	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.968383074 CEST	1.1.1.1	192.168.2.5	0x1f30	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.968383074 CEST	1.1.1.1	192.168.2.5	0x1f30	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.968383074 CEST	1.1.1.1	192.168.2.5	0x1f30	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.968383074 CEST	1.1.1.1	192.168.2.5	0x1f30	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:09.974311113 CEST	1.1.1.1	192.168.2.5	0x30cd	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:09.974311113 CEST	1.1.1.1	192.168.2.5	0x30cd	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:10.234694004 CEST	1.1.1.1	192.168.2.5	0x614d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.234694004 CEST	1.1.1.1	192.168.2.5	0x614d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.282248020 CEST	1.1.1.1	192.168.2.5	0xabca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:10.282248020 CEST	1.1.1.1	192.168.2.5	0xabca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.708930016 CEST	1.1.1.1	192.168.2.5	0x2b3a	No error (0)	nolan.wetransfer.net		3.161.188.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.708930016 CEST	1.1.1.1	192.168.2.5	0x2b3a	No error (0)	nolan.wetransfer.net		3.161.188.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.708930016 CEST	1.1.1.1	192.168.2.5	0x2b3a	No error (0)	nolan.wetransfer.net		3.161.188.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:10.708930016 CEST	1.1.1.1	192.168.2.5	0x2b3a	No error (0)	nolan.wetransfer.net		3.161.188.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.676106930 CEST	1.1.1.1	192.168.2.5	0x9ae	No error (0)	lebowski.wetransfer.com		34.250.238.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.676106930 CEST	1.1.1.1	192.168.2.5	0x9ae	No error (0)	lebowski.wetransfer.com		52.212.176.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.676106930 CEST	1.1.1.1	192.168.2.5	0x9ae	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.703934908 CEST	1.1.1.1	192.168.2.5	0x7949	No error (0)	cdn.brandmetrics.com		104.26.1.90	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.703934908 CEST	1.1.1.1	192.168.2.5	0x7949	No error (0)	cdn.brandmetrics.com		172.67.69.191	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.703934908 CEST	1.1.1.1	192.168.2.5	0x7949	No error (0)	cdn.brandmetrics.com		104.26.0.90	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:11.705102921 CEST	1.1.1.1	192.168.2.5	0x25bd	No error (0)	cdn.brandmetrics.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:12.888745070 CEST	1.1.1.1	192.168.2.5	0x6aaf	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:12.888745070 CEST	1.1.1.1	192.168.2.5	0x6aaf	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:12.888745070 CEST	1.1.1.1	192.168.2.5	0x6aaf	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:12.889081955 CEST	1.1.1.1	192.168.2.5	0xb8d8	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:12.889081955 CEST	1.1.1.1	192.168.2.5	0xb8d8	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:12.889081955 CEST	1.1.1.1	192.168.2.5	0xb8d8	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:14.364572048 CEST	1.1.1.1	192.168.2.5	0x535a	No error (0)	nolan.wetransfer.net		3.161.188.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.364572048 CEST	1.1.1.1	192.168.2.5	0x535a	No error (0)	nolan.wetransfer.net		3.161.188.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.364572048 CEST	1.1.1.1	192.168.2.5	0x535a	No error (0)	nolan.wetransfer.net		3.161.188.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.364572048 CEST	1.1.1.1	192.168.2.5	0x535a	No error (0)	nolan.wetransfer.net		3.161.188.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.368240118 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.368240118 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	lebowski.wetransfer.com		52.212.176.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.368240118 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	lebowski.wetransfer.com		34.250.238.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:14.955526114 CEST	1.1.1.1	192.168.2.5	0xfdeb	No error (0)	www.datadoghq-browser-agent.com		18.244.194.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:15.899827957 CEST	1.1.1.1	192.168.2.5	0x4ae1	No error (0)	backgrounds.wetransfer.net		3.163.80.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:15.899827957 CEST	1.1.1.1	192.168.2.5	0x4ae1	No error (0)	backgrounds.wetransfer.net		3.163.80.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:15.899827957 CEST	1.1.1.1	192.168.2.5	0x4ae1	No error (0)	backgrounds.wetransfer.net		3.163.80.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:15.899827957 CEST	1.1.1.1	192.168.2.5	0x4ae1	No error (0)	backgrounds.wetransfer.net		3.163.80.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.598598957 CEST	1.1.1.1	192.168.2.5	0x2a98	No error (0)	browser-intake-datadoghq.eu		34.149.135.19	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.799822092 CEST	1.1.1.1	192.168.2.5	0x4300	No error (0)	prod-cdn.wetransfer.net		54.230.253.37	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.799822092 CEST	1.1.1.1	192.168.2.5	0x4300	No error (0)	prod-cdn.wetransfer.net		54.230.253.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.799822092 CEST	1.1.1.1	192.168.2.5	0x4300	No error (0)	prod-cdn.wetransfer.net		54.230.253.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.799822092 CEST	1.1.1.1	192.168.2.5	0x4300	No error (0)	prod-cdn.wetransfer.net		54.230.253.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:16.988212109 CEST	1.1.1.1	192.168.2.5	0xc44a	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.192594051 CEST	1.1.1.1	192.168.2.5	0xcb4b	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.192594051 CEST	1.1.1.1	192.168.2.5	0xcb4b	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.192594051 CEST	1.1.1.1	192.168.2.5	0xcb4b	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.192594051 CEST	1.1.1.1	192.168.2.5	0xcb4b	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.209254026 CEST	1.1.1.1	192.168.2.5	0x9065	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:18.209290028 CEST	1.1.1.1	192.168.2.5	0x7c81	No error (0)	ad.doubleclick.net		173.194.219.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:18.209290028 CEST	1.1.1.1	192.168.2.5	0x7c81	No error (0)	ad.doubleclick.net		173.194.219.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.009481907 CEST	1.1.1.1	192.168.2.5	0xbd83	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.009481907 CEST	1.1.1.1	192.168.2.5	0xbd83	No error (0)	dg2iu7dxxehbo.cloudfront.net		108.156.154.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.009577990 CEST	1.1.1.1	192.168.2.5	0x6490	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.254278898 CEST	1.1.1.1	192.168.2.5	0x9797	No error (0)	backgrounds.wetransfer.net		3.163.80.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.254278898 CEST	1.1.1.1	192.168.2.5	0x9797	No error (0)	backgrounds.wetransfer.net		3.163.80.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.254278898 CEST	1.1.1.1	192.168.2.5	0x9797	No error (0)	backgrounds.wetransfer.net		3.163.80.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.254278898 CEST	1.1.1.1	192.168.2.5	0x9797	No error (0)	backgrounds.wetransfer.net		3.163.80.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.604757071 CEST	1.1.1.1	192.168.2.5	0x8f99	No error (0)	cm.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.604757071 CEST	1.1.1.1	192.168.2.5	0x8f99	No error (0)	cm.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.604757071 CEST	1.1.1.1	192.168.2.5	0x8f99	No error (0)	cm.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.604757071 CEST	1.1.1.1	192.168.2.5	0x8f99	No error (0)	cm.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.623080969 CEST	1.1.1.1	192.168.2.5	0xc8d2	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.623119116 CEST	1.1.1.1	192.168.2.5	0x22e1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:19.761559010 CEST	1.1.1.1	192.168.2.5	0x8d56	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.478735924 CEST	1.1.1.1	192.168.2.5	0x2ec9	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.479439974 CEST	1.1.1.1	192.168.2.5	0x2ba	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.483016014 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	donny.wetransfer.com		52.212.176.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.483016014 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.483016014 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	donny.wetransfer.com		34.250.238.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.484812975 CEST	1.1.1.1	192.168.2.5	0x323b	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.484812975 CEST	1.1.1.1	192.168.2.5	0x323b	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.484812975 CEST	1.1.1.1	192.168.2.5	0x323b	No error (0)	tag.device9.com		44.198.210.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.484812975 CEST	1.1.1.1	192.168.2.5	0x323b	No error (0)	tag.device9.com		34.200.39.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.484812975 CEST	1.1.1.1	192.168.2.5	0x323b	No error (0)	tag.device9.com		54.165.73.50	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:22.485450029 CEST	1.1.1.1	192.168.2.5	0x372d	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.485450029 CEST	1.1.1.1	192.168.2.5	0x372d	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:22.486438036 CEST	1.1.1.1	192.168.2.5	0x77	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		3.214.158.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		54.85.158.168	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		52.70.253.225	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		3.214.100.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		34.226.41.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		52.207.122.234	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		3.225.61.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.170811892 CEST	1.1.1.1	192.168.2.5	0x510e	No error (0)	tracker.samplicio.us		44.193.171.244	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.174154043 CEST	1.1.1.1	192.168.2.5	0xb674	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.174154043 CEST	1.1.1.1	192.168.2.5	0xb674	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.174154043 CEST	1.1.1.1	192.168.2.5	0xb674	No error (0)	tag.device9.com		44.198.210.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.174154043 CEST	1.1.1.1	192.168.2.5	0xb674	No error (0)	tag.device9.com		34.200.39.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.174154043 CEST	1.1.1.1	192.168.2.5	0xb674	No error (0)	tag.device9.com		54.165.73.50	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.175152063 CEST	1.1.1.1	192.168.2.5	0x142d	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.175152063 CEST	1.1.1.1	192.168.2.5	0x142d	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.234853029 CEST	1.1.1.1	192.168.2.5	0xc281	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.669536114 CEST	1.1.1.1	192.168.2.5	0x83b	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.670226097 CEST	1.1.1.1	192.168.2.5	0x1737	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		44.193.171.244	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		52.70.253.225	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		3.214.158.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		35.169.225.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		34.226.41.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		18.210.137.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		3.225.61.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:23.818458080 CEST	1.1.1.1	192.168.2.5	0x379c	No error (0)	tracker.samplicio.us		44.194.21.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.002701998 CEST	1.1.1.1	192.168.2.5	0xe112	No error (0)	donny.wetransfer.com		34.250.238.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.002701998 CEST	1.1.1.1	192.168.2.5	0xe112	No error (0)	donny.wetransfer.com		52.212.176.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.002701998 CEST	1.1.1.1	192.168.2.5	0xe112	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.170010090 CEST	1.1.1.1	192.168.2.5	0x66c5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:24.170010090 CEST	1.1.1.1	192.168.2.5	0x66c5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:24.244178057 CEST	1.1.1.1	192.168.2.5	0x9905	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:24.244834900 CEST	1.1.1.1	192.168.2.5	0x10a2	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:30.078283072 CEST	1.1.1.1	192.168.2.5	0xf43	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:30.078283072 CEST	1.1.1.1	192.168.2.5	0xf43	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:30.078306913 CEST	1.1.1.1	192.168.2.5	0x6dce	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:31.771187067 CEST	1.1.1.1	192.168.2.5	0xc7f9	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.034038067 CEST	1.1.1.1	192.168.2.5	0x2fce	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.034038067 CEST	1.1.1.1	192.168.2.5	0x2fce	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.034080982 CEST	1.1.1.1	192.168.2.5	0xeaf0	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:33.045214891 CEST	1.1.1.1	192.168.2.5	0xdf8f	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.045214891 CEST	1.1.1.1	192.168.2.5	0xdf8f	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.045396090 CEST	1.1.1.1	192.168.2.5	0x852e	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.146593094 CEST	1.1.1.1	192.168.2.5	0xa2de	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.146593094 CEST	1.1.1.1	192.168.2.5	0xa2de	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.146593094 CEST	1.1.1.1	192.168.2.5	0xa2de	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.146776915 CEST	1.1.1.1	192.168.2.5	0x1964	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.146776915 CEST	1.1.1.1	192.168.2.5	0x1964	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:33.457163095 CEST	1.1.1.1	192.168.2.5	0x680	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.457163095 CEST	1.1.1.1	192.168.2.5	0x680	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:33.457279921 CEST	1.1.1.1	192.168.2.5	0xec6f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	pixel.adsafeprotected.com	vapixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	vapixel.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.71.236.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.225.154.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		100.25.125.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		54.175.164.48	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.206.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.6.92.135	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		44.198.128.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376013994 CEST	1.1.1.1	192.168.2.5	0x3508	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		34.194.223.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376924038 CEST	1.1.1.1	192.168.2.5	0xf934	No error (0)	pixel.adsafeprotected.com	vapixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.376924038 CEST	1.1.1.1	192.168.2.5	0xf934	No error (0)	vapixel.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377532959 CEST	1.1.1.1	192.168.2.5	0xe959	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377532959 CEST	1.1.1.1	192.168.2.5	0xe959	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377532959 CEST	1.1.1.1	192.168.2.5	0xe959	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377546072 CEST	1.1.1.1	192.168.2.5	0xe3c6	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377546072 CEST	1.1.1.1	192.168.2.5	0xe3c6	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.377546072 CEST	1.1.1.1	192.168.2.5	0xe3c6	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:40.379132032 CEST	1.1.1.1	192.168.2.5	0xc8fd	No error (0)	cdn.lamp.avct.cloud		18.64.155.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.379132032 CEST	1.1.1.1	192.168.2.5	0xc8fd	No error (0)	cdn.lamp.avct.cloud		18.64.155.60	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.379132032 CEST	1.1.1.1	192.168.2.5	0xc8fd	No error (0)	cdn.lamp.avct.cloud		18.64.155.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:40.379132032 CEST	1.1.1.1	192.168.2.5	0xc8fd	No error (0)	cdn.lamp.avct.cloud		18.64.155.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.225907087 CEST	1.1.1.1	192.168.2.5	0x9e04	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.225907087 CEST	1.1.1.1	192.168.2.5	0x9e04	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.226254940 CEST	1.1.1.1	192.168.2.5	0x3fdc	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:41.461364031 CEST	1.1.1.1	192.168.2.5	0x2ef7	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.461364031 CEST	1.1.1.1	192.168.2.5	0x2ef7	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.461364031 CEST	1.1.1.1	192.168.2.5	0x2ef7	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578093052 CEST	1.1.1.1	192.168.2.5	0xfe2f	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578093052 CEST	1.1.1.1	192.168.2.5	0xfe2f	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.81	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578093052 CEST	1.1.1.1	192.168.2.5	0xfe2f	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578093052 CEST	1.1.1.1	192.168.2.5	0xfe2f	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578093052 CEST	1.1.1.1	192.168.2.5	0xfe2f	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.19	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:41.578540087 CEST	1.1.1.1	192.168.2.5	0x7910	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:42.049747944 CEST	1.1.1.1	192.168.2.5	0x6ff4	No error (0)	googleads.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:42.049747944 CEST	1.1.1.1	192.168.2.5	0x6ff4	No error (0)	googleads.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:42.049747944 CEST	1.1.1.1	192.168.2.5	0x6ff4	No error (0)	googleads.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:42.049747944 CEST	1.1.1.1	192.168.2.5	0x6ff4	No error (0)	googleads.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:42.049770117 CEST	1.1.1.1	192.168.2.5	0xfc3b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:42.051450968 CEST	1.1.1.1	192.168.2.5	0xaa78	No error (0)	a5594.casalemedia.com		209.204.229.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:42.709616899 CEST	1.1.1.1	192.168.2.5	0x1cda	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:42.709616899 CEST	1.1.1.1	192.168.2.5	0x1cda	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.458925009 CEST	1.1.1.1	192.168.2.5	0x1787	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.458925009 CEST	1.1.1.1	192.168.2.5	0x1787	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.458925009 CEST	1.1.1.1	192.168.2.5	0x1787	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.459965944 CEST	1.1.1.1	192.168.2.5	0xc974	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.459965944 CEST	1.1.1.1	192.168.2.5	0xc974	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.459965944 CEST	1.1.1.1	192.168.2.5	0xc974	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.460325956 CEST	1.1.1.1	192.168.2.5	0x6500	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.460325956 CEST	1.1.1.1	192.168.2.5	0x6500	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.461443901 CEST	1.1.1.1	192.168.2.5	0x3d7b	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:43.464759111 CEST	1.1.1.1	192.168.2.5	0x9c7f	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.464852095 CEST	1.1.1.1	192.168.2.5	0x386	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt.adsafeprotected.com	vadt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	vadt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		54.144.38.225	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		34.224.113.60	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		44.206.11.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		3.217.86.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		107.23.187.29	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		3.231.13.243	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		54.157.102.229	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.468874931 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		107.23.236.169	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.469265938 CEST	1.1.1.1	192.168.2.5	0xd6b9	No error (0)	dt.adsafeprotected.com	vadt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.469265938 CEST	1.1.1.1	192.168.2.5	0xd6b9	No error (0)	vadt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:43.576011896 CEST	1.1.1.1	192.168.2.5	0xf1f0	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.782239914 CEST	1.1.1.1	192.168.2.5	0xf202	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.782239914 CEST	1.1.1.1	192.168.2.5	0xf202	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.782239914 CEST	1.1.1.1	192.168.2.5	0xf202	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.793123007 CEST	1.1.1.1	192.168.2.5	0x7f61	No error (0)	a5594.casalemedia.com		209.204.229.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.934770107 CEST	1.1.1.1	192.168.2.5	0x3656	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:43.934820890 CEST	1.1.1.1	192.168.2.5	0x4c4	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 25, 2024 09:07:44.817476988 CEST	1.1.1.1	192.168.2.5	0x609e	No error (0)	fw.adsafeprotected.com	vafw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817476988 CEST	1.1.1.1	192.168.2.5	0x609e	No error (0)	vafw.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	fw.adsafeprotected.com	vafw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	vafw.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		107.23.238.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.6.92.135	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.220.233.23	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		100.25.125.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.205.72.179	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.223.177.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		54.86.38.210	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.817800999 CEST	1.1.1.1	192.168.2.5	0xba38	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.210.217.48	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.829900026 CEST	1.1.1.1	192.168.2.5	0x658d	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.829900026 CEST	1.1.1.1	192.168.2.5	0x658d	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.830286026 CEST	1.1.1.1	192.168.2.5	0xeff6	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:44.893656969 CEST	1.1.1.1	192.168.2.5	0xe481	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:44.894819975 CEST	1.1.1.1	192.168.2.5	0x1f52	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:44.894819975 CEST	1.1.1.1	192.168.2.5	0x1f52	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt.adsafeprotected.com	vadt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	vadt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		52.21.237.79	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		44.218.62.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		44.220.125.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		174.129.84.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		107.23.236.169	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		3.95.117.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		35.171.239.143	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257162094 CEST	1.1.1.1	192.168.2.5	0xee46	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		3.213.254.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257426977 CEST	1.1.1.1	192.168.2.5	0xe7d0	No error (0)	dt.adsafeprotected.com	ordt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.257426977 CEST	1.1.1.1	192.168.2.5	0xe7d0	No error (0)	ordt.adsafeprotected.com	dt-external-521234871.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.451467037 CEST	1.1.1.1	192.168.2.5	0x22fd	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.451467037 CEST	1.1.1.1	192.168.2.5	0x22fd	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.451781988 CEST	1.1.1.1	192.168.2.5	0xa6cd	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		3.237.57.79	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		54.158.217.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		54.225.194.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		3.218.132.46	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		54.211.215.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		34.204.109.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		3.210.155.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.589859962 CEST	1.1.1.1	192.168.2.5	0xf7cf	No error (0)	idaas-ext.cph.liveintent.com		34.202.111.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.590696096 CEST	1.1.1.1	192.168.2.5	0x3ce5	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.590708017 CEST	1.1.1.1	192.168.2.5	0xea9c	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592024088 CEST	1.1.1.1	192.168.2.5	0x4ec3	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592695951 CEST	1.1.1.1	192.168.2.5	0x79e6	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592695951 CEST	1.1.1.1	192.168.2.5	0x79e6	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592695951 CEST	1.1.1.1	192.168.2.5	0x79e6	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592710018 CEST	1.1.1.1	192.168.2.5	0x89b3	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592710018 CEST	1.1.1.1	192.168.2.5	0x89b3	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592710018 CEST	1.1.1.1	192.168.2.5	0x89b3	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592981100 CEST	1.1.1.1	192.168.2.5	0x948c	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592981100 CEST	1.1.1.1	192.168.2.5	0x948c	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		52.73.25.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		54.152.125.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		54.158.15.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		52.87.32.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		54.147.231.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		54.156.249.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		54.165.92.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.592993021 CEST	1.1.1.1	192.168.2.5	0x4fee	No error (0)	match.prod.bidr.io		52.7.147.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593204975 CEST	1.1.1.1	192.168.2.5	0xfbaa	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593204975 CEST	1.1.1.1	192.168.2.5	0xfbaa	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593204975 CEST	1.1.1.1	192.168.2.5	0xfbaa	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593204975 CEST	1.1.1.1	192.168.2.5	0xfbaa	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593204975 CEST	1.1.1.1	192.168.2.5	0xfbaa	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593700886 CEST	1.1.1.1	192.168.2.5	0xe159	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.593700886 CEST	1.1.1.1	192.168.2.5	0xe159	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.594594955 CEST	1.1.1.1	192.168.2.5	0x3cba	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:46.956556082 CEST	1.1.1.1	192.168.2.5	0x4a20	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:46.956573963 CEST	1.1.1.1	192.168.2.5	0x8b84	No error (0)	ad.doubleclick.net		64.233.177.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.956573963 CEST	1.1.1.1	192.168.2.5	0x8b84	No error (0)	ad.doubleclick.net		64.233.177.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.956742048 CEST	1.1.1.1	192.168.2.5	0x6aa2	No error (0)	s0.2mdn.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:46.956742048 CEST	1.1.1.1	192.168.2.5	0x6aa2	No error (0)	s0.2mdn.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.113126040 CEST	1.1.1.1	192.168.2.5	0x77ee	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.113126040 CEST	1.1.1.1	192.168.2.5	0x77ee	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.113418102 CEST	1.1.1.1	192.168.2.5	0xf41a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:47.116110086 CEST	1.1.1.1	192.168.2.5	0x8244	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.116110086 CEST	1.1.1.1	192.168.2.5	0x8244	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.116374016 CEST	1.1.1.1	192.168.2.5	0xaeba	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:47.294013977 CEST	1.1.1.1	192.168.2.5	0x5a1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.294013977 CEST	1.1.1.1	192.168.2.5	0x5a1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.294013977 CEST	1.1.1.1	192.168.2.5	0x5a1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.294013977 CEST	1.1.1.1	192.168.2.5	0x5a1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.495548010 CEST	1.1.1.1	192.168.2.5	0x35f2	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.495548010 CEST	1.1.1.1	192.168.2.5	0x35f2	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.496227026 CEST	1.1.1.1	192.168.2.5	0x7650	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.158.106.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.159.65.185	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		52.87.32.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.152.125.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.146.215.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		52.87.24.128	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.156.161.169	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.697985888 CEST	1.1.1.1	192.168.2.5	0x7225	No error (0)	match.prod.bidr.io		54.146.132.60	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.711611032 CEST	1.1.1.1	192.168.2.5	0x14d4	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:47.711611032 CEST	1.1.1.1	192.168.2.5	0x14d4	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.711611032 CEST	1.1.1.1	192.168.2.5	0x14d4	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.711611032 CEST	1.1.1.1	192.168.2.5	0x14d4	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.711611032 CEST	1.1.1.1	192.168.2.5	0x14d4	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.977842093 CEST	1.1.1.1	192.168.2.5	0xd2f3	No error (0)	live.rezync.com		3.161.136.118	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.977842093 CEST	1.1.1.1	192.168.2.5	0xd2f3	No error (0)	live.rezync.com		3.161.136.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.977842093 CEST	1.1.1.1	192.168.2.5	0xd2f3	No error (0)	live.rezync.com		3.161.136.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:47.977842093 CEST	1.1.1.1	192.168.2.5	0xd2f3	No error (0)	live.rezync.com		3.161.136.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.117116928 CEST	1.1.1.1	192.168.2.5	0xb357	No error (0)	s0.2mdn.net		64.233.177.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.117116928 CEST	1.1.1.1	192.168.2.5	0xb357	No error (0)	s0.2mdn.net		64.233.177.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.158543110 CEST	1.1.1.1	192.168.2.5	0x4d35	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:48.159075022 CEST	1.1.1.1	192.168.2.5	0x1c9a	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.159075022 CEST	1.1.1.1	192.168.2.5	0x1c9a	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.314629078 CEST	1.1.1.1	192.168.2.5	0x88f2	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.314629078 CEST	1.1.1.1	192.168.2.5	0x88f2	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.315270901 CEST	1.1.1.1	192.168.2.5	0xa0a4	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:48.390002012 CEST	1.1.1.1	192.168.2.5	0xf3fa	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.390002012 CEST	1.1.1.1	192.168.2.5	0xf3fa	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:48.390755892 CEST	1.1.1.1	192.168.2.5	0x8f41	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:07:48.622499943 CEST	1.1.1.1	192.168.2.5	0xd44f	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:48.622499943 CEST	1.1.1.1	192.168.2.5	0xd44f	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:48.623219967 CEST	1.1.1.1	192.168.2.5	0x34f7	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:48.623219967 CEST	1.1.1.1	192.168.2.5	0x34f7	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:50.141268015 CEST	1.1.1.1	192.168.2.5	0x352	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:50.141268015 CEST	1.1.1.1	192.168.2.5	0x352	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:50.141558886 CEST	1.1.1.1	192.168.2.5	0x1070	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:50.142345905 CEST	1.1.1.1	192.168.2.5	0xc437	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:07:50.143630028 CEST	1.1.1.1	192.168.2.5	0x1487	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:50.143630028 CEST	1.1.1.1	192.168.2.5	0x1487	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.778136015 CEST	1.1.1.1	192.168.2.5	0x786e	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:51.778136015 CEST	1.1.1.1	192.168.2.5	0x786e	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		108.156.152.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.778136015 CEST	1.1.1.1	192.168.2.5	0x786e	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		108.156.152.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.778136015 CEST	1.1.1.1	192.168.2.5	0x786e	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		108.156.152.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.778136015 CEST	1.1.1.1	192.168.2.5	0x786e	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		108.156.152.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:51.784126997 CEST	1.1.1.1	192.168.2.5	0x2487	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:07:52.227675915 CEST	1.1.1.1	192.168.2.5	0xacbf	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:54.896523952 CEST	1.1.1.1	192.168.2.5	0x9e15	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:58.616173983 CEST	1.1.1.1	192.168.2.5	0xf3a3	No error (0)	a5574.casalemedia.com		209.204.230.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.272609949 CEST	1.1.1.1	192.168.2.5	0x6a6c	No error (0)	a5574.casalemedia.com		209.204.230.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.300255060 CEST	1.1.1.1	192.168.2.5	0xedc	No error (0)	wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.300255060 CEST	1.1.1.1	192.168.2.5	0xedc	No error (0)	wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.300255060 CEST	1.1.1.1	192.168.2.5	0xedc	No error (0)	wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.300255060 CEST	1.1.1.1	192.168.2.5	0xedc	No error (0)	wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.307131052 CEST	1.1.1.1	192.168.2.5	0xd471	No error (0)	cdn.wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.307131052 CEST	1.1.1.1	192.168.2.5	0xd471	No error (0)	cdn.wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.307131052 CEST	1.1.1.1	192.168.2.5	0xd471	No error (0)	cdn.wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:07:59.307131052 CEST	1.1.1.1	192.168.2.5	0xd471	No error (0)	cdn.wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.015125990 CEST	1.1.1.1	192.168.2.5	0xef10	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.015235901 CEST	1.1.1.1	192.168.2.5	0xeb42	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.021333933 CEST	1.1.1.1	192.168.2.5	0xb650	No error (0)	logx.optimizely.com		34.111.140.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.041647911 CEST	1.1.1.1	192.168.2.5	0x195b	No error (0)	frontsite-nextjs.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.041647911 CEST	1.1.1.1	192.168.2.5	0x195b	No error (0)	frontsite-nextjs.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.041647911 CEST	1.1.1.1	192.168.2.5	0x195b	No error (0)	frontsite-nextjs.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068607092 CEST	1.1.1.1	192.168.2.5	0x7b4d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068761110 CEST	1.1.1.1	192.168.2.5	0x1a34	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068761110 CEST	1.1.1.1	192.168.2.5	0x1a34	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.206.160.179	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068761110 CEST	1.1.1.1	192.168.2.5	0x1a34	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068761110 CEST	1.1.1.1	192.168.2.5	0x1a34	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.224.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.068761110 CEST	1.1.1.1	192.168.2.5	0x1a34	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.193.26.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.069649935 CEST	1.1.1.1	192.168.2.5	0x2f83	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.089864969 CEST	1.1.1.1	192.168.2.5	0x2dd3	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.090719938 CEST	1.1.1.1	192.168.2.5	0x64f7	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.090719938 CEST	1.1.1.1	192.168.2.5	0x64f7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.3	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.090719938 CEST	1.1.1.1	192.168.2.5	0x64f7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.090719938 CEST	1.1.1.1	192.168.2.5	0x64f7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.090719938 CEST	1.1.1.1	192.168.2.5	0x64f7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.136029005 CEST	1.1.1.1	192.168.2.5	0xac9f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:00.136065006 CEST	1.1.1.1	192.168.2.5	0xee94	No error (0)	ad.doubleclick.net		64.233.177.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.136065006 CEST	1.1.1.1	192.168.2.5	0xee94	No error (0)	ad.doubleclick.net		64.233.177.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.252397060 CEST	1.1.1.1	192.168.2.5	0xfff5	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.253437996 CEST	1.1.1.1	192.168.2.5	0x3f12	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.255582094 CEST	1.1.1.1	192.168.2.5	0x218d	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.257090092 CEST	1.1.1.1	192.168.2.5	0xc1a7	No error (0)	cm.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.257090092 CEST	1.1.1.1	192.168.2.5	0xc1a7	No error (0)	cm.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.257090092 CEST	1.1.1.1	192.168.2.5	0xc1a7	No error (0)	cm.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.257090092 CEST	1.1.1.1	192.168.2.5	0xc1a7	No error (0)	cm.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607319117 CEST	1.1.1.1	192.168.2.5	0x2114	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607319117 CEST	1.1.1.1	192.168.2.5	0x2114	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607319117 CEST	1.1.1.1	192.168.2.5	0x2114	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607319117 CEST	1.1.1.1	192.168.2.5	0x2114	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607319117 CEST	1.1.1.1	192.168.2.5	0x2114	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607966900 CEST	1.1.1.1	192.168.2.5	0xd4c3	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607966900 CEST	1.1.1.1	192.168.2.5	0xd4c3	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.607966900 CEST	1.1.1.1	192.168.2.5	0xd4c3	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610555887 CEST	1.1.1.1	192.168.2.5	0xafde	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610555887 CEST	1.1.1.1	192.168.2.5	0xafde	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.610918999 CEST	1.1.1.1	192.168.2.5	0x59dc	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		135.148.152.196	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		147.135.119.118	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		147.135.94.212	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		147.135.119.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		135.148.2.53	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		147.135.94.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		135.148.152.197	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611818075 CEST	1.1.1.1	192.168.2.5	0x9696	No error (0)	ssbsync-use2.smartadserver.com		135.148.2.52	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611877918 CEST	1.1.1.1	192.168.2.5	0xfced	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.611877918 CEST	1.1.1.1	192.168.2.5	0xfced	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		52.205.65.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		54.205.244.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		54.166.33.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		52.5.14.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613224030 CEST	1.1.1.1	192.168.2.5	0xc73e	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.613811016 CEST	1.1.1.1	192.168.2.5	0x3015	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.753129005 CEST	1.1.1.1	192.168.2.5	0xa71	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.800365925 CEST	1.1.1.1	192.168.2.5	0x13d	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852216005 CEST	1.1.1.1	192.168.2.5	0x7280	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852216005 CEST	1.1.1.1	192.168.2.5	0x7280	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.193.26.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852216005 CEST	1.1.1.1	192.168.2.5	0x7280	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.236.160.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852216005 CEST	1.1.1.1	192.168.2.5	0x7280	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852216005 CEST	1.1.1.1	192.168.2.5	0x7280	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.142.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.852232933 CEST	1.1.1.1	192.168.2.5	0x1b17	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854182005 CEST	1.1.1.1	192.168.2.5	0xaaa7	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854182005 CEST	1.1.1.1	192.168.2.5	0xaaa7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854182005 CEST	1.1.1.1	192.168.2.5	0xaaa7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.3	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854182005 CEST	1.1.1.1	192.168.2.5	0xaaa7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854182005 CEST	1.1.1.1	192.168.2.5	0xaaa7	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:00.854923010 CEST	1.1.1.1	192.168.2.5	0xf27	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.955636978 CEST	1.1.1.1	192.168.2.5	0x9377	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:00.957223892 CEST	1.1.1.1	192.168.2.5	0x63bd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:01.601617098 CEST	1.1.1.1	192.168.2.5	0x364	No error (0)	tagging.wetransfer.com		13.226.100.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.601617098 CEST	1.1.1.1	192.168.2.5	0x364	No error (0)	tagging.wetransfer.com		13.226.100.86	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.601617098 CEST	1.1.1.1	192.168.2.5	0x364	No error (0)	tagging.wetransfer.com		13.226.100.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.601617098 CEST	1.1.1.1	192.168.2.5	0x364	No error (0)	tagging.wetransfer.com		13.226.100.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.977705956 CEST	1.1.1.1	192.168.2.5	0x6182	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.977705956 CEST	1.1.1.1	192.168.2.5	0x6182	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:01.978445053 CEST	1.1.1.1	192.168.2.5	0x7031	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 09:08:02.039365053 CEST	1.1.1.1	192.168.2.5	0xeff1	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.039365053 CEST	1.1.1.1	192.168.2.5	0xeff1	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.039365053 CEST	1.1.1.1	192.168.2.5	0xeff1	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.210975885 CEST	1.1.1.1	192.168.2.5	0x4fdd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:02.211020947 CEST	1.1.1.1	192.168.2.5	0xfdf5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:02.211020947 CEST	1.1.1.1	192.168.2.5	0xfdf5	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.425774097 CEST	1.1.1.1	192.168.2.5	0x8c19	No error (0)	wetransfer.com		18.160.78.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.425774097 CEST	1.1.1.1	192.168.2.5	0x8c19	No error (0)	wetransfer.com		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.425774097 CEST	1.1.1.1	192.168.2.5	0x8c19	No error (0)	wetransfer.com		18.160.78.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.425774097 CEST	1.1.1.1	192.168.2.5	0x8c19	No error (0)	wetransfer.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.434231043 CEST	1.1.1.1	192.168.2.5	0x8d71	No error (0)	tagging.wetransfer.com		13.226.100.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.434231043 CEST	1.1.1.1	192.168.2.5	0x8d71	No error (0)	tagging.wetransfer.com		13.226.100.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.434231043 CEST	1.1.1.1	192.168.2.5	0x8d71	No error (0)	tagging.wetransfer.com		13.226.100.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.434231043 CEST	1.1.1.1	192.168.2.5	0x8d71	No error (0)	tagging.wetransfer.com		13.226.100.86	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.813405991 CEST	1.1.1.1	192.168.2.5	0xb6fa	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.813405991 CEST	1.1.1.1	192.168.2.5	0xb6fa	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.813426018 CEST	1.1.1.1	192.168.2.5	0x5eb0	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:02.875408888 CEST	1.1.1.1	192.168.2.5	0xbc1c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:02.875408888 CEST	1.1.1.1	192.168.2.5	0xbc1c	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.875543118 CEST	1.1.1.1	192.168.2.5	0xeb8e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:02.912123919 CEST	1.1.1.1	192.168.2.5	0xde65	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:02.912367105 CEST	1.1.1.1	192.168.2.5	0x6352	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:02.912367105 CEST	1.1.1.1	192.168.2.5	0x6352	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.031955004 CEST	1.1.1.1	192.168.2.5	0x9936	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		44.235.23.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		54.201.9.216	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		52.88.132.196	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		44.239.44.141	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		52.10.124.70	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		54.70.46.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		52.41.35.115	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.111833096 CEST	1.1.1.1	192.168.2.5	0x108a	No error (0)	api.amplitude.com		52.37.13.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.292167902 CEST	1.1.1.1	192.168.2.5	0x67ae	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.292167902 CEST	1.1.1.1	192.168.2.5	0x67ae	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.292167902 CEST	1.1.1.1	192.168.2.5	0x67ae	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.292167902 CEST	1.1.1.1	192.168.2.5	0x67ae	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858267069 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:04.858541012 CEST	1.1.1.1	192.168.2.5	0x8a2c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 09:08:06.043849945 CEST	1.1.1.1	192.168.2.5	0x7e70	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567679882 CEST	1.1.1.1	192.168.2.5	0x6887	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567679882 CEST	1.1.1.1	192.168.2.5	0x6887	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567679882 CEST	1.1.1.1	192.168.2.5	0x6887	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567679882 CEST	1.1.1.1	192.168.2.5	0x6887	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.567679882 CEST	1.1.1.1	192.168.2.5	0x6887	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.568291903 CEST	1.1.1.1	192.168.2.5	0x6c20	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.645736933 CEST	1.1.1.1	192.168.2.5	0x22d8	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.645736933 CEST	1.1.1.1	192.168.2.5	0x22d8	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677505016 CEST	1.1.1.1	192.168.2.5	0x76b6	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677735090 CEST	1.1.1.1	192.168.2.5	0xf833	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677735090 CEST	1.1.1.1	192.168.2.5	0xf833	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:06.677735090 CEST	1.1.1.1	192.168.2.5	0xf833	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:07.150968075 CEST	1.1.1.1	192.168.2.5	0x6001	No error (0)	ad.doubleclick.net		173.194.219.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.150968075 CEST	1.1.1.1	192.168.2.5	0x6001	No error (0)	ad.doubleclick.net		173.194.219.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.151202917 CEST	1.1.1.1	192.168.2.5	0x7636	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:07.166129112 CEST	1.1.1.1	192.168.2.5	0x95b4	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:07.166129112 CEST	1.1.1.1	192.168.2.5	0x95b4	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.166129112 CEST	1.1.1.1	192.168.2.5	0x95b4	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.166129112 CEST	1.1.1.1	192.168.2.5	0x95b4	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.166129112 CEST	1.1.1.1	192.168.2.5	0x95b4	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.167069912 CEST	1.1.1.1	192.168.2.5	0x4fa3	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:07.538821936 CEST	1.1.1.1	192.168.2.5	0x15cb	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:07.538821936 CEST	1.1.1.1	192.168.2.5	0x15cb	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.538821936 CEST	1.1.1.1	192.168.2.5	0x15cb	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.538821936 CEST	1.1.1.1	192.168.2.5	0x15cb	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.538821936 CEST	1.1.1.1	192.168.2.5	0x15cb	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:07.539351940 CEST	1.1.1.1	192.168.2.5	0x8126	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.323391914 CEST	1.1.1.1	192.168.2.5	0xf199	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.323391914 CEST	1.1.1.1	192.168.2.5	0xf199	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.323391914 CEST	1.1.1.1	192.168.2.5	0xf199	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.323822975 CEST	1.1.1.1	192.168.2.5	0xace	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.369498014 CEST	1.1.1.1	192.168.2.5	0xdedc	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.369668961 CEST	1.1.1.1	192.168.2.5	0x9c0f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.369668961 CEST	1.1.1.1	192.168.2.5	0x9c0f	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.389739037 CEST	1.1.1.1	192.168.2.5	0x8eb5	No error (0)	wetransfer.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.389739037 CEST	1.1.1.1	192.168.2.5	0x8eb5	No error (0)	wetransfer.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.426330090 CEST	1.1.1.1	192.168.2.5	0x1654	No error (0)	cdn.statuspage.io		13.226.100.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.426330090 CEST	1.1.1.1	192.168.2.5	0x1654	No error (0)	cdn.statuspage.io		13.226.100.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.426330090 CEST	1.1.1.1	192.168.2.5	0x1654	No error (0)	cdn.statuspage.io		13.226.100.109	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.426330090 CEST	1.1.1.1	192.168.2.5	0x1654	No error (0)	cdn.statuspage.io		13.226.100.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.678150892 CEST	1.1.1.1	192.168.2.5	0x114b	No error (0)	wetransfer.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.678150892 CEST	1.1.1.1	192.168.2.5	0x114b	No error (0)	wetransfer.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.815696001 CEST	1.1.1.1	192.168.2.5	0xaa83	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.815696001 CEST	1.1.1.1	192.168.2.5	0xaa83	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.815696001 CEST	1.1.1.1	192.168.2.5	0xaa83	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.815696001 CEST	1.1.1.1	192.168.2.5	0xaa83	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.815696001 CEST	1.1.1.1	192.168.2.5	0xaa83	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.818911076 CEST	1.1.1.1	192.168.2.5	0x8102	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.818911076 CEST	1.1.1.1	192.168.2.5	0x8102	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989754915 CEST	1.1.1.1	192.168.2.5	0x544f	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989754915 CEST	1.1.1.1	192.168.2.5	0x544f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989754915 CEST	1.1.1.1	192.168.2.5	0x544f	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989754915 CEST	1.1.1.1	192.168.2.5	0x544f	No error (0)	www.gslb.pinterest.net	www.pinterest.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.989943981 CEST	1.1.1.1	192.168.2.5	0xd426	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.992299080 CEST	1.1.1.1	192.168.2.5	0x7fc4	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:08.992299080 CEST	1.1.1.1	192.168.2.5	0x7fc4	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.992299080 CEST	1.1.1.1	192.168.2.5	0x7fc4	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.992299080 CEST	1.1.1.1	192.168.2.5	0x7fc4	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.992299080 CEST	1.1.1.1	192.168.2.5	0x7fc4	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:08.993089914 CEST	1.1.1.1	192.168.2.5	0x93c9	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040182114 CEST	1.1.1.1	192.168.2.5	0x6f3d	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040287971 CEST	1.1.1.1	192.168.2.5	0x2940	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040287971 CEST	1.1.1.1	192.168.2.5	0x2940	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040287971 CEST	1.1.1.1	192.168.2.5	0x2940	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040287971 CEST	1.1.1.1	192.168.2.5	0x2940	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.040287971 CEST	1.1.1.1	192.168.2.5	0x2940	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.223010063 CEST	1.1.1.1	192.168.2.5	0xf9ce	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.223010063 CEST	1.1.1.1	192.168.2.5	0xf9ce	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.223010063 CEST	1.1.1.1	192.168.2.5	0xf9ce	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.223010063 CEST	1.1.1.1	192.168.2.5	0xf9ce	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.245567083 CEST	1.1.1.1	192.168.2.5	0xfa10	No error (0)	sc26zwwp3c0r.statuspage.io	elb-status-us.statuspage.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.245567083 CEST	1.1.1.1	192.168.2.5	0xfa10	No error (0)	elb-status-us.statuspage.io		13.33.4.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.245567083 CEST	1.1.1.1	192.168.2.5	0xfa10	No error (0)	elb-status-us.statuspage.io		13.33.4.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.245567083 CEST	1.1.1.1	192.168.2.5	0xfa10	No error (0)	elb-status-us.statuspage.io		13.33.4.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.245567083 CEST	1.1.1.1	192.168.2.5	0xfa10	No error (0)	elb-status-us.statuspage.io		13.33.4.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.252528906 CEST	1.1.1.1	192.168.2.5	0x59f0	No error (0)	sc26zwwp3c0r.statuspage.io	elb-status-us.statuspage.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.323664904 CEST	1.1.1.1	192.168.2.5	0xfbd7	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.328602076 CEST	1.1.1.1	192.168.2.5	0xba3a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.328602076 CEST	1.1.1.1	192.168.2.5	0xba3a	No error (0)	scontent.xx.fbcdn.net		31.13.88.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.328825951 CEST	1.1.1.1	192.168.2.5	0x92e3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		54.189.132.192	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		52.37.56.222	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		34.213.99.109	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		52.41.216.34	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		34.211.114.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		52.88.148.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		44.238.108.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.620668888 CEST	1.1.1.1	192.168.2.5	0x2915	No error (0)	api.amplitude.com		54.185.242.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647285938 CEST	1.1.1.1	192.168.2.5	0xec71	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647285938 CEST	1.1.1.1	192.168.2.5	0xec71	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647285938 CEST	1.1.1.1	192.168.2.5	0xec71	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647285938 CEST	1.1.1.1	192.168.2.5	0xec71	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647285938 CEST	1.1.1.1	192.168.2.5	0xec71	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.647754908 CEST	1.1.1.1	192.168.2.5	0xdbea	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.790304899 CEST	1.1.1.1	192.168.2.5	0x8b7c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:09.790637016 CEST	1.1.1.1	192.168.2.5	0x2a5e	No error (0)	ad.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.790637016 CEST	1.1.1.1	192.168.2.5	0x2a5e	No error (0)	ad.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.852032900 CEST	1.1.1.1	192.168.2.5	0xde6d	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.852032900 CEST	1.1.1.1	192.168.2.5	0xde6d	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.852032900 CEST	1.1.1.1	192.168.2.5	0xde6d	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.852032900 CEST	1.1.1.1	192.168.2.5	0xde6d	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.858324051 CEST	1.1.1.1	192.168.2.5	0xef04	No error (0)	help.wetransfer.com	wetransfer.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.858324051 CEST	1.1.1.1	192.168.2.5	0xef04	No error (0)	wetransfer.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.858324051 CEST	1.1.1.1	192.168.2.5	0xef04	No error (0)	wetransfer.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.859041929 CEST	1.1.1.1	192.168.2.5	0xa303	No error (0)	help.wetransfer.com	wetransfer.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.929656029 CEST	1.1.1.1	192.168.2.5	0x74b1	No error (0)	sc26zwwp3c0r.statuspage.io	elb-status-us.statuspage.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.946423054 CEST	1.1.1.1	192.168.2.5	0xf693	No error (0)	sc26zwwp3c0r.statuspage.io	elb-status-us.statuspage.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:09.946423054 CEST	1.1.1.1	192.168.2.5	0xf693	No error (0)	elb-status-us.statuspage.io		13.33.4.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.946423054 CEST	1.1.1.1	192.168.2.5	0xf693	No error (0)	elb-status-us.statuspage.io		13.33.4.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.946423054 CEST	1.1.1.1	192.168.2.5	0xf693	No error (0)	elb-status-us.statuspage.io		13.33.4.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:09.946423054 CEST	1.1.1.1	192.168.2.5	0xf693	No error (0)	elb-status-us.statuspage.io		13.33.4.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.388848066 CEST	1.1.1.1	192.168.2.5	0x66ed	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.388848066 CEST	1.1.1.1	192.168.2.5	0x66ed	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.774688005 CEST	1.1.1.1	192.168.2.5	0xb423	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:10.774688005 CEST	1.1.1.1	192.168.2.5	0xb423	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.774688005 CEST	1.1.1.1	192.168.2.5	0xb423	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:10.774988890 CEST	1.1.1.1	192.168.2.5	0x2397	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:11.059070110 CEST	1.1.1.1	192.168.2.5	0xde77	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.059070110 CEST	1.1.1.1	192.168.2.5	0xde77	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.719631910 CEST	1.1.1.1	192.168.2.5	0xab74	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.719631910 CEST	1.1.1.1	192.168.2.5	0xab74	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.720880985 CEST	1.1.1.1	192.168.2.5	0xd2ca	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.720880985 CEST	1.1.1.1	192.168.2.5	0xd2ca	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.722029924 CEST	1.1.1.1	192.168.2.5	0x698b	No error (0)	p18.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:11.722029924 CEST	1.1.1.1	192.168.2.5	0x698b	No error (0)	p18.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:12.359658003 CEST	1.1.1.1	192.168.2.5	0x6190	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:12.359658003 CEST	1.1.1.1	192.168.2.5	0x6190	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.260654926 CEST	1.1.1.1	192.168.2.5	0xe9b1	No error (0)	help.wetransfer.com	wetransfer.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:13.261219978 CEST	1.1.1.1	192.168.2.5	0x606d	No error (0)	help.wetransfer.com	wetransfer.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:13.261219978 CEST	1.1.1.1	192.168.2.5	0x606d	No error (0)	wetransfer.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.261219978 CEST	1.1.1.1	192.168.2.5	0x606d	No error (0)	wetransfer.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.555104017 CEST	1.1.1.1	192.168.2.5	0xdabd	No error (0)	a5565.casalemedia.com		209.204.230.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.751729012 CEST	1.1.1.1	192.168.2.5	0x4dcb	No error (0)	stats.g.doubleclick.net		172.217.215.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.751729012 CEST	1.1.1.1	192.168.2.5	0x4dcb	No error (0)	stats.g.doubleclick.net		172.217.215.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.751729012 CEST	1.1.1.1	192.168.2.5	0x4dcb	No error (0)	stats.g.doubleclick.net		172.217.215.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:13.751729012 CEST	1.1.1.1	192.168.2.5	0x4dcb	No error (0)	stats.g.doubleclick.net		172.217.215.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.092489958 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.092489958 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.092489958 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.092489958 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.092489958 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.093107939 CEST	1.1.1.1	192.168.2.5	0x3a43	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.172452927 CEST	1.1.1.1	192.168.2.5	0x4721	No error (0)	a5565.casalemedia.com		209.204.230.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.182727098 CEST	1.1.1.1	192.168.2.5	0x6b4b	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.182727098 CEST	1.1.1.1	192.168.2.5	0x6b4b	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.470413923 CEST	1.1.1.1	192.168.2.5	0xa38	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.470413923 CEST	1.1.1.1	192.168.2.5	0xa38	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543313026 CEST	1.1.1.1	192.168.2.5	0x7bca	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543313026 CEST	1.1.1.1	192.168.2.5	0x7bca	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543313026 CEST	1.1.1.1	192.168.2.5	0x7bca	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543925047 CEST	1.1.1.1	192.168.2.5	0x8925	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543925047 CEST	1.1.1.1	192.168.2.5	0x8925	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:14.543925047 CEST	1.1.1.1	192.168.2.5	0x8925	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:15.023490906 CEST	1.1.1.1	192.168.2.5	0x59f1	No error (0)	td.doubleclick.net		64.233.176.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.023490906 CEST	1.1.1.1	192.168.2.5	0x59f1	No error (0)	td.doubleclick.net		64.233.176.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.023490906 CEST	1.1.1.1	192.168.2.5	0x59f1	No error (0)	td.doubleclick.net		64.233.176.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.023490906 CEST	1.1.1.1	192.168.2.5	0x59f1	No error (0)	td.doubleclick.net		64.233.176.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.033498049 CEST	1.1.1.1	192.168.2.5	0x4732	No error (0)	ad.doubleclick.net		64.233.177.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.033498049 CEST	1.1.1.1	192.168.2.5	0x4732	No error (0)	ad.doubleclick.net		64.233.177.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.033632994 CEST	1.1.1.1	192.168.2.5	0xca62	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 09:08:15.036196947 CEST	1.1.1.1	192.168.2.5	0xcf31	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036770105 CEST	1.1.1.1	192.168.2.5	0xf558	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		52.70.223.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		54.157.225.250	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		54.224.106.220	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		52.55.65.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		54.198.23.122	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		52.72.43.196	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		54.172.144.20	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.036854029 CEST	1.1.1.1	192.168.2.5	0x11b5	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:15.692285061 CEST	1.1.1.1	192.168.2.5	0x9366	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:15.692606926 CEST	1.1.1.1	192.168.2.5	0x5e02	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:16.116437912 CEST	1.1.1.1	192.168.2.5	0xc619	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.116437912 CEST	1.1.1.1	192.168.2.5	0xc619	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.271567106 CEST	1.1.1.1	192.168.2.5	0x62a2	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.271567106 CEST	1.1.1.1	192.168.2.5	0x62a2	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.271975040 CEST	1.1.1.1	192.168.2.5	0xb6f4	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:16.272229910 CEST	1.1.1.1	192.168.2.5	0x44a7	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:16.386409044 CEST	1.1.1.1	192.168.2.5	0x2f7d	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.386409044 CEST	1.1.1.1	192.168.2.5	0x2f7d	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.386409044 CEST	1.1.1.1	192.168.2.5	0x2f7d	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861284018 CEST	1.1.1.1	192.168.2.5	0x4baa	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.226.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.204.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.181.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.219.242	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.221.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.130.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.190	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861834049 CEST	1.1.1.1	192.168.2.5	0xbc2d	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.861939907 CEST	1.1.1.1	192.168.2.5	0x53c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:16.864065886 CEST	1.1.1.1	192.168.2.5	0x3bfa	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.864065886 CEST	1.1.1.1	192.168.2.5	0x3bfa	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:16.864065886 CEST	1.1.1.1	192.168.2.5	0x3bfa	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:17.161948919 CEST	1.1.1.1	192.168.2.5	0x34a0	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 09:08:17.201165915 CEST	1.1.1.1	192.168.2.5	0x6039	No error (0)	wetransfer.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:17.201165915 CEST	1.1.1.1	192.168.2.5	0x6039	No error (0)	wetransfer.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:21.582530975 CEST	1.1.1.1	192.168.2.5	0xe88c	No error (0)	lebowski.wetransfer.com		34.250.238.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:21.582530975 CEST	1.1.1.1	192.168.2.5	0xe88c	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 09:08:21.582530975 CEST	1.1.1.1	192.168.2.5	0xe88c	No error (0)	lebowski.wetransfer.com		52.212.176.246	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:54 UTC	843	OUT	GET /downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:06:54 UTC	890	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10668 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Thu, 25 Apr 2024 07:06:54 GMT ETag: "29ac-UAjZWwe4f9LMB00+mwcySyofavs" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 89c9a046c7c8ea74876b5a826130e4ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v9FUyfDlwXbjWW6HKlRnePC8-Z94Xk9UT001t8GuV7GvIwcYoWQzdQ==
2024-04-25 07:06:54 UTC	10668	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:54 UTC	660	OUT	GET /c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:54 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1601 Connection: close Cache-Control: public, max-age=315360000, s-maxage=31530000 Date: Tue, 23 Apr 2024 14:52:40 GMT Set-Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d_MY-RLK7I5HA3jOvhCiRtgUd5q2SzgqBfFV69-gWCxz7w5UJLSa1w== Age: 144854
2024-04-25 07:06:54 UTC	1601	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 77 2e 5f 5f 61 70 70 5f 63 6f 6e 66 69 67 3d 7b 65 6e 76 3a 7b 22 56 45 52 53 49 4f 4e 22 3a 22 63 39 38 62 65 39 65 62 39 66 32 30 36 35 34 37 61 65 61 31 30 64 34 36 66 32 35 33 65 61 33 37 65 61 33 64 33 64 62 37 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 54 52 49 50 45 5f 4b 45 59 22 3a 22 70 6b 5f 6c 69 76 65 5f 4d 72 32 4c 71 50 73 77 73 46 6a 7a 43 6a 42 54 4a 43 6d 4f 58 42 30 53 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 4e 4f 57 50 4c 4f 57 5f 43 4f 4c 4c 45 43 54 4f 52 22 3a 22 73 6e 6f 77 70 6c 6f 77 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 45 52 56 45 52 5f 45 4e 56 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 Data Ascii: (function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	663	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	578	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 12:10:10 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9ccf0420be8414e77edc70962db79938.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DKyuW-ITpqod5cFOI2d0d5fUjdPsm58dNwRNUqmUT2sJLljKfNUjGw== Age: 154605
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 30 36 32 35 65 6d Data Ascii: m,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;padding-left:0;padding-right:0}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons .button:nth-child(2){margin-top:1.0625em
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 70 61 79 6d 65 6e 74 5f 5f 63 61 6e 63 65 6c 2c 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 62 65 64 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 73 75 62 74 69 74 Data Ascii: e Medium,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif}.payment__cancel,.payment__reactivate{border-top:1px solid #e8ebed}.payment__reactivate--text{margin-bottom:1.5rem}.payment__reactivate--subtit
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 37 34 31 64 39 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: :not(:last-child){margin-right:1rem}.contact-item .contact-item__option:focus,.contact-item .contact-item__option:hover{color:#3741d9}.contact-item .contact-item__option--disabled,.contact-item .contact-item__option--disabled:focus,.contact-item .contact-
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 61 78 2d 77 69 64 74 68 3a 34 38 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 2e 38 31 32 35 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 61 72 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 Data Ascii: ax-width:48rem){.account__menu{width:100%;margin-left:0}}.account__menu .verticalnav{margin-bottom:2em}@media(max-width:72.8125rem){.account__menu .verticalnav__arrow{margin-left:.25em}}.account__menu .verticalnav__list{margin:0;float:none}.account__menu
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 74 3a 2e 38 31 32 35 65 6d 3b 6c 65 66 74 3a 31 2e 31 32 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2e 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 38 31 32 35 65 6d 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 7b 6c 65 66 74 3a 31 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 38 37 35 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 39 33 37 35 65 6d 20 31 2e 32 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 32 36 38 Data Ascii: t:.8125em;left:1.125em;position:absolute;top:.875em;width:.8125em;z-index:0}.form-notification--validated .form-notification__message{left:1.25em;margin-left:1.875em;padding:.9375em 1.25em}.form-notification--validated .form-notification__icon{color:#5268
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 3b 63 6f 6c 6f 72 3a 23 34 38 34 61 34 64 7d 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 5f 5f 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 66 72 Data Ascii: a Grande,sans-serif;font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:1.125em;color:#484a4d}.free-account-tiers .tier__price{font-size:1em;margin-bottom:0}.fr
2024-04-25 07:06:55 UTC	15250	IN	Data Raw: 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4e 6f 72 6d 61 6c 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 77 69 64 74 68 3a 35 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e Data Ascii: ystem,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Normal,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;width:50%;font-size:.
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 6f 70 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 7b 70 Data Ascii: -container{position:relative;box-shadow:none;top:0;display:none}.is-mobile-ready .nav__subitems-container .nav__subitems-container--open{display:flex;flex-direction:column}.is-mobile-ready .nav__subitems-container .nav__subitems-container .nav__subitems{p
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6c 6c 61 62 6c 65 2d 2d 6f 76 65 72 66 6c 6f 77 2d 62 6f 74 74 6f 6d 3a 61 66 74 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 36 70 78 20 36 70 78 20 2d 36 70 78 20 72 67 62 61 28 32 33 2c 32 34 2c 32 36 2c 2e 32 35 29 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 3a 61 66 74 65 72 2c 2e 73 63 72 6f 6c 6c 61 62 6c 65 3a 62 65 66 6f 72 65 7b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 20 65 61 73 65 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 20 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 Data Ascii: llable--overflow-bottom:after{box-shadow:inset 0 -6px 6px -6px rgba(23,24,26,.25)}.scrollable:after,.scrollable:before{bottom:0;content:"";height:10px;left:0;position:absolute;right:0;transition:box-shadow .3s ease;z-index:999}.scrollable .scrollable__scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	663	OUT	GET /_next/static/css/bacf6ffa65b559f2.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	599	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1718 Connection: close Date: Fri, 19 Apr 2024 21:35:38 GMT Last-Modified: Fri, 19 Apr 2024 17:30:41 GMT ETag: "7bc594d2f21c7b14c2bbb8ea785276a0" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fb7b7d7d496d12615fb9a61e1a0d5ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wIUgWj78Www4bbfPVMf4ku8oqSplDhRXCCTtmBdTuDNdec1kb4vAsA== Age: 466278
2024-04-25 07:06:55 UTC	1718	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49714	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	659	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a2c86277035e206275b398626c28834.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: izdzkpyX7nvCVzY8quoNFlhjLzfM45aCE2pC0ZzAiB39wSUQ6b51hg== Age: 144892
2024-04-25 07:06:55 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49712	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	661	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Sat, 04 Nov 2023 07:04:45 GMT Last-Modified: Fri, 03 Nov 2023 21:42:04 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9cc8ba00384b3554aebbfb2dec8eda6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: b0-OnuovqSlI2PYq0xfm5YwEWRcv3znqAmBBK-csb4W880Ss3ymD0w== Age: 14947330
2024-04-25 07:06:55 UTC	15774	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6e 4d 6f 75 73 65 45 6e 74 65 72 22 3a 28 72 3d 21 72 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 72 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 28 65 3d 65 2e 74 79 70 65 29 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 65 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 65 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 65 29 29 2c 65 3d 21 72 3b 62 72 65 61 6b 20 65 3b 64 65 66 61 75 6c 74 3a 65 3d 21 31 7d 69 66 28 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 33 31 2c 74 2c 74 79 70 65 6f 66 20 6e 29 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 6a 65 3d 21 31 3b 69 66 28 66 29 74 72 79 7b 76 61 72 20 42 65 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: nMouseEnter":(r=!r.disabled)\|\|(r=!("button"===(e=e.type)\|\|"input"===e\|\|"select"===e\|\|"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!==typeof n)throw Error(o(231,t,typeof n));return n}var je=!1;if(f)try{var Be={};Object.define
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 29 2e 61 6e 63 68 6f 72 4e 6f 64 65 2c 61 6e 63 68 6f 72 4f 66 66 73 65 74 3a 72 2e 61 6e 63 68 6f 72 4f 66 66 73 65 74 2c 66 6f 63 75 73 4e 6f 64 65 3a 72 2e 66 6f 63 75 73 4e 6f 64 65 2c 66 6f 63 75 73 4f 66 66 73 65 74 3a 72 2e 66 6f 63 75 73 4f 66 66 73 65 74 7d 2c 6b 72 26 26 64 72 28 6b 72 2c 72 29 7c 7c 28 6b 72 3d 72 2c 30 3c 28 72 3d 44 72 28 77 72 2c 22 6f 6e 53 65 6c 65 63 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 74 3d 6e 65 77 20 70 6e 28 22 6f 6e 53 65 6c 65 63 74 22 2c 22 73 65 6c 65 63 74 22 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 65 2e 70 75 73 68 28 Data Ascii: ownerDocument&&r.ownerDocument.defaultView\|\|window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&dr(kr,r)\|\|(kr=r,0<(r=Dr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push(
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6e 29 7b 69 66 28 65 3d 74 2e 65 66 66 65 63 74 73 2c 74 2e 65 66 66 65 63 74 73 3d 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 65 29 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 2c 6c 3d 72 2e 63 61 6c 6c 62 61 63 6b 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 29 7b 69 66 28 72 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 72 3d 6e 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 39 31 2c 6c 29 29 3b 6c 2e 63 61 6c 6c 28 72 29 7d 7d 7d 76 61 72 20 6d 61 3d 28 6e 65 77 20 72 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2e 72 65 66 73 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 65 2c 74 2c 6e 2c 72 29 7b 6e 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 28 72 2c 74 3d 65 2e 6d 65 Data Ascii: n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],l=r.callback;if(null!==l){if(r.callback=null,r=n,"function"!==typeof l)throw Error(o(191,l));l.call(r)}}}var ma=(new r.Component).refs;function va(e,t,n,r){n=null===(n=n(r,t=e.me
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 66 65 72 72 65 64 56 61 6c 75 65 3a 6c 6f 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 6c 6f 2c 75 73 65 4d 75 74 61 62 6c 65 53 6f 75 72 63 65 3a 6c 6f 2c 75 73 65 4f 70 61 71 75 65 49 64 65 6e 74 69 66 69 65 72 3a 6c 6f 2c 75 6e 73 74 61 62 6c 65 5f 69 73 4e 65 77 52 65 63 6f 6e 63 69 6c 65 72 3a 21 31 7d 2c 52 6f 3d 7b 72 65 61 64 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 6f 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 5d 2c 65 7d 2c 75 73 65 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 45 66 66 65 63 74 3a 53 6f 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ferredValue:lo,useTransition:lo,useMutableSource:lo,useOpaqueIdentifier:lo,unstable_isNewReconciler:!1},Ro={readContext:oa,useCallback:function(e,t){return uo().memoizedState=[e,void 0===t?null:t],e},useContext:oa,useEffect:So,useImperativeHandle:function
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 31 29 2c 74 2e 6c 61 6e 65 73 3d 33 33 35 35 34 34 33 32 29 7d 65 6c 73 65 7b 69 66 28 21 75 29 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 55 61 28 73 29 29 29 7b 69 66 28 74 2e 66 6c 61 67 73 7c 3d 36 34 2c 75 3d 21 30 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 28 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 2c 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6f 75 28 72 2c 21 30 29 2c 6e 75 6c 6c 3d 3d 3d 72 2e 74 61 69 6c 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 72 2e 74 61 69 6c 4d 6f 64 65 26 26 21 73 2e 61 6c 74 65 72 6e 61 74 65 26 26 21 6a 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 6c 61 73 74 45 66 66 65 63 74 3d 72 2e 6c 61 73 74 45 66 66 65 63 74 29 26 26 28 74 2e 6e 65 78 74 45 66 66 65 63 74 3d 6e 75 6c Data Ascii: 1),t.lanes=33554432)}else{if(!u)if(null!==(e=Ua(s))){if(t.flags\|=64,u=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags\|=4),ou(r,!0),null===r.tail&&"hidden"===r.tailMode&&!s.alternate&&!ja)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=nul
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 62 3d 61 2e 70 69 6e 67 43 61 63 68 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 62 3f 28 62 3d 61 2e 70 69 6e 67 43 61 63 68 65 3d 6e 65 77 20 66 75 2c 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 3a 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 62 2e 67 65 74 28 73 29 29 26 26 28 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 2c 21 69 2e 68 61 73 28 75 29 29 7b 69 2e 61 64 64 28 75 29 3b 76 61 72 20 77 3d 6a 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 2c 73 2c 75 29 3b 73 2e 74 68 65 6e 28 77 2c 77 29 7d 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 64 2e 6c 61 6e 65 73 3d 74 3b 62 72 65 61 6b 20 65 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 3b 69 3d 45 72 72 6f 72 28 28 71 28 75 2e 74 79 70 65 29 7c 7c 22 41 Data Ascii: b=a.pingCache;if(null===b?(b=a.pingCache=new fu,i=new Set,b.set(s,i)):void 0===(i=b.get(s))&&(i=new Set,b.set(s,i)),!i.has(u)){i.add(u);var w=ji.bind(null,a,s,u);s.then(w,w)}d.flags\|=4096,d.lanes=t;break e}d=d.return}while(null!==d);i=Error((q(u.type)\|\|"A
2024-04-25 07:06:55 UTC	15918	IN	Data Raw: 69 3d 75 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 63 72 28 69 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 69 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 75 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 6c 2e 63 68 69 6c 64 72 65 6e 26 26 21 68 6c 2e 63 75 72 72 65 6e 74 29 7b 74 3d 61 75 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 69 3d 74 2e 63 68 69 6c 64 29 26 26 28 69 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 69 3b 29 7b 76 61 72 20 73 3d 69 2e 64 65 70 65 6e 64 65 6e 63 69 65 73 3b 69 66 Data Ascii: i=u.value,0===(a=cr(i,a)?0:0\|("function"===typeof r._calculateChangedBits?r._calculateChangedBits(i,a):1073741823))){if(u.children===l.children&&!hl.current){t=au(e,t,n);break e}}else for(null!==(i=t.child)&&(i.return=t);null!==i;){var s=i.dependencies;if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	656	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Wed, 01 Nov 2023 14:31:20 GMT Last-Modified: Wed, 01 Nov 2023 13:56:32 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 793a32fc98b22fca416cf87070f3ac80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P8vdK71vWsWsA7H4ZfzqzByfoUF7b9ZV9yNSLib4YWgVOwv7UV0lyQ== Age: 15179736
2024-04-25 07:06:55 UTC	15774	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 29 2c 54 2e 69 73 53 73 72 26 26 22 2f 34 30 34 22 21 3d 3d 44 2e 70 61 67 65 26 26 22 2f 5f 65 72 72 6f 72 22 21 3d 3d 44 2e 70 61 67 65 26 26 28 44 2e 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 44 2e 6e 65 78 74 45 78 70 6f 72 74 26 26 28 76 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 54 2e 70 61 74 68 6e 61 6d 65 29 7c 7c Data Ascii: guments)}return a(r,[{key:"componentDidCatch",value:function(e,t){this.props.fn(e,t)}},{key:"componentDidMount",value:function(){this.scrollToHash(),T.isSsr&&"/404"!==D.page&&"/_error"!==D.page&&(D.isFallback\|\|D.nextExport&&(v.isDynamicRoute(T.pathname)\|\|
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 63 72 69 70 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 29 7d 2c 74 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 29 7d 28 65 29 29 2c 74 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 63 2e 73 65 74 28 65 2c 74 3d 66 65 74 63 68 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 74 79 6c 65 73 68 65 65 74 3a 20 22 2e 63 6f Data Ascii: new Error("Failed to load script: ".concat(e))))},t.crossOrigin=void 0,t.src=e,document.body.appendChild(t)}))}(e)),t))},r=function(e){var t=c.get(e);return t\|\|(c.set(e,t=fetch(e).then((function(t){if(!t.ok)throw new Error("Failed to load stylesheet: ".co
2024-04-25 07:06:55 UTC	15418	IN	Data Raw: 2b 31 29 3b 65 2e 68 61 73 28 75 29 3f 6f 3d 21 31 3a 65 2e 61 64 64 28 75 29 7d 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 62 61 73 65 22 3a 74 2e 68 61 73 28 61 2e 74 79 70 65 29 3f 6f 3d 21 31 3a 74 2e 61 64 64 28 61 2e 74 79 70 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 65 74 61 22 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 73 3d 70 2e 6c 65 6e 67 74 68 3b 63 3c 73 3b 63 2b 2b 29 7b 76 61 72 20 6c 3d 70 5b 63 5d 3b 69 66 28 61 2e 70 72 6f 70 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 69 66 28 22 63 68 61 72 53 65 74 22 3d 3d 3d 6c 29 72 2e 68 61 73 28 6c 29 3f 6f 3d 21 31 3a 72 2e 61 64 64 28 6c 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 70 72 6f 70 73 5b 6c 5d 2c 64 3d 6e 5b 6c 5d Data Ascii: +1);e.has(u)?o=!1:e.add(u)}switch(a.type){case"title":case"base":t.has(a.type)?o=!1:t.add(a.type);break;case"meta":for(var c=0,s=p.length;c<s;c++){var l=p[c];if(a.props.hasOwnProperty(l))if("charSet"===l)r.has(l)?o=!1:r.add(l);else{var f=a.props[l],d=n[l]
2024-04-25 07:06:55 UTC	403	IN	Data Raw: 73 65 20 37 3a 72 65 74 75 72 6e 20 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 2c 4d 3d 7b 64 61 74 61 48 72 65 66 3a 79 2e 70 61 67 65 4c 6f 61 64 65 72 2e 67 65 74 44 61 74 61 48 72 65 66 28 7b 68 72 65 66 3a 6a 2e 66 6f 72 6d 61 74 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 28 7b 70 61 74 68 6e 61 6d 65 3a 72 2c 71 75 65 72 79 3a 61 7d 29 2c 73 6b 69 70 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 3a 21 30 2c 61 73 50 61 74 68 3a 69 2c 6c 6f 63 61 6c 65 3a 6c 7d 29 2c 68 61 73 4d 69 64 64 6c 65 77 61 72 65 3a 21 30 2c 69 73 53 65 72 76 65 72 52 65 6e 64 65 72 3a 79 2e 69 73 53 73 72 2c 70 61 72 73 65 4a 53 4f 4e 3a 21 30 2c 69 6e 66 6c 69 67 68 74 43 61 63 68 65 3a 79 2e 73 64 63 2c 70 65 72 73 69 73 74 43 61 63 Data Ascii: se 7:return O=S&&!("initial"in S)?S:void 0,M={dataHref:y.pageLoader.getDataHref({href:j.formatWithValidation({pathname:r,query:a}),skipInterpolation:!0,asPath:i,locale:l}),hasMiddleware:!0,isServerRender:y.isSsr,parseJSON:!0,inflightCache:y.sdc,persistCac
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 2c 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 6b 7c 7c 6e 75 6c 6c 3d 3d 28 5f 3d 6b 2e 65 66 66 65 63 74 29 3f 76 6f 69 64 20 30 3a 5f 2e 74 79 70 65 29 26 26 22 72 65 64 69 72 65 63 74 2d 65 78 74 65 72 6e 61 6c 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 6b 7c 7c 6e 75 6c 6c 3d 3d 28 62 3d 6b 2e 65 66 66 65 63 74 29 3f 76 6f 69 64 20 30 3a 62 2e 74 79 70 65 29 29 7b 65 2e 6e 65 78 74 3d 31 35 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6b 2e 65 66 66 65 63 74 29 3b 63 61 73 65 20 31 35 3a 69 66 28 22 72 65 77 72 69 74 65 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 6b 7c 7c 6e 75 6c 6c 3d 3d 28 78 3d 6b 2e 65 66 66 65 63 74 29 3f 76 6f 69 64 20 30 3a 78 2e 74 79 70 65 29 29 7b 65 Data Ascii: ,"redirect-internal"!==(null==k\|\|null==(_=k.effect)?void 0:_.type)&&"redirect-external"!==(null==k\|\|null==(b=k.effect)?void 0:b.type)){e.next=15;break}return e.abrupt("return",k.effect);case 15:if("rewrite"!==(null==k\|\|null==(x=k.effect)?void 0:x.type)){e
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 65 7d 76 61 72 20 6f 3d 2f 68 74 74 70 73 3f 7c 66 74 70 7c 67 6f 70 68 65 72 7c 66 69 6c 65 2f 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 75 74 68 2c 72 3d 65 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 2c 69 3d 65 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 2c 75 3d 65 2e 68 61 73 68 7c 7c 22 22 2c 63 3d 65 2e 71 75 65 72 79 7c 7c 22 22 2c 73 3d 21 31 3b 74 3d 74 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 25 33 41 2f 69 2c 22 3a 22 29 2b 22 40 22 3a 22 22 2c 65 2e 68 6f 73 74 3f 73 3d 74 2b 65 2e 68 6f 73 74 3a 72 26 26 28 73 3d 74 2b 28 7e 72 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 Data Ascii: function(){return e},e}var o=/https?\|ftp\|gopher\|file/;function i(e){var t=e.auth,r=e.hostname,a=e.protocol\|\|"",i=e.pathname\|\|"",u=e.hash\|\|"",c=e.query\|\|"",s=!1;t=t?encodeURIComponent(t).replace(/%3A/i,":")+"@":"",e.host?s=t+e.host:r&&(s=t+(~r.indexOf(":")
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 63 61 74 28 74 68 69 73 2e 72 65 73 74 53 6c 75 67 4e 61 6d 65 2c 27 5d 22 20 61 6e 64 20 22 27 29 2e 63 6f 6e 63 61 74 28 74 5b 30 5d 2c 27 22 20 29 2e 27 29 29 3b 6f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 52 65 73 74 53 6c 75 67 4e 61 6d 65 2c 69 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 52 65 73 74 53 6c 75 67 4e 61 6d 65 3d 69 2c 61 3d 22 5b 5b 2e 2e 2e 5d 5d 22 7d 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 52 65 73 74 53 6c 75 67 4e 61 6d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 63 61 6e 6e 6f 74 20 75 73 65 20 62 6f 74 68 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 61 6e 64 20 72 65 71 75 69 72 65 64 20 63 61 74 63 68 2d 61 6c 6c 20 72 6f 75 74 65 20 61 74 20 74 68 65 20 73 61 6d 65 Data Ascii: cat(this.restSlugName,']" and "').concat(t[0],'" ).'));o(this.optionalRestSlugName,i),this.optionalRestSlugName=i,a="[[...]]"}else{if(null!=this.optionalRestSlugName)throw new Error('You cannot use both an optional and required catch-all route at the same
2024-04-25 07:06:55 UTC	6897	IN	Data Raw: 65 72 61 74 6f 72 3a 4d 28 65 29 2c 72 65 73 75 6c 74 4e 61 6d 65 3a 72 2c 6e 65 78 74 4c 6f 63 3a 6e 7d 2c 22 6e 65 78 74 22 3d 3d 3d 74 68 69 73 2e 6d 65 74 68 6f 64 26 26 28 74 68 69 73 2e 61 72 67 3d 74 29 2c 68 7d 7d 2c 65 7d 28 65 2e 65 78 70 6f 72 74 73 29 3b 74 72 79 7b 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 3d 74 7d 63 61 74 63 68 28 72 29 7b 46 75 6e 63 74 69 6f 6e 28 22 72 22 2c 22 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 20 3d 20 72 22 29 28 74 29 7d 7d 2c 32 39 36 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 72 2c Data Ascii: erator:M(e),resultName:r,nextLoc:n},"next"===this.method&&(this.arg=t),h}},e}(e.exports);try{regeneratorRuntime=t}catch(r){Function("r","regeneratorRuntime = r")(t)}},29600:function(e){!function(){var t={61:function(e,t){!function(e){"use strict";var t,r,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	662	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=5295c2d4-bc34-4bdb-a581-be2048bf3cd3.1714028814573.0.1714028814573.
2024-04-25 07:06:55 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 04 Nov 2023 08:53:06 GMT Last-Modified: Fri, 03 Nov 2023 21:42:04 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a2c86277035e206275b398626c28834.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Q6JFAqdwysm34-uj1VxCMZQEumw39eNEC-YWrwBVoGsCBnx2ZFI48A== Age: 14940830
2024-04-25 07:06:55 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49718	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	655	OUT	GET /_next/static/chunks/404-d60ba40552f46991.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:55 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 17274 Connection: close Date: Tue, 23 Apr 2024 10:53:22 GMT Last-Modified: Tue, 23 Apr 2024 10:34:49 GMT ETag: "227dcd2826f29b0374c5cda69996b745" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6065fa4dfa87d92a6009e7fe74c3def0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KAJqu9Gwx_9cIz2aArSp_fLJVRwaaw3JloJIO0UbMA4LFSMA146nXA== Age: 159214
2024-04-25 07:06:55 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 34 5d 2c 7b 37 30 33 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 36 31 31 32 29 7d 2c 31 39 35 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 37 30 38 36 35 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 69 3d 6e 28 32 35 32 33 37 29 2c 61 3d 6e 2e 6e 28 69 29 2c 75 3d 6e 28 32 37 38 34 29 2c 73 3d 6e 28 36 32 32 32 35 29 2c 6c 3d 6e 28 33 38 35 37 37 29 2c 63 3d 6e 28 37 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(7
2024-04-25 07:06:55 UTC	890	IN	Data Raw: 7d 2c 39 37 37 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 35 39 31 33 29 7d 2c 32 30 34 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 3b 76 61 72 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 69 73 3f 4f 62 6a 65 63 74 2e 69 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 30 21 3d 3d 65 7c 7c 31 2f 65 3d 3d 3d 31 2f 74 29 7c 7c 65 21 3d 3d 65 26 26 74 21 3d 3d 74 7d 2c 69 3d 72 2e 75 73 65 53 74 61 74 65 2c 61 3d 72 2e 75 73 65 45 66 66 65 63 74 2c 75 3d 72 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 2c 73 3d 72 2e 75 73 65 Data Ascii: },97729:function(e,t,n){e.exports=n(75913)},20452:function(e,t,n){"use strict";var r=n(2784);var o="function"===typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e\|\|1/e===1/t)\|\|e!==e&&t!==t},i=r.useState,a=r.useEffect,u=r.useLayoutEffect,s=r.use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49719	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	721	OUT	GET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D/%5BsecurityHash%5D-8d0f518e97cd79b1.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:55 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1211 Connection: close Date: Mon, 15 Apr 2024 14:58:08 GMT Last-Modified: Mon, 15 Apr 2024 14:48:25 GMT ETag: "4489dcfe5aa9e9731f58b6adb251b224" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: B76CIRCaWthH_WO-U1VPtnf0xSZKgXRSZmu19Z9PFjkBH7uipkhtCA== Age: 835728
2024-04-25 07:06:55 UTC	1211	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 38 5d 2c 7b 38 39 33 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 5b 74 72 61 6e 73 66 65 72 49 64 5d 2f 5b 72 65 63 69 70 69 65 6e 74 49 64 5d 2f 5b 73 65 63 75 72 69 74 79 48 61 73 68 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 35 31 38 31 29 7d 5d 29 7d 2c 31 38 34 36 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[438],{89309:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]/[securityHash]",function(){return e(5181)}])},18469:function(t,n,e){"use strict";var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49720	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	683	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:55 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: l-Mc5fuAUMEdJ4oPxMj-J19vs2G3FdsqV3LjvHzIfTkVr3ld4Eozgg== Age: 144892
2024-04-25 07:06:55 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49722	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:55 UTC	681	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:55 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: c9AVlq0-2cITMEYfMW18OJwHBYizIMoDIOUvyMpA7o4W8OD2XgixPg== Age: 144892
2024-04-25 07:06:55 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49726	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	663	OUT	GET /_next/static/css/03d589055b9fa8a0.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	601	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 501856 Connection: close Date: Mon, 22 Apr 2024 16:11:14 GMT Last-Modified: Mon, 22 Apr 2024 16:04:50 GMT ETag: "7bbf99584cacbc02a1d6ee0813153c1d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C6CtwguoTHew5WgMKIeIVw0LtxSMNw5zAfqBbhwUTTjPNsu5Wgleug== Age: 226543
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 42 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 5f 5f 48 37 6f 4b 52 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 6e 61 72 72 6f 77 5f 5f 6a 74 57 33 4f 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 49 34 76 51 33 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 Data Ascii: .WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-displa
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 7d 2e 42 75 74 74 6f 6e 5f 70 72 69 6d 61 72 79 5f 5f 45 76 6c 65 33 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: t,border-color .1s ease-out,box-shadow .1s ease-out}.Button_primary__Evle3{font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:14px;font-weight:500;line-height:
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 64 65 72 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 35 70 78 20 72 67 62 61 28 38 32 2c 31 30 34 2c 32 35 35 2c 2e 32 29 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 Data Ascii: der:none}@media(min-width:768px){.Button_proButton___imxA{font-size:14px}}.Button_proButton___imxA:hover{background-color:transparent}.Button_proButton___imxA:focus{outline:none;background-color:none;box-shadow:0 0 0 5px rgba(82,104,255,.2)}.Button_proBut
2024-04-25 07:06:56 UTC	14808	IN	Data Raw: 6e 74 61 69 6e 65 72 5f 5f 34 73 31 36 50 20 2e 43 68 65 63 6b 62 6f 78 5f 63 68 65 63 6b 6d 61 72 6b 5f 5f 44 31 52 78 30 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 30 20 30 20 32 34 70 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 35 66 35 3b 77 69 64 74 68 3a 31 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 37 35 72 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 32 63 32 63 32 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: ntainer__4s16P .Checkbox_checkmark__D1Rx0{display:flex;flex:0 0 24px;align-items:center;align-self:flex-start;justify-content:center;background:#f5f5f5;width:1.5rem;height:1.5rem;border-radius:.375rem;border:1px solid #c2c2c2;cursor:pointer;overflow:hidde
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 32 36 38 66 66 3b 63 6f 6c 6f 72 3a 23 35 32 36 38 66 66 7d 2e 77 65 6c 63 6f 6d 65 5f 5f 62 75 74 74 6f 6e 2d 2d 64 65 63 6c 69 6e 65 2d 65 78 70 65 72 69 6d 65 6e 74 2e 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 65 6d 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 65 6c 63 6f 6d 65 5f 5f 62 75 74 74 6f 6e 2d 2d 64 65 63 6c 69 6e 65 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 65 6c 63 6f 6d 65 5f 5f 62 75 74 74 6f 6e 2d 2d 6f 75 74 6c 69 6e 65 64 2e Data Ascii: nsparent;border-color:#5268ff;color:#5268ff}.welcome__button--decline-experiment.button{border:none;margin-left:-1em;text-decoration:underline;color:#fff}.welcome__button--decline-display-none{visibility:hidden;margin-right:1em}.welcome__button--outlined.
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 58 36 37 50 69 2c 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 61 78 38 62 4c 2c 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 62 6f 6c 64 5f 5f 41 6f 48 6b 4d 2c 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 6e 61 72 72 6f 77 5f 5f 47 44 6c 50 74 2c 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 77 69 64 65 5f 5f 67 65 79 66 6c 2c 2e 41 Data Ascii: X67Pi,.AccountStorageWidget_wt-display-heading-medium-bold-wide__ax8bL,.AccountStorageWidget_wt-display-heading-medium-bold__AoHkM,.AccountStorageWidget_wt-display-heading-medium-narrow__GDlPt,.AccountStorageWidget_wt-display-heading-medium-wide__geyfl,.A
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 61 6c 6c 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 77 74 2d 62 6f 64 79 2d 78 2d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 77 74 2d 62 6f 64 79 2d 78 2d 73 6d 61 6c 6c 2d 73 65 6d 69 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 54 72 61 6e 73 66 65 72 41 63 63 6f 75 6e 74 4d 65 6e 75 5f 5f 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 2d 2d 75 70 73 65 6c 6c 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 54 72 61 6e 73 66 65 72 41 63 63 6f 75 6e 74 4d 65 6e 75 5f 5f 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 2d 2d 75 70 Data Ascii: all-bold{font-weight:700;font-size:14px}.wt-body-x-small{font-weight:400;font-size:12px}.wt-body-x-small-semi{font-weight:500;font-size:12px}.TransferAccountMenu__AccountStorageWidget--upsell,.is-mobile-ready .TransferAccountMenu__AccountStorageWidget--up
2024-04-25 07:06:56 UTC	15227	IN	Data Raw: 5f 5f 6e 6f 69 73 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 4e 6f 69 73 65 2e 64 64 38 66 32 33 39 30 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 2e 35 72 65 6d 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6f 76 65 72 6c 61 79 7d 40 6d 65 64 69 61 28 6d 69 6e Data Ascii: __noise{content:"";display:block;position:absolute;top:0;left:0;bottom:0;right:0;width:100%;height:100%;background:url(/_next/static/media/Noise.dd8f2390.png) no-repeat;background-size:cover;z-index:2;border-radius:4.5rem;mix-blend-mode:overlay}@media(min
2024-04-25 07:06:56 UTC	1576	IN	Data Raw: 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 6e 61 72 72 6f 77 5f 5f 58 79 4b 41 4d 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 32 6f 35 6e 30 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 5f 5f 52 67 62 37 4a 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 6e 61 72 72 6f 77 5f 5f 44 64 55 78 6c 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 77 69 64 65 5f 5f 58 4f 6a 55 76 2c 2e 4a 75 Data Ascii: res_wt-text-heading-large-bold-narrow__XyKAM,.JumpToFeatures_wt-text-heading-large-bold-wide__2o5n0,.JumpToFeatures_wt-text-heading-large-bold__Rgb7J,.JumpToFeatures_wt-text-heading-large-narrow__DdUxl,.JumpToFeatures_wt-text-heading-large-wide__XOjUv,.Ju
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 69 7a 65 3a 32 34 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 32 6f 35 6e 30 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 5f 5f 52 67 62 37 4a 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 6e 61 72 72 6f 77 5f 5f 58 79 4b 41 4d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 Data Ascii: ize:24px}.JumpToFeatures_wt-text-heading-large-bold-wide__2o5n0,.JumpToFeatures_wt-text-heading-large-bold__Rgb7J{font-weight:700;font-size:36px}.JumpToFeatures_wt-text-heading-large-bold-narrow__XyKAM{font-weight:700;font-size:24px}.JumpToFeatures_wt-tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49729	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	637	OUT	GET /gtm.js?id=GTM-NS54WBW HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	536	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 472710 Connection: close cache-control: private, max-age=900 Date: Thu, 25 Apr 2024 07:06:56 GMT expires: Thu, 25 Apr 2024 07:21:42 GMT last-modified: Thu, 25 Apr 2024 06:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 0b00705d5489207e9b2ca43397d52bfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 5S_WSZr6vq4V540suuO2XQzpeaaBR59RcFmDmTPsw1Gaj0gukuGQjA==
2024-04-25 07:06:56 UTC	15848	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 67 29 7b 77 5b 67 5d 3d 77 5b 67 5d 7c 7c 7b 7d 3b 0a 20 77 5b 67 5d 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 73 29 3b 7d 3b 7d 29 28 77 69 6e 64 6f 77 2c 27 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 27 29 3b 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 32 32 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(w,g){w[g]=w[g]\|\|{}; w[g].e=function(s){return eval(s);};})(window,'google_tag_manager'); (function(){var data = {"resource": { "version":"122", "macros":[{"function":"__e"},{"fu
2024-04-25 07:06:56 UTC	192	IN	Data Raw: 73 65 6e 64 48 69 74 54 61 73 6b 5c 22 29 2c 61 2c 62 2c 63 2c 64 3b 67 2e 73 65 74 28 5c 22 73 65 6e 64 48 69 74 54 61 73 6b 5c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 3d 65 2e 67 65 74 28 5c 22 68 69 74 50 61 79 6c 6f 61 64 5c 22 29 2e 73 70 6c 69 74 28 5c 22 5c 5c 78 32 36 5c 22 29 3b 66 6f 72 28 61 3d 30 3b 61 5c 75 30 30 33 43 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 63 3d 62 5b 61 5d 2e 73 70 6c 69 74 28 5c 22 5c 5c 78 33 64 5c 22 29 2c 64 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 5b Data Ascii: sendHitTask\"),a,b,c,d;g.set(\"sendHitTask\",function(e){b=e.get(\"hitPayload\").split(\"\\x26\");for(a=0;a\u003Cb.length;a++)c=b[a].split(\"\\x3d\"),d=decodeURIComponent(decodeURIComponent(c[
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 31 5d 29 29 2c 68 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 64 3d 64 2e 72 65 70 6c 61 63 65 28 66 2e 72 65 67 65 78 2c 66 2e 67 72 6f 75 70 2b 5c 22 5b 52 45 44 41 43 54 45 44 20 5c 22 2b 66 2e 6e 61 6d 65 2b 5c 22 5d 5c 22 29 7d 29 2c 63 5b 31 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 2c 62 5b 61 5d 3d 63 2e 6a 6f 69 6e 28 5c 22 5c 5c 78 33 64 5c 22 29 3b 65 2e 73 65 74 28 5c 22 68 69 74 50 61 79 6c 6f 61 64 5c 22 2c 62 2e 6a 6f 69 6e 28 5c 22 5c 5c 78 32 36 5c 22 29 2c 21 30 29 3b 6b 28 65 29 7d 29 7d 7d 29 28 29 3b 22 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6b 22 2c 22 76 74 70 5f 64 65 63 6f 64 65 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 77 74 5f 70 72 69 Data Ascii: 1])),h.forEach(function(f){d=d.replace(f.regex,f.group+\"[REDACTED \"+f.name+\"]\")}),c[1]=encodeURIComponent(d),b[a]=c.join(\"\\x3d\");e.set(\"hitPayload\",b.join(\"\\x26\"),!0);k(e)})}})();"]},{"function":"__k","vtp_decodeCookie":true,"vtp_name":"wt_pri
2024-04-25 07:06:56 UTC	8233	IN	Data Raw: 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 31 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 32 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 33 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 34 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 35 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 Data Ascii: ]],["map","index","181","dimension",["macro",132]],["map","index","182","dimension",["macro",132]],["map","index","183","dimension",["macro",132]],["map","index","184","dimension",["macro",132]],["map","index","185","dimension",["macro",132]],["map","inde
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 67 72 61 6e 74 65 64 22 5d 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 78 70 5f 76 61 72 69 61 6e 74 5f 73 74 72 69 6e 67 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6b 22 2c 22 76 74 70 5f 64 65 63 6f 64 65 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 77 74 5f 63 62 61 6e 6e 65 72 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 76 74 70 5f 73 74 72 69 70 57 77 77 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 48 4f 53 54 22 2c 22 76 74 70 5f 65 6e 61 62 6c Data Ascii: granted"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"exp_variant_string"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"wt_cbanner"},{"function":"__u","vtp_stripWww":true,"vtp_component":"HOST","vtp_enabl
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 61 67 5f 69 64 22 3a 32 32 32 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 76 74 5f 39 30 33 36 34 36 36 30 5f 32 31 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 75 72 72 65 6e 63 79 22 3a 5b 22 6d 61 63 72 6f 22 2c 36 30 5d 2c 22 76 74 70 5f 69 64 22 3a 5b 22 6d 61 63 72 6f 22 2c 37 36 5d 2c 22 76 74 70 5f 65 76 65 6e 74 54 79 70 65 22 3a 22 50 75 72 63 68 61 73 65 22 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 Data Ascii: ,"vtp_advancedMatching":false,"tag_id":222},{"function":"__cvt_90364660_211","metadata":["map"],"once_per_event":true,"vtp_enableFirstPartyCookies":true,"vtp_currency":["macro",60],"vtp_id":["macro",76],"vtp_eventType":"Purchase","vtp_advancedMatching":fa
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 76 65 6e 74 43 61 74 65 67 6f 72 79 22 3a 5b 22 6d 61 63 72 6f 22 2c 35 36 5d 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 22 3a 22 54 52 41 43 4b 5f 45 56 45 4e 54 22 2c 22 76 74 70 5f 67 61 53 65 74 74 69 6e 67 73 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 36 34 5d 2c 22 76 74 70 5f 65 76 65 6e 74 41 63 74 69 6f 6e 22 3a 5b 22 6d 61 63 72 6f 22 2c 35 34 5d 2c 22 76 74 70 5f 65 76 65 6e 74 4c 61 62 65 6c 22 3a 5b 22 6d 61 63 72 6f 22 2c 35 35 5d 2c 22 76 74 70 5f 6f 76 65 72 72 69 64 65 47 61 53 65 74 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 64 6f 75 62 6c 65 43 6c 69 63 6b 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 73 65 74 54 72 61 63 6b 65 72 4e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 76 65 6e 74 56 61 Data Ascii: :false,"vtp_eventCategory":["macro",56],"vtp_trackType":"TRACK_EVENT","vtp_gaSettings":["macro",164],"vtp_eventAction":["macro",54],"vtp_eventLabel":["macro",55],"vtp_overrideGaSettings":true,"vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_eventVa
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 72 61 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6f 76 65 72 72 69 64 65 47 61 53 65 74 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 64 6f 75 62 6c 65 43 6c 69 63 6b 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 73 65 74 54 72 61 63 6b 65 72 4e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 75 73 65 44 65 62 75 67 56 65 72 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 76 65 6e 74 43 61 74 65 67 6f 72 79 22 3a 22 61 62 6f 75 74 20 75 73 20 74 72 61 63 6b 69 6e 67 22 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 22 3a 22 54 52 41 43 4b 5f 45 56 45 4e 54 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4c 69 6e 6b 49 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 67 61 53 65 74 74 69 6e 67 73 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 36 34 5d 2c 22 76 74 70 5f Data Ascii: raction":false,"vtp_overrideGaSettings":true,"vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_eventCategory":"about us tracking","vtp_trackType":"TRACK_EVENT","vtp_enableLinkId":false,"vtp_gaSettings":["macro",164],"vtp_
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 73 65 49 6e 74 65 72 6e 61 6c 56 65 72 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 65 62 61 73 65 43 61 6d 70 61 69 67 6e 44 61 74 61 22 3a 74 72 75 65 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 49 73 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 47 41 34 53 63 68 65 6d 61 22 3a 74 72 75 65 2c 22 74 61 67 5f 69 64 22 3a 36 30 30 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 61 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 6e 6f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6f 76 65 72 72 69 64 65 47 61 53 65 74 Data Ascii: false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enableGA4Schema":true,"tag_id":600},{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_nonInteraction":false,"vtp_overrideGaSet
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 33 36 34 36 36 30 5f 34 39 35 22 2c 22 74 61 67 5f 69 64 22 3a 38 33 38 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6c 63 6c 22 2c 22 76 74 70 5f 77 61 69 74 46 6f 72 54 61 67 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 63 68 65 63 6b 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 77 61 69 74 46 6f 72 54 61 67 73 54 69 6d 65 6f 75 74 22 3a 22 32 30 30 30 22 2c 22 76 74 70 5f 75 6e 69 71 75 65 54 72 69 67 67 65 72 49 64 22 3a 22 39 30 33 36 34 36 36 30 5f 34 39 36 22 2c 22 74 61 67 5f 69 64 22 3a 38 33 39 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6c 63 6c 22 2c 22 76 74 70 5f 77 61 69 74 46 6f 72 54 61 67 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 63 68 65 63 6b 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 Data Ascii: 364660_495","tag_id":838},{"function":"__lcl","vtp_waitForTags":false,"vtp_checkValidation":false,"vtp_waitForTagsTimeout":"2000","vtp_uniqueTriggerId":"90364660_496","tag_id":839},{"function":"__lcl","vtp_waitForTags":false,"vtp_checkValidation":false,"v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	660	OUT	GET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 26464 Connection: close Date: Wed, 27 Mar 2024 15:03:57 GMT Last-Modified: Wed, 27 Mar 2024 14:51:17 GMT ETag: "02cd96af1fe12399200b70e7bf8fa6cd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Y8A2riL8aj0pCYVdmJPFH678VKnlt1xlZ2uhLaOoVALis1yhHpGpOA== Age: 2476980
2024-04-25 07:06:56 UTC	15776	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 30 5d 2c 7b 34 34 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 6e 65 77 20 42 6c 6f 62 28 5b 22 28 22 2e 63 6f 6e 63 61 74 28 69 2c 22 29 28 73 65 6c 66 29 22 29 5d 29 29 29 2c 6e 65 77 20 57 6f 72 6b 65 72 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{retu
2024-04-25 07:06:56 UTC	10688	IN	Data Raw: 73 2e 73 74 72 6d 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 74 75 73 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5f 62 75 66 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5f 73 69 7a 65 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5f 6f 75 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 30 2c 74 68 69 73 2e 77 72 61 70 3d 30 2c 74 68 69 73 2e 67 7a 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 67 7a 69 6e 64 65 78 3d 30 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 49 74 2c 74 68 69 73 2e 6c 61 73 74 5f 66 6c 75 73 68 3d 2d 31 2c 74 68 69 73 2e 77 5f 73 69 7a 65 3d 30 2c 74 68 69 73 2e 77 5f 62 69 74 73 3d 30 2c 74 68 69 73 2e 77 5f 6d 61 73 6b 3d 30 2c 74 68 69 73 2e 77 69 6e 64 6f 77 3d 6e 75 6c 6c 2c 74 68 69 73 2e 77 69 6e 64 6f 77 5f Data Ascii: s.strm=null,this.status=0,this.pending_buf=null,this.pending_buf_size=0,this.pending_out=0,this.pending=0,this.wrap=0,this.gzhead=null,this.gzindex=0,this.method=It,this.last_flush=-1,this.w_size=0,this.w_bits=0,this.w_mask=0,this.window=null,this.window_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49724	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	660	OUT	GET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 58253 Connection: close Date: Wed, 27 Mar 2024 15:03:57 GMT Last-Modified: Wed, 27 Mar 2024 14:51:17 GMT ETag: "633a43876f294113b67a16bac7c21511" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: njtHKSutIWB79i6tuw_aLnZjnszkkj6ftT7U_pvDWWMTihxkVnxgFQ== Age: 2476980
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 35 35 5d 2c 7b 38 30 33 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 61 7d 2c 42 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 61 7d 2c 5a 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 61 7d 2c 67 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 6d 7d 2c 7a 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 6d 7d 7d 29 3b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==ty
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 65 72 22 2c 65 2e 4d 6f 62 69 6c 65 49 6f 73 52 65 6e 64 65 72 65 72 3d 22 6d 6f 62 69 6c 65 2d 69 6f 73 2d 72 65 6e 64 65 72 65 72 22 2c 65 2e 44 65 73 6b 74 6f 70 57 65 62 52 65 6e 64 65 72 65 72 3d 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 7d 28 6f 61 7c 7c 28 6f 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 72 74 3d 22 73 74 61 72 74 22 2c 65 2e 46 69 72 73 74 51 75 61 72 74 69 6c 65 3d 22 66 69 72 73 74 51 75 61 72 74 69 6c 65 22 2c 65 2e 4d 69 64 70 6f 69 6e 74 3d 22 6d 69 64 70 6f 69 6e 74 22 2c 65 2e 54 68 69 72 64 51 75 61 72 74 69 6c 65 3d 22 74 68 69 72 64 51 75 61 72 74 69 6c 65 22 2c 65 2e 43 6f 6d 70 6c 65 74 65 3d 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 4d 75 74 65 3d 22 6d 75 74 65 22 2c 65 Data Ascii: er",e.MobileIosRenderer="mobile-ios-renderer",e.DesktopWebRenderer="desktop-web-renderer"}(oa\|\|(oa={})),function(e){e.Start="start",e.FirstQuartile="firstQuartile",e.Midpoint="midpoint",e.ThirdQuartile="thirdQuartile",e.Complete="complete",e.Mute="mute",e
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 38 22 2c 22 29 22 3a 22 25 32 39 22 2c 22 7e 22 3a 22 25 37 45 22 2c 22 25 32 30 22 3a 22 2b 22 7d 2c 5f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 43 70 5b 65 5d 7d 2c 4e 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 70 28 62 70 28 65 29 2c 49 70 2c 5f 70 29 7d 2c 4d 70 3d 48 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 70 28 74 68 69 73 2c 7b 74 79 70 65 3a 75 70 2c 74 61 72 67 65 74 3a 63 70 28 65 29 2e 65 6e 74 72 69 65 73 2c 69 6e 64 65 78 3a 30 2c 6b 69 6e 64 3a 74 7d 29 7d 29 2c 61 70 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 70 28 74 68 69 73 29 2c 74 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 65 2e 69 6e 64 Data Ascii: "!":"%21","'":"%27","(":"%28",")":"%29","~":"%7E","%20":"+"},_p=function(e){return Cp[e]},Np=function(e){return Ep(bp(e),Ip,_p)},Mp=Hh((function(e,t){sp(this,{type:up,target:cp(e).entries,index:0,kind:t})}),ap,(function(){var e=fp(this),t=e.target,n=e.ind
2024-04-25 07:06:56 UTC	9101	IN	Data Raw: 29 2c 5a 70 28 78 76 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 48 6f 73 74 6e 61 6d 65 22 2c 22 73 65 74 48 6f 73 74 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 70 6f 72 74 22 2c 6b 76 28 22 67 65 74 50 6f 72 74 22 2c 22 73 65 74 50 6f 72 74 22 29 29 2c 5a 70 28 78 76 2c 22 70 61 74 68 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 50 61 74 68 6e 61 6d 65 22 2c 22 73 65 74 50 61 74 68 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 22 2c 22 73 65 74 53 65 61 72 63 68 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 50 61 72 61 6d 73 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 50 61 72 61 6d 73 22 29 29 2c 5a 70 28 78 76 2c 22 68 61 73 68 22 2c 6b 76 28 22 67 65 74 48 61 73 68 22 2c 22 Data Ascii: ),Zp(xv,"hostname",kv("getHostname","setHostname")),Zp(xv,"port",kv("getPort","setPort")),Zp(xv,"pathname",kv("getPathname","setPathname")),Zp(xv,"search",kv("getSearch","setSearch")),Zp(xv,"searchParams",kv("getSearchParams")),Zp(xv,"hash",kv("getHash","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49723	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	660	OUT	GET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 44642 Connection: close Date: Sat, 06 Apr 2024 12:01:59 GMT Last-Modified: Fri, 05 Apr 2024 18:15:46 GMT ETag: "0117ded66314d5d48929f64d97591068" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xQbnuuVmFKNJF7G_QcL6IAg8uyPKY4vONiMjW2SHmEi2Lx1lk7WraQ== Age: 1623898
2024-04-25 07:06:56 UTC	15776	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 35 32 5d 2c 7b 38 39 33 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 2c 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 21 65 2e 6a 51 75 65 72 79 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 66 6e 2e 69 6e 69 74 28 65 2c 72 29 7d 3b 74 2e 69 73 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 74 2e 74 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 28 6e 3c 3d 38 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 6e 61 6d 65 22 3a 72 65 74 75 72 6e 22 66 69 6c 74 65 72 22 3b 63 61 73 65 22 65 78 74 72 61 63 74 22 3a 76 61 72 20 61 3d 72 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6d 61 74 63 68 28 2f 61 6c 70 68 61 5c 28 6f 70 61 63 69 74 79 3d 28 2e 2a 29 5c 29 2f 69 29 3b 72 65 74 75 72 6e 20 72 3d 61 3f 61 5b 31 5d 2f 31 30 30 3a 31 3b 63 61 73 65 22 69 6e 6a 65 63 74 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 2c 70 61 72 73 65 46 6c 6f 61 74 28 72 29 3e 3d 31 3f 22 22 3a 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 22 2b 70 61 72 73 65 49 6e 74 28 31 30 30 2a 70 61 72 73 65 46 6c 6f 61 74 28 72 29 2c 31 30 29 2b 22 29 22 7d 65 6c 73 65 20 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 Data Ascii: (n<=8)switch(e){case"name":return"filter";case"extract":var a=r.toString().match(/alpha$opacity=(.)$/i);return r=a?a[1]/100:1;case"inject":return t.style.zoom=1,parseFloat(r)>=1?"":"alpha(opacity="+parseInt(100parseFloat(r),10)+")"}else switch(e){case
2024-04-25 07:06:56 UTC	12482	IN	Data Raw: 3d 52 29 52 3d 22 2e 2e 22 3b 65 6c 73 65 20 69 66 28 21 2f 5c 64 2f 2e 74 65 73 74 28 4f 29 29 62 72 65 61 6b 3b 71 2b 3d 4f 7d 66 6f 72 28 3b 2b 2b 43 3c 68 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 28 6a 3d 68 5b 43 5d 29 3d 3d 3d 4d 29 4d 3d 22 2e 2e 22 3b 65 6c 73 65 20 69 66 28 21 2f 5c 64 2f 2e 74 65 73 74 28 6a 29 29 62 72 65 61 6b 3b 4c 2b 3d 6a 7d 76 61 72 20 24 3d 79 2e 48 6f 6f 6b 73 2e 67 65 74 55 6e 69 74 28 78 2c 54 29 2c 42 3d 79 2e 48 6f 6f 6b 73 2e 67 65 74 55 6e 69 74 28 68 2c 43 29 3b 69 66 28 54 2b 3d 24 2e 6c 65 6e 67 74 68 2c 43 2b 3d 42 2e 6c 65 6e 67 74 68 2c 24 3d 3d 3d 42 29 71 3d 3d 3d 4c 3f 6c 2b 3d 71 2b 24 3a 28 6c 2b 3d 22 7b 22 2b 41 2e 6c 65 6e 67 74 68 2b 28 4e 3f 22 21 22 3a 22 22 29 2b 22 7d 22 2b 24 2c 41 2e 70 75 73 68 Data Ascii: =R)R="..";else if(!/\d/.test(O))break;q+=O}for(;++C<h.length;){if((j=h[C])===M)M="..";else if(!/\d/.test(j))break;L+=j}var $=y.Hooks.getUnit(x,T),B=y.Hooks.getUnit(h,C);if(T+=$.length,C+=B.length,$===B)q===L?l+=q+$:(l+="{"+A.length+(N?"!":"")+"}"+$,A.push

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49725	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	660	OUT	GET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 71691 Connection: close Date: Mon, 15 Apr 2024 14:57:55 GMT Last-Modified: Mon, 15 Apr 2024 14:48:23 GMT ETag: "42eaceaa10ced1bc091c1d9097c4897f" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hAqueVFrWkGTmFhiprE3TpVpfzn_ATFQwJ8LwXjFDR0LG6VHJgIx0g== Age: 835742
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 38 32 5d 2c 7b 37 36 36 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 65 3b 6e 3d 72 2e 6e 6d 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 2c 69 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6f 3d 22 5f 5f 6c 6f 64 61 73 68 5f 68 61 73 68 5f 75 6e 64 65 66 69 6e 65 64 5f 5f 22 2c 66 3d 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 2c 61 3d 31 36 2c 63 3d 33 32 2c 6c 3d 36 34 2c 73 3d 31 32 38 2c 68 3d 32 35 36 2c 70 3d 31 2f 30 2c 76 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 2c 5f 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 3a 42 6e 2e 63 61 6c 6c 28 74 2c 6e 29 7d 2c 4b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 7a 65 2b 3d 74 68 69 73 2e 68 61 73 28 6e 29 3f 30 3a 31 2c 72 5b 6e 5d 3d 7a 72 26 26 74 3d 3d 3d 75 3f 6f 3a 74 2c 74 68 69 73 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 5b 5d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 72 3d 65 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 21 28 Data Ascii: :Bn.call(t,n)},Kr.prototype.set=function(n,t){var r=this.__data__;return this.size+=this.has(n)?0:1,r[n]=zr&&t===u?o:t,this},Vr.prototype.clear=function(){this.__data__=[],this.size=0},Vr.prototype.delete=function(n){var t=this.__data__,r=ee(t,n);return!(
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 75 28 63 2c 61 2c 74 5b 34 5d 29 3a 61 2c 6e 5b 34 5d 3d 63 3f 6c 72 28 6e 5b 33 5d 2c 66 29 3a 74 5b 34 5d 7d 28 61 3d 74 5b 35 5d 29 26 26 28 63 3d 6e 5b 35 5d 2c 6e 5b 35 5d 3d 63 3f 52 75 28 63 2c 61 2c 74 5b 36 5d 29 3a 61 2c 6e 5b 36 5d 3d 63 3f 6c 72 28 6e 5b 35 5d 2c 66 29 3a 74 5b 36 5d 29 3b 28 61 3d 74 5b 37 5d 29 26 26 28 6e 5b 37 5d 3d 61 29 3b 65 26 73 26 26 28 6e 5b 38 5d 3d 6e 75 6c 6c 3d 3d 6e 5b 38 5d 3f 74 5b 38 5d 3a 77 72 28 6e 5b 38 5d 2c 74 5b 38 5d 29 29 3b 6e 75 6c 6c 3d 3d 6e 5b 39 5d 26 26 28 6e 5b 39 5d 3d 74 5b 39 5d 29 3b 6e 5b 30 5d 3d 74 5b 30 5d 2c 6e 5b 31 5d 3d 75 7d 28 78 2c 6d 29 2c 6e 3d 78 5b 30 5d 2c 74 3d 78 5b 31 5d 2c 65 3d 78 5b 32 5d 2c 6f 3d 78 5b 33 5d 2c 70 3d 78 5b 34 5d 2c 21 28 67 3d 78 5b 39 5d 3d 78 5b Data Ascii: u(c,a,t[4]):a,n[4]=c?lr(n[3],f):t[4]}(a=t[5])&&(c=n[5],n[5]=c?Ru(c,a,t[6]):a,n[6]=c?lr(n[5],f):t[6]);(a=t[7])&&(n[7]=a);e&s&&(n[8]=null==n[8]?t[8]:wr(n[8],t[8]));null==n[9]&&(n[9]=t[9]);n[0]=t[0],n[1]=u}(x,m),n=x[0],t=x[1],e=x[2],o=x[3],p=x[4],!(g=x[9]=x[
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 69 73 2c 75 3d 6a 65 28 74 2c 4c 66 28 74 29 29 29 3b 76 61 72 20 69 3d 21 28 72 66 28 72 29 26 26 22 63 68 61 69 6e 22 69 6e 20 72 29 7c 7c 21 21 72 2e 63 68 61 69 6e 2c 6f 3d 58 6f 28 6e 29 3b 72 65 74 75 72 6e 20 45 74 28 75 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 74 5b 72 5d 3b 6e 5b 72 5d 3d 65 2c 6f 26 26 28 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 63 68 61 69 6e 5f 5f 3b 69 66 28 69 7c 7c 74 29 7b 76 61 72 20 72 3d 6e 28 74 68 69 73 2e 5f 5f 77 72 61 70 70 65 64 5f 5f 29 2c 75 3d 72 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 3d 7a 75 28 74 68 69 73 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 28 7b 66 75 6e 63 3a 65 2c 61 72 Data Ascii: is,u=je(t,Lf(t)));var i=!(rf(r)&&"chain"in r)\|\|!!r.chain,o=Xo(n);return Et(u,(function(r){var e=t[r];n[r]=e,o&&(n.prototype[r]=function(){var t=this.__chain__;if(i\|\|t){var r=n(this.__wrapped__),u=r.__actions__=zu(this.__actions__);return u.push({func:e,ar
2024-04-25 07:06:56 UTC	6155	IN	Data Raw: 69 3d 76 72 28 74 29 3b 72 65 74 75 72 6e 20 78 75 28 65 2c 74 72 28 65 2c 69 29 2c 72 72 28 65 2c 69 29 2b 31 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 4d 72 2e 74 72 69 6d 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 28 6e 3d 6d 66 28 6e 29 29 26 26 28 72 7c 7c 74 3d 3d 3d 75 29 29 72 65 74 75 72 6e 20 6e 2e 73 6c 69 63 65 28 30 2c 5f 72 28 6e 29 2b 31 29 3b 69 66 28 21 6e 7c 7c 21 28 74 3d 6c 75 28 74 29 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 65 3d 76 72 28 6e 29 3b 72 65 74 75 72 6e 20 78 75 28 65 2c 30 2c 72 72 28 65 2c 76 72 28 74 29 29 2b 31 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 4d 72 2e 74 72 69 6d 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 28 6e 3d 6d 66 28 6e 29 29 26 26 28 72 7c 7c 74 3d 3d Data Ascii: i=vr(t);return xu(e,tr(e,i),rr(e,i)+1).join("")},Mr.trimEnd=function(n,t,r){if((n=mf(n))&&(r\|\|t===u))return n.slice(0,_r(n)+1);if(!n\|\|!(t=lu(t)))return n;var e=vr(n);return xu(e,0,rr(e,vr(t))+1).join("")},Mr.trimStart=function(n,t,r){if((n=mf(n))&&(r\|\|t==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49728	151.101.1.229	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	568	OUT	GET /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:06:56 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79831 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.23.0 X-JSD-Version-Type: version ETag: W/"137d7-KpZaAxY2fq10BSqIt+3sXsUCrzY" Accept-Ranges: bytes Age: 226884 Date: Thu, 25 Apr 2024 07:06:56 GMT X-Served-By: cache-fra-eddf8230096-FRA, cache-pdk-kpdk1780075-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 6b 69 70 70 65 64 20 6d 69 6e 69 66 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 73 20 61 70 70 65 61 72 73 20 74 6f 20 62 65 20 61 6c 72 65 61 64 79 20 6d 69 6e 69 66 69 65 64 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 40 73 6e 6f 77 70 6c 6f 77 2f 6a 61 76 61 73 63 72 69 70 74 2d 74 72 61 63 6b 65 72 40 33 2e 32 33 2e 30 2f 64 69 73 74 2f 73 70 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f Data Ascii: /** * Skipped minification because the original files appears to be already minified. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 2c 77 69 74 68 4a 73 6f 6e 50 72 6f 63 65 73 73 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 7d 2c 62 75 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 65 28 74 68 69 73 2c 6f 2c 69 29 2c 6e 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 72 29 7b 69 66 28 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 65 29 7b 69 66 28 72 3d 74 2e 61 64 64 2c 6e 29 7b 76 61 72 20 69 3d 30 2c 61 3d 30 2c 63 3d 5b 5d 3b 69 66 28 6e 29 7b 6e 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 29 3b 64 6f 7b 76 61 72 20 73 3d 6e Data Ascii: ,withJsonProcessor:function(n){e=n},build:function(){return null==e\|\|e(this,o,i),n}}}function o(e){return function(t,o,r){for(var i=function(n,o,r){if(n=JSON.stringify(n),e){if(r=t.add,n){var i=0,a=0,c=[];if(n){n=unescape(encodeURIComponent(n));do{var s=n
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 61 29 3a 6e 3d 6f 2c 6e 7d 2c 63 3d 76 6f 69 64 20 30 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 6f 5b 73 5d 3b 22 63 78 22 3d 3d 3d 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 3f 63 3d 61 28 63 2c 75 2e 6a 73 6f 6e 29 3a 69 28 75 2e 6a 73 6f 6e 2c 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 2c 75 2e 6b 65 79 49 66 4e 6f 74 45 6e 63 6f 64 65 64 29 7d 6f 2e 6c 65 6e 67 74 68 3d 30 2c 72 2e 6c 65 6e 67 74 68 26 26 28 63 3d 61 28 63 2c 6f 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 63 6f 6e 74 65 78 74 73 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 28 5b 5d 2c 72 2c 21 30 29 7d 29 2c 72 2e 6c 65 6e 67 Data Ascii: a):n=o,n},c=void 0,s=0;s<o.length;s++){var u=o[s];"cx"===u.keyIfEncoded?c=a(c,u.json):i(u.json,u.keyIfEncoded,u.keyIfNotEncoded)}o.length=0,r.length&&(c=a(c,o={schema:"iglu:com.snowplowanalytics.snowplow/contexts/jsonschema/1-0-0",data:n([],r,!0)}),r.leng
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 28 65 29 7b 65 3a 7b 69 66 28 67 28 65 29 29 7b 76 61 72 20 72 3d 65 5b 30 5d 2c 69 3d 21 31 3b 74 72 79 7b 69 3d 72 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 21 31 7d 69 66 28 21 30 3d 3d 3d 69 29 7b 65 3d 41 28 65 5b 31 5d 2c 6e 2c 74 2c 6f 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 68 28 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 30 2c 6f 3d 30 2c 72 3d 65 2e 61 63 63 65 70 74 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 65 2e 61 63 63 65 70 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 28 65 2c 6e 29 Data Ascii: (e){e:{if(g(e)){var r=e[0],i=!1;try{i=r({event:n.getPayload(),eventType:t,eventSchema:o})}catch(e){i=!1}if(!0===i){e=A(e[1],n,t,o);break e}}else if(h(e)&&function(e,n){var t=0,o=0,r=e.accept;return Array.isArray(r)?e.accept.some((function(e){return w(e,n)
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 29 3f 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 29 7d 29 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 21 21 28 72 28 65 29 26 26 22 73 63 68 65 6d 61 22 69 6e 20 65 26 26 22 64 61 74 61 22 69 6e 20 65 29 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 63 68 65 6d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: eturn Array.isArray(e)&&e.every((function(e){return"string"==typeof e}))}function f(e){return d(e)?e.every((function(e){return l(e)})):"string"==typeof e&&l(e)}function m(e){return!!(r(e)&&"schema"in e&&"data"in e)&&("string"==typeof e.schema&&"object"==t
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 6f 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 65 3d 62 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3a 69 66 28 6d 28 65 29 29 65 3d 5b 65 5d 3b 65 6c 73 65 7b 69 66 28 70 28 65 29 29 7b 6e 3a 7b 76 61 72 20 72 3d 76 6f 69 64 20 30 3b 74 72 79 7b 69 66 28 72 3d 65 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 65 76 65 72 79 28 6d 29 7c 7c 6d 28 72 29 29 7b 76 61 72 20 69 3d 72 3b 62 72 65 61 6b 20 6e 7d 69 3d 76 6f 69 64 20 30 3b Data Ascii: return Array.isArray(e)?e:[e]}function A(e,n,t,o){var r;return e=b(e).map((function(e){e:if(m(e))e=[e];else{if(p(e)){n:{var r=void 0;try{if(r=e({event:n.getPayload(),eventType:t,eventSchema:o}),Array.isArray(r)&&r.every(m)\|\|m(r)){var i=r;break n}i=void 0;
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 7d 3a 76 6f 69 64 20 30 29 26 26 65 2e 61 64 64 4a 73 6f 6e 28 22 63 78 22 2c 22 63 6f 22 2c 6e 29 2c 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 26 26 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 28 65 29 7d 63 61 74 63 68 28 65 29 7b 5a 65 2e 65 72 72 6f 72 28 22 50 6c 75 67 69 6e 20 62 65 66 6f 72 65 54 72 61 63 6b 22 2c 65 29 7d 7d 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 28 65 29 3b 76 61 72 20 69 3d 65 2e 62 75 69 6c 64 28 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 65 2e 61 66 74 65 72 54 72 61 63 6b 26 26 65 Data Ascii: jsonschema/1-0-0",data:n}:void 0)&&e.addJson("cx","co",n),r.forEach((function(n){try{n.beforeTrack&&n.beforeTrack(e)}catch(e){Ze.error("Plugin beforeTrack",e)}})),"function"==typeof c&&c(e);var i=e.build();return r.forEach((function(e){try{e.afterTrack&&e
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 3d 65 2e 6c 6f 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 63 61 6c 6c 28 65 2c 5a 65 29 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 61 63 74 69 76 61 74 65 43 6f 72 65 50 6c 75 67 69 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 61 6c 6c 28 65 2c 76 29 7d 29 29 2c 76 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 6e 3d 65 2e 65 76 65 6e 74 3b 72 65 74 75 72 6e 20 65 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 75 6e 73 74 72 75 63 74 5f 65 76 65 6e 74 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 7b 73 63 68 65 6d 61 3a 65 3d 6e 2e 73 63 68 65 6d 61 2c 64 61 74 61 3a 6e 2e 64 61 74 61 7d 7d 2c 28 6e 3d Data Ascii: =e.logger)\|\|void 0===n\|\|n.call(e,Ze),null===(t=e.activateCorePlugin)\|\|void 0===t\|\|t.call(e,v)})),v}function T(e){var n=e.event;return e={schema:"iglu:com.snowplowanalytics.snowplow/unstruct_event/jsonschema/1-0-0",data:{schema:e=n.schema,data:n.data}},(n=
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 22 74 69 74 6c 65 22 29 3b 6e 26 26 6e 75 6c 6c 21 3d 6e 5b 30 5d 26 26 28 65 3d 6e 5b 30 5d 2e 74 65 78 74 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 6e 3d 2f 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 66 74 70 29 3a 29 5c 2f 2a 28 3f 3a 5b 5e 40 5d 2b 40 29 3f 28 5b 5e 3a 2f 23 5d 2b 29 2f 2e 65 78 65 63 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 31 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 22 2e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 2d 2d 6e 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 30 2c 6e 29 29 2c 22 2a 2e 22 3d 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 32 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 Data Ascii: ByTagName("title");n&&null!=n[0]&&(e=n[0].text)}return e}function D(e){var n=/^(?:(?:https?\|ftp):)\/(?:[^@]+@)?([^:/#]+)/.exec(e);return n?n[1]:e}function N(e){var n=e.length;return"."===e.charAt(--n)&&(e=e.slice(0,n)),"."===e.slice(0,2)&&(e=e.slice(1))
2024-04-25 07:06:56 UTC	1378	IN	Data Raw: 76 61 72 20 6f 3d 30 3b 66 6f 72 28 65 3d 47 28 65 29 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 74 5b 65 5b 6f 5d 5d 29 7b 6f 3d 21 30 3b 62 72 65 61 6b 20 65 7d 6f 3d 21 31 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 6e 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 6c 6f 77 6c 69 73 74 22 29 2c 74 3d 4a 28 65 29 3b 72 65 74 75 72 6e 20 71 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 20 69 6e 20 Data Ascii: var o=0;for(e=G(e);o<e.length;o++)if(t[e[o]]){o=!0;break e}o=!1}return o===n}))}function H(e){if(null==e\|\|"object"!=typeof e\|\|Array.isArray(e))return function(){return!0};var n=e.hasOwnProperty("allowlist"),t=J(e);return q(e,(function(e){return e.name in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49730	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	660	OUT	GET /_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 55308 Connection: close Date: Tue, 16 Apr 2024 12:34:44 GMT Last-Modified: Tue, 16 Apr 2024 11:44:48 GMT ETag: "1c0b4e457c62548d0e46c380bed9cb82" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QFlO-NU9Dl6d_67_SRduPO0Verj7YUXJswmupAsXyEZWMic2pc2N2w== Age: 757933
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 33 36 5d 2c 7b 35 33 33 30 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 74 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 37 37 39 35 29 2c 69 3d 6e 28 32 33 31 39 36 29 2c 72 3d 6e 2e 6e 28 69 29 2c 73 3d 6e 28 38 35 31 39 34 29 2c 61 3d 6e 28 34 32 30 35 31 29 2c 75 3d 6e 2e 6e 28 61 29 2c 70 3d 6e 28 35 38 31 31 37 29 2c 63 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 65 2e 64 65 76 69 63 65 49 64 2c 6e 3d 65 2e 75 73 65 72 49 64 2c 6f 3d 65 2e 6f 70 74 4f 75 74 2c 69 3d 65 2e 73 65 73 73 69 6f 6e 49 64 2c 72 3d 65 2e 6c 61 73 74 45 76 65 6e 74 54 69 6d 65 2c 73 3d 65 2e 65 76 65 6e 74 49 64 2c 61 3d 65 2e 69 64 65 6e 74 69 66 79 49 64 2c 75 3d 65 2e 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 3b 69 66 28 74 68 69 73 2e 73 74 6f 72 61 67 65 21 3d 3d 42 29 7b 76 61 72 20 70 3d 5b 74 2c 64 65 2e 65 6e 63 6f 64 65 28 6e 7c 7c 22 22 29 2c 6f 3f 22 31 22 3a 22 22 2c 69 3f 69 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 72 3f 72 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 73 3f 73 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 61 3f 61 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 Data Ascii: e){var t=e.deviceId,n=e.userId,o=e.optOut,i=e.sessionId,r=e.lastEventTime,s=e.eventId,a=e.identifyId,u=e.sequenceNumber;if(this.storage!==B){var p=[t,de.encode(n\|\|""),o?"1":"",i?i.toString(32):"0",r?r.toString(32):"0",s?s.toString(32):"0",a?a.toString(32)
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6f 6e 4e 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 73 73 69 6f 6e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 45 76 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 2b 2b 2c 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 49 64 65 6e 74 69 66 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ewSessionStart=function(e){this._onNewSessionStartCallbacks.push(e)},St.prototype.getSessionId=function(){return this._sessionId},St.prototype.nextEventId=function(){return this._eventId++,this._eventId},St.prototype.nextIdentifyId=function(){return this.
2024-04-25 07:06:56 UTC	6156	IN	Data Raw: 31 33 3d 3d 3d 65 26 26 28 31 3d 3d 3d 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 26 26 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 65 2c 6e 29 2c 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 3d 4d 61 74 68 2e 63 65 69 6c 28 74 2f 32 29 2c 70 2e 73 65 6e 64 45 76 65 6e 74 73 28 29 29 29 7d 63 61 74 63 68 28 46 74 29 7b 7d 7d 29 29 7d 63 61 74 63 68 28 46 74 29 7b 76 61 72 20 63 3d 22 52 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 3b 4e 65 2e 65 72 72 6f 72 28 63 29 2c 70 2e 5f 6c 6f 67 45 72 72 6f 72 73 4f 6e 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 29 2c 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 2c 7b 72 65 61 73 6f 6e 3a 46 74 2e 6d Data Ascii: 13===e&&(1===p.options.uploadBatchSize&&p.removeEvents(o,i,e,n),p.options.uploadBatchSize=Math.ceil(t/2),p.sendEvents()))}catch(Ft){}}))}catch(Ft){var c="Request failed to send";Ne.error(c),p._logErrorsOnEvents(o,i,0,c),p.removeEvents(o,i,0,c,{reason:Ft.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49731	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	656	OUT	GET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	586	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 181528 Connection: close Date: Tue, 09 Apr 2024 10:05:05 GMT Last-Modified: Tue, 09 Apr 2024 09:43:27 GMT ETag: "30c77f1c465ffebc4a34178e9e87e6b9" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: a1Zz0qwRRT32miQDxd_F5oJNaG4OroOfKewu4exb8fdMPFoQf-bsNw== Age: 1371712
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 36 30 5d 2c 7b 32 30 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 61 7d 7d 29 3b 76 61 72 20 72 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 7d 76 61 72 20 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 62 75 66 66 65 72 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 38 29 2c 51 74 28 29 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 74 68 69 73 2e 62 75 66 66 65 72 29 2c 74 68 69 73 2e 62 75 66 66 65 72 5b 30 5d 3d 31 32 37 26 74 68 69 73 2e 62 75 66 66 65 72 5b 30 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 61 64 49 6e 74 33 32 28 30 29 2c 6e 3d 74 68 69 73 2e 72 65 61 64 49 6e 74 33 32 28 34 29 2c 72 3d 22 22 3b 64 6f 7b 76 61 72 20 6f 3d 65 25 74 2a 34 32 39 34 39 36 37 32 Data Ascii: window.msCrypto}var te=function(){function t(){this.buffer=new Uint8Array(8),Qt().getRandomValues(this.buffer),this.buffer[0]=127&this.buffer[0]}return t.prototype.toString=function(t){var e=this.readInt32(0),n=this.readInt32(4),r="";do{var o=e%t*42949672
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 7b 69 73 49 6e 46 6f 72 65 67 72 6f 75 6e 64 41 74 3a 6c 6e 2c 73 65 6c 65 63 74 49 6e 46 6f 72 65 67 72 6f 75 6e 64 50 65 72 69 6f 64 73 46 6f 72 3a 66 6e 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 6e 3d 5b 5d 2c 6e 28 29 2c 72 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 6e 28 29 7b 69 66 28 21 28 61 6e 2e 6c 65 6e 67 74 68 3e 32 35 30 30 29 29 7b 76 61 72 20 74 3d 61 6e 5b 61 6e 2e 6c 65 6e 67 74 68 2d 31 5d 2c 65 3d 5a 28 29 3b 76 6f 69 64 20 30 21 3d 3d 74 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 65 6e 64 7c 7c 61 6e 2e 70 75 73 68 28 7b 73 74 61 72 74 3a 65 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 29 7b 69 66 28 30 21 3d 3d 61 6e 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 61 6e 5b 61 6e 2e 6c 65 6e 67 74 68 2d Data Ascii: ;return{isInForegroundAt:ln,selectInForegroundPeriodsFor:fn,stop:function(){an=[],n(),r()}}}function un(){if(!(an.length>2500)){var t=an[an.length-1],e=Z();void 0!==t&&void 0===t.end\|\|an.push({start:e})}}function cn(){if(0!==an.length){var t=an[an.length-
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 73 74 6f 70 28 29 2c 64 2e 6e 6f 74 69 66 79 28 29 29 7d 72 65 74 75 72 6e 7b 65 76 65 6e 74 3a 6f 2c 73 74 6f 70 3a 70 2c 73 74 6f 70 4f 62 73 65 72 76 61 62 6c 65 3a 64 2c 67 65 74 20 68 61 73 45 72 72 6f 72 28 29 7b 72 65 74 75 72 6e 20 63 2e 65 76 65 6e 74 43 6f 75 6e 74 73 2e 65 72 72 6f 72 43 6f 75 6e 74 3e 30 7d 2c 67 65 74 20 68 61 73 50 61 67 65 41 63 74 69 76 69 74 79 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 69 7d 2c 67 65 74 55 73 65 72 41 63 74 69 76 69 74 79 3a 6e 2c 61 64 64 46 72 75 73 74 72 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 2e 70 75 73 68 28 74 29 7d 2c 73 74 61 72 74 43 6c 6f 63 6b 73 3a 73 2c 69 73 53 74 6f 70 70 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 6c 7c 7c 32 Data Ascii: stop(),d.notify())}return{event:o,stop:p,stopObservable:d,get hasError(){return c.eventCounts.errorCount>0},get hasPageActivity(){return void 0!==i},getUserActivity:n,addFrustration:function(t){f.push(t)},startClocks:s,isStopped:function(){return 1===l\|\|2
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 28 74 29 7b 6f 26 26 21 75 28 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 3d 74 2c 72 2e 6e 6f 74 69 66 79 28 29 7d 28 74 29 2c 61 3d 74 7d 7d 29 7d 29 29 2c 31 65 33 29 2e 74 68 72 6f 74 74 6c 65 64 2c 65 78 70 61 6e 64 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4a 72 28 7b 6f 70 74 69 6f 6e 73 3a 74 2c 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 29 3f 73 28 74 29 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 67 65 74 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 72 65 6e 65 77 4f 62 73 65 72 76 61 62 6c 65 3a 72 2c 65 78 70 69 72 65 4f 62 73 65 72 76 61 62 6c 65 3a 6f 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 Data Ascii: (t){o&&!u()&&function(t){a=t,r.notify()}(t),a=t}})})),1e3).throttled,expandSession:function(){Jr({options:t,process:function(t){return u()?s(t):void 0}})},getSession:function(){return a},renewObservable:r,expireObservable:o,stop:function(){clearInterval(i
2024-04-25 07:06:57 UTC	8050	IN	Data Raw: 26 26 41 28 6e 2c 22 64 61 74 61 2d 22 29 29 72 65 74 75 72 6e 20 75 69 7d 72 65 74 75 72 6e 20 6f 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 31 65 35 26 26 22 64 61 74 61 3a 22 3d 3d 3d 6f 2e 73 6c 69 63 65 28 30 2c 35 29 3f 22 64 61 74 61 3a 74 72 75 6e 63 61 74 65 64 22 3a 6f 7d 76 61 72 20 5f 69 3d 31 3b 76 61 72 20 50 69 3d 2f 5b 5e 61 2d 7a 31 2d 36 2d 5f 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 44 69 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 50 69 2e 74 65 73 74 28 65 29 3f 22 64 69 76 22 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 55 69 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 2e 72 75 6c 65 73 7c 7c 74 2e 63 73 73 52 75 6c 65 Data Ascii: &&A(n,"data-"))return ui}return o&&"string"===typeof o&&o.length>1e5&&"data:"===o.slice(0,5)?"data:truncated":o}var _i=1;var Pi=/[^a-z1-6-_]/;function Di(t){var e=t.toLowerCase().trim();return Pi.test(e)?"div":e}function Ui(t){try{var e=t.rules\|\|t.cssRule
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 78 3d 28 73 3d 74 2e 6c 69 66 65 43 79 63 6c 65 2c 75 3d 74 2e 66 72 75 73 74 72 61 74 69 6f 6e 43 62 2c 73 2e 73 75 62 73 63 72 69 62 65 28 31 30 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 22 61 63 74 69 6f 6e 22 3d 3d 3d 74 2e 72 61 77 52 75 6d 45 76 65 6e 74 2e 74 79 70 65 26 26 22 63 6c 69 63 6b 22 3d 3d 3d 74 2e 72 61 77 52 75 6d 45 76 65 6e 74 2e 61 63 74 69 6f 6e 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 72 61 77 52 75 6d 45 76 65 6e 74 2e 61 63 74 69 6f 6e 2e 66 72 75 73 74 72 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 79 70 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6c 65 6e 67 74 68 29 26 26 22 65 Data Ascii: x=(s=t.lifeCycle,u=t.frustrationCb,s.subscribe(10,(function(t){var e,n,r;"action"===t.rawRumEvent.type&&"click"===t.rawRumEvent.action.type&&(null===(n=null===(e=t.rawRumEvent.action.frustration)\|\|void 0===e?void 0:e.type)\|\|void 0===n?void 0:n.length)&&"e
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 74 65 78 74 73 3a 6c 2c 61 64 64 41 63 74 69 6f 6e 3a 70 2c 61 63 74 69 6f 6e 43 6f 6e 74 65 78 74 73 3a 68 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 73 74 6f 70 28 29 2c 66 2e 73 74 6f 70 28 29 7d 7d 7d 28 69 2c 65 2c 6c 6f 63 61 74 69 6f 6e 2c 63 2c 64 2c 66 2c 6e 2c 73 29 2c 68 3d 70 2e 76 69 65 77 43 6f 6e 74 65 78 74 73 2c 67 3d 70 2e 66 6f 72 65 67 72 6f 75 6e 64 43 6f 6e 74 65 78 74 73 2c 6d 3d 70 2e 66 65 61 74 75 72 65 46 6c 61 67 43 6f 6e 74 65 78 74 73 2c 62 3d 70 2e 75 72 6c 43 6f 6e 74 65 78 74 73 2c 77 3d 70 2e 61 63 74 69 6f 6e 43 6f 6e 74 65 78 74 73 2c 6b 3d 70 2e 61 64 64 41 63 74 69 6f 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 65 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 45 6e 61 62 6c 65 Data Ascii: texts:l,addAction:p,actionContexts:h,stop:function(){u.stop(),f.stop()}}}(i,e,location,c,d,f,n,s),h=p.viewContexts,g=p.foregroundContexts,m=p.featureFlagContexts,b=p.urlContexts,w=p.actionContexts,k=p.addAction;!function(t){he.telemetryConfigurationEnable
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 73 5b 61 5d 29 72 65 74 75 72 6e 20 73 5b 61 5d 7d 63 6f 6e 73 74 20 75 3d 72 2e 73 6c 69 63 65 28 69 2b 74 29 2e 6a 6f 69 6e 28 6e 29 3b 72 65 74 75 72 6e 20 75 3f 79 28 73 2c 75 2c 6e 29 3a 76 6f 69 64 20 30 7d 6f 3d 6f 5b 72 5b 69 5d 5d 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 69 6e 64 65 78 4f 66 28 22 5f 22 29 3e 30 3f 74 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 3a 74 7d 63 6c 61 73 73 20 77 20 65 78 74 65 6e 64 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 Data Ascii: "===typeof s[a])return s[a]}const u=r.slice(i+t).join(n);return u?y(s,u,n):void 0}o=o[r[i]]}return o}function b(t){return t&&t.indexOf("_")>0?t.replace("_","-"):t}class w extends a{constructor(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1
2024-04-25 07:06:57 UTC	3592	IN	Data Raw: 3a 5b 22 61 72 22 5d 2c 6e 72 3a 5b 30 2c 31 2c 32 2c 33 2c 31 31 2c 31 30 30 5d 2c 66 63 3a 35 7d 2c 7b 6c 6e 67 73 3a 5b 22 63 73 22 2c 22 73 6b 22 5d 2c 6e 72 3a 5b 31 2c 32 2c 35 5d 2c 66 63 3a 36 7d 2c 7b 6c 6e 67 73 3a 5b 22 63 73 62 22 2c 22 70 6c 22 5d 2c 6e 72 3a 5b 31 2c 32 2c 35 5d 2c 66 63 3a 37 7d 2c 7b 6c 6e 67 73 3a 5b 22 63 79 22 5d 2c 6e 72 3a 5b 31 2c 32 2c 33 2c 38 5d 2c 66 63 3a 38 7d 2c 7b 6c 6e 67 73 3a 5b 22 66 72 22 5d 2c 6e 72 3a 5b 31 2c 32 5d 2c 66 63 3a 39 7d 2c 7b 6c 6e 67 73 3a 5b 22 67 61 22 5d 2c 6e 72 3a 5b 31 2c 32 2c 33 2c 37 2c 31 31 5d 2c 66 63 3a 31 30 7d 2c 7b 6c 6e 67 73 3a 5b 22 67 64 22 5d 2c 6e 72 3a 5b 31 2c 32 2c 33 2c 32 30 5d 2c 66 63 3a 31 31 7d 2c 7b 6c 6e 67 73 3a 5b 22 69 73 22 5d 2c 6e 72 3a 5b 31 2c 32 Data Ascii: :["ar"],nr:[0,1,2,3,11,100],fc:5},{lngs:["cs","sk"],nr:[1,2,5],fc:6},{lngs:["csb","pl"],nr:[1,2,5],fc:7},{lngs:["cy"],nr:[1,2,3,8],fc:8},{lngs:["fr"],nr:[1,2],fc:9},{lngs:["ga"],nr:[1,2,3,7,11],fc:10},{lngs:["gd"],nr:[1,2,3,20],fc:11},{lngs:["is"],nr:[1,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49732	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	656	OUT	GET /_next/static/chunks/9216.2fed4395c6aaaa86.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	586	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1056103 Connection: close Date: Mon, 22 Apr 2024 11:05:30 GMT Last-Modified: Mon, 22 Apr 2024 10:11:19 GMT ETag: "12e84f18d00fcbab4bbb6e73a50db8e6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cZy_7nv2kwPJH_0bhqkWH1wweleNdmqotf3luZxeE1QNlbw6cTwVsw== Age: 244887
2024-04-25 07:06:56 UTC	15798	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 36 5d 2c 7b 39 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 2c 6f 3d 72 28 33 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 61 3d 72 28 31 35 33 32 37 29 2c 73 3d 72 28 39 34 30 39 37 29 2c 75 3d 72 28 38 34 31 30 39 29 2c 63 3d 72 28 36 37 39 38 35 29 2c 6c 3d 72 28 37 37 38 37 34 29 2c 66 3d 72 28 38 32 36 34 38 29 2c 64 3d 72 28 36 30 36 34 34 29 2c 70 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 72 29 29 7b 76 61 72 20 73 2c 75 3d 61 3f 61 2b 22 2e 22 2b 6e 3a 6e 3b 69 66 28 72 26 26 21 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 72 29 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 7b 7d 22 29 29 72 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 3b 65 6c 73 65 20 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 5b 5d 22 29 26 26 28 73 3d 6f 2e 74 6f 41 72 72 61 79 28 72 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 74 2e 61 70 70 65 6e 64 28 75 2c 69 28 65 29 29 7d 29 29 3b 65 28 72 Data Ascii: h(n,(function(r,n){if(!o.isUndefined(r)){var s,u=a?a+"."+n:n;if(r&&!a&&"object"===typeof r)if(o.endsWith(n,"{}"))r=JSON.stringify(r);else if(o.endsWith(n,"[]")&&(s=o.toArray(r)))return void s.forEach((function(e){!o.isUndefined(e)&&t.append(u,i(e))}));e(r
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 65 78 65 63 28 74 29 3b 69 66 28 72 29 7b 76 61 72 20 6e 3d 4e 75 6d 62 65 72 28 72 5b 31 5d 29 2c 6f 3d 4e 75 6d 62 65 72 28 72 5b 32 5d 29 3b 69 66 28 21 69 73 4e 61 4e 28 6e 29 26 26 21 69 73 4e 61 4e 28 6f 29 29 72 65 74 75 72 6e 20 6e 65 77 20 65 28 6e 2c 6f 2c 4e 75 6d 62 65 72 28 72 5b 34 5d 29 7c 7c 30 2c 72 5b 35 5d 7c 7c 76 6f 69 64 20 30 29 7d 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 61 72 65 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 6a 6f 72 3e 65 2e 6d 61 6a 6f 72 3f 31 3a 74 68 69 73 2e 6d 61 6a 6f 72 3c 65 2e 6d 61 6a 6f 72 3f 2d 31 3a 74 68 69 73 2e 6d 69 6e 6f 72 3e 65 2e 6d 69 6e 6f 72 3f 31 3a 74 68 69 73 2e 6d 69 6e 6f 72 3c 65 2e 6d 69 6e 6f 72 3f 2d 31 3a 74 68 69 73 2e 70 Data Ascii: exec(t);if(r){var n=Number(r[1]),o=Number(r[2]);if(!isNaN(n)&&!isNaN(o))return new e(n,o,Number(r[4])\|\|0,r[5]\|\|void 0)}}},e.prototype.compareTo=function(e){return this.major>e.major?1:this.major<e.major?-1:this.minor>e.minor?1:this.minor<e.minor?-1:this.p
2024-04-25 07:06:57 UTC	15394	IN	Data Raw: 61 2e 73 65 6e 74 28 29 2c 69 3d 7b 73 74 61 74 75 73 3a 6f 2e 73 74 61 74 75 73 7d 2c 5b 34 2c 6f 2e 74 65 78 74 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 69 2e 62 6f 64 79 3d 61 2e 73 65 6e 74 28 29 2c 5b 32 2c 69 5d 7d 7d 29 29 7d 29 29 2c 6f 29 7d 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 3d 22 69 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 22 7d 28 6d 65 7c 7c 28 6d 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 73 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 3d 22 69 6e 69 74 69 61 6c 22 2c 65 2e 53 65 63 6f 6e Data Ascii: a.sent(),i={status:o.status},[4,o.text()];case 2:return i.body=a.sent(),[2,i]}}))})),o)}};!function(e){e.LocalStorage="localStorage",e.InitialVariants="initialVariants"}(me\|\|(me={})),function(e){e.LocalStorage="storage",e.InitialVariants="initial",e.Secon
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 6d 65 3a 22 65 78 70 65 72 69 6d 65 6e 74 2d 6a 73 2d 63 6c 69 65 6e 74 22 2c 6c 69 62 72 61 72 79 56 65 72 73 69 6f 6e 3a 4f 65 2c 74 69 6d 65 6f 75 74 4d 69 6c 6c 69 73 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 66 65 74 63 68 54 69 6d 65 6f 75 74 4d 69 6c 6c 69 73 7d 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 74 2e 73 65 6e 74 28 29 2c 74 68 69 73 2e 66 6c 61 67 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 66 6c 61 67 73 2e 70 75 74 41 6c 6c 28 65 29 2c 74 68 69 73 2e 66 6c 61 67 73 2e 73 74 6f 72 65 28 29 2c 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 72 65 56 61 72 69 61 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 64 65 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 Data Ascii: me:"experiment-js-client",libraryVersion:Oe,timeoutMillis:this.config.fetchTimeoutMillis})];case 1:return e=t.sent(),this.flags.clear(),this.flags.putAll(e),this.flags.store(),[2]}}))}))},e.prototype.storeVariants=function(e,t){return de(this,void 0,void
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 70 2c 7a 5d 2c 5b 6c 2c 7a 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 61 6e 64 72 6f 69 64 20 74 76 7c 73 6d 61 72 74 5b 2d 20 5d 3f 74 76 7c 6f 70 65 72 61 20 74 76 7c 74 76 3b 20 72 76 3a 29 5c 62 2f 69 5d 2c 5b 5b 64 2c 67 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 2f 69 5d 2c 5b 70 2c 6c 2c 5b 64 2c 62 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 67 6c 61 73 73 29 20 5c 64 2f 69 5d 2c 5b 6c 2c 5b 70 2c 43 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 77 74 36 33 3f 30 7b 32 2c 33 7d 29 5c 29 2f 69 5d 2c 5b 6c 2c 5b 70 2c 42 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 28 71 75 65 73 74 28 20 32 29 3f 29 2f 69 5d 2c 5b 6c 2c 5b 70 2c 4d 5d 2c 5b 64 2c 62 5d 5d 2c 5b 2f 28 74 65 73 6c 61 29 28 3f 3a 20 71 74 63 61 72 62 72 6f 77 73 65 72 Data Ascii: p,z],[l,z],[d,g]],[/\b(android tv\|smart[- ]?tv\|opera tv\|tv; rv:)\b/i],[[d,g]],[/((pebble))app/i],[p,l,[d,b]],[/droid.+; (glass) \d/i],[l,[p,C],[d,b]],[/droid.+; (wt63?0{2,3})\)/i],[l,[p,B],[d,b]],[/(quest( 2)?)/i],[l,[p,M],[d,b]],[/(tesla)(?: qtcarbrowser
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 5b 34 5d 3a 76 6f 69 64 20 30 2c 66 75 6e 63 3a 74 5b 31 5d 7c 7c 68 65 2c 6c 69 6e 65 3a 2b 74 5b 33 5d 2c 75 72 6c 3a 74 5b 32 5d 7d 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 78 65 2e 65 78 65 63 28 65 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 76 61 72 20 72 3d 74 5b 33 5d 26 26 74 5b 33 5d 2e 69 6e 64 65 78 4f 66 28 22 20 3e 20 65 76 61 6c 22 29 3e 2d 31 2c 6e 3d 45 65 2e 65 78 65 63 28 74 5b 33 5d 29 3b 72 26 26 6e 26 26 28 74 5b 33 5d 3d 6e 5b 31 5d 2c 74 5b 34 5d 3d 6e 5b 32 5d 2c 74 5b 35 5d 3d 76 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 7b 61 72 67 73 3a 74 5b 32 5d 3f 74 5b 32 5d 2e 73 70 6c 69 74 28 22 2c 22 29 3a 5b 5d 2c 63 6f 6c 75 6d 6e 3a 74 5b 35 5d 3f 2b 74 5b 35 5d 3a 76 6f 69 64 20 30 2c 66 75 6e 63 3a 74 Data Ascii: [4]:void 0,func:t[1]\|\|he,line:+t[3],url:t[2]}}(e)\|\|function(e){var t=xe.exec(e);if(!t)return;var r=t[3]&&t[3].indexOf(" > eval")>-1,n=Ee.exec(t[3]);r&&n&&(t[3]=n[1],t[4]=n[2],t[5]=void 0);return{args:t[2]?t[2].split(","):[],column:t[5]?+t[5]:void 0,func:t
2024-04-25 07:06:57 UTC	15237	IN	Data Raw: 69 3d 7b 7d 3b 72 26 26 28 69 2e 69 64 3d 72 29 2c 6f 26 26 2f 5e 5b 30 31 5d 24 2f 2e 74 65 73 74 28 6f 29 26 26 28 69 2e 6c 6f 67 73 3d 6f 29 2c 6e 26 26 2f 5e 5b 30 31 32 5d 24 2f 2e 74 65 73 74 28 6e 29 26 26 28 69 2e 72 75 6d 3d 6e 29 2c 44 74 28 69 2c 65 29 7d 7d 28 65 29 3b 76 61 72 20 6e 3d 6a 74 28 65 2c 74 2c 72 29 3b 4e 74 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 29 29 3b 76 61 72 20 6f 3d 6e 65 77 20 67 74 28 31 34 34 65 35 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 7b 69 64 3a 6e 2e 67 65 74 53 65 73 73 69 6f 6e 28 29 2e 69 64 2c 74 72 61 63 6b 69 6e 67 54 79 70 65 3a 6e 2e 67 65 74 53 65 73 73 69 6f 6e 28 29 5b 74 5d 7d 7d 72 65 74 75 72 6e 20 4e 74 2e 70 75 73 Data Ascii: i={};r&&(i.id=r),o&&/^[01]$/.test(o)&&(i.logs=o),n&&/^[012]$/.test(n)&&(i.rum=n),Dt(i,e)}}(e);var n=jt(e,t,r);Nt.push((function(){return n.stop()}));var o=new gt(144e5);function i(){return{id:n.getSession().id,trackingType:n.getSession()[t]}}return Nt.pus
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 6c 43 6f 6e 74 65 78 74 3a 28 6c 3d 64 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6c 2e 66 69 6e 64 54 72 61 63 6b 65 64 53 65 73 73 69 6f 6e 28 65 29 3b 69 66 28 74 29 72 65 74 75 72 6e 7b 73 65 73 73 69 6f 6e 5f 69 64 3a 74 2e 69 64 7d 7d 7d 29 2e 67 65 74 7d 7d 29 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 72 2c 6e 26 26 6e 2e 71 26 26 6e 2e 71 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 2c 22 6f 6e 52 65 61 64 79 20 63 61 6c 6c 62 61 63 6b 20 74 68 72 65 77 20 61 6e 20 65 72 72 6f 72 3a 22 29 28 29 7d 29 29 7d 28 50 28 29 2c 22 44 44 5f 4c 4f 47 53 22 2c 5f 72 29 7d 2c 38 30 36 33 34 3a 66 75 6e 63 74 69 6f 6e Data Ascii: lContext:(l=d,{get:function(e){var t=l.findTrackedSession(e);if(t)return{session_id:t.id}}}).get}}));!function(e,t,r){var n=e[t];e[t]=r,n&&n.q&&n.q.forEach((function(e){return i(e,"onReady callback threw an error:")()}))}(P(),"DD_LOGS",_r)},80634:function
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 2e 65 76 65 6e 74 53 74 61 74 75 73 3d 61 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 65 76 65 6e 74 53 74 61 74 75 73 2c 6e 2e 63 6d 70 53 74 61 74 75 73 3d 61 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 63 6d 70 53 74 61 74 75 73 2c 6e 2e 6c 69 73 74 65 6e 65 72 49 64 3d 72 2c 61 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 67 64 70 72 41 70 70 6c 69 65 73 29 7b 76 61 72 20 6f 3d 61 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 74 63 4d 6f 64 65 6c 3b 6e 2e 74 63 53 74 72 69 6e 67 3d 61 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 74 63 53 74 72 69 6e 67 2c 6e 2e 69 73 53 65 72 76 69 63 65 53 70 65 63 69 66 69 63 3d 6f 2e 69 73 53 65 72 76 69 63 65 53 70 65 63 69 66 69 63 2c 6e 2e 75 73 65 4e 6f 6e 53 74 61 6e 64 61 72 64 53 74 61 63 6b 73 3d 6f 2e 75 73 65 4e 6f 6e 53 74 61 6e 64 Data Ascii: .eventStatus=a.CmpApiModel.eventStatus,n.cmpStatus=a.CmpApiModel.cmpStatus,n.listenerId=r,a.CmpApiModel.gdprApplies){var o=a.CmpApiModel.tcModel;n.tcString=a.CmpApiModel.tcString,n.isServiceSpecific=o.isServiceSpecific,n.useNonStandardStacks=o.useNonStand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49733	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	656	OUT	GET /_next/static/chunks/5835-418bbb9fccea5315.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21801 Connection: close Date: Mon, 22 Apr 2024 17:32:39 GMT Last-Modified: Mon, 22 Apr 2024 16:51:30 GMT ETag: "fc8d876a973a29258c6f89b62bed455a" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HpjvwqG6pFQWBySoutxzHITvWuC-_xwcj-WXE1C1Ws60O3f3cZxksg== Age: 221658
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 33 35 5d 2c 7b 38 38 35 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 22 3a 5b 36 36 37 39 31 2c 39 2c 31 32 33 34 2c 37 34 38 33 2c 32 38 37 30 2c 31 38 37 39 2c 34 38 36 30 2c 31 37 31 36 2c 31 30 31 36 2c 37 33 39 34 2c 39 30 37 33 2c 33 32 39 38 2c 32 34 34 32 2c 35 39 32 31 2c 39 35 39 38 2c 38 37 34 35 2c 36 37 39 31 5d 2c 22 2e 2f 64 61 22 3a 5b 38 35 39 32 31 2c 39 2c 35 39 32 31 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 5b 39 34 31 38 30 2c 33 2c 34 31 38 30 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/tran
2024-04-25 07:06:56 UTC	5417	IN	Data Raw: 20 66 72 65 65 21 20 3c 61 20 74 61 72 67 65 74 3d 5c 27 5f 62 6c 61 6e 6b 5c 27 20 68 72 65 66 3d 5c 27 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 78 70 6c 6f 72 65 2f 6e 65 77 2d 66 72 65 65 2d 62 61 73 69 63 2d 61 63 63 6f 75 6e 74 5c 27 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 22 7d 2c 22 70 61 69 64 54 72 61 6e 73 66 65 72 45 6d 61 69 6c 54 65 6d 70 6c 61 74 65 22 3a 7b 22 70 72 6f 64 75 63 74 5f 64 65 74 61 69 6c 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 65 78 74 22 3a 22 43 6f 6e 74 65 6e 74 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 5f 74 65 78 74 22 3a 22 45 78 70 69 72 61 74 69 6f 6e 22 2c 22 74 6f 74 61 6c 5f 74 65 78 74 22 3a 22 54 6f 74 61 6c 22 2c 22 70 72 69 63 65 5f 74 65 78 74 22 3a 22 50 72 69 63 65 22 2c 22 Data Ascii: free! <a target=\'_blank\' href=\'https://wetransfer.com/explore/new-free-basic-account\'>Learn more</a>"},"paidTransferEmailTemplate":{"product_details":{"content_text":"Content","expiration_text":"Expiration","total_text":"Total","price_text":"Price","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49734	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:56 UTC	656	OUT	GET /_next/static/chunks/6878.ce0a8a7f3f44187c.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:56 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1593702 Connection: close Date: Tue, 23 Apr 2024 15:29:58 GMT Last-Modified: Tue, 23 Apr 2024 13:52:35 GMT ETag: "1cb6370c120798bfaf71d83b6465b7e8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C1N96uJkS0kOIHe4J4E7W5RV9cairwfflsBtsAXm0Q5nZvkc4ilx8A== Age: 142619
2024-04-25 07:06:56 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 37 38 5d 2c 7b 39 34 39 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 63 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 38 37 38 38 29 2c 69 3d 6e 28 39 34 37 37 36 29 2c 61 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 73 3d 28 6e 28 38 36 35 33 34 29 2c 6e 28 32 37 38 34 29 29 2c 6c 3d 6e 28 31 37 36 33 35 29 2c 63 3d 6e 28 33 34 34 30 32 29 2c 64 3d 6e 28 36 36 31 34 35 29 2c 75 3d 6e 28 34 32 34 39 39 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499)
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 6c 64 72 65 6e 3a 74 7d 29 2c 69 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 72 6c 2c 6e 3d 65 2e 70 6c 61 74 66 6f 72 6d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 65 74 2c 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 2c 6e 29 7d 2c 70 6c 61 74 66 6f 72 6d 3a 6e 7d 2c 74 29 7d 29 29 5d 7d 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 49 4d 41 47 45 3d 22 69 6d 61 67 65 22 2c 65 2e 56 49 44 45 4f 3d 22 76 69 64 65 6f 22 7d 28 52 65 7c 7c 28 52 65 3d 7b 7d 29 29 3b 76 61 72 20 61 74 3d 6e 28 36 39 35 30 31 29 2c 6f 74 3d 6e 2e 6e 28 61 74 29 3b 76 61 72 20 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 76 65 57 61 6c 6c 70 61 Data Ascii: ldren:t}),i.map((function(e){var t=e.url,n=e.platform;return(0,o.jsx)(et,{onClick:function(){return r(t,n)},platform:n},t)}))]})};!function(e){e.IMAGE="image",e.VIDEO="video"}(Re\|\|(Re={}));var at=n(69501),ot=n.n(at);var st=function(e){var t=e.activeWallpa
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 4d 6a 45 67 4e 54 59 75 4e 7a 51 33 4e 45 4d 30 4d 79 34 33 4d 6a 6b 33 49 44 55 79 4c 6a 67 79 4d 44 63 67 4e 54 49 75 4d 6a 59 32 49 44 51 33 4c 6a 49 7a 4e 44 51 67 4e 54 59 75 4e 6a 67 35 4f 43 41 30 4d 43 34 31 4f 54 51 79 54 44 55 34 4c 6a 6b 33 4f 54 4d 67 4e 44 49 75 4d 54 45 35 4e 55 4d 31 4e 43 34 77 4f 44 63 31 49 44 51 35 4c 6a 51 32 4d 6a 4d 67 4e 44 51 75 4f 54 45 31 4f 53 41 31 4e 53 34 7a 4d 54 67 30 49 44 4d 7a 4c 6a 59 31 4e 7a 49 67 4e 54 6b 75 4d 7a 4d 34 4d 30 4d 79 4d 69 34 7a 4e 6a 4d 32 49 44 59 7a 4c 6a 4d 33 4d 44 59 67 4f 43 34 34 4d 44 49 31 4e 43 41 32 4e 53 34 32 4d 54 63 78 49 43 30 31 4c 6a 41 35 4d 54 45 32 49 44 59 31 4c 6a 59 78 4e 7a 46 4d 4c 54 55 75 4d 44 6b 78 4d 54 59 67 4e 6a 49 75 4f 44 59 32 4d 56 6f 69 49 47 5a Data Ascii: MjEgNTYuNzQ3NEM0My43Mjk3IDUyLjgyMDcgNTIuMjY2IDQ3LjIzNDQgNTYuNjg5OCA0MC41OTQyTDU4Ljk3OTMgNDIuMTE5NUM1NC4wODc1IDQ5LjQ2MjMgNDQuOTE1OSA1NS4zMTg0IDMzLjY1NzIgNTkuMzM4M0MyMi4zNjM2IDYzLjM3MDYgOC44MDI1NCA2NS42MTcxIC01LjA5MTE2IDY1LjYxNzFMLTUuMDkxMTYgNjIuODY2MVoiIGZ
2024-04-25 07:06:57 UTC	14808	IN	Data Raw: 6c 61 6e 54 69 65 72 2c 63 3a 6e 2e 72 65 67 69 6f 6e 2e 63 6f 75 6e 74 72 79 2c 75 3a 74 2e 69 64 7d 2c 6f 6e 53 75 62 6d 69 74 3a 67 2c 6f 6e 52 65 61 64 79 3a 70 2c 6f 6e 43 6c 6f 73 65 3a 75 2c 63 68 69 6c 64 72 65 6e 3a 22 41 6e 73 77 65 72 20 32 20 71 75 65 73 74 69 6f 6e 73 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 62 6e 2e 68 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 54 6e 28 29 2e 63 6c 6f 73 65 43 74 61 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 63 6c 6f 73 65 2d 62 61 6e 6e 65 72 22 2c 69 63 6f 6e 3a 79 6e 2e 4b 78 2c 73 69 7a 65 3a 22 6d 65 64 69 75 6d 22 2c 61 70 70 65 61 72 61 6e 63 65 3a 22 74 65 72 74 69 61 72 79 22 2c 76 61 72 69 61 74 69 6f 6e 3a 22 6e 65 75 74 72 61 6c 22 2c 6d 6f 64 65 3a 22 64 61 72 6b 22 2c 6f 6e 43 6c 69 63 6b 3a 64 Data Ascii: lanTier,c:n.region.country,u:t.id},onSubmit:g,onReady:p,onClose:u,children:"Answer 2 questions"}),(0,o.jsx)(bn.h,{className:Tn().closeCta,"data-testid":"close-banner",icon:yn.Kx,size:"medium",appearance:"tertiary",variation:"neutral",mode:"dark",onClick:d
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 74 72 61 63 6b 53 6e 6f 77 70 6c 6f 77 45 76 65 6e 74 28 7b 63 61 74 65 67 6f 72 79 3a 22 74 65 61 6d 73 5f 6f 6e 62 6f 61 72 64 69 6e 67 22 2c 61 63 74 69 6f 6e 3a 22 67 6f 5f 74 6f 5f 62 72 61 6e 64 69 6e 67 22 2c 6c 61 62 65 6c 3a 22 63 61 6c 6c 6f 75 74 5f 77 61 6c 6c 70 61 70 65 72 22 7d 29 2c 6e 28 29 7d 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 74 6e 2e 5a 2c 7b 74 65 78 74 3a 50 74 2e 5a 2e 74 28 22 63 61 6c 6c 6f 75 74 2e 70 72 6f 5f 6f 6e 62 6f 61 72 64 69 6e 67 2e 6e 6f 74 5f 6e 6f 77 22 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 50 72 6f 4f 6e 62 6f 61 72 64 69 6e 67 43 61 6c 6c 6f 75 74 5f 5f 73 65 63 6f 6e 64 61 72 79 2d 63 74 61 2d 62 75 74 74 6f 6e 22 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 56 74 2e 5a 2e 74 72 61 63 6b 53 6e Data Ascii: trackSnowplowEvent({category:"teams_onboarding",action:"go_to_branding",label:"callout_wallpaper"}),n()}}),(0,o.jsx)(tn.Z,{text:Pt.Z.t("callout.pro_onboarding.not_now"),className:"ProOnboardingCallout__secondary-cta-button",onClick:function(){Vt.Z.trackSn
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 5a 7c 7c 76 6f 69 64 20 30 3d 3d 3d 5a 3f 76 6f 69 64 20 30 3a 5a 2e 74 65 61 6d 73 2c 79 2c 43 5d 29 3b 28 30 2c 73 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 26 26 77 69 6e 64 6f 77 2e 70 72 6f 66 69 74 77 65 6c 6c 28 22 75 73 65 72 5f 69 64 22 2c 50 29 7d 29 2c 5b 50 5d 29 3b 76 61 72 20 42 3d 62 72 28 74 29 2c 51 3d 6e 75 6c 6c 3d 3d 3d 49 7c 7c 76 6f 69 64 20 30 3d 3d 3d 49 3f 76 6f 69 64 20 30 3a 49 2e 6c 6f 67 6f 55 72 6c 2c 57 3d 21 28 6e 75 6c 6c 3d 3d 3d 49 7c 7c 76 6f 69 64 20 30 3d 3d 3d 49 3f 76 6f 69 64 20 30 3a 49 2e 69 64 29 7c 7c 42 6f 6f 6c 65 61 6e 28 6e 75 6c 6c 3d 3d 3d 5a 7c 7c 76 6f 69 64 20 30 3d 3d 3d 5a 3f 76 6f 69 64 20 30 3a 5a 2e 74 65 61 6d 73 2e 66 69 6e 64 28 28 66 75 6e Data Ascii: null===Z\|\|void 0===Z?void 0:Z.teams,y,C]);(0,s.useEffect)((function(){P&&window.profitwell("user_id",P)}),[P]);var B=br(t),Q=null===I\|\|void 0===I?void 0:I.logoUrl,W=!(null===I\|\|void 0===I?void 0:I.id)\|\|Boolean(null===Z\|\|void 0===Z?void 0:Z.teams.find((fun
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 6e 2e 70 65 6e 64 69 6e 67 2c 64 3d 6e 2e 61 63 63 6f 75 6e 74 2c 75 3d 6e 2e 61 75 74 68 2c 70 3d 4e 2e 5a 2e 63 75 72 72 65 6e 74 52 6f 75 74 65 72 2c 67 3d 6f 69 28 73 29 2c 66 3d 52 28 29 28 45 69 2c 28 65 3d 7b 7d 2c 28 30 2c 56 2e 5a 29 28 65 2c 22 22 2e 63 6f 6e 63 61 74 28 45 69 2c 22 2d 2d 77 69 74 68 2d 70 61 6e 65 6c 22 29 2c 22 74 72 61 6e 73 66 65 72 22 21 3d 3d 72 2e 74 79 70 65 29 2c 28 30 2c 56 2e 5a 29 28 65 2c 22 22 2e 63 6f 6e 63 61 74 28 45 69 2c 22 2d 2d 6c 6f 61 64 65 64 22 29 2c 43 69 29 2c 28 30 2c 56 2e 5a 29 28 65 2c 22 22 2e 63 6f 6e 63 61 74 28 45 69 2c 22 2d 2d 68 74 6d 6c 35 2d 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 21 30 3d 3d 3d 69 2e 68 69 64 64 65 6e 29 2c 65 29 29 3b 69 66 28 70 29 7b 76 61 72 20 6d 3d 70 2e 6c 61 73 74 Data Ascii: n.pending,d=n.account,u=n.auth,p=N.Z.currentRouter,g=oi(s),f=R()(Ei,(e={},(0,V.Z)(e,"".concat(Ei,"--with-panel"),"transfer"!==r.type),(0,V.Z)(e,"".concat(Ei,"--loaded"),Ci),(0,V.Z)(e,"".concat(Ei,"--html5-fullscreen"),!0===i.hidden),e));if(p){var m=p.last
2024-04-25 07:06:57 UTC	14808	IN	Data Raw: 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 68 72 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 63 6f 6e 73 65 6e 74 2d 6d 61 6e 61 67 65 72 5f 5f 64 61 74 61 2d 6f 70 74 2d 69 6e 2d 68 72 22 7d 29 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4e 2e 5a 2e 6e 61 76 69 67 61 74 65 54 6f 28 4e 2e 5a 2e 67 65 74 4c 61 73 74 52 6f 75 74 65 28 22 74 72 61 6e 73 66 65 72 22 2c 22 2f 22 29 29 7d 2c 6e 3d 22 70 61 6e 65 6c 22 3b 72 65 74 75 72 6e 20 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3f 28 30 2c 6f 2e 6a 73 78 29 28 75 61 2c 7b 7d 29 3a 28 30 2c 6f 2e 6a 73 78 73 29 28 65 6e 2e 70 32 2c 7b 69 73 49 6e 50 61 6e 65 6c 3a 21 30 2c 63 6f 6f 6b 69 65 57 61 6c 6c 56 61 72 69 61 74 69 6f 6e 3a 7b 70 61 6e 65 6c 3a Data Ascii: }),(0,o.jsx)("hr",{className:"consent-manager__data-opt-in-hr"})]})}function pa(e){var t=function(){N.Z.navigateTo(N.Z.getLastRoute("transfer","/"))},n="panel";return e.isLoggedIn?(0,o.jsx)(ua,{}):(0,o.jsxs)(en.p2,{isInPanel:!0,cookieWallVariation:{panel:
2024-04-25 07:06:57 UTC	8380	IN	Data Raw: 6e 22 29 2c 5b 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 65 78 69 74 52 65 73 6f 6c 76 65 3d 74 2c 65 2e 65 78 69 74 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 2e 73 65 74 74 69 6e 67 73 2e 64 75 72 61 74 69 6f 6e 29 7d 29 29 5d 7d 7d 5d 29 2c 65 7d 28 29 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 43 2e 5a 29 28 6e 2c 65 29 3b 76 61 72 20 74 3d 28 30 2c 45 2e 5a 29 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 30 2c 49 2e 5a 29 28 74 68 69 73 2c 6e 29 2c 72 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 28 30 2c 56 2e 5a 29 28 28 30 2c 4d 2e 5a 29 28 72 29 2c 22 72 65 73 65 74 52 65 74 75 72 6e 50 61 74 68 22 2c 28 66 75 6e 63 74 69 Data Ascii: n"),[new Promise((function(t){e.exitResolve=t,e.exitTimeout=setTimeout(t,e.settings.duration)}))]}}]),e}(),ja=function(e){(0,C.Z)(n,e);var t=(0,E.Z)(n);function n(e){var r;return(0,I.Z)(this,n),r=t.call(this,e),(0,V.Z)((0,M.Z)(r),"resetReturnPath",(functi
2024-04-25 07:06:57 UTC	6396	IN	Data Raw: 63 74 2c 73 65 73 73 69 6f 6e 3a 44 28 29 2e 6f 62 6a 65 63 74 2c 69 73 4c 6f 61 64 69 6e 67 3a 44 28 29 2e 62 6f 6f 6c 2c 72 65 73 65 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 73 65 74 46 6f 72 6d 53 74 61 74 65 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 63 72 65 61 74 65 54 72 61 6e 73 66 65 72 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 73 65 74 4e 65 78 74 41 63 74 69 6f 6e 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 61 63 63 65 70 74 54 65 72 6d 73 41 6e 64 43 6f 6e 64 69 74 69 6f 6e 73 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 72 65 76 65 72 74 41 63 63 6f 75 6e 74 3a 44 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 Data Ascii: ct,session:D().object,isLoading:D().bool,resetNotification:D().func.isRequired,setFormState:D().func.isRequired,createTransfer:D().func.isRequired,setNextAction:D().func.isRequired,acceptTermsAndConditions:D().func.isRequired,revertAccount:D().func.isRequ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49736	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:57 UTC	735	OUT	GET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=8c8133538b24d00656c88071370d77584492721062c4a9cb8f4dcd2825f7e3eb_20240425 HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.
2024-04-25 07:06:57 UTC	490	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 255676 Connection: close cache-control: private, max-age=900 Date: Thu, 25 Apr 2024 07:06:57 GMT expires: Thu, 25 Apr 2024 07:21:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 da84e2ac3154d478047d42802c838f86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: TTE3lfU6poZS8aLDERGetfMvzBcJNXS1w5obGnIXkGA46xxnKga4iQ==
2024-04-25 07:06:57 UTC	15894	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 76 74 70 5f 73 69 67 6e 61 6c 22 3a 31 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"9", "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_valu
2024-04-25 07:06:57 UTC	4329	IN	Data Raw: 35 2c 22 6e 22 5d 2c 22 61 75 74 6f 5f 64 65 74 65 63 74 22 5d 5d 2c 5b 32 32 2c 5b 32 38 2c 5b 31 35 2c 22 6f 22 5d 5d 2c 5b 34 36 2c 5b 36 5d 5d 5d 2c 5b 35 32 2c 22 70 22 2c 5b 35 31 2c 22 22 2c 5b 37 2c 22 71 22 5d 2c 5b 35 32 2c 22 72 22 2c 5b 32 2c 5b 31 35 2c 22 71 22 5d 2c 22 67 65 74 4d 65 74 61 64 61 74 61 22 2c 5b 37 2c 22 75 73 65 72 5f 64 61 74 61 5f 66 72 6f 6d 5f 61 75 74 6f 6d 61 74 69 63 22 5d 5d 5d 2c 5b 32 32 2c 5b 31 35 2c 22 72 22 5d 2c 5b 34 36 2c 5b 33 36 2c 5b 31 35 2c 22 72 22 5d 5d 5d 5d 2c 5b 35 32 2c 22 73 22 2c 5b 22 65 22 2c 5b 38 2c 22 65 78 63 6c 75 64 65 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 22 2c 5b 31 36 2c 5b 31 35 2c 22 6f 22 5d 2c 22 65 78 63 6c 75 64 65 5f 65 6c 65 6d 65 6e 74 5f 73 65 6c 65 63 74 6f 72 73 Data Ascii: 5,"n"],"auto_detect"]],[22,[28,[15,"o"]],[46,[6]]],[52,"p",[51,"",[7,"q"],[52,"r",[2,[15,"q"],"getMetadata",[7,"user_data_from_automatic"]]],[22,[15,"r"],[46,[36,[15,"r"]]]],[52,"s",["e",[8,"excludeElementSelectors",[16,[15,"o"],"exclude_element_selectors
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 73 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 32 2c 5b 31 35 2c 22 61 22 5d 2c 22 67 74 6d 4f 6e 53 75 63 63 65 73 73 22 2c 5b 37 5d 5d 5d 0a 20 2c 5b 35 32 2c 22 5f 5f 6d 6f 64 75 6c 65 5f 63 6f 6e 76 65 72 74 44 6f 6d 61 69 6e 43 6f 6e 64 69 74 69 6f 6e 73 22 2c 5b 31 33 2c 5b 34 31 2c 22 24 30 22 5d 2c 5b 33 2c 22 24 30 22 2c 5b 35 31 2c 22 22 2c 5b 37 5d 2c 5b 35 30 2c 22 61 22 2c 5b 34 36 5d 2c 5b 35 30 2c 22 65 22 2c 5b 34 36 2c 22 67 22 5d 2c 5b 33 36 2c 5b 32 2c 5b 31 35 2c 22 67 22 5d 2c 22 72 65 70 6c 61 63 65 22 2c 5b 37 2c 5b 31 35 2c 22 64 22 5d 2c 22 5c 5c 24 26 22 5d 5d 5d 5d 2c 5b 35 30 2c 22 66 22 2c 5b 34 36 2c 22 67 22 5d 2c 5b 35 32 2c 22 68 22 2c 5b 37 5d 5d 2c 5b 35 33 2c 5b 34 31 2c 22 69 22 5d 2c 5b 33 2c 22 69 22 2c 30 5d 2c 5b 36 33 2c Data Ascii: s",[46,"a"],[2,[15,"a"],"gtmOnSuccess",[7]]] ,[52,"__module_convertDomainConditions",[13,[41,"$0"],[3,"$0",[51,"",[7],[50,"a",[46],[50,"e",[46,"g"],[36,[2,[15,"g"],"replace",[7,[15,"d"],"\\$&"]]]],[50,"f",[46,"g"],[52,"h",[7]],[53,[41,"i"],[3,"i",0],[63,
2024-04-25 07:06:57 UTC	4096	IN	Data Raw: 2b 2b 29 7b 69 66 28 21 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 65 5d 29 29 72 65 74 75 72 6e 3b 64 3d 64 5b 61 5b 65 5d 5d 3b 69 66 28 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 64 29 29 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 64 7d 2c 0a 47 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 63 2c 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 64 3d 64 5b 65 5b 66 5d 5d 3d 7b 7d 3b 64 5b 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 62 3b 72 65 74 75 72 6e 20 63 7d 2c 48 62 3d 2f 5e 5c 77 7b 31 2c 39 7d 24 2f 2c 49 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 7c 7c 7b 7d 3b 62 3d 62 7c 7c 22 2c 22 3b 76 61 72 20 63 3d 5b 5d 3b Data Ascii: ++){if(!d.hasOwnProperty(a[e]))return;d=d[a[e]];if(0<=b.indexOf(d))return}return d},Gb=function(a,b){for(var c={},d=c,e=a.split("."),f=0;f<e.length-1;f++)d=d[e[f]]={};d[e[e.length-1]]=b;return c},Hb=/^\w{1,9}$/,Ib=function(a,b){a=a\|\|{};b=b\|\|",";var c=[];
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 21 31 3a 21 30 3b 76 61 72 20 67 3b 67 3d 50 62 28 6b 63 28 61 29 29 3b 66 2e 73 72 63 3d 4e 62 28 67 29 3b 76 61 72 20 68 2c 6d 2c 6e 2c 70 3d 6e 75 6c 6c 3d 3d 28 6e 3d 28 6d 3d 28 66 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 66 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3f 76 6f 69 64 20 30 3a 6e 2e 63 61 6c 6c 28 6d 2c 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 3b 28 68 3d 70 3f 70 2e 6e 6f 6e 63 65 7c 7c 70 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 22 22 3a 22 22 29 26 26 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 68 29 3b 70 63 28 66 2c 62 29 3b 63 Data Ascii: !1:!0;var g;g=Pb(kc(a));f.src=Nb(g);var h,m,n,p=null==(n=(m=(f.ownerDocument&&f.ownerDocument.defaultView\|\|window).document).querySelector)?void 0:n.call(m,"script[nonce]");(h=p?p.nonce\|\|p.getAttribute("nonce")\|\|"":"")&&f.setAttribute("nonce",h);pc(f,b);c
2024-04-25 07:06:57 UTC	1514	IN	Data Raw: 6e 20 4a 28 74 68 69 73 2c 61 29 3c 4a 28 74 68 69 73 2c 62 29 7d 2c 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4a 28 74 68 69 73 2c 61 29 3c 3d 4a 28 74 68 69 73 2c 62 29 7d 2c 4f 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 6e 65 77 20 59 61 2c 0a 63 3d 30 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 4a 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 5b 63 5d 29 3b 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 2c 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 6e 65 77 20 61 62 2c 63 3d 30 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 63 2b 3d 32 29 7b 76 61 72 20 64 3d 4a 28 74 68 69 73 2c 61 72 Data Ascii: n J(this,a)<J(this,b)},Nd=function(a,b){return J(this,a)<=J(this,b)},Od=function(a){for(var b=new Ya,c=0;c<arguments.length;c++){var d=J(this,arguments[c]);b.push(d)}return b},Pd=function(a){for(var b=new ab,c=0;c<arguments.length-1;c+=2){var d=J(this,ar
2024-04-25 07:06:57 UTC	16384	IN	Data Raw: 79 70 65 29 29 29 72 65 74 75 72 6e 20 66 7d 2c 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 4a 28 74 68 69 73 2c 61 29 3f 4a 28 74 68 69 73 2c 62 29 3a 4a 28 74 68 69 73 2c 63 29 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 4a 28 74 68 69 73 2c 61 29 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 0a 51 63 3f 22 66 75 6e 63 74 69 6f 6e 22 3a 74 79 70 65 6f 66 20 61 7d 2c 66 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 74 68 69 73 2e 6d 2c 63 3d 30 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 64 7c 7c 62 2e 61 64 64 28 64 2c 76 6f 69 Data Ascii: ype)))return f},de=function(a,b,c){return J(this,a)?J(this,b):J(this,c)},ee=function(a){a=J(this,a);return a instanceofQc?"function":typeof a},fe=function(a){for(var b=this.m,c=0;c<arguments.length;c++){var d=arguments[c];"string"!==typeof d\|\|b.add(d,voi
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 20 50 72 65 48 69 74 20 64 61 74 61 2e 22 29 3b 7d 7d 7d 2c 0a 50 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 63 6f 6e 74 65 78 74 56 61 6c 75 65 29 7b 76 61 72 20 63 3b 61 3a 7b 76 61 72 20 64 3d 61 2e 63 6f 6e 74 65 78 74 56 61 6c 75 65 2c 65 3d 64 2e 6b 65 79 50 61 72 74 73 3b 69 66 28 65 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 64 2e 6e 61 6d 65 73 70 61 63 65 54 79 70 65 3b 73 77 69 74 63 68 28 66 29 7b 63 61 73 65 20 31 3a 63 3d 4f 67 28 65 2c 62 29 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 32 3a 76 61 72 20 67 3d 62 2e 6d 61 63 72 6f 3b 63 3d 67 3f 67 5b 65 5b 30 5d 5d 3a 76 6f 69 64 20 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 Data Ascii: PreHit data.");}}},Pg=function(a,b){if(a){if(void 0!==a.contextValue){var c;a:{var d=a.contextValue,e=d.keyParts;if(e&&0!==e.length){var f=d.namespaceType;switch(f){case 1:c=Og(e,b);break a;case 2:var g=b.macro;c=g?g[e[0]]:void 0;break a;default:throw E
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 0a 64 69 2e 44 66 3d 76 69 3b 76 61 72 20 77 69 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 3d 22 22 3b 74 68 69 73 2e 4b 3d 74 68 69 73 2e 46 3d 21 31 3b 74 68 69 73 2e 47 61 3d 74 68 69 73 2e 52 3d 74 68 69 73 2e 61 61 3d 74 68 69 73 2e 48 3d 22 22 7d 2c 78 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 2e 48 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 22 2f 22 3d 3d 3d 77 69 2e 48 5b 61 2d 31 5d 3f 77 69 2e 48 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2d 31 29 3a 77 69 2e 48 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 69 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 63 3d 6d 61 28 61 2e 73 70 6c 69 74 28 22 7c 22 29 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 62 5b 64 Data Ascii: di.Df=vi;var wi=new function(){this.m="";this.K=this.F=!1;this.Ga=this.R=this.aa=this.H=""},xi=function(){var a=wi.H.length;return"/"===wi.H[a-1]?wi.H.substring(0,a-1):wi.H};function yi(a){for(var b={},c=ma(a.split("\|")),d=c.next();!d.done;d=c.next())b[d
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 3d 21 30 3b 76 61 72 20 66 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 67 3d 66 5b 61 5d 7c 7c 7b 7d 2c 68 3d 67 2e 64 65 63 6c 61 72 65 5f 72 65 67 69 6f 6e 2c 6d 3d 63 26 26 6c 28 63 29 3f 63 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 76 6f 69 64 20 30 3b 64 3d 64 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 65 3d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 69 66 28 22 22 3d 3d 3d 64 7c 7c 6d 3d 3d 3d 65 7c 7c 28 6d 3d 3d 3d 64 3f 68 21 3d 3d 65 3a 21 6d 26 26 21 68 29 29 7b 76 61 72 20 6e 3d 7b 72 65 67 69 6f 6e 3a 67 2e 72 65 67 69 6f 6e 2c 64 65 63 6c 61 72 65 5f 72 65 67 69 6f 6e 3a 6d 2c 64 65 63 6c 61 72 65 3a 22 67 72 61 6e 74 65 64 22 3d 3d 3d 62 2c 69 6d 70 6c 69 63 69 74 3a 67 2e 69 6d 70 6c 69 63 69 74 2c 64 65 66 61 75 6c 74 3a 67 2e 64 Data Ascii: =!0;var f=this.entries,g=f[a]\|\|{},h=g.declare_region,m=c&&l(c)?c.toUpperCase():void 0;d=d.toUpperCase();e=e.toUpperCase();if(""===d\|\|m===e\|\|(m===d?h!==e:!m&&!h)){var n={region:g.region,declare_region:m,declare:"granted"===b,implicit:g.implicit,default:g.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49744	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:58 UTC	671	OUT	GET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US
2024-04-25 07:06:58 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 164599 Connection: close Date: Thu, 11 Apr 2024 14:10:53 GMT Last-Modified: Thu, 11 Apr 2024 13:54:46 GMT ETag: "6095c9597989539e31fb82efbb0997a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nI9KlhM_UwHsgRiMvVa1TdhcKw8MovJoj393MaubyJfBMv35NBoxjg== Age: 1184166
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 34 35 5d 2c 7b 38 37 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 7b 64 61 74 65 3a 7b 66 6f 72 6d 61 74 73 3a 7b 64 65 66 61 75 6c 74 3a 22 25 64 2d 25 6d 2d 25 59 22 2c 73 68 6f 72 74 3a 22 25 2d 64 20 25 42 22 2c 6c 6f 6e 67 3a 22 25 2d 64 20 25 42 2c 20 25 59 22 2c 77 69 74 68 5f 64 61 79 3a 22 25 41 2c 20 25 2d 64 20 25 42 22 2c 77 69 74 68 6f 75 74 5f 64 61 79 3a 22 25 2d 64 20 25 42 20 25 59 22 7d 2c 64 61 79 5f 6e 61 6d 65 73 3a 5b 22 53 75 6e 64 61 79 22 2c 22 4d 6f 6e 64 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Mond
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 70 61 79 6d 65 6e 74 20 64 65 74 61 69 6c 73 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 22 2c 64 69 73 63 6f 75 6e 74 3a 22 44 69 73 63 6f 75 6e 74 22 2c 70 72 6f 64 75 63 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4f 6e 65 20 25 7b 64 75 72 61 74 69 6f 6e 7d 20 6f 66 20 57 65 54 72 61 6e 73 66 65 72 20 50 72 6f 22 2c 74 69 74 6c 65 3a 22 59 6f 75 27 72 65 20 6e 65 61 72 6c 79 20 74 68 65 72 65 21 22 2c 74 6f 74 61 6c 3a 22 54 6f 74 61 6c 22 2c 76 61 74 3a 22 56 41 54 22 2c 79 6f 75 72 5f 64 65 74 61 69 6c 73 3a 22 59 6f 75 72 20 64 65 74 61 69 6c 73 22 2c 79 6f 75 72 5f 6f 72 64 65 72 3a 22 59 6f 75 72 20 6f 72 64 65 72 22 2c 74 69 74 6c 65 5f 65 72 72 6f 72 3a 22 48 6d 6d 6d 20 74 68 65 72 65 20 73 65 65 6d 73 20 74 6f 20 62 65 20 61 6e 20 69 73 73 75 Data Ascii: payment details and try again",discount:"Discount",product_description:"One %{duration} of WeTransfer Pro",title:"You're nearly there!",total:"Total",vat:"VAT",your_details:"Your details",your_order:"Your order",title_error:"Hmmm there seems to be an issu
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 20 74 72 61 6e 73 66 65 72 22 7d 2c 6d 6f 64 61 6c 3a 7b 64 69 73 63 6c 61 69 6d 65 72 3a 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 73 77 69 74 63 68 20 74 6f 20 61 20 62 69 6c 6c 69 6e 67 20 63 79 63 6c 65 20 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 74 69 74 6c 65 3a 22 53 77 69 74 63 68 20 74 6f 20 25 7b 70 6c 61 6e 5f 74 69 65 72 7d 20 66 6f 72 20 25 7b 70 72 69 63 65 7d 22 2c 70 6c 61 6e 5f 69 6e 66 6f 3a 22 25 7b 70 6c 61 6e 5f 74 65 72 6d 7d 20 25 7b 70 6c 61 6e 5f 6e 61 6d 65 7d 20 70 6c 61 6e 20 28 70 72 6f 72 61 74 65 64 29 22 2c 79 65 61 72 6c 79 3a 22 79 65 61 72 6c 79 22 2c 6d 6f 6e 74 68 6c 79 3a 22 6d 6f 6e 74 68 6c 79 22 2c 66 69 6e 61 6c 5f 70 72 69 63 65 3a 22 50 61 79 20 Data Ascii: transfer"},modal:{disclaimer:"You can only switch to a billing cycle based on your current subscription",title:"Switch to %{plan_tier} for %{price}",plan_info:"%{plan_term} %{plan_name} plan (prorated)",yearly:"yearly",monthly:"monthly",final_price:"Pay
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 22 2c 74 65 61 6d 73 3a 22 59 6f 75 72 20 74 65 61 6d 20 6f 66 20 25 7b 61 6d 6f 75 6e 74 4f 66 4d 65 6d 62 65 72 73 7d 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 25 7b 63 75 72 72 65 6e 74 54 65 61 6d 7d 22 2c 74 69 74 6c 65 3a 22 57 68 65 6e 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 65 6e 64 73 20 6f 6e 20 3c 73 74 72 6f 6e 67 3e 25 7b 64 61 74 65 7d 3c 2f 73 74 72 6f 6e 67 3e 3a 22 2c 22 74 72 61 6e 73 66 65 72 2d 65 78 70 69 72 79 22 3a 22 59 6f 75 72 20 65 78 69 73 74 69 6e 67 20 74 72 61 6e 73 66 65 72 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 65 74 65 64 20 61 66 74 65 72 20 32 38 20 64 61 79 73 22 2c 22 74 72 61 6e 73 66 65 72 2d 74 65 61 6d 2d 6d 65 6d 62 65 72 22 3a 22 59 6f 75 20 77 6f Data Ascii: ",teams:"Your team of %{amountOfMembers} will be removed from %{currentTeam}",title:"When your current subscription ends on <strong>%{date}</strong>:","transfer-expiry":"Your existing transfers will be deleted after 28 days","transfer-team-member":"You wo
2024-04-25 07:06:58 UTC	11621	IN	Data Raw: 74 61 69 6c 6f 72 65 64 20 61 64 73 20 6f 6e 20 61 6e 64 20 6f 66 66 20 6f 75 72 20 77 65 62 73 69 74 65 73 2e 22 2c 74 6f 6f 6c 74 69 70 5f 61 6e 63 68 6f 72 3a 22 57 68 61 74 20 64 6f 65 73 20 74 68 69 73 20 6d 65 61 6e 3f 22 2c 74 6f 6f 6c 74 69 70 3a 7b 74 69 74 6c 65 3a 22 48 6f 77 20 69 73 20 57 65 54 72 61 6e 73 66 65 72 20 75 73 69 6e 67 20 6d 79 20 64 61 74 61 3f 22 2c 70 31 3a 22 57 65 20 75 73 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 73 68 6f 77 20 79 6f 75 20 28 61 6e 64 20 6f 74 68 65 72 73 20 6c 69 6b 65 20 79 6f 75 29 20 57 65 54 72 61 6e 73 66 65 72 20 61 64 73 20 6f 6e 20 77 65 62 73 69 74 65 73 20 79 6f 75 20 76 69 73 69 74 2c 20 73 75 63 68 20 61 73 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 2e 22 2c 70 32 3a Data Ascii: tailored ads on and off our websites.",tooltip_anchor:"What does this mean?",tooltip:{title:"How is WeTransfer using my data?",p1:"We use your email address to show you (and others like you) WeTransfer ads on websites you visit, such as social media.",p2:
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 73 61 67 65 20 74 6f 20 67 6f 20 77 69 74 68 20 79 6f 75 72 20 74 72 61 6e 73 66 65 72 20 68 65 72 65 22 2c 70 61 73 73 77 6f 72 64 3a 22 59 6f 75 20 63 61 6e 20 70 61 73 73 77 6f 72 64 2d 70 72 6f 74 65 63 74 20 61 20 74 72 61 6e 73 66 65 72 20 66 6f 72 20 61 64 64 65 64 20 73 65 63 75 72 69 74 79 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 77 65 20 64 6f 6e 27 74 20 61 64 64 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 69 6e 74 6f 20 74 68 65 20 65 6d 61 69 6c 20 73 6f 20 79 6f 75 27 6c 6c 20 6e 65 65 64 20 74 6f 20 67 69 76 65 20 69 74 20 74 6f 20 74 68 65 20 72 69 67 68 74 20 70 65 6f 70 6c 65 21 22 2c 72 65 63 69 70 69 65 6e 74 5f 6c 69 6d 69 74 3a 22 41 64 64 20 75 70 20 74 6f 20 25 7b 65 6d 61 69 6c 5f 6c 69 6d 69 74 7d 20 65 6d 61 69 6c 73 20 6f 72 20 Data Ascii: sage to go with your transfer here",password:"You can password-protect a transfer for added security. Please note we don't add the password into the email so you'll need to give it to the right people!",recipient_limit:"Add up to %{email_limit} emails or
2024-04-25 07:06:58 UTC	15596	IN	Data Raw: 6e 27 74 20 77 6f 72 6b 20 5c 75 32 30 31 33 20 70 6c 65 61 73 65 20 67 69 76 65 20 69 74 20 61 6e 6f 74 68 65 72 20 67 6f 22 7d 2c 70 65 6e 64 69 6e 67 3a 7b 74 69 74 6c 65 3a 22 57 65 27 72 65 20 6e 65 61 72 6c 79 20 72 65 61 64 79 2e 2e 2e 22 2c 73 75 62 74 69 74 6c 65 3a 22 50 72 65 70 61 72 69 6e 67 2e 2e 2e 22 7d 2c 64 6f 77 6e 6c 6f 61 64 69 6e 67 3a 7b 74 69 74 6c 65 3a 22 47 65 74 74 69 6e 67 20 79 6f 75 72 20 66 69 6c 65 73 2e 2e 2e 22 2c 74 65 78 74 3a 22 57 65 27 72 65 20 6a 75 73 74 20 70 72 65 70 61 72 69 6e 67 20 79 6f 75 72 20 64 6f 77 6e 6c 6f 61 64 22 7d 2c 64 6f 77 6e 6c 6f 61 64 65 64 3a 7b 74 69 74 6c 65 3a 22 59 6f 75 72 20 64 6f 77 6e 6c 6f 61 64 20 68 61 73 20 73 74 61 72 74 65 64 22 2c 74 65 78 74 3a 22 4f 6e 63 65 20 69 74 27 73 Data Ascii: n't work \u2013 please give it another go"},pending:{title:"We're nearly ready...",subtitle:"Preparing..."},downloading:{title:"Getting your files...",text:"We're just preparing your download"},downloaded:{title:"Your download has started",text:"Once it's
2024-04-25 07:06:58 UTC	16384	IN	Data Raw: 3c 73 74 72 6f 6e 67 3e 25 7b 6e 61 6d 65 7d 21 3c 2f 73 74 72 6f 6e 67 3e 22 2c 61 63 63 65 70 74 3a 22 59 65 73 2c 20 70 6c 65 61 73 65 22 2c 22 61 63 63 65 70 74 2d 73 68 6f 72 74 22 3a 22 4f 6b 61 79 22 2c 62 6f 64 79 5f 31 3a 22 57 61 6e 74 20 69 6e 20 6f 6e 20 73 74 6f 72 69 65 73 20 61 62 6f 75 74 20 63 72 65 61 74 69 76 69 74 79 20 61 6e 64 20 74 68 65 20 6c 61 74 65 73 74 20 57 65 54 72 61 6e 73 66 65 72 20 6e 65 77 73 3f 22 2c 62 6f 64 79 5f 32 3a 22 28 59 6f 75 20 63 61 6e 20 61 6c 77 61 79 73 20 75 6e 73 75 62 73 63 72 69 62 65 20 6c 61 74 65 72 2e 29 22 2c 64 65 63 6c 69 6e 65 3a 22 4e 6f 2c 20 74 68 61 6e 6b 73 22 2c 22 64 65 63 6c 69 6e 65 2d 73 68 6f 72 74 22 3a 22 4e 6f 20 74 68 61 6e 6b 73 22 2c 74 69 74 6c 65 3a 22 57 65 6c 63 6f 6d 65 Data Ascii: <strong>%{name}!</strong>",accept:"Yes, please","accept-short":"Okay",body_1:"Want in on stories about creativity and the latest WeTransfer news?",body_2:"(You can always unsubscribe later.)",decline:"No, thanks","decline-short":"No thanks",title:"Welcome
2024-04-25 07:06:58 UTC	2804	IN	Data Raw: 62 65 2e 63 6f 6d 2f 57 65 54 72 61 6e 73 66 65 72 22 7d 2c 63 75 73 74 6f 6d 5f 77 61 6c 6c 70 61 70 65 72 3a 7b 73 65 74 5f 63 75 73 74 6f 6d 5f 77 61 6c 6c 70 61 70 65 72 3a 22 53 65 74 20 63 75 73 74 6f 6d 20 77 61 6c 6c 70 61 70 65 72 22 2c 73 65 74 5f 63 75 73 74 6f 6d 5f 77 61 6c 6c 70 61 70 65 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 47 69 76 65 20 74 68 69 73 20 74 72 61 6e 73 66 65 72 20 69 74 73 20 76 65 72 79 20 6f 77 6e 20 77 61 6c 6c 70 61 70 65 72 20 74 6f 20 6d 61 6b 65 20 61 20 67 72 65 61 74 20 69 6d 70 72 65 73 73 69 6f 6e 20 77 68 65 6e 20 70 65 6f 70 6c 65 20 64 6f 77 6e 6c 6f 61 64 20 79 6f 75 72 20 66 69 6c 65 73 5c 75 32 30 31 34 64 6f 6e 27 74 20 77 6f 72 72 79 2c 20 74 68 69 73 20 77 6f 6e 27 74 20 63 68 61 6e 67 65 20 79 6f Data Ascii: be.com/WeTransfer"},custom_wallpaper:{set_custom_wallpaper:"Set custom wallpaper",set_custom_wallpaper_description:"Give this transfer its very own wallpaper to make a great impression when people download your files\u2014don't worry, this won't change yo
2024-04-25 07:06:58 UTC	1576	IN	Data Raw: 75 65 73 74 20 70 61 79 6d 65 6e 74 22 7d 2c 69 6e 74 65 67 72 61 74 69 6f 6e 5f 73 74 61 74 75 73 3a 7b 61 64 64 69 74 69 6f 6e 61 6c 5f 73 74 65 70 73 3a 22 25 7b 69 6e 74 65 67 72 61 74 69 6f 6e 7d 20 72 65 71 75 69 72 65 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 74 65 70 73 20 62 65 66 6f 72 65 20 69 74 20 63 61 6e 20 61 63 74 69 76 61 74 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 61 63 63 65 70 74 20 70 61 79 6d 65 6e 74 2e 22 2c 76 69 73 69 74 5f 73 74 72 69 6e 67 3a 22 56 69 73 69 74 20 25 7b 69 6e 74 65 67 72 61 74 69 6f 6e 7d 22 2c 6c 69 6e 6b 3a 22 25 7b 69 6e 74 65 67 72 61 74 69 6f 6e 4c 69 6e 6b 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 61 63 63 6f 75 6e 74 20 73 65 74 75 70 2e 22 2c 73 75 70 70 6f 72 74 69 6e 67 5f 74 65 78 74 Data Ascii: uest payment"},integration_status:{additional_steps:"%{integration} requires additional steps before it can activate your account and accept payment.",visit_string:"Visit %{integration}",link:"%{integrationLink} to complete account setup.",supporting_text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49746	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:58 UTC	2187	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4544&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:06:58 UTC	897	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:06:58 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 74e2a75ed2c90f5498599c99b3925b22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: tVH6ieMl1bFRbrneBmtkj0NNsxKhnzo55n-7aK3PjIdbw2bwrm4jgg==
2024-04-25 07:06:58 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	1538	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01
2024-04-25 07:06:59 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-25 07:07:00 UTC	1379	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:06:59 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; domain=.wetransfer.com; path=/; expires=Sat, 25 Apr 2026 07:06:59 GMT; secure Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-klm97-26758 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 690a004aca7ac3be8445d690d2f47b55 X-Runtime: 0.006256 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 556e27b2376aefcd1536a5e3e2ddd0d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v0cWhjvfrZGyXl3cNP3BkYr1sDGTrS75brHcoHLKx8B7rwJbCo2x8w==
2024-04-25 07:07:00 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49756	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:00 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27984 Connection: close Date: Sat, 06 Jan 2024 15:46:01 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Fri, 05 Jan 2024 23:53:36 GMT ETag: "0e2ee02874d250d7602ae70e15e174c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 a39699152176bddffd29fe58063d838a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OgnjZQemoDYu5Xte2XzLTZFCAolF-jwjAZVBA54oUtPhA4MVseofJA== Age: 9472860
2024-04-25 07:07:00 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 50 00 12 00 00 00 01 17 28 00 00 6c e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 38 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 10 81 f8 0e 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 86 7d 1b 45 fe 67 70 6e 3a 7e e9 51 91 ba ab 22 73 fb dd 17 34 3c d9 36 e9 dd ad 4e 4a 96 21 61 c2 1d 0f ce 03 11 f7 4f ef 5e f6 ff ff ff e7 25 95 38 2c cd 59 da 6b 0f 86 e1 b7 87 88 5c ce 3c 10 81 90 10 d1 b3 97 90 69 fa 88 de c7 0c cf 4c 05 86 e0 45 6b e1 a3 dd a9 9a 44 d4 b0 f2 cd e4 7b ec cb 5c 38 4e 74 f4 5d 74 e4 49 3e 6b 36 af 7c 67 be a0 20 33 0b b3 cc 1c 19 49 1c ee 54 b8 48 38 77 7a 3a bd ee 05 d7 89 ed ea ec 51 b3 0f 67 73 39 3b 64 53 ea 50 Data Ascii: wOF2mP(l?FFTM48p`nrW&6$H \~}Egpn:~Q"s4<6NJ!aO^%8,Yk\<iLEkD{\8Nt]tI>k6\|g 3ITH8wz:Qgs9;dSP
2024-04-25 07:07:00 UTC	12352	IN	Data Raw: 17 1d 85 42 20 70 b8 c4 c2 7f 23 da 9b 76 0c 9a b8 e4 f4 5c 3f 32 50 cf 06 e5 8d 43 ed fd 03 b3 9b 2a 72 c9 71 ab c6 6d b7 ea 8c b4 f9 ab 24 2f 2c bf 75 f0 c1 49 9e d4 1a 83 b4 db 63 60 30 f5 41 e6 c3 a1 d1 05 43 68 36 0a 15 b8 13 bb 53 1e f8 2e f6 5d b9 90 bf d4 7e c3 a9 3a 73 ea 84 f7 c4 f9 f8 f9 e3 de e3 e8 38 ee cc cc 13 be 13 85 27 3c 27 ce c4 cf 1c f7 1c 2f 3c ee 3b 3e 19 e7 09 7b a8 16 39 8b 4a 41 c9 2d 54 1a 20 47 51 a8 2c 39 50 56 2e 28 58 75 4c 8c 7e 39 fa 75 aa 6a d7 83 d6 bd e2 ab e5 6f f4 54 a5 62 8d cf c6 2a de aa e6 7e 7f 93 10 d4 a8 89 c1 6f be e7 70 ff f9 90 10 54 6b f0 c1 0f fe e1 3a c4 52 9b 07 94 da c5 62 a9 1d f4 48 6d 88 aa f5 8f 05 65 1f bb d9 0e b6 04 2f 9a 7c 90 ac 7c a9 65 ff 04 8e f4 3b 95 d9 bf c5 51 11 f7 30 a3 3c 96 8c 5e 49 Data Ascii: B p#v\?2PCrqm$/,uIc`0ACh6S.]~:s8'<'/<;>{9JA-T GQ,9PV.(XuL~9ujoTb~opTk:RbHme/\|\|e;Q0<^I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49755	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	634	OUT	GET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:00 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 35884 Connection: close Date: Thu, 02 Nov 2023 10:11:19 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 02 Nov 2023 09:51:45 GMT ETag: "51cbd7213ae115ed59c3f2874014ab69" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 556e27b2376aefcd1536a5e3e2ddd0d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AjZnilXmptDASjGdWFEJSkDOtBltWlBtQCb_tiUEEo9Q12TUAzS6ZQ== Age: 15108942
2024-04-25 07:07:00 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 8c 2c 00 12 00 00 00 01 7b 9c 00 00 8b c1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 82 0c 1b 81 86 1c 1c 91 76 06 60 00 87 6e 08 34 09 9c 15 11 08 0a 84 80 20 83 c1 32 0b 87 1c 00 01 36 02 24 03 8e 22 04 20 05 86 27 07 96 62 0c 81 27 5b 56 57 91 00 cd c5 3c d1 67 c4 3e 4a b7 21 50 1d cd ad ab 1a 55 48 09 f3 ac db e1 b6 51 d4 79 eb cc cc cb 2b d8 b1 0f 01 e7 41 d0 fd cc 2b 6a d9 ff ff ff ff 5b 92 45 8c ad dd 41 66 f6 ee 38 3a 80 b2 04 5f 35 d3 7a 4c 29 8c 5e 46 97 72 b8 94 68 a9 24 4b 96 87 9a dc 60 e3 5b cb d9 a6 32 d3 16 36 ba 6a c5 e6 75 b0 e4 5a 7f df 2b 52 d3 98 dd c7 31 7f 66 cb 36 a7 7a fc 02 69 cd 0b 60 49 48 52 76 e1 06 c8 6a 13 2d 5c 44 78 92 44 24 5e 88 52 c8 93 9a Data Ascii: wOF2,{?FFTMv`n4 26$" 'b'[VW<g>J!PUHQy+A+j[EAf8:_5zL)^Frh$K`[26juZ+R1f6zi`IHRvj-\DxD$^R
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 37 9a 00 b7 9c 38 3c 3c 1e 2e ad 5b e7 74 f5 d6 35 ba 37 af f7 d5 49 9a 21 cf fb a9 45 95 d9 86 9a 71 5b bb 0a 04 ed d5 26 8d 55 17 3f c0 3f c0 fb ea ff d2 7f f6 c0 86 cd 7f ef 3f f8 f5 6e 4a c7 82 b6 df 36 b5 2e 6b 4b 69 54 3d c6 ea 06 c0 af 3f 2d 1a c8 dc cf 7b d9 f0 3c f1 0c d9 55 65 b4 79 52 39 02 93 70 4e cc 3c 93 40 c0 a1 57 16 df 5c 41 bb 74 11 cd 89 5e ea 29 51 76 2e 7e d1 59 e1 1e de 57 3f f5 35 e2 a8 33 7b 3c 0b b9 93 f0 bb 46 8d c7 aa aa d7 ba 9d eb eb eb b2 37 6c f0 d5 cc 77 d3 fa 09 d9 a5 05 59 fa 4a 3d af d5 5f 2c 58 5e 61 53 a5 3c 79 18 10 50 15 c2 d0 dc 49 b2 13 6b 01 6b 4f b0 6e 30 6e b0 2e 9d 54 97 a4 a2 cd 41 06 33 2e b1 ff bc 45 fc c9 be 24 13 7e cf 01 0d 5f 79 07 f8 03 bd 00 22 d5 94 fa 6c 72 48 7b 20 03 38 21 78 fb 09 e6 23 af 23 c7 Data Ascii: 78<<.[t57I!Eq[&U???nJ6.kKiT=?-{<UeyR9pN<@W\At^)Qv.~YW?53{<F7lwYJ=_,X^aS<yPIkkOn0n.TA3.E$~_y"lrH{ 8!x##
2024-04-25 07:07:00 UTC	3869	IN	Data Raw: f8 ae 26 1f e4 7b 9d 4c 09 50 4f 2f de ad a4 a0 93 01 bc c5 09 23 8b 7c dc 7a 59 81 ad a0 d8 96 c6 9c 79 03 5e d0 26 fb 1d 57 96 ad 6e 6c 2d f7 48 e1 7d 4d 1b 8e c5 66 f2 0c 8f 41 e9 ab 29 1f 67 7a ab 31 e2 1b a8 e9 62 0a 22 d1 03 3e 46 5b 2d a4 d8 ff 38 4f a8 f7 52 0a ed 3a 86 a9 53 d0 30 0f 91 30 c3 7f de 63 dc d6 df dd 92 df 99 71 41 9b f2 09 27 f5 b5 67 6a aa 84 53 f8 13 9c 4b 48 31 09 69 26 30 59 51 b2 23 d0 39 96 11 2b 55 09 81 ad 5d 61 32 0b f4 90 cf 78 f9 eb 15 91 b1 bd 66 a1 8a 65 39 9b 9b dc 6c e4 bd b2 4d a7 ba 9a 30 d7 39 de 65 d2 8a ea 87 7d 58 1e 58 8f e5 ed ef 63 8a 6b b1 77 92 14 3a 59 8a 23 27 93 35 49 40 1e 1c 0d cf 83 af 5d 8c 27 f3 c9 d6 e7 12 db 9a ec 08 6c 2a b5 60 12 b4 86 49 68 0e 9a 65 8a 2b ca 39 c8 9d 2f 24 4c 39 92 91 50 77 89 Data Ascii: &{LPO/#\|zYy^&Wnl-H}MfA)gz1b">F[-8OR:S00cqA'gjSKH1i&0YQ#9+U]a2xfe9lM09e}XXckw:Y#'5I@]'l*`Ihe+9/$L9Pw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49750	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	1022	OUT	GET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D
2024-04-25 07:07:00 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 168399 Connection: close Date: Thu, 11 Apr 2024 13:34:37 GMT Last-Modified: Thu, 11 Apr 2024 09:49:15 GMT ETag: "5439e51f20378de7d73ba350c0b4b85b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9CXJ3naWfljOey_o2rIwFcI1r9uR_jgUji7JT6nPxIY-jhYMYfn3rw== Age: 1186344
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 31 36 5d 2c 7b 36 36 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6f 3d 6e 28 39 33 35 34 32 29 2c 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 75 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 67 3d 4f 62 6a 65 63 74 2e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 4c 28 65 29 3f 44 28 65 2c 22 22 29 3a 48 28 65 29 7d 3a 48 2c 59 3d 54 79 70 65 45 72 72 6f 72 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 59 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 28 4d 28 65 29 29 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 21 3d 3d 65 3a 71 28 65 29 7d 2c Data Ascii: nction(e){return"String"==L(e)?D(e,""):H(e)}:H,Y=TypeError,M=function(e){if(null==e)throw Y("Can't call method on "+e);return e},z=function(e){return J(M(e))},q=function(e){return"function"==typeof e},Q=function(e){return"object"==typeof e?null!==e:q(e)},
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 3d 67 6f 28 22 5c 75 64 66 30 36 5c 75 64 38 33 34 22 29 7c 7c 27 22 5c 5c 75 64 65 61 64 22 27 21 3d 3d 67 6f 28 22 5c 75 64 65 61 64 22 29 7d 29 29 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 75 6f 28 61 72 67 75 6d 65 6e 74 73 29 2c 72 3d 74 3b 69 66 28 28 51 28 74 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 29 26 26 21 6c 65 28 65 29 29 72 65 74 75 72 6e 20 52 6e 28 74 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 71 28 72 29 26 26 28 74 3d 46 28 72 2c 74 68 69 73 2c 65 2c 74 29 29 2c 21 6c 65 28 74 29 29 72 65 74 75 72 6e 20 74 7d 29 2c 6e 5b 31 5d 3d 74 2c 63 6f 28 67 6f 2c 6e 75 6c 6c 2c 6e 29 7d 2c 77 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 66 6f 28 6e 2c 74 2d 31 29 2c Data Ascii: =go("\udf06\ud834")\|\|'"\\udead"'!==go("\udead")})),bo=function(e,t){var n=uo(arguments),r=t;if((Q(t)\|\|void 0!==e)&&!le(e))return Rn(t)\|\|(t=function(e,t){if(q(r)&&(t=F(r,this,e,t)),!le(t))return t}),n[1]=t,co(go,null,n)},wo=function(e,t,n){var r=fo(n,t-1),
2024-04-25 07:07:00 UTC	15209	IN	Data Raw: 74 65 26 26 30 3d 3d 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 4a 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 68 61 6e 64 6c 65 64 7c 7c 4a 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 59 73 28 65 2c 65 2e 5f 64 65 66 65 72 72 65 64 73 5b 74 5d 29 3b 65 2e 5f 64 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 Data Ascii: te&&0===e._deferreds.length&&Js._immediateFn((function(){e._handled\|\|Js._unhandledRejectionFn(e._value)}));for(var t=0,n=e._deferreds.length;t<n;t++)Ys(e,e._deferreds[t]);e._deferreds=null}function Qs(e,t,n){this.onFulfilled="function"==typeof e?e:null,th
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 28 29 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6f 2e 73 65 6e 74 28 29 2c 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 49 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 73 77 69 74 63 68 28 6f 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 67 65 74 43 61 63 68 65 4b 65 79 73 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 28 6e 3d 6f 2e 73 65 6e 74 28 29 29 3f 5b 34 2c 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f Data Ascii: ())];case 3:return o.sent(),[2]}}))}))},e.prototype.clear=function(e){var t;return I(this,void 0,void 0,(function(){var n,r=this;return m(this,(function(o){switch(o.label){case 0:return[4,this.getCacheKeys()];case 1:return(n=o.sent())?[4,n.filter((functio
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 70 4f 77 6f 67 49 43 41 67 49 43 41 67 49 47 5a 31 62 6d 4e 30 61 57 39 75 49 45 46 31 64 47 68 6c 62 6e 52 70 59 32 46 30 61 57 39 75 52 58 4a 79 62 33 49 6f 5a 58 4a 79 62 33 49 73 49 47 56 79 63 6d 39 79 58 32 52 6c 63 32 4e 79 61 58 42 30 61 57 39 75 4c 43 42 7a 64 47 46 30 5a 53 77 67 59 58 42 77 55 33 52 68 64 47 55 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 47 46 77 63 46 4e 30 59 58 52 6c 49 44 30 39 50 53 42 32 62 32 6c 6b 49 44 41 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 46 77 63 46 4e 30 59 58 52 6c 49 44 30 67 62 6e 56 73 62 44 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 66 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 32 59 58 49 67 58 33 52 6f 61 58 Data Ascii: pOwogICAgICAgIGZ1bmN0aW9uIEF1dGhlbnRpY2F0aW9uRXJyb3IoZXJyb3IsIGVycm9yX2Rlc2NyaXB0aW9uLCBzdGF0ZSwgYXBwU3RhdGUpIHsKICAgICAgICAgICAgaWYgKGFwcFN0YXRlID09PSB2b2lkIDApIHsKICAgICAgICAgICAgICAgIGFwcFN0YXRlID0gbnVsbDsKICAgICAgICAgICAgfQogICAgICAgICAgICB2YXIgX3RoaX
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 49 29 7b 73 77 69 74 63 68 28 49 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 72 65 64 69 72 65 63 74 5f 75 72 69 2c 6e 3d 65 2e 61 70 70 53 74 61 74 65 2c 72 3d 64 28 65 2c 5b 22 72 65 64 69 72 65 63 74 5f 75 72 69 22 2c 22 61 70 70 53 74 61 74 65 22 5d 29 2c 6f 3d 41 61 28 43 61 28 29 29 2c 69 3d 41 61 28 43 61 28 29 29 2c 73 3d 43 61 28 29 2c 5b 34 2c 79 61 28 73 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 61 3d 49 2e 73 65 6e 74 28 29 2c 63 3d 62 61 28 61 29 2c 75 3d 65 2e 66 72 61 67 6d 65 6e 74 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 66 72 61 67 6d 65 6e 74 29 3a 22 22 2c 67 3d 74 68 69 73 2e 5f 67 65 74 50 61 72 61 6d 73 28 72 2c 6f 2c 69 2c 63 2c 74 29 2c 6c 3d 74 68 69 73 2e 5f 61 75 Data Ascii: nction(I){switch(I.label){case 0:return t=e.redirect_uri,n=e.appState,r=d(e,["redirect_uri","appState"]),o=Aa(Ca()),i=Aa(Ca()),s=Ca(),[4,ya(s)];case 1:return a=I.sent(),c=ba(a),u=e.fragment?"#".concat(e.fragment):"",g=this._getParams(r,o,i,c,t),l=this._au
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6f 2c 69 2c 61 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 6c 65 74 20 74 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 74 2e 70 75 73 68 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 65 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 28 6f 3d 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 6f 29 29 2c 31 36 21 3d 3d 6f 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f Data Ascii: ult=function(e,r,s){function a(e,o,i,a){if("string"==typeof e&&(e=function(e){e=unescape(encodeURIComponent(e));let t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n));return t}(e)),"string"==typeof o&&(o=(0,n.default)(o)),16!==o.length)throw TypeErro
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 65 74 75 72 6e 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 21 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 7c 7c 22 72 65 6e 64 65 72 65 72 22 21 3d 3d 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 2e 74 79 70 65 26 26 21 77 69 6e 64 6f 77 2e 70 72 6f 63 65 73 73 2e 5f 5f 6e 77 6a 73 29 7c 7c 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 7c 7c 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 7c 7c 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 2f 28 65 64 67 65 7c 74 72 69 64 65 6e 74 29 5c 2f 28 5c 64 2b 29 2f 29 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 Data Ascii: eturn!("undefined"==typeof window\|\|!window.process\|\|"renderer"!==window.process.type&&!window.process.__nwjs)\|\|("undefined"==typeof navigator\|\|!navigator.userAgent\|\|!navigator.userAgent.toLowerCase().match(/(edge\|trident)\/(\d+)/))&&("undefined"!=typeof d
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 74 28 29 2c 53 28 21 65 7c 7c 65 26 26 65 2e 74 79 70 65 3f 6e 65 77 20 6d 28 22 63 61 6e 63 65 6c 65 64 22 29 3a 65 29 29 7d 2c 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 73 75 62 73 63 72 69 62 65 28 62 29 2c 65 2e 73 69 67 6e 61 6c 26 26 28 65 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 3f 62 28 29 3a 65 2e 73 69 67 6e 61 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 62 29 29 29 2c 69 2e 69 73 53 74 72 65 61 6d 28 6b 29 3f 6b 2e 6f 6e 28 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 53 28 43 28 74 2c 65 2c 6e 75 6c 6c 2c 44 29 29 7d 29 29 2e 70 69 70 65 28 44 29 3a 44 2e 65 6e 64 28 6b 29 7d 29 29 7d 7d 29 29 2c 61 65 3d 66 28 28 28 65 2c 74 29 3d 3e 7b 22 Data Ascii: t(),S(!e\|\|e&&e.type?new m("canceled"):e))},e.cancelToken&&e.cancelToken.subscribe(b),e.signal&&(e.signal.aborted?b():e.signal.addEventListener("abort",b))),i.isStream(k)?k.on("error",(function(t){S(C(t,e,null,D))})).pipe(D):D.end(k)}))}})),ae=f(((e,t)=>{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49753	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	1022	OUT	GET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D
2024-04-25 07:07:00 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 326856 Connection: close Date: Thu, 11 Apr 2024 13:34:37 GMT Last-Modified: Thu, 11 Apr 2024 09:49:17 GMT ETag: "43a224ce59e07ead9cbb9a19231868d2" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: om490a0NgUBtTmIqTQVAISwd44lUQEoW6AamRlpClM6Yg1soDD9ERQ== Age: 1186344
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 33 34 5d 2c 7b 37 31 39 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6e 3d 72 28 39 33 35 34 32 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 39 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 65 3b 69 2e 62 69 67 6e 75 6d 3d 72 28 34 35 36 33 29 2c 69 2e 64 65 66 69 6e 65 3d 72 28 38 36 32 30 29 2e 64 65 66 69 6e 65 2c 69 2e 62 61 73 65 3d 72 28 35 39 34 35 29 2c 69 2e 63 6f 6e 73 74 61 6e 74 73 3d 72 28 34 35 35 34 29 2c 69 2e 64 65 63 6f 64 65 72 73 3d 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 53 74 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 62 69 74 73 74 72 22 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 74 2e 72 65 61 64 55 49 6e 74 38 28 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 45 72 72 6f 72 28 72 29 3f 72 3a 7b 75 6e 75 73 65 64 3a 72 2c 64 61 74 61 3a 74 2e 72 61 77 28 29 7d 7d 69 66 28 22 62 6d 70 73 74 72 22 3d 3d 3d 65 29 7b 76 61 72 20 69 3d 74 2e 72 61 77 28 29 3b 69 66 28 69 2e 6c 65 6e 67 74 68 25 32 3d 3d 3d 31 29 72 65 74 75 72 6e 20 74 2e 65 72 72 6f 72 28 22 44 65 63 6f 64 69 6e 67 20 6f 66 20 73 74 72 69 6e 67 20 74 79 70 65 3a 20 62 6d 70 73 74 72 20 6c 65 6e 67 74 68 20 6d 69 73 6d 61 74 63 68 22 29 3b 66 6f 72 28 76 61 72 20 6e 3d 22 22 2c 61 3d 30 3b 61 3c 69 2e 6c 65 6e 67 74 68 2f 32 3b 61 2b 2b 29 6e 2b 3d 53 74 Data Ascii: Str=function(t,e){if("bitstr"===e){var r=t.readUInt8();return t.isError(r)?r:{unused:r,data:t.raw()}}if("bmpstr"===e){var i=t.raw();if(i.length%2===1)return t.error("Decoding of string type: bmpstr length mismatch");for(var n="",a=0;a<i.length/2;a++)n+=St
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 69 73 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6f 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 30 7c 4d 61 74 68 2e 63 65 69 6c 28 74 2f 32 36 29 2c 72 3d 74 25 32 36 3b 74 68 69 73 2e 5f 65 78 70 61 6e 64 28 65 29 2c 72 3e 30 26 26 65 2d 2d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3d 36 37 31 30 38 38 36 33 26 7e 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 3e 30 26 26 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3d 7e 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 36 37 31 30 38 38 36 33 3e 3e 32 36 2d 72 29 2c 74 68 69 73 2e 73 74 72 69 70 28 29 7d 2c 61 2e 70 72 6f Data Ascii: is)},a.prototype.inotn=function(t){i("number"===typeof t&&t>=0);var e=0\|Math.ceil(t/26),r=t%26;this._expand(e),r>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return r>0&&(this.words[n]=~this.words[n]&67108863>>26-r),this.strip()},a.pro
2024-04-25 07:07:00 UTC	15209	IN	Data Raw: 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 72 2e 73 71 72 28 29 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 2c 6e 3d 6e 2e 73 71 72 28 29 29 30 21 3d 3d 65 5b 69 5d 26 26 28 72 3d 72 2e 6d 75 6c 28 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 75 73 68 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 2c 72 3d 74 25 32 36 2c 6e 3d 28 74 2d 72 29 2f 32 36 2c 61 3d 36 37 31 30 38 38 36 33 3e 3e 3e 32 36 2d 72 3c 3c 32 36 2d 72 3b 69 66 28 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 30 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 77 6f 72 64 73 5b 65 5d Data Ascii: length)for(var n=r.sqr();i<e.length;i++,n=n.sqr())0!==e[i]&&(r=r.mul(n));return r},a.prototype.iushln=function(t){i("number"===typeof t&&t>=0);var e,r=t%26,n=(t-r)/26,a=67108863>>>26-r<<26-r;if(0!==r){var o=0;for(e=0;e<this.length;e++){var f=this.words[e]
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 2e 6d 75 6c 28 74 2c 74 29 7d 2c 4d 2e 70 72 6f 74 6f 74 79 70 65 2e 73 71 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 69 73 5a 65 72 6f 28 29 29 72 65 74 75 72 6e 20 74 2e 63 6c 6f 6e 65 28 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 6d 2e 61 6e 64 6c 6e 28 33 29 3b 69 66 28 69 28 65 25 32 3d 3d 3d 31 29 2c 33 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 6d 2e 61 64 64 28 6e 65 77 20 61 28 31 29 29 2e 69 75 73 68 72 6e 28 32 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 77 28 74 2c 72 29 7d 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 6d 2e 73 75 62 6e 28 31 29 2c 6f 3d 30 3b 21 6e 2e 69 73 5a 65 72 6f 28 29 26 26 30 3d 3d 3d 6e 2e 61 6e 64 6c 6e 28 31 29 3b 29 6f 2b 2b 2c 6e 2e 69 75 73 68 72 6e 28 31 29 Data Ascii: eturn this.mul(t,t)},M.prototype.sqrt=function(t){if(t.isZero())return t.clone();var e=this.m.andln(3);if(i(e%2===1),3===e){var r=this.m.add(new a(1)).iushrn(2);return this.pow(t,r)}for(var n=this.m.subn(1),o=0;!n.isZero()&&0===n.andln(1);)o++,n.iushrn(1)
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 2e 69 6d 75 6c 28 70 2c 4a 29 7c 30 2c 6e 3d 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 59 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 4a 29 7c 30 2c 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 59 29 7c 30 3b 76 61 72 20 5f 74 3d 28 68 2b 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 63 2c 51 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 6e 3d 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 63 2c 74 74 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 51 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 68 3d 28 28 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 74 74 29 7c 30 29 2b 28 6e 3e 3e 3e 31 33 29 7c 30 29 2b 28 5f 74 3e 3e 3e 32 36 29 7c 30 2c 5f 74 26 3d 36 37 31 30 38 38 36 33 2c 69 3d 4d 61 74 68 2e 69 6d 75 6c 28 41 2c 55 29 2c 6e 3d Data Ascii: .imul(p,J)\|0,n=(n=n+Math.imul(p,Y)\|0)+Math.imul(b,J)\|0,a=a+Math.imul(b,Y)\|0;var _t=(h+(i=i+Math.imul(c,Q)\|0)\|0)+((8191&(n=(n=n+Math.imul(c,tt)\|0)+Math.imul(u,Q)\|0))<<13)\|0;h=((a=a+Math.imul(u,tt)\|0)+(n>>>13)\|0)+(_t>>>26)\|0,_t&=67108863,i=Math.imul(A,U),n=
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 68 2e 6d 69 6e 28 75 2f 6f 7c 30 2c 36 37 31 30 38 38 36 33 29 2c 69 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 6e 2c 75 2c 63 29 3b 30 21 3d 3d 69 2e 6e 65 67 61 74 69 76 65 3b 29 75 2d 2d 2c 69 2e 6e 65 67 61 74 69 76 65 3d 30 2c 69 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 6e 2c 31 2c 63 29 2c 69 2e 69 73 5a 65 72 6f 28 29 7c 7c 28 69 2e 6e 65 67 61 74 69 76 65 5e 3d 31 29 3b 66 26 26 28 66 2e 77 6f 72 64 73 5b 63 5d 3d 75 29 7d 72 65 74 75 72 6e 20 66 26 26 66 2e 5f 73 74 72 69 70 28 29 2c 69 2e 5f 73 74 72 69 70 28 29 2c 22 64 69 76 22 21 3d 3d 65 26 26 30 21 3d 3d 72 26 26 69 2e 69 75 73 68 72 6e 28 72 29 2c 7b 64 69 76 3a 66 7c 7c 6e 75 6c 6c 2c 6d 6f 64 3a 69 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 76 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e Data Ascii: h.min(u/o\|0,67108863),i._ishlnsubmul(n,u,c);0!==i.negative;)u--,i.negative=0,i._ishlnsubmul(n,1,c),i.isZero()\|\|(i.negative^=1);f&&(f.words[c]=u)}return f&&f._strip(),i._strip(),"div"!==e&&0!==r&&i.iushrn(r),{div:f\|\|null,mod:i}},a.prototype.divmod=function
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 7c 73 2e 53 42 4f 58 5b 6f 3e 3e 3e 31 36 26 32 35 35 5d 3c 3c 31 36 7c 73 2e 53 42 4f 58 5b 6f 3e 3e 3e 38 26 32 35 35 5d 3c 3c 38 7c 73 2e 53 42 4f 58 5b 32 35 35 26 6f 5d 29 2c 6e 5b 61 5d 3d 6e 5b 61 2d 65 5d 5e 6f 7d 66 6f 72 28 76 61 72 20 68 3d 5b 5d 2c 64 3d 30 3b 64 3c 69 3b 64 2b 2b 29 7b 76 61 72 20 63 3d 69 2d 64 2c 75 3d 6e 5b 63 2d 28 64 25 34 3f 30 3a 34 29 5d 3b 68 5b 64 5d 3d 64 3c 34 7c 7c 63 3c 3d 34 3f 75 3a 73 2e 49 4e 56 5f 53 55 42 5f 4d 49 58 5b 30 5d 5b 73 2e 53 42 4f 58 5b 75 3e 3e 3e 32 34 5d 5d 5e 73 2e 49 4e 56 5f 53 55 42 5f 4d 49 58 5b 31 5d 5b 73 2e 53 42 4f 58 5b 75 3e 3e 3e 31 36 26 32 35 35 5d 5d 5e 73 2e 49 4e 56 5f 53 55 42 5f 4d 49 58 5b 32 5d 5b 73 2e 53 42 4f 58 5b 75 3e 3e 3e 38 26 32 35 35 5d 5d 5e 73 2e 49 4e 56 Data Ascii: \|s.SBOX[o>>>16&255]<<16\|s.SBOX[o>>>8&255]<<8\|s.SBOX[255&o]),n[a]=n[a-e]^o}for(var h=[],d=0;d<i;d++){var c=i-d,u=n[c-(d%4?0:4)];h[d]=d<4\|\|c<=4?u:s.INV_SUB_MIX[0][s.SBOX[u>>>24]]^s.INV_SUB_MIX[1][s.SBOX[u>>>16&255]]^s.INV_SUB_MIX[2][s.SBOX[u>>>8&255]]^s.INV
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6c 6c 6f 63 28 30 29 3b 38 2a 61 2e 6c 65 6e 67 74 68 3c 74 2e 62 69 74 4c 65 6e 67 74 68 28 29 3b 29 65 2e 76 3d 6e 28 72 2c 65 2e 6b 29 2e 75 70 64 61 74 65 28 65 2e 76 29 2e 64 69 67 65 73 74 28 29 2c 61 3d 69 2e 63 6f 6e 63 61 74 28 5b 61 2c 65 2e 76 5d 29 3b 6f 3d 70 28 61 2c 74 29 2c 65 2e 6b 3d 6e 28 72 2c 65 2e 6b 29 2e 75 70 64 61 74 65 28 65 2e 76 29 2e 75 70 64 61 74 65 28 69 2e 66 72 6f 6d 28 5b 30 5d 29 29 2e 64 69 67 65 73 74 28 29 2c 65 2e 76 3d 6e 28 72 2c 65 2e 6b 29 2e 75 70 64 61 74 65 28 65 2e 76 29 2e 64 69 67 65 73 74 28 29 7d 77 68 69 6c 65 28 2d 31 21 3d 3d 6f 2e 63 6d 70 28 74 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 52 65 64 28 66 2e 6d 6f 6e Data Ascii: lloc(0);8*a.length<t.bitLength();)e.v=n(r,e.k).update(e.v).digest(),a=i.concat([a,e.v]);o=p(a,t),e.k=n(r,e.k).update(e.v).update(i.from([0])).digest(),e.v=n(r,e.k).update(e.v).digest()}while(-1!==o.cmp(t));return o}function m(t,e,r,i){return t.toRed(f.mon
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 2c 65 29 29 2c 74 68 69 73 2e 5f 70 72 69 76 3d 6e 65 77 20 6e 28 74 29 2c 74 68 69 73 7d 74 2e 65 78 70 6f 72 74 73 3d 6d 3b 76 61 72 20 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 72 29 7b 74 68 69 73 2e 73 65 74 47 65 6e 65 72 61 74 6f 72 28 65 29 2c 74 68 69 73 2e 5f 5f 70 72 69 6d 65 3d 6e 65 77 20 6e 28 74 29 2c 74 68 69 73 2e 5f 70 72 69 6d 65 3d 6e 2e 6d 6f 6e 74 28 74 68 69 73 2e 5f 5f 70 72 69 6d 65 29 2c 74 68 69 73 2e 5f 70 72 69 6d 65 4c 65 6e 3d 74 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 5f 70 75 62 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 70 72 69 76 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 70 72 69 6d 65 43 6f 64 65 3d 76 6f 69 64 20 30 2c 72 3f 28 74 68 69 73 2e 73 65 74 50 75 62 6c 69 63 4b 65 79 3d 6c 2c 74 68 69 73 2e Data Ascii: ,e)),this._priv=new n(t),this}t.exports=m;var b={};function m(t,e,r){this.setGenerator(e),this.__prime=new n(t),this._prime=n.mont(this.__prime),this._primeLen=t.length,this._pub=void 0,this._priv=void 0,this._primeCode=void 0,r?(this.setPublicKey=l,this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49751	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	1018	OUT	GET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D
2024-04-25 07:07:00 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 137498 Connection: close Date: Thu, 11 Apr 2024 13:34:37 GMT Last-Modified: Thu, 11 Apr 2024 09:49:15 GMT ETag: "84a46d0b6196ffa368647e975120e17b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _E4-Rp3niUEsNG50kBKIzMfng2GTB4rIDP6g9tFuTmW6MaBq8EeKag== Age: 1186344
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 32 37 5d 2c 7b 37 33 34 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 33 35 34 32 29 2c 6f 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 39 39 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 69 66 28 74 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 72 2c 6e 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeErro
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 2c 69 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 Data Ascii: enceError("this hasn't been initialised - super() hasn't been called");return t}(t):e}function i(t){return i=Object.setPrototypeOf?Object.getPrototypeOf:function(t){return t.__proto__\|\|Object.getPrototypeOf(t)},i(t)}function a(t,e){return a=Object.setProt
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 65 6e 74 72 69 65 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 65 6e 74 72 69 65 73 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 66 6f 72 45 61 63 68 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 66 6f 72 45 61 63 68 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 6b 65 79 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 6b 65 79 73 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 76 61 6c 75 65 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 76 Data Ascii: ototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","v
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6c 69 7a 65 28 72 2c 22 73 74 72 69 6e 67 22 29 7d 69 66 28 76 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 22 2b 65 2c 22 6e 75 6d 62 65 72 22 29 3b 69 66 28 67 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 22 2b 65 2c 22 62 6f 6f 6c 65 61 6e 22 29 3b 69 66 28 62 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 6e 75 6c 6c 22 2c 22 6e 75 6c 6c 22 29 7d 28 74 2c 72 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 65 5b 74 5d 3d 21 30 7d 29 29 2c 65 7d 28 61 29 3b 69 66 28 74 Data Ascii: lize(r,"string")}if(v(e))return t.stylize(""+e,"number");if(g(e))return t.stylize(""+e,"boolean");if(b(e))return t.stylize("null","null")}(t,r);if(i)return i;var a=Object.keys(r),c=function(t){var e={};return t.forEach((function(t,r){e[t]=!0})),e}(a);if(t
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2c 22 77 72 69 74 61 62 6c 65 4c 65 6e 67 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 6c 65 6e 67 74 68 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 66 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 73 74 72 6f 79 65 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 72 65 61 64 61 62 6c 65 53 74 61 74 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 26 26 28 74 68 69 73 2e 5f 72 65 61 64 61 62 6c 65 53 74 61 74 65 2e Data Ascii: totype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}}),Object.defineProperty(f.prototype,"destroyed",{enumerable:!1,get:function(){return void 0!==this._readableState&&void 0!==this._writableState&&(this._readableState.
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 61 62 6c 65 3d 21 30 2c 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 77 72 69 74 65 26 26 28 74 68 69 73 2e 5f 77 72 69 74 65 3d 74 2e 77 72 69 74 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 77 72 69 74 65 76 26 26 28 74 68 69 73 2e 5f 77 72 69 74 65 76 3d 74 2e 77 72 69 74 65 76 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 73 74 72 6f 79 26 26 28 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 3d 74 2e 64 65 73 74 72 6f 79 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 66 69 6e 61 6c 26 26 28 74 68 69 73 2e 5f 66 69 6e 61 6c 3d 74 2e 66 69 6e 61 6c 29 29 2c 75 2e 63 61 6c 6c 28 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 65 2c 72 Data Ascii: able=!0,t&&("function"===typeof t.write&&(this._write=t.write),"function"===typeof t.writev&&(this._writev=t.writev),"function"===typeof t.destroy&&(this._destroy=t.destroy),"function"===typeof t.final&&(this._final=t.final)),u.call(this)}function x(t,e,r
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 6e 3d 6f 28 74 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 72 3f 6e 2e 66 69 6c 6c 28 65 2c 72 29 3a 6e 2e 66 69 6c 6c 28 65 29 3a 6e 2e 66 69 6c 6c 28 30 29 2c 6e 7d 2c 61 2e 61 6c 6c 6f 63 55 6e 73 61 66 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 22 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 7d 2c 61 2e 61 6c 6c 6f 63 55 6e 73 61 66 65 53 6c 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ror("Argument must be a number");var n=o(t);return void 0!==e?"string"===typeof r?n.fill(e,r):n.fill(e):n.fill(0),n},a.allocUnsafe=function(t){if("number"!==typeof t)throw new TypeError("Argument must be a number");return o(t)},a.allocUnsafeSlow=function(
2024-04-25 07:07:00 UTC	13637	IN	Data Raw: 6a 65 63 74 2e 6b 65 79 73 26 26 30 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 26 26 30 21 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 69 66 28 31 21 3d 3d 6e 2e 6c 65 6e 67 74 68 7c 7c 6e 5b 30 5d 21 3d 3d 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d Data Ascii: ject.keys&&0!==Object.keys(t).length)return!1;if("function"===typeof Object.getOwnPropertyNames&&0!==Object.getOwnPropertyNames(t).length)return!1;var n=Object.getOwnPropertySymbols(t);if(1!==n.length\|\|n[0]!==e)return!1;if(!Object.prototype.propertyIsEnum
2024-04-25 07:07:00 UTC	9173	IN	Data Raw: 6e 28 74 2c 6e 29 7b 74 3f 72 28 74 29 3a 65 28 6e 29 7d 29 29 3b 74 72 79 7b 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 29 7d 63 61 74 63 68 28 74 29 7b 72 28 74 29 7d 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2c 54 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 54 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 6e 28 74 29 29 7d 2c 65 2e 70 72 6f 6d 69 73 69 66 79 2e 63 75 73 74 6f 6d Data Ascii: n(t,n){t?r(t):e(n)}));try{t.apply(this,o)}catch(t){r(t)}return n}return Object.setPrototypeOf(e,Object.getPrototypeOf(t)),T&&Object.defineProperty(e,T,{value:e,enumerable:!1,writable:!1,configurable:!0}),Object.defineProperties(e,n(t))},e.promisify.custom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49752	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	1018	OUT	GET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D
2024-04-25 07:07:00 UTC	583	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 179 Connection: close Date: Thu, 11 Apr 2024 13:34:37 GMT Last-Modified: Thu, 11 Apr 2024 09:49:17 GMT ETag: "67fa077ba9aac616309835ec3d822dbb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BpmUoFZARbk1PosMAVekU1kzHKTa2nBevmPCLqq90ClXzW73UvFpSQ== Age: 1186344
2024-04-25 07:07:00 UTC	179	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 30 30 5d 2c 7b 37 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 34 39 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 39 37 31 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 39 36 37 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 30 32 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 35 38 31 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49754	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	641	OUT	GET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:00 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 31120 Connection: close Date: Wed, 27 Dec 2023 06:37:37 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 23 Dec 2023 05:02:11 GMT ETag: "57cbbfdafc43e0deecc75a309dd042c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 d5a0acc9ccca13cb6c684fd609c9fdbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kccCFQfrgR15pm52HKRzqbJ-aHby2D8FdOEaOpMb8qo1QlI-JnqyIA== Age: 10369764
2024-04-25 07:07:00 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 79 90 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 69 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 69 34 00 00 0b a2 00 00 33 92 12 d2 b6 e6 47 53 55 42 00 00 74 d8 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 86 d4 60 b2 63 6d 61 70 00 00 05 fc 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 4c 00 00 01 91 00 00 0b f2 54 a0 2e b0 66 70 67 6d 00 00 07 d4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 69 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 12 f8 00 00 54 d8 00 00 90 f0 a6 31 f2 b3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 56 43 9f 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFy<GDEFio]GPOSi43GSUBt8-jQOS/2Z``cmap;<cvt LT.fpgm06gaspiglyfT1head66VChhea
2024-04-25 07:07:00 UTC	15488	IN	Data Raw: c6 58 2c f5 38 e4 8b 01 10 c6 c3 a3 99 51 3c 2a 0e e4 7d fe 34 f9 ef 4a cd 19 f2 62 78 ce c5 86 a9 df 55 d2 3b ce 10 c5 c3 d2 0f d4 0d 8a a7 b5 b7 4b 36 20 9b 05 6d 5d 2d 21 a7 33 68 0e f9 82 29 57 70 9c 38 1f 5f 2f f4 7a b7 26 39 75 51 d1 1c 88 b9 c5 d9 b5 96 36 c7 27 05 6c b7 d9 ac 4b 9a c1 dd b7 5e f0 9a e1 d8 f9 6d 93 1d 42 5c b0 ba 7d 96 74 9c e9 37 16 41 cd 7a 6b 87 fc 04 60 d6 5b 51 f5 6c 51 b4 98 40 5c 42 bc b7 b6 c0 9e 5d 23 5b 75 bc 1c 68 a6 c0 16 b8 33 7e ce f9 52 51 b4 9b 39 b4 89 f3 b0 82 3d 15 68 b0 5f 18 83 04 8c 21 bc 88 c0 c9 7a 36 61 af 3e 01 00 df 64 ec dd 4c 03 3d 51 ed 07 ce ff ab a2 a8 55 03 22 fc ea 1a ff 10 c1 f8 38 9a c9 7c 97 2c 73 37 07 6a 64 99 ab a7 01 90 bf 81 f5 4c 75 37 67 a5 cf ad 5e 53 07 03 41 ff 37 c1 98 84 c3 0a fa 54 Data Ascii: X,8Q<*}4JbxU;K6 m]-!3h)Wp8_/z&9uQ6'lK^mB\}t7Azk`[QlQ@\B]#[uh3~RQ9=h_!z6a>dL=QU"8\|,s7jdLu7g^SA7T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49757	31.13.65.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:00 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-25 07:07:00 UTC	1496	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-25 07:07:00 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-25 07:07:00 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-25 07:07:00 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-25 07:07:00 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49758	3.163.80.98	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:06:59 UTC	573	OUT	GET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/1.1 Host: public.profitwell.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:00 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35730 Connection: close Last-Modified: Thu, 21 Dec 2023 14:58:22 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: uxIt1SCydrYnaOCuzhsDaHENAdMuSyNO Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 11:48:49 GMT ETag: "40097cdf413c1f1f303c66489742cb44" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e3098dac6011d7b876f33fc65717302a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: f_znnfy8GoABphR1CT6tUOw9I-YZrJ9b4g0iLppTem2Q3gJqnjQO9w== Age: 69492
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 41 6e 6f 6e 79 6d 6f 75 73 43 75 73 74 6f 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function
2024-04-25 07:07:00 UTC	16384	IN	Data Raw: 65 20 32 3a 72 65 74 75 72 6e 20 73 3d 69 2e 73 65 6e 74 28 29 2c 72 28 73 29 2c 5b 33 2c 33 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 53 63 72 69 70 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 72 6f 66 69 74 77 65 6c 6c 2d 6a 73 22 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 74 68 69 73 2e 64 69 67 65 73 74 41 75 74 68 44 61 74 61 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 75 73 74 6f 6d 53 74 79 6c 65 73 2e 73 65 74 43 75 73 74 6f Data Ascii: e 2:return s=i.sent(),r(s),[3,3];case 3:return[2]}}))}))},t.prototype.digestScriptDataAttributes=function(){var t=document.getElementById("profitwell-js");null!==t&&this.digestAuthDataAttribute(t)},t.prototype.styles=function(t){this.customStyles.setCusto
2024-04-25 07:07:00 UTC	2962	IN	Data Raw: 4a 73 56 31 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 74 61 69 6e 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 53 65 6e 73 69 6e 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6e 73 69 6e 67 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 53 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 29 3f 22 26 22 3a 22 3f 22 3b 72 65 74 75 72 6e 22 22 2b 74 2b 72 2b 22 63 75 73 74 6f 6d 5f 73 74 79 6c 65 73 3d 22 2b 65 7d 2c 74 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e Data Ascii: JsV1Url=function(t){return this.retainUrl+"dotjs/v1/"+t},t.prototype.buildSensingUrl=function(t){return this.sensingUrl+"dotjs/v1/"+t},t.prototype.addCustomStyles=function(t,e){var r=t.includes("?")?"&":"?";return""+t+r+"custom_styles="+e},t}(),O=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49765	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:00 UTC	2506	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4544&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303.; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01
2024-04-25 07:07:00 UTC	814	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:00 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=iPuFhZVb1k6OafiVIyi%2FJ4fJ8Q%2BOCABlkcLCTwQ%2BKn7FqtB7es8IfQ4t7lFHAjJ2V%2FzaysfsprUPg9TKDTSFiOrVjIYcESlBjjtRp7aHVgiUzHA%2FRYcDMck%2BgTd11A%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8b047a56cedc9f5e8593136caff4a83e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: SPX6aoY-MVLec_kXpnN9sJWr-zow1LhBZuDl8wAGUPJuuc2ku0E7Kg==
2024-04-25 07:07:00 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49767	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:00 UTC	1221	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; _ga=GA1.1.224122617.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; FPLC=5ZT0EwXsMdvbWd3cGpSAZiLMxpfvQ12oGqybk7nvICiJacBq6THnXT534S2AgKmqM2O9VxgZJFon4t3FnHOwVwbhQSV0yfgK3C4QTOh2HgujSgPiFIv3bs1%2FUaaYHQ%3D%3D; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303
2024-04-25 07:07:00 UTC	581	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Thu, 25 Apr 2024 07:07:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-46sjq-9234 X-Request-Id: a43bfcddb1379a41f13ef4f8e20aab07 X-Runtime: 0.001465 X-Cache: Error from cloudfront Via: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: u-2UyWtI16kMRBFDun7wY-zxXkqbZludlIXbhqbTMlDGj7q8-N0vuQ==
2024-04-25 07:07:00 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49772	31.13.65.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:01 UTC	1308	OUT	GET /signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:01 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-25 07:07:01 UTC	1523	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-25 07:07:01 UTC	12	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 Data Ascii: /*** Copyri
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 Data Ascii: ght (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web s
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c Data Ascii: urn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 Data Ascii: shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 Data Ascii: };if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 Data Ascii: ar d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f Data Ascii: (b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;fo
2024-04-25 07:07:01 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 Data Ascii: Modules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49773	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:01 UTC	531	OUT	OPTIONS /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-unique-id Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	424	IN	HTTP/1.1 204 No Content access-control-allow-headers: x-unique-id Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Max-Age: 86400 Content-Length: 0 Date: Thu, 25 Apr 2024 07:07:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Access-Control-Request-Headers X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49775	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	1040	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028820416&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49774	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	1150	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028820416&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:02 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:02 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49776	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	657	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: fc8d706f-5a3a-4212-b6cd-833348100cc9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	437	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:02 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 5 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-25 07:07:03 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49777	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	1104	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821034&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-29-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49778	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	1214	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821034&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-29-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:02 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:02 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49784	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	806	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028820416&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49785	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	843	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028820416&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:02 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:02 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49782	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	2884	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8685&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; FPLC=iPuFhZVb1k6OafiVIyi%2FJ4fJ8Q%2BOCABlkcLCTwQ%2BKn7FqtB7es8IfQ4t7lFHAjJ2V%2FzaysfsprUPg9TKDTSFiOrVjIYcESlBjjtRp7aHVgiUzHA%2FRYcDMck%2BgTd11A%3D%3D; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817
2024-04-25 07:07:03 UTC	907	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:03 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=Pxe0NxvSkLD48j64n8lF35WWpu6WbhxbwU8Y%2F7CaTowjDySgQl%2F1DbNS3IVsIFjbTdHOlcmoYU1cxzK5Lp9yk%2Fh%2BVQyguklYcOnqGlZB8q%2BhUOcW32HqOdg%2FAhQX7w%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 d7706b0da9a059232ff5f1ae55dc855a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: -qu5he8CjnQ-zq2A76JjEt5uHW9DrNqydwBJvsd22cEsgntsYqVX0g==
2024-04-25 07:07:03 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49783	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	2884	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=3&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8686&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.0.1714028816.0.0.988032707; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; FPLC=iPuFhZVb1k6OafiVIyi%2FJ4fJ8Q%2BOCABlkcLCTwQ%2BKn7FqtB7es8IfQ4t7lFHAjJ2V%2FzaysfsprUPg9TKDTSFiOrVjIYcESlBjjtRp7aHVgiUzHA%2FRYcDMck%2BgTd11A%3D%3D; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817
2024-04-25 07:07:02 UTC	901	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:02 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=71miLI%2FMy7z5JS88bPX09QS7UXLAziVuxZRt1%2FZ6MEuUc8jd9RkhCxv61dzYieZlMP%2BY4jQetboJaVv3KABay3FnOZFpaJrPzH0uu4RrmPwGsY84UxAs4uGKCjDrxw%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 9cc8ca4ac849ea5ac6feda62b07aea7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: Z84jRysyDhMiiXv8qG3XEIXw8C_UTbbvOE5PuSE9lDOAUBeuLKlh7Q==
2024-04-25 07:07:02 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49789	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	1556	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; FPLC=iPuFhZVb1k6OafiVIyi%2FJ4fJ8Q%2BOCABlkcLCTwQ%2BKn7FqtB7es8IfQ4t7lFHAjJ2V%2FzaysfsprUPg9TKDTSFiOrVjIYcESlBjjtRp7aHVgiUzHA%2FRYcDMck%2BgTd11A%3D%3D; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707
2024-04-25 07:07:03 UTC	743	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:03 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qnbu0PtTaLdvDWugAR9KiX9X1JAwOx5eSN7nSnhMiGYDE5dzfqbrqA==
2024-04-25 07:07:03 UTC	3543	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-25 07:07:03 UTC	16384	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-25 07:07:03 UTC	9706	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-25 07:07:03 UTC	11933	IN	Data Raw: ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 fc 1a 18 17 0d 1a 18 17 00 1a 18 17 24 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 52 1a 18 17 00 1a 18 17 00 1a 18 17 5f 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 Data Ascii: $R_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49788	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	3024	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1714028814330&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A01.129%2B02%3A00&epn.hit_timestamp_unix=1714028821129&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028814330-69-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028814330-69-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4186&tfd=8732&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; FPLC=iPuFhZVb1k6OafiVIyi%2FJ4fJ8Q%2BOCABlkcLCTwQ%2BKn7FqtB7es8IfQ4t7lFHAjJ2V%2FzaysfsprUPg9TKDTSFiOrVjIYcESlBjjtRp7aHVgiUzHA%2FRYcDMck%2BgTd11A%3D%3D; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707
2024-04-25 07:07:03 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:03 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775998; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 161586532656c79144d66d22262047c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: rEXNmZESvyTDXuwTHF9YWObNXtTCAppO_FbB7zR4mp4yGRhLUfnKHw==
2024-04-25 07:07:03 UTC	1168	IN	Data Raw: 34 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 39 39 30 34 36 39 30 31 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6f 30 68 32 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 Data Ascii: 489event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e1
2024-04-25 07:07:03 UTC	1100	IN	Data Raw: 34 34 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 39 39 30 34 36 39 30 31 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6f 30 68 32 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 39 63 61 32 34 33 37 37 66 34 38 32 32 30 32 34 30 34 32 34 30 39 34 31 35 35 Data Ascii: 445event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155
2024-04-25 07:07:04 UTC	359	IN	Data Raw: 31 36 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4e 61 41 31 38 6a 66 4b 72 54 61 71 46 76 53 25 32 46 62 4a 73 77 50 4e 4d 58 36 72 48 55 4e 5a 56 4b 36 7a 56 39 75 76 59 47 56 71 61 25 32 42 42 55 47 46 78 31 34 52 43 50 4f 68 30 33 55 49 55 6b 56 63 69 67 36 7a 58 73 77 73 6c 6a 51 4a 4f 65 57 54 48 25 32 46 4b 4d 61 4f 4d 6d 32 5a 61 73 6a 52 73 65 71 76 65 54 59 25 32 46 4d 61 41 58 4e 5a 61 59 75 78 4b 63 63 66 46 4a 78 6e 79 4b 30 55 57 65 68 39 36 6c 45 69 56 4c 75 68 42 56 55 50 72 4e 75 6d 4a 61 4e 5a 47 47 57 70 30 67 43 50 70 39 48 46 31 58 55 25 32 42 5a 30 4c 39 62 79 Data Ascii: 160event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=NaA18jfKrTaqFvS%2FbJswPNMX6rHUNZVK6zV9uvYGVqa%2BBUGFx14RCPOh03UIUkVcig6zXswsljQJOeWTH%2FKMaOMm2ZasjRseqveTY%2FMaAXNZaYuxKccfFJxnyK0UWeh96lEiVLuhBVUPrNumJaNZGGWp0gCPp9HF1XU%2BZ0L9by
2024-04-25 07:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49790	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	530	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11214 Last-Modified: Wed, 24 Apr 2024 17:35:49 GMT ETag: "c4d61fbb6e730a840c7f140cbb9bcd06" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:02 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 19 cb 80 b1 93 08 6b 5d 04 e4 98 8d 0d be 3c 9c 6c b9 58 4a 96 06 50 02 12 2b 89 38 be c0 fd ed b7 e7 25 8d 04 b6 93 b3 77 3f dc 54 0a cd 74 f7 f4 f4 6b 7a 7a 46 f2 c1 64 e5 3b b1 17 f8 85 50 c5 c8 47 b1 b6 4e 20 81 ea a1 89 b6 f6 26 ea 81 7f ef 8d 58 0b d3 d6 77 3b 2c 38 a6 22 48 15 d3 8c 9f 96 38 98 14 42 fc d7 ca 0b 71 b1 c8 1b 75 32 66 52 2c 3a 5a 88 e3 55 e8 17 1c 60 7a 50 d6 08 7c 25 60 2b 0e 23 5c 6d d3 c7 8f 05 2b 0c 83 50 55 9a b6 ef 07 71 61 e2 f9 6e 61 11 b8 ab 39 2e fc 5b 29 79 25 e5 df 8a 56 8f 67 61 f0 58 b0 75 27 70 b1 a9 dc 74 5b c3 6b 6b dc e9 0e c6 97 dd 61 a7 a5 20 7b 4b f8 2d 4d 22 bb b9 c6 3f 96 41 18 47 c6 7a bb ad 13 1d ee cb 23 dd b1 e7 73 75 a9 73 14 12 da a8 a1 Data Ascii: ;ksN8k]<lXJP+8%w?TtkzzFd;PGN &Xw;,8"H8Bqu2fR,:ZU`zP\|%`+#\m+PUqana9.[)y%VgaXu'pt[kka {K-M"?AGz#sus
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 0d 3c 5f 55 48 15 b2 84 ae 14 0a 40 01 e3 52 e5 59 ff 9a 45 13 eb f0 d8 42 39 2f ca 94 c4 97 55 2d d5 ee 04 16 29 9d 88 78 90 73 81 cd 13 ec 0f 67 c1 aa 86 40 46 ba 76 bd 37 ef 0e 6b af fa 57 9e e9 b8 4a 72 fd 35 54 64 7e 85 bb 96 77 fe 31 ef ce 29 ff bf ef 60 89 0f 73 1e 73 98 3e 09 83 05 81 36 61 1b a0 6e 4f fd 27 0f 79 d6 85 8c 28 e3 c5 04 c4 1d 99 f4 9f f1 65 8e 9e 2a 25 ab b2 31 55 d0 a0 98 b2 71 b8 bc 8d 58 f5 34 e1 4b 50 f4 55 5f e6 66 22 ce 1c c6 93 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f6 da cd 60 b1 84 4c 04 c1 86 23 c7 5e 62 95 c5 84 b4 9b a6 0c b4 a4 dc 07 5e f9 52 ff c6 9e 83 0d 17 50 cd 0f 07 97 47 ef 0a ae 1d db 0a 11 32 67 f3 15 08 4a 2d ce 25 e1 f3 51 2a 75 e5 73 29 d8 d6 9e 91 4f 0c d4 08 d3 0f ab c9 04 87 d8 fd 30 0f 9c 6f 8d f9 34 Data Ascii: <_UH@RYEB9/U-)xsg@Fv7kWJr5Td~w1)`ss>6anO'y(e%1UqX4KPU_f"w#d`L#^b^RPG2gJ-%Qus)O0o4
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 40 7b d5 11 0d 88 92 43 7b 27 23 1a 17 25 97 f6 6a 23 1a 1e 25 4c 7b a7 23 1a 25 a5 09 ed 9d 8d 68 b0 94 a6 b4 f7 76 44 63 a6 34 db 94 69 b8 5e ee d4 43 2c db fd d4 a9 c6 27 4b 70 10 c4 f6 dc 7c 77 98 3f 56 31 ec 35 9e c4 80 cc 14 d8 a2 16 48 78 de 27 a4 60 d4 53 38 d9 57 aa ef e8 f9 3d 81 bf 39 a9 a6 22 dc 57 6a 25 35 41 95 ce 6a 30 ea fd f9 79 4d 1b b1 cc 38 99 07 b0 c8 52 e1 8e d3 e4 a5 c9 5c 4e 9f e3 92 0e cd 9e 0c cc da 61 7a 92 e0 b7 16 fb ca 4c b6 aa 5f 3c 04 f0 bc f3 ca 31 80 26 1d 29 4f 64 8f 01 50 65 35 73 79 2c 53 6a aa 0c 47 ca 32 52 0f ee a7 4c 0a 45 41 cd 0b 36 94 d4 09 0c fe ff b1 4c 38 fd 89 32 41 59 45 b8 40 2e 16 40 33 ba 57 78 2e 6a 76 3b fd 41 a3 33 e8 9b 19 d9 e9 4b b0 38 52 c8 85 27 b1 98 8c 65 10 40 91 37 c8 00 c6 51 4c 77 8b 2f 37 Data Ascii: @{C{'#%j#%L{#%hvDc4i^C,'Kp\|w?V15Hx'`S8W=9"Wj%5Aj0yM8R\NazL_<1&)OdPe5sy,SjG2RLEA6L82AYE@.@3Wx.jv;A3K8R'e@7QLw/7
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 8f f1 a0 3b 4e 21 2c c9 8f f7 67 f9 f1 4f a7 79 c2 74 5f a2 27 f0 bf 95 ea c7 2f e6 fa 41 af fd f1 a3 d5 e3 9a d0 ed 14 b0 e4 a1 20 6a 79 f8 01 b2 be 75 6d 35 07 dd 0c dd b8 d9 ef 73 5a d2 54 f8 66 3c b0 be 0c 04 98 b4 29 1f 6a 87 46 bb d3 a7 0c 93 1e c3 59 5f 20 5d 31 04 6d 2a 5b f2 8f 7e 11 fd f6 3f 39 7e bc 7a f6 80 b2 ee bf 56 38 7c 82 fc 0c 89 25 ce 1e 43 fe 22 18 f1 7d 9b be 43 8a 58 d1 1d c9 43 38 08 38 93 ca e1 7b 4d c6 d1 5a 42 43 36 38 ce 5b 40 a9 09 b5 10 78 97 ee 09 69 2d 4a 88 92 2f c7 c8 99 a7 45 5e 8b 90 c9 c9 20 55 2b 29 ba 52 22 44 db 3a 57 5b df cb 70 1f 50 18 8a 5c d0 91 8b bf 21 b0 b9 24 df 26 50 ec 5d 35 95 c2 61 10 92 1e f9 47 a0 cb b9 17 9b 12 98 be fb 83 ba 5c 57 92 63 36 85 f0 93 fc 79 f5 42 22 36 28 ea be 32 da 26 22 b0 f2 7e 77 Data Ascii: ;N!,gOyt_'/A jyum5sZTf<)jFY_ ]1m*[~?9~zV8\|%C"}CXC88{MZBC68[@xi-J/E^ U+)R"D:W[pP\!$&P]5aG\Wc6yB"6(2&"~w
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 3c 07 c3 0a 58 61 e4 35 7a 76 39 18 a7 6c 3e c9 fe 64 ae 7d ba 00 c1 d1 9b cc 6d 70 a5 d0 d1 b2 ec 56 72 1f 57 a5 2e cc e9 b7 e8 55 d5 db d9 ed c8 b9 24 b8 e6 a4 d1 70 fc 49 2e 02 03 98 5f 4e 07 e7 e1 ac f2 97 21 dc a7 f0 4e aa 8d 6c 9d 74 6c 67 f9 74 30 2a 93 0a 9f 2f 07 83 59 c2 aa 30 e4 30 99 c9 8b f7 0e b4 22 d9 55 d6 e2 60 ae 37 7a 19 50 b4 78 3d 90 cc 8f 92 ca 16 79 74 0c c7 f7 ed d1 c2 3e a0 4b 67 1d 61 bf 56 5e b9 1c 74 fb b9 f2 f9 34 e3 c2 e4 99 0f 93 fe 2d af c7 be 85 25 43 2e 05 b6 14 ab 63 d8 35 fd 5f 87 dd fd 7e f5 cb 91 51 1b 6c 37 9f c5 2f 31 46 1c 52 86 83 33 d8 76 67 60 58 9e 4d e7 52 b0 5a 6a 1e e8 a3 2e fd 02 73 1f 00 2b c2 81 79 65 bd 63 9c eb 57 40 66 a3 b1 e9 6c 7b c9 2e e8 9d 41 86 76 c6 a2 ed 6e b7 82 e2 11 4b af b5 89 2a f7 b1 5e Data Ascii: <Xa5zv9l>d}mpVrW.U$pI._N!Nltlgt0/Y00"U`7zPx=yt>KgaV^t4-%C.c5_~Ql7/1FR3vg`XMRZj.s+yecW@fl{.AvnK^
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: b6 9e 50 09 9d 68 11 54 7b 69 d4 48 a8 4b a6 23 57 14 28 7b b5 92 4f 55 7b fc d5 68 04 89 37 b0 bc 8d 7f e5 d5 f8 7a d4 ed 0d d2 9d d3 df 77 b7 7f 7c 9f 77 76 2e 86 22 49 b2 02 ab 9d b1 f6 68 31 dd 0c ab a3 b1 bc 7f 41 51 7b 30 ca b1 21 1a ef e1 fd 74 e9 e4 1a d0 54 a7 f2 91 5e 7c 20 79 6c 7f 70 23 67 5d a2 2b 64 31 fc ab bc 14 17 8b 24 e1 ba 57 83 5f 1b e8 8f 5e c3 b5 11 ac 1d b2 1d c5 46 70 78 db b5 6e 40 b3 e7 b5 f0 19 a3 cf 9d 59 86 35 ab 1f d0 b6 7a 29 52 e8 c5 57 46 f6 07 6b 61 b8 b4 48 ac db b5 dc 8e 38 50 0f c7 81 5e d9 b2 b9 76 1e 7e 38 06 ed 53 6c 3c e9 ee f8 39 c2 f2 32 42 7e 48 9e 05 10 b2 ff 41 a1 fc 3f 96 ef 2f d3 ea 61 39 cc 12 04 b3 fa 75 20 26 0c 8c 8d 1b a6 c4 e4 72 fc f0 71 99 de 19 37 e9 c2 5d ca c1 e6 76 86 3c 53 c3 b7 ae 91 33 c6 99 Data Ascii: PhT{iHK#W({OU{h7zw\|wv."Ih1AQ{0!tT^\| ylp#g]+d1$W_^Fpxn@Y5z)RWFkaH8P^v~8Sl<92B~HA?/a9u &rq7]v<S3
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 56 c2 62 e8 8a 48 f0 1f 80 be 91 e7 c5 b8 3b 3a 5b d3 85 86 03 ff 27 fb 0c bc ab 7f de 5d d9 12 00 44 02 7f 5d 4e 57 70 96 06 ab fe c8 fe 7e 33 9d 7c 96 ac 7b ea e0 b1 d5 99 98 5c cf ce 26 f2 22 ce ea 65 d1 f1 7c d6 6e 16 bb a2 ba 2c ec 60 e6 d5 25 38 67 f3 82 2f e2 33 a5 15 79 fc a1 db ec f5 fb e7 f2 2e e8 49 43 68 fb 30 59 af 54 02 37 c9 b1 8e 49 e3 a8 14 0f e3 c9 f4 0a b9 cf 8b 18 10 a7 be 7f 7d 25 9c 9f bd 9e fb 7b da e3 93 0e f0 65 b4 67 c4 e4 00 f6 7a b5 90 b2 13 07 74 5a 0f 3a ed 2d f9 ab d3 ee af 74 5a 81 e7 4a 8f 45 9f c0 29 37 d3 a4 ae 2e 19 8e d9 7e 90 0c 6c 73 93 bd 67 5d 2b 51 c3 08 d2 5a 56 0c 8c 97 05 69 91 b0 17 1e bd 35 ee ad 72 87 81 a3 3a 6e 5e 24 04 ae 18 e8 59 24 ff 0d 02 08 c1 e4 94 c9 55 05 9f d2 81 e3 d0 5c af 4c 53 e5 9e 8b 31 88 Data Ascii: VbH;:[']D]NWp~3\|{\&"e\|n,`%8g/3y.ICh0YT7I}%{egztZ:-tZJE)7.~lsg]+QZVi5r:n^$Y$U\LS1
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 74 ac c6 d7 21 af 3d 1c 54 d4 de ac d2 5d 06 5e 73 f1 9d 58 ac 06 6b ad ea c2 38 27 3e fc 2d 38 b8 fb 52 9d d2 0e cf b2 16 93 9b 2b 37 1c e8 70 ea ef 89 aa 13 aa 3e be 12 51 90 84 bd 06 30 cb ea 21 1d ce f2 4d 6f e9 60 fa 86 97 74 f1 dc 93 72 65 30 64 79 81 0f bd 73 65 1d c3 6e 79 f4 f9 a8 3a a5 d9 b8 cf dd ec c3 fe 9b 05 2d 33 15 26 44 19 8a d7 10 a6 f9 b1 4f 8f d3 9c 11 f3 46 95 fb 54 b8 f0 36 20 6c 50 77 5c af b9 dc 45 0f eb f8 e5 ae 35 e0 ac d0 f0 5a 97 c0 76 94 41 16 52 72 57 c7 2f 22 61 ec 52 bf 28 bb ad aa 12 ba a0 98 5f e6 8a 02 df ea a9 94 b0 69 6a 33 b8 d7 e9 5f 3c 1c de 40 d8 db 9c b9 4c 0c 2b f4 b3 b0 30 8b 85 79 2e cd 50 b3 51 36 54 f7 0d d9 26 98 51 83 07 a3 ab 2a 4a 0d 00 a1 77 01 22 39 75 a6 97 33 33 b6 aa 49 8e fa d0 61 a5 dc ad 6d 69 d6 Data Ascii: t!=T]^sXk8'>-8R+7p>Q0!Mo`tre0dyseny:-3&DOFT6 lPw\E5ZvARrW/"aR(_ij3_<@L+0y.PQ6T&Q*Jw"9u33Iami
2024-04-25 07:07:03 UTC	190	IN	Data Raw: 73 b1 d0 72 e8 a6 23 da 2e 16 9b 6e 6b 6a e7 da f4 ed 82 f6 0c f8 a6 a2 54 52 20 02 c5 2d f6 0c bd a7 74 31 1b 5f 8b e1 3c e3 81 17 59 8b 5f d0 de 65 f3 71 6a d0 76 32 b7 bd da 73 9c b4 f6 b7 ca 56 bb 49 a1 0e 45 7b 39 27 cd b9 24 8a 6d d4 08 55 fa 98 f4 1b 3a 6b 19 57 6e db 03 29 a4 a0 c8 d4 02 24 5a a6 1e 90 4a 78 1a 4a 98 c5 63 11 ca a5 05 f8 da ec fd 6d 32 93 f0 4f 8f 44 7c cb 19 5f 66 9e e5 77 2a 14 c0 29 43 a7 51 ab 47 88 7e d2 2f 87 2f f8 a9 a1 bd 07 68 ab 3f 38 ef ce 47 b3 fb 36 a1 ef 05 d6 84 5f 83 35 5a 9c 36 7f e8 64 ad 7f f8 1f 4f 0d f9 40 4b 99 00 00 Data Ascii: sr#.nkjTR -t1_<Y_eqjv2sVIE{9'$mU:kWn)$ZJxJcm2OD\|_fw*)CQG~//h?8G6_5Z6dO@K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49792	151.101.12.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	520	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4777 ETag: "157038e34123cc34939c37ef460356f4" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Thu, 25 Apr 2024 07:07:02 GMT
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 Data Ascii: ()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerr
2024-04-25 07:07:03 UTC	643	IN	Data Raw: 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 36 31 39 32 66 66 62 37 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e 3a Data Ascii: (n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.6192ffb7.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49793	3.163.115.55	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:02 UTC	535	OUT	GET /sdk/3.0/td.min.js HTTP/1.1 Host: cdn.treasuredata.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	583	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 58921 Connection: close Date: Wed, 17 Jan 2024 19:43:51 GMT Last-Modified: Mon, 05 Jul 2021 08:58:13 GMT Etag: "4b9abb36767431f05495228eb82edf01" Cache-Control: public, max-age=315360000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 03c76f41c7551fa29cffd38a109c9dc2.cloudfront.net (CloudFront) Age: 8508192 Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: Mg9MRHEa7Y87K-gls7bnDii1kxnLWcnBS1bbxyoE3YzFNV6E5yxcdQ==
2024-04-25 07:07:03 UTC	15801	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-04-25 07:07:03 UTC	16384	IN	Data Raw: 32 29 28 72 2c 6f 29 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 35 29 2c 6f 3d 6e 28 34 31 29 28 72 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 66 6f 72 28 76 61 72 20 69 3d 72 28 65 29 2c 73 3d 6f 28 65 29 2c 61 3d 73 2e 6c 65 6e 67 74 68 2c 63 3d 74 3f 61 3a 2d 31 3b 74 3f 63 2d 2d 3a 2b 2b 63 3c 61 3b 29 7b 76 61 72 20 75 3d 73 5b 63 5d 3b 69 66 28 21 31 3d 3d 3d 6e 28 69 5b 75 5d 2c 75 2c 69 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 7d 7d 2c 66 75 6e 63 Data Ascii: 2)(r,o);t.exports=i},function(t,e,n){var r=n(25),o=n(41)(r);t.exports=o},function(t,e,n){var r=n(13);t.exports=function(t){return function(e,n,o){for(var i=r(e),s=o(e),a=s.length,c=t?a:-1;t?c--:++c<a;){var u=s[c];if(!1===n(i[u],u,i))break}return e}}},func
2024-04-25 07:07:03 UTC	16384	IN	Data Raw: 61 6d 65 29 29 2c 74 2e 63 6c 69 65 6e 74 49 64 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 2e 63 6c 69 65 6e 74 49 64 7c 7c 28 74 2e 63 6c 69 65 6e 74 49 64 3d 61 28 29 29 29 2c 74 68 69 73 2e 72 65 73 65 74 55 55 49 44 28 74 2e 73 74 6f 72 61 67 65 2c 74 2e 63 6c 69 65 6e 74 49 64 29 2c 74 68 69 73 7d 2c 65 2e 72 65 73 65 74 55 55 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 61 28 29 2c 72 3d 74 7c 7c 74 68 69 73 2e 63 6c 69 65 6e 74 2e 73 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 75 75 69 64 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 5c 30 2f 67 2c 22 22 29 2c 72 26 26 72 2e 65 78 70 69 72 65 73 26 26 74 68 69 73 2e 69 6e 53 69 67 6e 65 64 4d 6f 64 65 28 29 26 26 28 Data Ascii: ame)),t.clientId&&"undefined"!==t.clientId\|\|(t.clientId=a())),this.resetUUID(t.storage,t.clientId),this},e.resetUUID=function(t,e){var n=e\|\|a(),r=t\|\|this.client.storage;return this.client.track.uuid=n.replace(/\0/g,""),r&&r.expires&&this.inSignedMode()&&(
2024-04-25 07:07:03 UTC	10352	IN	Data Raw: 28 74 5b 72 5d 7c 7c 74 28 65 2c 6e 29 29 7c 7c 6f 5b 72 5d 2e 73 75 62 73 74 72 28 30 2c 69 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5f 2e 73 28 69 25 31 32 7c 7c 31 32 2c 74 2c 22 30 22 29 7d 2c 70 3d 6f 2e 6d 65 72 69 64 69 65 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 74 3c 31 32 3f 22 41 4d 22 3a 22 50 4d 22 3b 72 65 74 75 72 6e 20 6e 3f 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 72 7d 2c 68 3d 7b 59 59 3a 53 74 72 69 6e 67 28 74 68 69 73 2e 24 79 29 2e 73 6c 69 63 65 28 2d 32 29 2c 59 59 59 59 3a 74 68 69 73 2e 24 79 2c 4d 3a 61 2b 31 2c 4d 4d 3a 5f 2e 73 28 61 2b 31 2c 32 2c 22 30 22 29 2c 4d 4d 4d 3a 66 28 6f 2e 6d 6f 6e 74 68 73 53 68 6f 72 74 2c 61 2c 75 2c 33 29 2c 4d 4d 4d 4d Data Ascii: (t[r]\|\|t(e,n))\|\|o[r].substr(0,i)},d=function(t){return _.s(i%12\|\|12,t,"0")},p=o.meridiem\|\|function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},h={YY:String(this.$y).slice(-2),YYYY:this.$y,M:a+1,MM:_.s(a+1,2,"0"),MMM:f(o.monthsShort,a,u,3),MMMM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49794	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	870	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821034&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-29-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49797	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	907	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821034&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-29-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:03 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49802	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	1104	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-69-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49803	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	1214	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-69-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:03 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:03 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49801	54.230.252.87	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	530	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	676	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 01:43:04 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Via: 1.1 7c6ba9a3a1fe14d52ffd0738978a0e6c.cloudfront.net (CloudFront), 1.1 8baea0e22f1e3705e85dfe807d51a720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C2 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: Qo_Iqar27b9CPbMqYfzV8wRfc2ivwlms8jUPTB6oElr3cd6IwPgggg== Age: 21124
2024-04-25 07:07:03 UTC	12792	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";
2024-04-25 07:07:03 UTC	497	IN	Data Raw: 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 50 28 43 29 2c 74 3d 6e 65 77 20 41 2c 6e 3d 6e 65 77 20 4e 28 74 29 3b 6c 65 74 20 72 3d 6e 65 77 20 4f 28 65 2c 6e 29 3b 77 69 6e 64 6f 77 2e 61 6d 7a 6e 26 26 77 69 6e 64 6f 77 2e 61 6d 7a 6e 2e 71 26 26 72 2e 70 72 6f 63 63 65 73 73 43 6f 6d 6d 61 6e 64 51 75 65 75 65 28 77 69 6e 64 6f 77 2e 61 6d 7a 6e 2e 71 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 65 76 65 6e 74 20 71 75 65 75 65 22 2c 65 29 7d 29 29 2c 77 69 6e 64 6f 77 2e 61 6d 7a 6e 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 65 29 7b 72 65 74 75 72 6e 20 72 2e 70 72 6f 63 63 65 73 73 43 6f 6d 6d 61 6e 64 28 65 29 2e 63 61 74 63 68 28 28 65 3d Data Ascii: n(){const e=new P(C),t=new A,n=new N(t);let r=new O(e,n);window.amzn&&window.amzn.q&&r.proccessCommandQueue(window.amzn.q).catch((e=>{console.error("Error processing event queue",e)})),window.amzn=async function(...e){return r.proccessCommand(e).catch((e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49804	108.156.154.126	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	529	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Wed, 24 Apr 2024 12:55:45 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9436eaf5568343a6bd97244e86cdee20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: UbCuEzCzXzkLq4o4d---sQ1mMeeWd8nRXE5PrpKFVszdsyvsnX-DGg== Age: 65479
2024-04-25 07:07:03 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49805	151.101.12.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	533	OUT	GET /ct/lib/main.6192ffb7.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22983 ETag: "693f1816687516917019537449bd881f" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Thu, 25 Apr 2024 07:07:03 GMT
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 1f 8b 08 08 c8 c3 1d 66 00 03 6d 61 69 6e 2e 36 31 39 32 66 66 62 37 2e 6a 73 00 c4 5c 0f 73 db b6 92 ff 2a 32 67 aa 10 21 a5 90 94 2c 3b 14 11 8d 93 e7 ce e4 5e 9b 74 9a f4 e6 3a 1e 8f 87 96 20 8b 8d 0c fa 48 d0 ae 9f a5 7e f6 db 05 08 12 94 48 db 71 df cd 9b 36 36 09 82 8b 1f 16 fb 0f bb a0 0f 96 05 9f 8b 24 e5 36 23 0f b7 71 d6 4b e8 c3 76 aa 1b 7b 99 2d 54 33 9f 66 4c 14 19 b7 93 33 71 be d9 d8 9c e2 05 7d 48 42 e1 ae c3 03 df 65 7f de a4 99 c8 c3 87 ed d6 65 f0 68 38 8f d7 6b 9b 0f cb 76 97 bb f5 75 46 e0 66 4d 0f 3c 97 13 a2 5b b7 d9 f0 9a 32 37 1b ce 69 02 3f 17 b4 42 26 e0 65 40 97 0d 53 bc 24 9b cd e7 cb 3f d8 5c 0c 17 6c 99 70 f6 4b 96 de b0 4c dc cb 6e 0f 8c 17 d7 2c 8b 2f d7 2c 04 f2 57 4c 84 6c 4b b6 40 2f 33 e8 91 07 ab e0 ea ed 85 75 40 c5 Data Ascii: fmain.6192ffb7.js\s*2g!,;^t: H~Hq66$6#qKv{-T3fL3q}HBeeh8kvuFfM<[27i?B&e@S$?\lpKLn,/,WLlK@/3u@
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 3a 2c 4d b5 16 7c e3 39 90 ff ef 84 dd 41 90 bb df 08 23 82 4b ef f2 3c 35 98 da 2f 94 81 ae a1 6c b5 cc ce 2c cb 11 75 74 81 d8 d1 a6 33 4d c7 33 d6 ed c0 9f 4e 49 7e 97 88 39 86 24 0f f3 38 67 56 9c cf 93 c4 0a e5 f5 1a 64 91 fb e5 0d 44 ad 71 76 6f 85 3a 5e 9d ca 56 a9 cf a1 be 1c 94 d7 3d e5 4b 74 df af 76 8d 47 75 9d e7 81 7e 6b 9e 0f 82 9a 82 3f 81 fd 44 4d 4f dd 96 64 82 d7 e5 a0 2b f6 67 8d e3 dd bb 77 be 6a be 84 1f 93 71 f5 e4 0f 63 d4 32 52 0e a5 07 68 41 c5 a9 0d 7c e3 28 3d 3f a5 77 2c fb 00 a4 6c 02 56 0e 36 2d b5 bc 54 db 34 c9 3e 30 59 c0 40 a0 08 1b 97 ca 77 f2 cd 46 a9 26 27 ef 30 c0 d1 6a 53 ba 08 4b f6 67 75 7f b6 d9 30 b3 e3 cc b8 0e 19 89 a8 b7 f3 2a 4c 17 da 22 6a 73 75 55 3f c6 75 15 54 80 6f 92 8b 52 2f ad 28 97 56 b2 0d a1 a7 54 Data Ascii: :,M\|9A#K<5/l,ut3M3NI~9$8gVdDqvo:^V=KtvGu~k?DMOd+gwjqc2RhA\|(=?w,lV6-T4>0Y@wF&'0jSKgu0*L"jsuU?uToR/(VT
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 6d b0 ad 3f 07 e9 53 af c0 55 e6 d0 d5 16 c5 61 4d 13 08 1b d7 86 0d 5d 44 f4 5a 2b 68 4b 64 32 8c 6f 6e d6 f7 b6 7a d2 0c 2c 21 c2 b9 03 8d b8 8b 16 53 72 db 1a d6 ec bc 5c 06 48 77 ee 9d 03 63 56 e2 7f bb fd 36 54 9e 80 ae dc 6f c3 2f eb f4 ae bc 35 0d 81 83 49 25 e0 83 80 08 a2 4e 5f cb 2d b4 0d e1 ce 16 de fc f8 e9 cb 2f a7 1f be 5e fc 7c f2 3f 17 ef 7f ff 7a fa 85 1e 7a ed ae 93 56 9e 43 b4 e6 f8 5a 5b cd 4a 84 c8 ee a5 7a ed 65 ca fd 0a 9c 30 72 84 0f d5 65 ab 8f 75 97 69 da 52 e7 18 07 db ad 3b 0e 64 8c 05 3d 6c d2 ea f1 c5 30 2f 2e 65 2e ab df 57 f1 98 be b7 7d d7 27 c6 d6 7a 3b 8f cb 2d 93 1a e0 c0 df 6e 21 22 fc 36 fc f6 73 fc a7 ea 82 89 0b 60 d9 4d 9a ae bf 24 ff 62 f4 18 04 1c ee 57 ad db 9f f6 24 a8 2b b6 ae 0a 89 f6 2b 80 3a 3d 2f 8d 90 6a Data Ascii: m?SUaM]DZ+hKd2onz,!Sr\HwcV6To/5I%N_-/^\|?zzVCZ[Jze0reuiR;d=l0/.e.W}'z;-n!"6s`M$bW$++:=/j
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 6c e5 dc 9e d3 bb 6d d5 f2 78 ed 70 51 16 3d 3f d9 5f 41 1f ec 42 f2 49 d7 81 07 30 d1 c2 5d b8 71 b3 ae 58 be 7a df 38 32 f7 64 85 bc a5 fb 4e ad 4e 0d 8e 09 7b d8 49 21 24 2c 59 cb d5 4d 5f 56 74 d3 95 c1 c6 c8 46 75 2c 7f 7e 75 0c 0f 21 c9 a2 f8 6e 81 00 25 cf db ee c6 3d ff f5 e5 f3 27 ba 97 9e 79 90 27 be f4 49 26 17 0f 2a 85 bb b5 13 69 c4 cb a2 09 2a ce 45 9c 65 ea 88 a3 0b 5a b9 9d aa d2 e8 d8 7b 3b a9 4f 87 5e 1a a7 24 c5 0f 60 88 41 fb 3a 0f dc 58 ca 84 28 bb 21 7a 45 c2 85 f2 6f 2c 12 4e d7 c9 d0 af d9 3d 9e 17 c2 13 28 f3 39 cb 73 f0 e5 f7 29 5f 68 05 d5 87 44 eb fc f3 55 1d 2d c0 ea 3d 33 5e 78 65 29 7a ad a7 89 de 37 4f a0 bd 2a 7d b2 3c 61 90 76 9d 2d da 3d 0c b9 7b 32 50 51 61 4e 52 05 0a 9d 47 63 c1 ef f4 cc d0 c0 9c ed 45 ed 4b c0 ea c9 Data Ascii: lmxpQ=?_ABI0]qXz82dNN{I!$,YM_VtFu,~u!n%='y'I&iEeZ{;O^$`A:X(!zEo,N=(9s)_hDU-=3^xe)z7O*}<av-={2PQaNRGcEK
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 17 85 ed 55 79 33 4a 06 6c 56 df 3a c8 bf 01 33 0b f8 58 fd c7 3f b2 12 25 e5 39 b1 74 80 79 3f 9a 4d c1 9d 11 3c 01 ce cb 3c 68 e6 b0 f3 aa 5a 9c 46 3e 1b c9 13 89 5d 5f 25 ab e3 62 3a fb de 46 a6 f5 3b 9b 9c 09 fd 79 8d 9c 5e 95 dd 65 2e 73 52 90 93 fa ef 1e 34 65 0f 0f 7a b6 cb de fe e7 ea e5 1f 7b 68 ff 9b 18 f8 89 16 c7 ea 76 b3 de 4d c2 ff 63 ef 5a bb da 46 9a f4 5f 49 7c 12 5e 69 24 1b b5 ee 02 34 bc 04 08 21 e1 b6 06 92 99 10 c2 51 8c 00 25 20 39 b6 4c c2 60 ff f7 7d aa bb 25 b5 2f cc e5 c3 ee 39 fb 9e fd 90 20 f5 b5 ba ba ba ea 69 75 57 79 fe d6 29 9f 85 74 a6 9c c9 14 79 14 b7 3a 54 7f 08 4b d7 d7 00 10 b8 06 1b 54 17 40 84 f3 ce 9c ab 6f b6 f8 30 af 0e d0 b1 20 f6 c6 a2 21 a1 e9 e7 53 2e fc d9 13 77 5b 16 9f 12 72 a7 99 39 e7 2c fe 69 9f fb 65 Data Ascii: Uy3JlV:3X?%9ty?M<<hZF>]_%b:F;y^e.sR4ez{hvMcZF_I\|^i$4!Q% 9L`}%/9 iuWy)ty:TKT@o0 !S.w[r9,ie
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 69 36 de d5 f3 12 4f e1 98 f9 63 c7 d6 f1 b8 79 9b dc f5 d3 4b 5d b4 f0 62 b9 53 62 b1 d3 3d 5a 39 20 81 b0 e7 f8 a2 ae 89 05 37 41 93 e6 ae eb 65 2a e8 1e 0d d2 67 79 91 b7 b9 04 c1 c0 d4 77 dc 3a 9f f2 5d f0 7e 70 49 21 9e 0a be 9a 64 11 93 57 10 11 1a 45 24 32 e9 c3 76 93 dc d3 16 67 4e 48 35 fd d9 5d 5a de 14 97 14 b1 4c 9b 8d 32 a8 3f 4a 57 bb 9c 5f d8 ad ec f9 f4 c7 05 45 7b 5b e4 bb 86 f1 55 a1 1e 79 38 ad 94 9c fb cf 52 11 07 a4 b9 ee 22 e0 c3 e3 64 75 d0 d9 db 3d 3e 89 1f 5f 1f 5d ec 1d 6e 6e ec 5d 1c 9f 1c 76 37 76 b6 57 1e 01 be 31 da 15 66 59 e6 68 90 ad b4 ae fa 17 14 e6 ea f6 18 94 27 d7 69 6b 62 6e 6d 77 77 df 63 eb bc 7d b4 fb 6e be 7c 3f cb db e0 51 76 9f 5e b6 d3 7e f6 0d 15 8e 37 bb 1b 47 db 17 d4 e3 f6 c1 76 f7 78 71 a5 61 6f 90 f4 d3 Data Ascii: i6OcyK]bSb=Z9 7Ae*gyw:]~pI!dWE$2vgNH5]ZL2?JW_E{[Uy8R"du=>_]nn]v7vW1fYh'ikbnmwwc}n\|?Qv^~7Gvxqao
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 15 8e e3 d0 48 e3 c0 e7 e2 a8 bb fd 7a f7 37 a3 b5 fd 93 bc f1 81 e4 fe f5 72 f8 2f b9 72 93 67 2f 87 e6 b3 2f a3 f2 d9 15 9d 20 f3 ac 16 8f a9 96 f3 be 81 69 84 78 cd 86 13 98 8f 53 fc e7 f1 e7 d2 4a 18 b2 b8 e8 9c 68 b4 18 f5 d5 bc 8a ee 56 cd 68 5e 6b 76 2a c3 29 38 59 28 fe 55 78 9c 16 d7 d6 65 ac 84 91 d5 17 73 72 3c 1e 09 55 49 b6 76 d8 3c 5e 55 8f eb e5 0a c5 77 d5 31 4f 37 89 ed f9 10 43 f1 45 8f 74 bd f8 e0 29 02 0f 70 b2 b0 a8 de 80 37 7f b2 44 4b fa 6d 88 a2 c3 5d 39 8b ce 01 19 7c 1e f2 88 6a 7f 5d 5c a1 94 ce ae fc f3 a3 ea f5 ad b5 96 5b 3a 5d c8 af 1a 38 58 d0 00 b1 81 ec 90 08 89 d0 e3 31 e5 ea 09 58 2f b1 de ea ea df 16 f5 7f 53 71 42 85 74 85 02 e9 0a 08 c6 48 fd d4 9e 57 01 1d 46 1a 23 bd 30 d2 b0 c2 7f c4 67 8c 31 df f1 6c d7 0a e9 44 Data Ascii: Hz7r/rg// ixSJhVh^kv*)8Y(Uxesr<UIv<^Uw1O7CEt)p7DKm]9\|j]\[:]8X1X/SqBtHWF#0g1lD
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 82 69 a5 51 2b b0 23 f4 d0 16 b3 a1 d0 15 04 02 22 3d 98 4f 30 62 0a 8c 80 0f 11 8a 90 ad 6f 70 09 e6 34 82 cd 76 88 ac 06 a2 04 be 1f 10 87 7d 15 ac 00 0d c3 72 bb 21 59 4d 05 b7 00 2b c0 7a 61 be 54 08 83 6c 17 60 00 30 43 45 33 b6 eb 13 06 e0 83 68 80 4d e0 85 0e e0 48 a8 62 1c e6 a3 42 10 39 be 82 76 18 c3 4c 04 20 c6 55 81 8f 07 61 71 e9 b2 da 14 06 f2 80 21 2c 48 a6 a7 c2 21 e2 7b 48 7d 38 2a 32 c2 1c a0 b1 00 73 a7 82 24 58 5c 97 a6 8d 44 af c1 4b 0c e2 11 78 11 e4 4a 85 4e 18 aa 15 60 ea a6 40 14 a8 b1 42 1f c6 d6 9a c2 53 8c b8 01 d3 ee 4c 41 2b 0f 12 ed 61 75 04 2a ca 62 96 8f ae 2d 5a aa 53 78 8b ac 3a 41 2b 05 7a 31 d7 b1 b1 66 41 84 8a c2 98 eb 03 55 30 cc 99 02 c8 42 0f ab 26 02 43 15 68 86 15 05 a0 80 89 b0 15 94 86 e9 05 89 58 3d 9e 02 d8 Data Ascii: iQ+#"=O0bop4v}r!YM+zaTl`0CE3hMHbB9vL Uaq!,H!{H}82s$X\DKxJN`@BSLA+aub-ZSx:A+z1fAU0B&ChX=
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 28 8b cb 3a fb 77 91 fd bb 31 aa b2 a1 3f ee eb ec ef 22 fb bb 91 54 d9 50 29 3f ea ec 8f 22 fb a3 31 ac b2 a1 65 1e ea ec 0f 22 fb 83 71 55 65 43 f1 90 f4 fc c5 fe 3f 93 fb ff a9 8f 74 65 1d 05 70 66 5f 4d b2 9d cd de 07 4e a1 a1 ea 13 24 4d ea 67 c9 5a da b5 6b 52 4f 57 fc 0c eb b4 f7 95 2c 88 8d bf 26 55 77 c5 3a be b3 d7 a4 12 af 18 e6 d8 75 e2 f7 4a 1c 00 ed ea c4 8f 95 3c 98 6e d3 d1 87 4a 20 e8 bb 22 45 25 fa 67 df 04 9a 33 70 fe 6b 3c 8b ee 0d f4 06 0f fd b2 58 5a 12 7f e9 34 a3 cb ef 29 bd a7 a3 fc e1 53 e9 e2 17 cb 45 1e ff 7d a8 f9 86 ef 86 9b b2 e9 05 77 2e e4 09 65 55 66 be db a7 72 44 c7 55 ae be 3a 58 d7 d2 b9 5f 13 e1 1f 63 e6 1c 13 9a f0 76 f4 ab ef e9 84 c7 7b 55 f1 e4 13 b5 ea 03 50 53 04 0c 67 fe 6a 6e 18 ba 15 c7 9a b3 24 02 4a 37 be Data Ascii: (:w1?"TP)?"1e"qUeC?tepf_MN$MgZkROW,&Uw:uJ<nJ "E%g3pk<XZ4)SE}w.eUfrDU:X_cv{UPSgjn$J7
2024-04-25 07:07:03 UTC	1378	IN	Data Raw: 4b 6c 8f e9 5c ae ea 42 82 2a da 11 d8 26 62 09 07 1e f9 46 65 53 b5 b0 04 02 9d 38 59 64 a2 2f 43 15 f0 59 18 4f 07 cc 48 c1 39 04 32 ab 25 c6 51 9e 84 cf b5 7c 45 62 99 0f 2e 89 b8 8c 6a ca 45 3d 7f ed e3 86 72 aa 87 84 41 44 f0 e8 6f 12 b2 28 63 74 ff e1 b9 ef 16 30 65 a5 9e 22 7e e5 9d 03 be c0 bc fd 0a 25 60 b1 be f5 1f 0f be d9 fe c3 c3 9d f3 dd f3 47 41 f7 fc 6f ff 75 b3 5a ff f7 60 e7 3f fb e1 ee d7 f3 e8 1c 06 ed e7 7e f9 e2 ed a0 f4 17 2a ed fa 3b de 23 76 2d eb d9 db 7d da 3a df dd 39 77 cf bd f3 47 83 87 0f 1e b1 45 9e 7e be db 92 09 c3 bc c4 8c be e4 e7 37 3d 97 89 f4 2b 08 3e 7e 1a 5e cf b3 d5 62 9e 8a e1 22 a3 53 1b a6 9c f2 8f d0 56 ba 98 ec 02 d1 ef 62 11 bd 95 8b e7 73 82 a1 18 aa fc 46 19 7b 40 3e 34 2e 38 94 6d 6f db 6e 65 84 df a8 cf Data Ascii: Kl\B&bFeS8Yd/CYOH92%Q\|Eb.jE=rADo(ct0e"~%`GAouZ`?~;#v-}:9wGE~7=+>~^b"SVbsF{@>4.8mone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49806	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	603	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:03 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-25 07:07:03 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49810	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	2748	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=3&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8686&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPLC=Pxe0NxvSkLD48j64n8lF35WWpu6WbhxbwU8Y%2F7CaTowjDySgQl%2F1DbNS3IVsIFjbTdHOlcmoYU1cxzK5Lp9yk%2Fh%2BVQyguklYcOnqGlZB8q%2BhUOcW32HqOdg%2FAhQX7w%3D%3D
2024-04-25 07:07:03 UTC	812	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:03 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 2e67705592d9e70f39603d15b26f4690.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 4yDskrp-7Dk-Ik3yK25fyA3-W2ADW2cedGUgwjvWITTuU9hX1n-K4g==
2024-04-25 07:07:03 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49807	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	865	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=116169333&gjid=182017514&_gid=1979514058.1714028817&_u=6GDAAUABAAAAICgFKgC~&z=1630114777 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:03 UTC	592	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 07:07:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:03 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49811	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	2084	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 133 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPLC=Pxe0NxvSkLD48j64n8lF35WWpu6WbhxbwU8Y%2F7CaTowjDySgQl%2F1DbNS3IVsIFjbTdHOlcmoYU1cxzK5Lp9yk%2Fh%2BVQyguklYcOnqGlZB8q%2BhUOcW32HqOdg%2FAhQX7w%3D%3D; _dd_s=rum=0&expire=1714029721714&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18f8n.0.1.1; FPAU=1.1.2028829226.1714028821
2024-04-25 07:07:03 UTC	133	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 39 39 32 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":1992.7999999999884,"tags":{"rating":"needs-improvement","page_group":"/downloads","country":"US"}}
2024-04-25 07:07:03 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:03 GMT ETag: "38-pMGP4qDAcSpMl4CZR7ZAR40hnME" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 087f7127038c650d8d2d931d1ea5e14c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vmijBz-8hzTCVuBlwF_upKRs1nqmkRu3ib2LFGCSXoAbsLHsXE9J9g==
2024-04-25 07:07:03 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 31 39 39 32 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"FCP","time":1992.7999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49812	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:03 UTC	2084	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 133 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPLC=Pxe0NxvSkLD48j64n8lF35WWpu6WbhxbwU8Y%2F7CaTowjDySgQl%2F1DbNS3IVsIFjbTdHOlcmoYU1cxzK5Lp9yk%2Fh%2BVQyguklYcOnqGlZB8q%2BhUOcW32HqOdg%2FAhQX7w%3D%3D; _dd_s=rum=0&expire=1714029721714&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18f8n.0.1.1; FPAU=1.1.2028829226.1714028821
2024-04-25 07:07:03 UTC	133	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 38 38 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":880.3999999999942,"tags":{"rating":"needs-improvement","page_group":"/downloads","country":"US"}}
2024-04-25 07:07:03 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:03 GMT ETag: "38-Y/mNTXk9C/CbvbUIQBsJOSYreBw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lMui2qcfURI2cMEEhmYjAM1qq7_Rrft7QUdS8Jd710n62McVkrcIkA==
2024-04-25 07:07:03 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 38 38 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 7d Data Ascii: {"status":"ok","metric":"TTFB","time":880.3999999999942}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49814	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	537	OUT	OPTIONS /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-amp-exp-user Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: GET,POST,HEAD X-Amzn-Trace-Id: Root=1-662a0118-1851d58c30f121c10d223b03 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Thu, 25 Apr 2024 07:07:04 GMT X-Served-By: cache-pdk-kfty2130065-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028824.081125,VS0,VE73 Vary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method cache-control: no-store Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Headers: authorization,x-amp-exp-user Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49819	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	909	OUT	GET /rp.gif?ts=1714028821638&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:04 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49818	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	909	OUT	GET /rp.gif?ts=1714028821644&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:04 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49813	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	516	OUT	OPTIONS / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cross-origin-resource-policy Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	303	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Access-Control-Allow-Headers: cross-origin-resource-policy Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49816	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821862 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49817	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821867 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49815	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:04 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821880 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:04 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49826	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	594	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 07:07:05 GMT Content-Length: 0 Connection: close x-amz-rid: HFK9KP9Q4MZJ9V91627Z Set-Cookie: ad-id=A4yE7FxNMEYmiJkC-3NuX6E\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49828	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	816	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=116169333&_u=6GDAAUABAAAAICgFKgC~&z=1017032110 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49827	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	594	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 07:07:05 GMT Content-Length: 0 Connection: close x-amz-rid: 0873WFSC3PC6HPZFHFXH Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49822	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	1779	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	2366	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1893110229490866350"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1893110229490866350","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"1893110229490866350","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"1893110229490866350","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"1893110229490866350","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 07:22:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49824	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	1697	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	1790	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 07:22:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49823	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	984	OUT	POST /pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=206280928.1714028817&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:05 UTC	977	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=206280928.1714028817&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49833	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiVTA3Mjl5TnltSFFaVmx2eGJzbjBoZCIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	589	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5996 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-662a011a-48f7e17d299da0f31f67788b X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Thu, 25 Apr 2024 07:07:06 GMT X-Served-By: cache-pdk-kfty2130023-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028826.028735,VS0,VE115 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:06 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-25 07:07:06 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-25 07:07:06 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-25 07:07:06 UTC	1378	IN	Data Raw: 22 7d 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 73 6b 69 70 2d 6d 65 6d 62 65 72 73 68 69 70 73 2d 74 61 62 6c 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 30 33 2d 61 73 73 6f 63 69 61 74 65 2d 74 72 61 6e 73 66 65 72 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 Data Ascii: "},"value":"control"},"skip-memberships-table":{"key":"on","value":"on"},"transfer-details-03-associate-transfer":{"key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"exper
2024-04-25 07:07:06 UTC	484	IN	Data Raw: 61 70 6f 6c 6c 6f 2d 74 72 61 6e 73 66 65 72 6c 69 73 74 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 Data Ascii: apollo-transferlist":{"key":"on","metadata":{"experimentKey":"exp-1"},"value":"on"},"workspace-settings":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49834	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	600	OUT	GET /user/?tid=2612705757018&cb=1714028822731&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 7364750075177254 Date: Thu, 25 Apr 2024 07:07:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:06 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49837	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	624	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028822733&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5qSmtaams1TXpndE1tWXpZeTAwWW1FMkxXSmtaRFF0WXpsak16TTBOekZsWlRoaQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1160548893595702 Date: Thu, 25 Apr 2024 07:07:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:06 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49839	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	2078	OUT	GET /_set_cookie?val=NaA18jfKrTaqFvS%2FbJswPNMX6rHUNZVK6zV9uvYGVqa%2BBUGFx14RCPOh03UIUkVcig6zXswsljQJOeWTH%2FKMaOMm2ZasjRseqveTY%2FMaAXNZaYuxKccfFJxnyK0UWeh96lEiVLuhBVUPrNumJaNZGGWp0gCPp9HF1XU%2BZ0L9byteJL%2FipSDA%2FjaK4lDlROzIP6Y%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18f8n.0.1.1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D
2024-04-25 07:07:06 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:06 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 84dfd2370463d747d8a6985b8d784334.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 6faFeaWUQtujuRpDbQX6SiBWucZG3CSWc1ekby8wQhhCTvw2I2CAmA==
2024-04-25 07:07:06 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49835	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	624	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028822734&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5HTTJaVE5tWXpFdE1tWTJPUzAwTXpsbExUaGhORFl0TWpWallqRmxZVEpsWXpnNQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1100399727222631 Date: Thu, 25 Apr 2024 07:07:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:06 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49836	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:05 UTC	1461	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028822750 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:06 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4433536692588361 Date: Thu, 25 Apr 2024 07:07:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49832	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	1171	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 37 66 66 66 31 62 34 35 30 35 66 37 62 30 61 37 35 31 39 63 63 30 31 33 65 35 36 36 61 30 33 32 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=7fff1b4505f7b0a7519cc013e566a032&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028821783%2C%22event_id%22%3A1%2C%22session_id%22%3A1714028821782%2C%22
2024-04-25 07:07:06 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a011a-699cdef8616ea9f76a9aa976 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:06 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49831	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821880 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	1217	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 36 30 33 30 33 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"e4041402-9213-4e8c-8a10-c16b4380a189","sid":"1713883960303","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-25 07:07:06 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=658d0738-b8d8-4833-8c60-8ffed4d939c4; Path=/; Expires=Sat, 25 Apr 2026 07:07:06 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:06 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49841	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	641	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug\|t
2024-04-25 07:07:06 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 88SYDFNCKYN5XCWHRKPQ Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:06 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49830	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821867 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	1217	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 36 30 33 30 33 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"e4041402-9213-4e8c-8a10-c16b4380a189","sid":"1713883960303","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-25 07:07:06 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:06 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:06 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49829	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821862 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	1217	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 36 30 33 30 33 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"e4041402-9213-4e8c-8a10-c16b4380a189","sid":"1713883960303","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-25 07:07:06 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f8ea5a17-efd1-4269-b3dc-781a3ddba5f0; Path=/; Expires=Sat, 25 Apr 2026 07:07:06 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:06 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49840	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	641	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug\|t
2024-04-25 07:07:06 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: EDZZFC2Q495Y6JFAKR2K Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:06 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49838	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	1180	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:06 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49843	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	1679	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49844	142.251.15.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:06 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49845	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:06 UTC	997	OUT	GET /pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=206280928.1714028817&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-04-25 07:07:06 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; expires=Sat, 25-Apr-2026 07:07:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49846	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	1618	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028824967&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 07:07:07 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZvVkN4U1lWanYyRU0zMHJTamVhU2FjTG5uM05ySHVLTmxCNXJwYWQvUS9kR3VRbC9lNWVWZFU4eFZVMHl0MjE1Y2k4VXRqMHBJdkRjeDRZa0tlS3VkUXJDaVdYTTRQczR6WExXbDB5Vk5CRT0mYlU1SFZCUEszZ2RKeVN6cDRlUnUraDdDTEV3PQ=="; Expires=Fri, 25 Apr 2025 07:07:07 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5639159170739951 Date: Thu, 25 Apr 2024 07:07:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49847	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	1618	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028824969&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 07:07:07 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="; Expires=Fri, 25 Apr 2025 07:07:07 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1642566816807420 Date: Thu, 25 Apr 2024 07:07:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49848	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	559	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 07:07:07 UTC	367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4101 ETag: "2a8d051abafd7b1d3f62592455b15f0c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 6726 Date: Thu, 25 Apr 2024 07:07:07 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-25 07:07:07 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-25 07:07:07 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-25 07:07:07 UTC	1345	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49849	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	2013	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.0.1713883960303; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18irf.9.1.a
2024-04-25 07:07:07 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Mon, 22 Apr 2024 13:42:57 GMT Last-Modified: Mon, 22 Apr 2024 13:33:55 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oR2oQVvplTy2vS57AQMXiTPrLOLgwXuYrASmM9YbslJABqUG0Vybkg== Age: 235451
2024-04-25 07:07:07 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49850	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	704	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 07:07:07 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 6649196142752388 Date: Thu, 25 Apr 2024 07:07:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:07 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49856	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:07 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 32124 Connection: close Date: Sat, 25 Nov 2023 12:41:09 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Fri, 24 Nov 2023 15:42:29 GMT ETag: "868aedeefe7669e8a4f7196f7df5d058" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 6065fa4dfa87d92a6009e7fe74c3def0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: g-ZH4dfY3kNLN3z-7dsMWF1zoLJ6gZd9Q11F9AITO9_B-s3-qffuag== Age: 13112759
2024-04-25 07:07:07 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7d 7c 00 11 00 00 00 00 f6 e0 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 6d 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 6d 34 00 00 0b 90 00 00 33 94 f7 fc d9 35 47 53 55 42 00 00 78 c4 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 87 35 60 c0 63 6d 61 70 00 00 06 08 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 64 00 00 01 97 00 00 0b f2 4b e1 31 a5 66 70 67 6d 00 00 07 e0 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 6d 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 10 00 00 58 bd 00 00 90 82 5a 21 5b f3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 71 43 9b 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFF}\|GDEFmo]GPOSm435GSUBx8-jQOS/2Z`5`cmap;<cvt dK1fpgm06gaspmglyfXZ![head66qChhea
2024-04-25 07:07:07 UTC	16384	IN	Data Raw: f8 0b 25 7e 51 89 bf a6 c4 4a a3 1d db e1 a3 f5 65 f0 9f 70 45 0b a4 36 fd 64 77 f2 64 3e d0 07 8b 02 4c 96 d8 73 e0 b2 99 c7 23 af cf 7b ec 79 b7 6d cf 37 df 6b b0 29 c4 4a c1 9e 0a 5a dd 36 ac a9 05 28 93 17 3b 3d ee a2 d7 f9 e6 ea b3 f8 51 d1 63 35 ba bb 7b 0d be 94 2f 94 d3 2f 4c 7c f0 83 88 de 2c 42 c2 af 59 54 9a 15 74 e1 88 75 42 af 47 06 51 d1 12 28 8b 6b 81 b2 98 58 78 b8 9e 6c 26 e2 81 7b b8 c9 1c 54 a2 cd 32 47 05 fc 6e d2 d3 64 f9 a9 fe e0 c4 69 12 ea 7f 2b 0f a2 7d f1 45 3c 8e bd d5 97 58 0c 6c 98 45 25 2f a3 11 6a 42 68 08 0f 49 dd 25 8f 37 0f 7f ed e9 49 6d 49 0a 4d da 85 da 84 9d 4f d4 4c 97 40 7e d0 00 99 46 3e 52 39 27 fc d5 60 e5 a2 41 50 cb 09 20 49 6c 76 06 0d 3e 87 27 ee 0f 8c dc bc 22 fe b7 c2 97 4f a8 da 46 6f ac e8 fd 09 bb 38 55 Data Ascii: %~QJepE6dwd>Ls#{ym7k)JZ6(;=Qc5{//L\|,BYTtuBGQ(kXxl&{T2Gndi+}E<XlE%/jBhI%7ImIMOL@~F>R9'`AP Ilv>'"OFo8U
2024-04-25 07:07:07 UTC	108	IN	Data Raw: 6c 4e a0 c1 da ee e5 2e ee e4 3a 2e e7 36 ae a6 01 e1 9b 62 5b 49 f8 a4 e9 4c 3d b9 d8 55 d5 90 34 e1 a1 f3 06 91 e4 f2 43 27 45 ec 7c cf b3 1a 50 48 19 75 74 e3 04 cd c1 e3 1a ae d7 5c ab 37 69 3a 86 6b 34 13 13 d9 66 63 b8 09 21 ae 89 75 3f 85 d2 f6 b9 28 3b 13 0f 3f 11 11 a5 b1 19 67 e7 db e1 a7 db ff 01 f1 e1 40 52 00 Data Ascii: lN.:.6b[IL=U4C'E\|PHut\7i:k4fc!u?(;?g@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49857	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	633	OUT	GET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:07 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43188 Connection: close Date: Mon, 30 Oct 2023 20:51:14 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Mon, 30 Oct 2023 17:00:11 GMT ETag: "55576599a2d772f9297c5036d355b1fb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dZAVcOkcuH_HNsPY89El9AtwksdLjZu0Ds8R4vto7pZrRhA0J6ot_Q== Age: 15329754
2024-04-25 07:07:07 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a8 b4 00 12 00 00 00 01 76 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 a8 ac 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8c 00 00 00 b8 19 5c 21 89 47 50 4f 53 00 00 02 20 00 00 14 91 00 00 34 a4 41 b8 64 b5 47 53 55 42 00 00 16 b4 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1c 70 00 00 00 4e 00 00 00 60 6a 7b 86 e3 63 6d 61 70 00 00 1c c0 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a1 2c 00 00 00 29 00 00 00 34 0c 4d 03 7a 66 70 67 6d 00 00 a1 58 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a1 24 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 1f d8 00 00 73 28 00 01 04 0c d6 66 63 d7 68 65 61 64 00 00 93 00 00 00 00 Data Ascii: wOFFvDSIGGDEF\!GPOS 4AdGSUB^_OS/2pN`j{cmaph=jccvt ,)4MzfpgmX6gasp$glyfs(fchead
2024-04-25 07:07:07 UTC	16384	IN	Data Raw: 27 9d c3 f4 6c 6d b5 ed 2c 46 2e 0b 34 66 05 35 bd 82 23 d7 4f b9 2c eb 0e e5 5e b9 db ac 4f 97 a6 67 33 76 92 13 f1 51 8c 63 75 74 d8 95 f1 5c 16 a0 1f 27 f3 39 fe af b1 6b 44 db be 90 3a 97 f8 70 0b 75 cb 02 63 2d 00 74 f9 c8 55 d2 f0 ca 69 cc 9b c3 eb a4 50 08 87 29 b5 0f 27 86 f3 e1 5c 22 46 43 34 c4 99 b2 85 51 db 16 ae ed 6a 10 cf 5e bc c7 03 1f 26 3e 9f 0e 42 fc ef 0b e9 11 f1 ff f1 bf ef 62 17 f1 97 55 57 44 07 8e f4 93 29 64 e0 56 b3 90 cf 46 98 ec 14 83 41 37 4e 4e 59 7d 82 a4 d9 67 aa 5b 12 21 7d 34 3f 43 90 65 ec 37 9c 07 39 90 99 60 b5 5a ed 54 db ad 44 27 d1 e2 bc 38 38 45 2a cf 1a d8 a8 64 d8 02 d9 a4 42 94 90 91 33 c9 ac e1 4f 9e 26 70 3c f6 5e ab 8b 67 9c 74 ba fc e9 c8 da e2 99 3b 4f 32 7f 5f 3e 74 7a ff e3 7d fe 87 ca 1d f1 b9 cf ba ab Data Ascii: 'lm,F.4f5#O,^Og3vQcut\'9kD:puc-tUiP)'\"FC4Qj^&>BbUWD)dVFA7NNY}g[!}4?Ce79`ZTD'88E*dB3O&p<^gt;O2_>tz}
2024-04-25 07:07:08 UTC	11172	IN	Data Raw: ef f0 c5 0e 07 43 b5 af d0 b0 28 e3 f6 77 5c 73 e4 d8 fa f5 e3 43 7d 93 b1 36 8c 0e fa 02 b5 5f 31 27 f9 b6 4c ae f6 9e fc 58 50 8d 90 b2 ff 8a 62 be 90 21 03 c3 3d 39 7f da ce 81 3a 74 3a be 99 d2 31 03 af a9 da 62 08 b2 c0 ad ec e2 28 cf 6a 40 28 75 78 19 07 17 fa e2 7e d5 3e 5b 41 7d bd dc 98 c9 d3 32 53 35 0c 32 00 ca b0 b4 fa 2a 5f 41 57 cd 3e 35 28 4c ba 0e 57 a3 75 ba 96 c1 61 fc 1a 11 de 4c 27 b5 6c 61 20 1e de b9 b3 4e 0a db 83 57 5f 32 3f 55 07 f6 ff 7d a4 bd 10 8f e7 68 9c 98 dc 58 48 a5 c2 85 c7 63 31 0d e6 01 c8 e9 5f 9f fe 38 be 95 e3 4d f8 a0 b7 5a 6c 08 63 a9 2a 30 89 48 78 4c e2 6b 79 14 4b 9f e4 b5 db 0c 0a 07 97 50 e4 3a b8 44 26 ab 47 d9 52 a3 08 7f 87 22 4c 7c b6 d3 3d 3e 92 68 c7 d9 f6 d0 cb 2f 55 e3 ce 3f a1 18 84 9d 1b f1 e1 91 dd Data Ascii: C(w\sC}6_1'LXPb!=9:t:1b(j@(ux~>[A}2S52_AW>5(LWuaL'la NW_2?U}hXHc1_8MZlc0HxLkyKP:D&GR"L\|=>h/U?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49854	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:08 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Y4H240RV40AXYWXE1WM8 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49851	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:07 UTC	10723	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 66 63 31 65 62 66 37 61 35 30 32 32 30 34 66 66 62 39 37 64 32 34 32 61 35 35 34 31 35 66 35 61 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 34 39 37 34 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=fc1ebf7a502204ffb97d242a55415f5a&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028824974%2C%22event_id%22%3A1%2C%22session_id%22%3A1714028821782%2C%22
2024-04-25 07:07:08 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a011c-14e3acda332baf0c5609fe8d Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:08 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49859	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:08 GMT x-amzn-RequestId: 0483339d-2c34-4eec-a675-8422214cf39a Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 5a439504ade3c1726d22c85807033e14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: P1yR5RN1j2YYATdftSPXHvKD8abLuR-FWCoiak0XNXxtyzSmskqmWQ==
2024-04-25 07:07:08 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49860	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:07 UTC	697	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:08 GMT x-amzn-RequestId: c6d25d15-a90b-4757-952b-14c001eb9d6f Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 59d47415973fdc0751ce88be5c9c1a26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: OrujUyK7-IUYvt80w00m1EWfpFbzw94YBb6pVgfmx9Bl9RDlZJcmNg==
2024-04-25 07:07:08 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49852	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	539	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:08 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49864	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	3231	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1714028814330&sst.ude=0&sst.gcut=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&sid=1714028816&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A06%3A55.906%2B02%3A00&epn.hit_timestamp_unix=1714028815906&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8685&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b
2024-04-25 07:07:08 UTC	812	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:08 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8b047a56cedc9f5e8593136caff4a83e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: Lg0qpM6jO_3Vc1-R6_-zE5s6AAhuB7Z2OpXaDdtEV1GY2htEHoqqwg==
2024-04-25 07:07:08 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49867	44.195.207.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	464	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive Accept: / Access-Control-Request-Method: OPTIONS Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:08 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49873	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	870	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-69-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49872	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1990	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _dd_s=rum=0&expire=1714029721714&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:08 UTC	893	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:08 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _nVWB7-LKUHPnH45yvcThNRuDwvbmlPQs-AypbFN3r_MGhbVZf2qHw==
2024-04-25 07:07:08 UTC	16384	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-25 07:07:08 UTC	16384	IN	Data Raw: 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii:
2024-04-25 07:07:08 UTC	8798	IN	Data Raw: 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 12 1a 18 17 4b 1a 18 17 7a 1a 18 17 96 1a 18 17 aa 1a 18 17 aa 1a 18 17 a1 1a 18 17 85 1a 18 17 56 1a 18 17 20 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a Data Ascii: KzV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49874	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	907	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&rl=&if=false&ts=1714028821128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028819532&coo=false&eid=1714028814330-69-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:08 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:08 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49875	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	2053	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _dd_s=rum=0&expire=1714029721714&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:08 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:08 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 b98d9359af9bfef991c5b64e71032a66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fJikHaW8iEFlGJV4i_Z9WfpHFnfK-6T3no_m31hl1YDgEzAxoJSRaA==
2024-04-25 07:07:08 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49879	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	3330	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028814330&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=206280928.1714028817&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1714028814330&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=e4041402-9213-4e8c-8a10-c16b4380a189&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A01.129%2B02%3A00&epn.hit_timestamp_unix=1714028821129&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028814330-69-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028814330-69-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4186&tfd=8732&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:08 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:08 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775992; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 a0538eb5a32d7c22fe436214e4dfb72e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: LcuCw0_MyC6NUcUu9YOZ_TCTYi6YrURvrMLUQIHSRMBn5z7l9P5DdA==
2024-04-25 07:07:08 UTC	1167	IN	Data Raw: 34 38 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 33 37 35 37 31 34 32 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 Data Ascii: 488event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1937571429;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e18
2024-04-25 07:07:08 UTC	1099	IN	Data Raw: 34 34 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 33 37 35 37 31 34 32 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 39 63 61 32 34 33 37 37 66 34 38 32 32 30 32 34 30 34 32 34 30 39 34 31 35 35 25 Data Ascii: 444event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1937571429;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%
2024-04-25 07:07:09 UTC	294	IN	Data Raw: 31 31 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 35 36 47 6d 6b 61 33 7a 38 59 6c 79 45 25 32 46 65 5a 55 34 63 66 42 67 55 30 79 58 52 4b 69 59 69 4b 33 4f 7a 46 70 58 6c 64 47 49 53 42 49 46 33 64 76 6c 78 5a 70 46 67 35 79 72 48 78 46 78 50 71 25 32 42 64 30 72 69 37 69 67 75 30 55 67 5a 53 65 79 78 5a 42 4c 44 6f 5a 48 6f 30 76 58 4b 53 56 6f 25 32 46 78 35 57 47 62 25 32 42 52 70 41 6d 4d 32 4f 73 39 6d 73 35 25 32 42 57 61 34 44 61 45 58 73 46 73 57 4c 44 54 41 36 70 4e 47 59 4a 54 4f 47 50 37 55 48 49 31 4e 25 32 46 6a 4a 4f 46 43 62 76 6c 50 5a 72 36 66 36 4b 6c 25 32 46 73 Data Ascii: 11fevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=56Gmka3z8YlyE%2FeZU4cfBgU0yXRKiYiK3OzFpXldGISBIF3dvlxZpFg5yrHxFxPq%2Bd0ri7igu0UgZSeyxZBLDoZHo0vXKSVo%2Fx5WGb%2BRpAmM2Os9ms5%2BWa4DaEXsFsWLDTA6pNGYJTOGP7UHI1N%2FjJOFCbvlPZr6f6Kl%2Fs
2024-04-25 07:07:09 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49877	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	2112	OUT	GET /_set_cookie?val=NaA18jfKrTaqFvS%2FbJswPNMX6rHUNZVK6zV9uvYGVqa%2BBUGFx14RCPOh03UIUkVcig6zXswsljQJOeWTH%2FKMaOMm2ZasjRseqveTY%2FMaAXNZaYuxKccfFJxnyK0UWeh96lEiVLuhBVUPrNumJaNZGGWp0gCPp9HF1XU%2BZ0L9byteJL%2FipSDA%2FjaK4lDlROzIP6Y%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:08 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:08 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 855fc99290943f60d45d25c47cc9e208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: Af6sKzro2V_CSpKfVC9ghWDATlD8MQ7apNGXQ4AvRD7ExxXHTSYWPQ==
2024-04-25 07:07:08 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49881	64.233.177.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	707	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=116169333&gjid=182017514&_gid=1979514058.1714028817&_u=6GDAAUABAAAAICgFKgC~&z=1630114777 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:08 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 07:07:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:08 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49882	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	401	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:08 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-25 07:07:08 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49869	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	2190	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1205 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:08 UTC	1205	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6f 43 49 41 50 39 6f 43 49 41 50 6e 41 43 41 45 4e 41 78 43 41 41 41 41 41 41 45 4a 41 41 41 41 41 41 41 41 41 41 41 41 41 2e 4a 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9oCIAP9oCIAPnACAENAxCAAAAAAEJAAAAAAAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AX
2024-04-25 07:07:09 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:09 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49866	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	374	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	385	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:08 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 27 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-25 07:07:08 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49886	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	675	OUT	GET /rp.gif?ts=1714028821638&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:08 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49885	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	675	OUT	GET /rp.gif?ts=1714028821644&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:08 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49884	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	582	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=116169333&_u=6GDAAUABAAAAICgFKgC~&z=1017032110 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:08 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49883	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1580	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:09 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1893110229490866350"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1893110229490866350","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"1893110229490866350","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"1893110229490866350","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"1893110229490866350","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49894	151.101.194.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-662a011d-0269c9366cf2c62f6aa73e6f X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:09 GMT X-Served-By: cache-pdk-kfty2130088-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028829.966358,VS0,VE74 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:09 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49898	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	631	OUT	GET /user/?tid=2612705757018&cb=1714028822731&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1700295050941472 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49897	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028822733&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1419899911082239 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49899	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028822734&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 8275952690382827 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49901	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1445	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=990469011;gtm=45h91e44o0h2v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49900	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1492	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028822750 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1039323028105744 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49896	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1629	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028824967&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ2b29IYjFDYkRiKzFWTTZldHZteUxjY0U1d0JSc1hkS1dxTzZyMnNDa21uWU5iMzBIZi9nQmN4SzhYYkxMM0VrbFJxV01LN1VCcFFScnNraG5oTU9oWFJ5eXUyYUZCQVFnbXpqaVhydmRTST0mM3o4c3hJVzNtZnRML1N3WmVYMkVxMDBHMHV3PQ=="; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3467489754898077 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49905	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1922	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:09 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Mon, 22 Apr 2024 13:42:57 GMT Last-Modified: Mon, 22 Apr 2024 13:33:55 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9cc8ba00384b3554aebbfb2dec8eda6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: D2ExGtOP3zeZSVD25nRup0Jw__6-QzbeEOqPzzRvqF4Fj_oiU7aHug== Age: 235453
2024-04-25 07:07:09 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49895	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	1629	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028824969&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fb6dfab06fd59bf598e189ca24377f48220240424094155%2Fa9b0be5f091948049e5d8dd105d582e620240424094228%2Ff62e24%3Ftrk%3DTRN_TDL_01%26utm_campaign%3DTRN_TDL_01%26utm_medium%3Demail%26utm_source%3Dsendgrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZJb0duM1RwVTFhOHNPeXQxQkE2QTNnWStGVHI1RVNuTnJVYVZuMndGYnNYZWZKTk5WbTFGQlVyaVJwQnBzK3ZyL0dQR1VFZW81eDNoL0VOaFZvZUYvcDNaL0ZlbFVaR25nWTF1SW5NWGlQWT0mM2xyckdaeTJ3Q0UyMGs5eVVZclM0NlJVa2FnPQ=="
2024-04-25 07:07:09 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="; Expires=Fri, 25 Apr 2025 07:07:09 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 3228897999949234 Date: Thu, 25 Apr 2024 07:07:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49902	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:09 GMT x-amzn-RequestId: 43b6262e-2a76-47c1-8c74-44f1363e8b60 X-Cache: Miss from cloudfront Via: 1.1 cb7c4e818872f268fec5f37f214fd0de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 58VDweTEsPmjZP7ONT11kpqg_DH1G2AEfl0UL9mLGiOp_qC9OMqZ4g==
2024-04-25 07:07:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49903	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:09 GMT x-amzn-RequestId: 5760c1a7-9168-4b8b-b6ff-93d7237e72c9 X-Cache: Miss from cloudfront Via: 1.1 e05f9b3de38fbfe53441974080c25cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: E3ka8R2UjFquOVRr1APyowV7PWTw7fE8NR0yim8MtVMV0PO7Q0b28g==
2024-04-25 07:07:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49890	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	480	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821102&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:09 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HXVG3VGF676K9JPBEREG Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:09 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49891	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	480	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028821136&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:09 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: GZX90ANM5AMJ198T3V57 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:09 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49892	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:09 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 39QSMQYR6T2J7ZDXE231 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49906	44.195.207.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:08 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49907	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	2053	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetvid=6a25e15002d211ef85b29d2f0d6f657d; FPLC=s60VZfdfaWc%2Fh%2B1iOYjgO85Xp28Qg6%2FY4WWTHtBIfv0LLKrXozayQvh23feM9Z%2F429mC4YqTpIHRCzS5a3JkBvZEZ38l0E%2FZLSrhWUNoHgn7Wla2mefjEqBj2wpkrQ%3D%3D; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; _wt_snowplowid.0497=e4041402-9213-4e8c-8a10-c16b4380a189.1713883960303.1.1714028826.1713883960303.2b86bcb8-1c09-436d-b865-04c72fac7227.d0c27f9f-651e-4360-bc67-63aa0d957383.21938caf-58c4-4b83-a5aa-020e3ae2049d.1714028825861.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _dd_s=rum=0&expire=1714029721714&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576
2024-04-25 07:07:09 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:09 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pESQYvdND6VAMiw98Zh1iMI-2YR05J3U8-p4aGVUdXAEgkKlasL2HA==
2024-04-25 07:07:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49893	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a011d-067151880cc8796b5bdfa3ad Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:09 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49887	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821880 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:09 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:09 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49889	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821862 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:09 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:09 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49888	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028821867 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:09 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:09 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:09 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49909	151.101.193.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	403	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://www.redditstatic.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:09 UTC	650	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://www.redditstatic.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:09 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49911	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:09 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:10 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a011e-46ff47776b5720a70f81fcfd Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:10 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49914	151.101.193.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 442 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:10 UTC	442	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 37 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 32 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f Data Ascii: [{"age":1,"body":{"elapsed_time":570,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.02,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://www.redditstatic.com/
2024-04-25 07:07:10 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:10 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49915	3.161.188.92	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	588	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:10 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Thu, 25 Apr 2024 07:07:11 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 879a69ae267291ed2e83c0ee96f05616.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: 3ypEIhRigox6SuVg_4-bfPkayfpucBvvh4XMMjy9B4NHPtFh3fTTYw==
2024-04-25 07:07:10 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49913	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	2139	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 6194 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f
2024-04-25 07:07:10 UTC	6194	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 6f 6f 6b 69 65 5f 77 61 6c 6c 22 2c 22 73 65 5f 61 63 22 3a 22 61 63 63 65 70 74 5f 74 72 61 63 6b 65 72 73 22 2c 22 65 69 64 22 3a 22 30 65 64 38 64 63 33 34 2d 35 62 63 37 2d 34 39 37 34 2d 61 32 34 34 2d 61 35 30 66 35 33 38 66 38 32 63 61 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"cookie_wall","se_ac":"accept_trackers","eid":"0ed8dc34-5bc7-4974-a244-a50f538f82ca","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cooki
2024-04-25 07:07:10 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:10 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:10 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:10 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49917	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:10 UTC	633	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 07:07:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-09cce1e47c116b9ae Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-25 07:07:10 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49916	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	1868	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f
2024-04-25 07:07:10 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:10 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49921	3.161.188.92	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	600	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:11 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Wed, 24 Apr 2024 16:38:56 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "6c07a28ff53ed915f74a27fe90616d61" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 51f668a91bae8bddb47ed0ddef0f2984.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: CBFIfmzN0s5Blo7ttdI2xNHv2QvJfI7_34qICFL4uSQlSo8o0CQs7g== Age: 52095
2024-04-25 07:07:11 UTC	15692	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-25 07:07:11 UTC	298	IN	Data Raw: 66 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 3c 2f 73 76 67 3e 22 2c 74 3d 73 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 66 6f 72 28 3b 74 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 53 41 70 70 26 26 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: f().toString()+"</svg>",t=se.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 6e 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 66 28 6e 26 26 6e 3d 3d 3d 65 2e 6c 61 73 74 43 68 69 6c 64 26 26 33 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6e 2e 6e 6f 64 65 56 61 6c 75 65 3d 74 29 7d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 7d 76 61 72 20 70 65 3d 7b 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 3a 21 30 2c 61 73 70 65 63 74 52 61 74 69 6f 3a 21 30 2c 62 6f 72 64 65 72 49 6d 61 67 65 4f 75 74 73 65 74 3a 21 30 2c 62 6f 72 64 65 72 49 6d 61 67 65 53 6c 69 63 65 3a 21 30 2c 62 6f 72 64 65 72 49 6d 61 67 65 57 69 64 74 68 3a 21 30 2c 62 6f 78 46 6c 65 78 3a 21 30 2c 62 6f 78 46 6c 65 78 47 72 6f 75 70 3a 21 30 2c 62 6f 78 4f 72 64 69 6e 61 6c 47 72 6f 75 70 3a 21 30 2c 63 6f Data Ascii: n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var pe={animationIterationCount:!0,aspectRatio:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,co
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 24 6e 3d 21 31 3b 76 61 72 20 42 6e 3d 7b 63 6f 6c 6f 72 3a 21 30 2c 64 61 74 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 2c 65 6d 61 69 6c 3a 21 30 2c 6d 6f 6e 74 68 3a 21 30 2c 6e 75 6d 62 65 72 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 72 61 6e 67 65 3a 21 30 2c 73 65 61 72 63 68 3a 21 30 2c 74 65 6c 3a 21 30 2c 74 65 78 74 3a 21 30 2c 74 69 6d 65 3a 21 30 2c 75 72 6c 3a 21 30 2c 77 65 65 6b 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 74 3f 21 21 42 6e 5b 65 2e 74 79 70 65 5d 3a 22 74 Data Ascii: $n=!1;var Bn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Hn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Bn[e.type]:"t
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 72 28 76 61 72 20 61 20 69 6e 20 72 3d 72 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 29 69 66 28 21 28 61 20 69 6e 20 74 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 30 38 2c 42 28 65 29 7c 7c 22 55 6e 6b 6e 6f 77 6e 22 2c 61 29 29 3b 72 65 74 75 72 6e 20 44 28 7b 7d 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 61 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 28 65 3d 65 2e 73 74 61 74 65 4e 6f 64 65 29 26 26 65 2e 5f 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 4d 65 6d 6f 69 7a 65 64 4d 65 72 67 65 64 43 68 69 6c 64 43 6f 6e 74 65 78 74 7c 7c 43 61 2c 52 61 3d 50 61 2e 63 75 72 72 65 6e 74 2c 54 61 28 50 61 2c 65 29 2c 54 61 28 4e 61 2c 4e 61 2e 63 75 72 72 65 6e 74 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 65 2c 74 2c 6e 29 7b 76 61 Data Ascii: r(var a in r=r.getChildContext())if(!(a in t))throw Error(o(108,B(e)\|\|"Unknown",a));return D({},n,r)}function ja(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext\|\|Ca,Ra=Pa.current,Ta(Pa,e),Ta(Na,Na.current),!0}function Da(e,t,n){va
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 2c 76 69 3d 6e 75 6c 6c 2c 67 69 3d 6e 75 6c 6c 2c 79 69 3d 21 31 2c 62 69 3d 21 31 2c 77 69 3d 30 2c 45 69 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 78 69 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 32 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 53 69 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 26 26 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 21 6c 72 28 65 5b 6e 5d 2c 74 5b 6e 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 69 28 65 2c 74 2c 6e 2c 72 2c 61 2c 69 29 7b 69 66 28 68 69 3d 69 2c 6d 69 3d 74 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 2c 74 2e 75 70 64 61 74 65 51 75 Data Ascii: ,vi=null,gi=null,yi=!1,bi=!1,wi=0,Ei=0;function xi(){throw Error(o(321))}function Si(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!lr(e[n],t[n]))return!1;return!0}function ki(e,t,n,r,a,i){if(hi=i,mi=t,t.memoizedState=null,t.updateQu
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 2e 66 6c 61 67 73 7c 3d 32 2c 72 2e 72 65 74 75 72 6e 3d 74 2c 69 2e 72 65 74 75 72 6e 3d 74 2c 72 2e 73 69 62 6c 69 6e 67 3d 69 2c 74 2e 63 68 69 6c 64 3d 72 2c 31 26 74 2e 6d 6f 64 65 26 26 58 6f 28 74 2c 65 2e 63 68 69 6c 64 2c 6e 75 6c 6c 2c 6c 29 2c 74 2e 63 68 69 6c 64 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 44 6c 28 6c 29 2c 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6a 6c 2c 69 29 3b 69 66 28 21 28 31 26 74 2e 6d 6f 64 65 29 29 72 65 74 75 72 6e 20 55 6c 28 65 2c 74 2c 6c 2c 6e 75 6c 6c 29 3b 69 66 28 22 24 21 22 3d 3d 3d 61 2e 64 61 74 61 29 7b 69 66 28 72 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 26 26 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2e 64 61 74 61 73 65 74 29 76 61 72 20 75 3d 72 2e 64 67 73 74 3b 72 65 74 75 72 6e 20 72 3d 75 Data Ascii: .flags\|=2,r.return=t,i.return=t,r.sibling=i,t.child=r,1&t.mode&&Xo(t,e.child,null,l),t.child.memoizedState=Dl(l),t.memoizedState=jl,i);if(!(1&t.mode))return Ul(e,t,l,null);if("$!"===a.data){if(r=a.nextSibling&&a.nextSibling.dataset)var u=r.dgst;return r=u
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 65 78 74 3b 64 6f 7b 76 61 72 20 6f 3d 61 2c 69 3d 6f 2e 64 65 73 74 72 6f 79 3b 6f 3d 6f 2e 74 61 67 2c 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 32 26 6f 7c 7c 34 26 6f 29 26 26 74 75 28 6e 2c 74 2c 69 29 2c 61 3d 61 2e 6e 65 78 74 7d 77 68 69 6c 65 28 61 21 3d 3d 72 29 7d 70 75 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 69 66 28 21 58 6c 26 26 28 65 75 28 6e 2c 74 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 29 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e 74 29 29 74 72 79 7b 72 2e 70 72 6f 70 73 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 2e 73 74 61 74 65 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 72 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 Data Ascii: ext;do{var o=a,i=o.destroy;o=o.tag,void 0!==i&&(2&o\|\|4&o)&&tu(n,t,i),a=a.next}while(a!==r)}pu(e,t,n);break;case 1:if(!Xl&&(eu(n,t),"function"==typeof(r=n.stateNode).componentWillUnmount))try{r.props=n.memoizedProps,r.state=n.memoizedState,r.componentWillU
2024-04-25 07:07:11 UTC	15486	IN	Data Raw: 74 2e 66 6c 61 67 73 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 6e 2e 73 74 61 74 65 4e 6f 64 65 29 2c 61 73 28 65 2c 58 65 28 29 29 2c 6e 75 6c 6c 21 3d 3d 74 29 66 6f 72 28 72 3d 65 2e 6f 6e 52 65 63 6f 76 65 72 61 62 6c 65 45 72 72 6f 72 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 61 3d 74 5b 6e 5d 2c 72 28 61 2e 76 61 6c 75 65 2c 7b 63 6f 6d 70 6f 6e 65 6e 74 53 74 61 63 6b 3a 61 2e 73 74 61 63 6b 2c 64 69 67 65 73 74 3a 61 2e 64 69 67 65 73 74 7d 29 3b 69 66 28 57 75 29 74 68 72 6f 77 20 57 75 3d 21 31 2c 65 3d 51 75 2c 51 75 3d 6e 75 6c 6c 2c 65 3b 21 21 28 31 26 59 75 29 26 26 30 21 3d 3d 65 2e 74 61 67 26 26 53 73 28 29 2c 69 3d 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 2c 31 26 69 3f 65 3d 3d 3d 5a 75 3f 58 75 2b 2b 3a 28 58 75 Data Ascii: t.flags))}catch(t){}}(n.stateNode),as(e,Xe()),null!==t)for(r=e.onRecoverableError,n=0;n<t.length;n++)a=t[n],r(a.value,{componentStack:a.stack,digest:a.digest});if(Wu)throw Wu=!1,e=Qu,Qu=null,e;!!(1&Yu)&&0!==e.tag&&Ss(),i=e.pendingLanes,1&i?e===Zu?Xu++:(Xu
2024-04-25 07:07:11 UTC	16384	IN	Data Raw: 28 65 2c 31 2c 21 31 2c 6e 75 6c 6c 2c 30 2c 6e 2c 30 2c 72 2c 61 29 2c 65 5b 68 61 5d 3d 74 2e 63 75 72 72 65 6e 74 2c 24 72 28 38 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 29 2c 6e 65 77 20 71 73 28 74 29 7d 2c 74 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 72 65 6e 64 65 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 38 38 29 29 3b 74 68 72 6f Data Ascii: (e,1,!1,null,0,n,0,r,a),e[ha]=t.current,$r(8===e.nodeType?e.parentNode:e),new qs(t)},t.findDOMNode=function(e){if(null==e)return null;if(1===e.nodeType)return e;var t=e._reactInternals;if(void 0===t){if("function"==typeof e.render)throw Error(o(188));thro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49923	3.161.188.25	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:10 UTC	386	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:11 UTC	491	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Thu, 25 Apr 2024 07:07:12 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 825e823ee2ba46e94bd7fd40cac05f34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: x3kaflPLmun-xOKb5kJZCU-lPqogZ56_GuDp5A0AJPXVuDS6xm01aw==
2024-04-25 07:07:11 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.5	49922	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:11 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714028797990&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 07:07:11 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 07:07:11 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 07:07:11 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 677A9BA9F708443791B25B8A18EC84F7 Ref B: LAX311000110049 Ref C: 2024-04-25T07:07:11Z Date: Thu, 25 Apr 2024 07:07:11 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714028831.9350274

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49925	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:11 UTC	1868	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f
2024-04-25 07:07:11 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:11 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49927	3.161.188.25	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:11 UTC	398	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:12 UTC	526	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Thu, 25 Apr 2024 05:58:15 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2b0abf2bae72fe78ec3932026c23d218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: pNheY10a6Y-9Y5n0vuWz7FK63FpHkk81gNC4o8c7pqfl-yMjTRSweQ== Age: 4137
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 2c 67 72 69 64 52 6f 77 53 70 61 6e 3a 21 30 2c 67 72 69 64 52 6f 77 53 74 61 72 74 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 70 61 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 6c 69 6e 65 43 6c 61 6d 70 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 74 61 62 53 69 7a 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 Data Ascii: ,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!
2024-04-25 07:07:12 UTC	12288	IN	Data Raw: 29 29 7d 76 61 72 20 51 6e 3d 6e 75 6c 6c 2c 47 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4b 6e 28 65 29 7b 7a 72 28 65 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 71 6e 28 65 29 7b 69 66 28 47 28 77 61 28 65 29 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 59 6e 28 65 2c 74 29 7b 69 66 28 22 63 68 61 6e 67 65 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 7d 76 61 72 20 58 6e 3d 21 31 3b 69 66 28 63 29 7b 76 61 72 20 5a 6e 3b 69 66 28 63 29 7b 76 61 72 20 4a 6e 3d 22 6f 6e 69 6e 70 75 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 28 21 4a 6e 29 7b 76 61 72 20 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 6e 69 6e 70 75 74 22 2c 22 72 65 Data Ascii: ))}var Qn=null,Gn=null;function Kn(e){zr(e,0)}function qn(e){if(G(wa(e)))return e}function Yn(e,t){if("change"===e)return t}var Xn=!1;if(c){var Zn;if(c){var Jn="oninput"in document;if(!Jn){var er=document.createElement("div");er.setAttribute("oninput","re
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 67 74 68 29 72 65 74 75 72 6e 20 74 2e 63 68 61 72 3b 69 66 28 74 2e 77 68 69 63 68 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 2e 77 68 69 63 68 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 22 63 6f 6d 70 6f 73 69 74 69 6f 6e 65 6e 64 22 3a 72 65 74 75 72 6e 20 44 6e 26 26 22 6b 6f 22 21 3d 3d 74 2e 6c 6f 63 61 6c 65 3f 6e 75 6c 6c 3a 74 2e 64 61 74 61 7d 7d 28 65 2c 6e 29 29 26 26 28 30 3c 28 72 3d 51 72 28 72 2c 22 6f 6e 42 65 66 6f 72 65 49 6e 70 75 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 61 3d 6e 65 77 20 77 6e 28 22 6f 6e 42 65 66 6f 72 65 49 6e 70 75 74 22 2c 22 62 65 66 6f 72 65 69 6e 70 75 74 22 2c 6e 75 6c 6c 2c 6e 2c 61 29 2c 69 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 61 2c 6c 69 73 74 65 6e Data Ascii: gth)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return Dn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Qr(r,"onBeforeInput")).length&&(a=new wn("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listen
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 6c 21 3d 3d 66 26 26 6d 3c 6c 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 66 2e 69 6e 64 65 78 3e 6d 3f 28 76 3d 66 2c 66 3d 6e 75 6c 6c 29 3a 76 3d 66 2e 73 69 62 6c 69 6e 67 3b 76 61 72 20 67 3d 70 28 61 2c 66 2c 6c 5b 6d 5d 2c 75 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 67 29 7b 6e 75 6c 6c 3d 3d 3d 66 26 26 28 66 3d 76 29 3b 62 72 65 61 6b 7d 65 26 26 66 26 26 6e 75 6c 6c 3d 3d 3d 67 2e 61 6c 74 65 72 6e 61 74 65 26 26 74 28 61 2c 66 29 2c 6f 3d 69 28 67 2c 6f 2c 6d 29 2c 6e 75 6c 6c 3d 3d 3d 63 3f 73 3d 67 3a 63 2e 73 69 62 6c 69 6e 67 3d 67 2c 63 3d 67 2c 66 3d 76 7d 69 66 28 6d 3d 3d 3d 6c 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 61 2c 66 29 2c 61 6f 26 26 5a 61 28 61 2c 6d 29 2c 73 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 66 29 7b 66 6f 72 28 3b 6d 3c 6c Data Ascii: l!==f&&m<l.length;m++){f.index>m?(v=f,f=null):v=f.sibling;var g=p(a,f,l[m],u);if(null===g){null===f&&(f=v);break}e&&f&&null===g.alternate&&t(a,f),o=i(g,o,m),null===c?s=g:c.sibling=g,c=g,f=v}if(m===l.length)return n(a,f),ao&&Za(a,m),s;if(null===f){for(;m<l
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 4f 6f 3f 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 56 6f 28 74 2c 6e 2c 63 2c 72 29 2c 75 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 2c 28 6c 3d 4f 6f 7c 7c 42 6f 28 74 2c 6e 2c 6c 2c 72 2c 64 2c 75 2c 73 29 29 3f 28 66 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 2e 55 4e 53 41 46 45 5f 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 7c 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 69 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 Data Ascii: Oo?("function"==typeof c&&(Vo(t,n,c,r),u=t.memoizedState),(l=Oo\|\|Bo(t,n,l,r,d,u,s))?(f\|\|"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount\|\|("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==t
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6e 7c 7c 28 6e 3d 7b 7d 29 2c 6e 5b 6f 5d 3d 22 22 29 7d 65 6c 73 65 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 21 3d 3d 63 26 26 22 63 68 69 6c 64 72 65 6e 22 21 3d 3d 63 26 26 22 73 75 70 70 72 65 73 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 57 61 72 6e 69 6e 67 22 21 3d 3d 63 26 26 22 73 75 70 70 72 65 73 73 48 79 64 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 22 21 3d 3d 63 26 26 22 61 75 74 6f 46 6f 63 75 73 22 21 3d 3d 63 26 26 28 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 3f 69 7c 7c 28 69 3d 5b 5d 29 3a 28 69 3d 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 63 2c 6e 75 6c 6c 29 29 3b 66 6f 72 28 63 20 69 6e 20 72 29 7b 76 61 72 20 73 3d 72 5b 63 5d 3b 69 66 28 75 Data Ascii: wnProperty(o)&&(n\|\|(n={}),n[o]="")}else"dangerouslySetInnerHTML"!==c&&"children"!==c&&"suppressContentEditableWarning"!==c&&"suppressHydrationWarning"!==c&&"autoFocus"!==c&&(l.hasOwnProperty(c)?i\|\|(i=[]):(i=i\|\|[]).push(c,null));for(c in r){var s=r[c];if(u
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 3d 47 75 26 26 47 75 2e 68 61 73 28 62 29 29 29 29 7b 69 2e 66 6c 61 67 73 7c 3d 36 35 35 33 36 2c 74 26 3d 2d 74 2c 69 2e 6c 61 6e 65 73 7c 3d 74 2c 44 6f 28 69 2c 6d 6c 28 69 2c 75 2c 74 29 29 3b 62 72 65 61 6b 20 65 7d 7d 69 3d 69 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 69 29 7d 45 73 28 6e 29 7d 63 61 74 63 68 28 77 29 7b 74 3d 77 2c 4f 75 3d 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 4f 75 3d 6e 3d 6e 2e 72 65 74 75 72 6e 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 73 28 29 7b 76 61 72 20 65 3d 54 75 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 54 75 2e 63 75 72 72 65 6e 74 3d 69 6c 2c 6e 75 6c 6c 3d 3d 3d 65 3f 69 6c 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 76 73 28 29 7b 30 21 3d 3d Data Ascii: =Gu&&Gu.has(b)))){i.flags\|=65536,t&=-t,i.lanes\|=t,Do(i,ml(i,u,t));break e}}i=i.return}while(null!==i)}Es(n)}catch(w){t=w,Ou===n&&null!==n&&(Ou=n=n.return);continue}break}}function ms(){var e=Tu.current;return Tu.current=il,null===e?il:e}function vs(){0!==
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 6e 73 74 61 62 6c 65 5f 73 63 68 65 64 75 6c 65 48 79 64 72 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 6b 74 28 29 3b 65 3d 7b 62 6c 6f 63 6b 65 64 4f 6e 3a 6e 75 6c 6c 2c 74 61 72 67 65 74 3a 65 2c 70 72 69 6f 72 69 74 79 3a 74 7d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 4c 74 2e 6c 65 6e 67 74 68 26 26 30 21 3d 3d 74 26 26 74 3c 4c 74 5b 6e 5d 2e 70 72 69 6f 72 69 74 79 3b 6e 2b 2b 29 3b 4c 74 2e 73 70 6c 69 63 65 28 6e 2c 30 2c 65 29 2c 30 3d 3d 3d 6e 26 26 44 74 28 65 29 7d 7d 2c 45 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 74 61 67 29 7b 63 61 73 65 20 33 3a 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 74 2e 63 75 72 72 65 6e 74 2e 6d 65 6d 6f 69 7a 65 64 Data Ascii: nstable_scheduleHydration=function(e){if(e){var t=kt();e={blockedOn:null,target:e,priority:t};for(var n=0;n<Lt.length&&0!==t&&t<Lt[n].priority;n++);Lt.splice(n,0,e),0===n&&Dt(e)}},Et=function(e){switch(e.tag){case 3:var t=e.stateNode;if(t.current.memoized
2024-04-25 07:07:12 UTC	16384	IN	Data Raw: 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6c 3d 6e 28 6f 5b 69 5d 29 3b 74 5b 6c 5d 2e 72 65 66 65 72 65 6e 63 65 73 2d 2d 7d 66 6f 72 28 76 61 72 20 75 3d 72 28 65 2c 61 29 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 63 3d 6e 28 6f 5b 73 5d 29 3b 30 3d 3d 3d 74 5b 63 5d 2e 72 65 66 65 72 65 6e 63 65 73 26 26 28 74 5b 63 5d 2e 75 70 64 61 74 65 72 28 29 2c 74 2e 73 70 6c 69 63 65 28 63 2c 31 29 29 7d 6f 3d 75 7d 7d 7d 2c 36 37 39 33 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d Data Ascii: ];for(var i=0;i<o.length;i++){var l=n(o[i]);t[l].references--}for(var u=r(e,a),s=0;s<o.length;s++){var c=n(o[s]);0===t[c].references&&(t[c].updater(),t.splice(c,1))}o=u}}},6793:e=>{"use strict";var t={};e.exports=function(e,n){var r=function(e){if(void 0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49928	104.26.1.90	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:11 UTC	577	OUT	GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:12 UTC	761	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=4830 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3565 Last-Modified: Thu, 25 Apr 2024 06:07:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dm8cVn9NRY4%2FM8FN%2B%2F4UDN%2Ft3n9SFODWEMOkowN2eoFQW4UL6XK9L7i50GQqRrrM3JcoQMRk8agpSnPRC6Crbs8h2SnVWaytFK%2B9dCiRcviIW7IS%2BHzRxxxonY5P8UR%2BMV8mTYBj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c7ea929a9138b-ATL
2024-04-25 07:07:12 UTC	608	IN	Data Raw: 31 32 32 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 72 61 6e 64 6d 65 74 72 69 63 73 2c 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e Data Ascii: 122c"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 6d 65 74 72 69 63 73 2e 61 70 69 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 61 73 43 6f 6e 73 65 6e 74 28 29 29 29 64 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 65 2c 6f 28 29 7d 29 3b 65 6c 73 65 20 69 66 28 21 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 7b 68 61 73 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 69 73 52 65 Data Ascii: metrics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isRe
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 32 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 73 70 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 33 34 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 73 74 6f 6d 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 32 33 29 29 28 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 63 6f 6e 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 68 61 6e 64 6c 65 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 3a 20 22 2b 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 74 79 70 65 29 7d 65 2e 63 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 61 28 74 2c 6e 29 3a 73 28 21 31 2c 74 2c 6e 29 7d 29 7d 65 6c 73 65 20 61 28 74 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: 2));break;case"usp":e=new(l.getModule(34));break;case"custom":e=new(l.getModule(23))(t.consentMode.conf);break;default:throw new Error("Cannot handle consent type: "+t.consentMode.type)}e.check(function(e){e?a(t,n):s(!1,t,n)})}else a(t,n)},a=function(e,t)
2024-04-25 07:07:12 UTC	1314	IN	Data Raw: 65 29 2c 74 28 29 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2c 6f 3d 6e 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 6f 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 2e 62 6f 64 79 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 2c 73 3d 74 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 73 5b 61 5d 3b 69 7c 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 63 29 7d 76 61 72 20 64 3d 6f 26 26 6f 2e 73 65 61 72 63 68 26 26 2d 31 21 3d 3d 6f 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 62 6d 5f 64 22 29 2c 75 3d 72 26 26 30 3c 72 2e 6c 65 6e 67 74 68 3f 72 3a 5b 6f 2e 68 72 65 66 5d 2c 6c 3d 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 2c 70 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: e),t())},g=function(e,t){var n=document,o=n.location,r=o.ancestorOrigins;if(n.body){for(var i=0,a=0,s=t;a<s.length;a++){var c=s[a];i\|=Math.pow(2,c)}var d=o&&o.search&&-1!==o.search.indexOf("bm_d"),u=r&&0<r.length?r:[o.href],l=u[u.length-1],p=n.createEleme
2024-04-25 07:07:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49930	104.26.1.90	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:12 UTC	614	OUT	GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:12 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=49261 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3571 Last-Modified: Thu, 25 Apr 2024 06:07:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XI79s1%2FHyEACLUJaXBq%2Bybn0Yy1aoSlbwMGDQCh7m%2Fya%2FBMj87OhR6rdtxq2xSogDAk0nkSop2HZBRaWG2Yyvvjs%2BMTcGKFcF1EQlUtN0%2FNwkVqBuj6G517oIV0xzKPruFAc6fdl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c7eac7afa53f7-ATL
2024-04-25 07:07:12 UTC	609	IN	Data Raw: 33 61 31 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 66 2c 75 2c 79 2c 77 2c 61 2c 63 2c 62 3d 21 31 2c 72 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 66 3d 65 2c 61 3d 6f 2c 77 3d 72 2c 6d 3d 74 2c 75 3d 69 29 79 3d 75 2e 73 74 6f 72 61 67 65 3b 65 6c 73 65 20 69 66 28 22 6c 73 22 3d 3d 3d 65 2e 73 74 6f 72 61 67 65 29 74 72 79 7b 79 3d 6e 65 77 28 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 35 29 29 28 66 2c 6d 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 79 3d 76 6f 69 64 20 30 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 3a17"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function()
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 6c 65 3a 21 31 2c 73 68 6f 77 65 64 3a 21 31 7d 29 7d 2c 6f 2e 74 69 6d 65 6f 75 74 29 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 72 29 7d 2c 75 3d 7b 6d 69 64 3a 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6d 69 64 2c 62 69 64 3a 6f 2e 62 69 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 61 75 74 6f 52 65 6e 64 65 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 75 74 6f 52 65 6e 64 65 72 7c 7c 6f 2e 61 75 74 6f 52 65 6e 64 65 72 2c 66 6f 72 63 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 66 6f 72 63 65 26 26 6f 2e 66 6f 72 63 65 2c 69 73 54 65 73 74 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 69 73 54 65 73 74 26 26 6f 2e 69 73 54 65 73 74 2c 64 74 4e Data Ascii: le:!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtN
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 29 3b 69 66 28 61 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 28 65 29 3b 72 65 74 75 72 6e 20 72 5b 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 5d 3d 74 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 61 6e 64 6d 65 74 72 69 63 73 3a 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 72 65 61 74 69 6e 67 20 73 75 72 76 65 79 73 2e 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4d 65 74 61 64 Data Ascii: ction(e){if(void 0===e\|\|void 0===e.measurementId\|\|void 0===e.displayOption)throw new Error("");if(a){var t=a.create(e);return r[e.measurementId]=t}throw new Error("brandmetrics: This configuration does not support creating surveys.")},e.prototype.addMetad
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 73 74 6f 70 28 29 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2e 73 74 6f 70 28 29 7d 2c 65 7d 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 72 65 67 69 73 74 65 72 28 7b 69 64 3a 30 2c 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 69 2c 61 2c 6e 29 7b 76 61 72 20 73 3d 6e 65 77 20 76 28 65 2c 74 2c 72 2c 6f 2c 69 29 2c 64 3d 7b 62 6d 3a 73 2c 63 6f 6c 6c 65 63 74 69 6f 6e 3a 75 2c 6f 70 74 69 6f 6e 73 3a 65 2c 75 74 69 6c 73 3a 74 2c 63 6c 69 65 6e 74 3a 72 2c Data Ascii: e.prototype.getOptions=function(){return f},e.prototype.stop=function(){void 0!==u&&u.stop(),void 0!==m&&m.stop()},e}();window.brandmetrics.register({id:0,ctor:function(e,t,r,o,i,a,n){var s=new v(e,t,r,o,i),d={bm:s,collection:u,options:e,utils:t,client:r,
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 69 73 2e 74 79 70 65 3d 65 2e 74 79 70 65 2c 74 68 69 73 2e 69 64 3d 74 2c 74 68 69 73 2e 62 65 61 63 6f 6e 49 64 3d 65 2e 69 64 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 65 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6e 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 74 68 69 73 2e 6f 6e 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 72 2c 74 68 69 73 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 31 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 7d 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6f 7c 7c 21 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 32 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 Data Ascii: is.type=e.type,this.id=t,this.beaconId=e.id,this.source=e.source,this.element=n,this.measurements=i,this.onPropertyChange=r,this.type){case 0:this.threshold=1e3,this.props={inview:o\|\|!1},this.active=o\|\|!1;break;case 1:this.threshold=2e3,this.props={inview
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 3d 3d 28 6e 3d 79 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 79 70 65 29 29 2c 45 2e 70 75 73 68 28 66 29 29 2c 76 6f 69 64 20 30 21 3d 3d 66 26 26 28 6c 3d 30 3d 3d 3d 28 64 3d 66 29 2e 73 74 61 74 65 3f 31 32 3a 31 33 2c 64 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 70 6f 73 74 45 76 65 6e 74 28 6c 2c 65 2e 69 64 2c 76 6f 69 64 20 30 2c 7b 70 69 64 3a 64 2e 69 64 7d 29 7d 29 2c 78 28 30 2c 64 29 2c 30 3d 3d 3d 28 65 2e 69 6e 76 69 65 77 48 61 6e 64 6c 69 6e 67 7c 7c 30 29 29 29 69 66 28 66 2e 65 6c 65 6d 65 6e 74 26 26 67 29 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 6f 62 73 65 72 76 65 28 66 2e 65 6c 65 6d 65 6e 74 29 3b 65 6c 73 65 20 69 66 28 22 Data Ascii: ==(n=y.inview)\|\|void 0===n?void 0:n.type)),E.push(f)),void 0!==f&&(l=0===(d=f).state?12:13,d.measurements.forEach(function(e){w.postEvent(l,e.id,void 0,{pid:d.id})}),x(0,d),0===(e.inviewHandling\|\|0)))if(f.element&&g)null==g\|\|g.observe(f.element);else if("
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 61 74 65 3d 33 2c 78 28 22 65 78 70 6f 73 75 72 65 20 65 6e 64 65 64 20 28 22 2e 63 6f 6e 63 61 74 28 72 2c 22 20 73 65 63 29 2c 20 22 29 2c 69 29 7d 69 66 28 74 29 7b 69 2e 65 6c 65 6d 65 6e 74 26 26 28 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 75 6e 4f 62 73 65 72 76 65 28 69 2e 65 6c 65 6d 65 6e 74 29 29 3b 76 61 72 20 65 3d 45 2e 69 6e 64 65 78 4f 66 28 69 29 3b 2d 31 21 3d 3d 65 26 26 28 45 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 78 28 30 2c 69 29 29 7d 7d 29 2c 69 26 26 66 28 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 45 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 31 3d 3d 3d 74 2e 73 74 61 74 65 26 26 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 Data Ascii: ate=3,x("exposure ended (".concat(r," sec), "),i)}if(t){i.element&&(null==g\|\|g.unObserve(i.element));var e=E.indexOf(i);-1!==e&&(E.splice(e,1),x(0,i))}}),i&&f()},f=function(){var i=[];E.forEach(function(t){1===t.state&&t.measurements.forEach(function(e){i
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 7d 75 28 65 2c 6f 2c 6e 2c 69 29 7d 65 6c 73 65 20 72 26 26 28 65 2e 6b 65 79 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 73 6f 75 72 63 65 2e 74 79 70 65 7c 7c 31 65 33 3c 72 2e 61 67 65 28 29 29 26 26 53 28 5b 72 5d 2c 21 30 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 73 77 69 74 63 68 28 74 2e 73 6f 75 72 63 65 29 7b 63 61 73 65 22 61 70 6e 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 70 74 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 62 6a 22 3a 69 3d 5b 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 74 76 22 3a 63 61 73 65 22 61 70 69 Data Ascii: }u(e,o,n,i)}else r&&(e.key.source===r.source.type\|\|1e3<r.age())&&S([r],!0)},P=function(t,e){var i;if(void 0===e)switch(t.source){case"apn":i=["creativeId"];break;case"gpt":i=["creativeId","lineItemId"];break;case"pbj":i=["dealId"];break;case"ntv":case"api
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 21 31 29 2c 76 28 6b 2e 67 65 74 53 65 73 73 69 6f 6e 28 29 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 69 2c 72 2c 6e 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 2c 6b 3d 6e 2c 79 3d 65 2c 77 3d 74 2c 73 3d 72 2c 62 3d 69 3b 76 61 72 20 61 3d 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 32 37 29 3b 61 26 26 28 63 3d 6e 65 77 20 61 29 2c 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 26 26 28 67 3d 54 28 7b 63 6f 6c 6c 65 63 74 69 6f 6e 3a 74 68 69 73 2c 63 61 6c 6c 62 61 63 6b 3a 4d 2c 75 74 69 6c 73 3a 69 7d 29 29 2c 62 2e 6f 6e 28 7b Data Ascii: !1),v(k.getSession())},e=function(){function e(e,t,i,r,n){var o;this.storage=n,k=n,y=e,w=t,s=r,b=i;var a=brandmetrics.getModule(27);a&&(c=new a),"always"!==(null===(o=e.inview)\|\|void 0===o?void 0:o.type)&&(g=T({collection:this,callback:M,utils:i})),b.on({
2024-04-25 07:07:12 UTC	1369	IN	Data Raw: 61 74 65 45 78 70 6f 73 75 72 65 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 61 28 65 29 3b 69 26 26 69 2e 75 70 64 61 74 65 50 72 6f 70 65 72 74 69 65 73 28 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 45 78 70 6f 73 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 61 28 65 29 29 2c 74 7c 7c 28 74 3d 41 28 68 28 65 29 29 29 2c 74 26 26 53 28 5b 74 5d 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 73 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 74 5d Data Ascii: ateExposureProperties=function(e,t){var i=a(e);i&&i.updateProperties(t)},e.prototype.endExposure=function(e){var t;"string"==typeof e&&(t=a(e)),t\|\|(t=A(h(e))),t&&S([t],!0)},e.prototype.triggerListener=function(e){for(var t=0,i=s;t<i.length;t++){var r=i[t]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49929	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:12 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:12 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Thu, 25 Apr 2024 07:07:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49931	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:13 UTC	2099	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f
2024-04-25 07:07:13 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-e4041402-9213-4e8c-8a10-c16b4380a189","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:07:13 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:13 GMT ETag: W/"43a2-sNApAUKt7EN5XHqmJKZ8CmlzW0o" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17314 Connection: Close
2024-04-25 07:07:13 UTC	11941	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 35 36 36 37 38 32 35 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 30 33 37 34 36 38 34 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 34 34 37 34 36 31 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 33 35 31 33 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 33 34 30 33 34 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4d 7a 51 77 4d 7a 51 35 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 7a Data Ascii: {"creatives":[{"adId":515667825,"creativeId":340374684,"flightId":504474613,"campaignId":288235130,"advertiserId":2340349,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIz
2024-04-25 07:07:14 UTC	5373	IN	Data Raw: 43 77 69 5a 47 6b 69 4f 69 49 31 4e 7a 4d 7a 5a 44 67 77 4f 57 59 30 5a 54 41 30 59 6a 55 32 59 57 46 6b 4e 44 6c 68 4e 44 49 31 59 7a 41 32 4f 44 63 33 4d 79 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 42 68 5a 6d 4e 6d 4e 32 49 33 4f 44 41 31 4e 6a 52 6c 4d 32 4a 68 4f 54 5a 6a 59 57 4a 69 4f 44 46 68 4d 44 5a 69 59 7a 45 78 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 54 55 32 4e 6a 63 34 4d 6a 55 73 49 6d 5a 73 49 6a 6f 31 4d 44 51 30 4e 7a 51 32 4d 54 4d 73 49 6d 6c 77 49 6a 6f 69 4d 54 67 31 4c 6a 45 31 4d 69 34 32 4e 69 34 79 4d 7a 41 69 4c 43 4a 75 64 79 49 36 4d 54 41 79 4d 6a 41 73 49 6e 42 6a 49 6a 6f 30 4d 43 77 69 62 33 41 69 4f 6a 51 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 Data Ascii: CwiZGkiOiI1NzMzZDgwOWY0ZTA0YjU2YWFkNDlhNDI1YzA2ODc3MyIsImRqIjowLCJpaSI6IjBhZmNmN2I3ODA1NjRlM2JhOTZjYWJiODFhMDZiYzExIiwiZG0iOjMsImZjIjo1MTU2Njc4MjUsImZsIjo1MDQ0NzQ2MTMsImlwIjoiMTg1LjE1Mi42Ni4yMzAiLCJudyI6MTAyMjAsInBjIjo0MCwib3AiOjQwLCJlYyI6MCwiZ20iOjAsImVw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49933	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:14 UTC	2442	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:14 UTC	120	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 33 36 32 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":13628.599999999977,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-25 07:07:15 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:14 GMT ETag: "38-pPTimAP4EfxllHLm2Z4SDyC2ypw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 4b24194db427c7e0a216991d8bb1bfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BrxP4VRQC1IJxQrxKUo1IGjtctAWeJFfygmJ3gII5pHmU77fAkUnhQ==
2024-04-25 07:07:15 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 31 33 36 32 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 7d Data Ascii: {"status":"ok","metric":"LCP","time":13628.599999999977}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49935	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:14 UTC	794	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715048975233 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:14 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1552cf1578bd7fc2c77149d9897552ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: j4EvEg03HY0ofZs3CQIVLK-gRVnQ4-9dgLpWxOwDrp5PpfV8Pj76yQ== Age: 74810
2024-04-25 07:07:14 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49936	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:14 UTC	2261	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:07:14 UTC	830	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:14 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FZd7RsSefa9EFHMFEOEGMZEuSne5murCXlR2vFLGk4CYru9P5QDcUQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49934	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	1844	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=e2a38265-85f6-4719-a079-ba919638a2b8.1714028828710.0.1714028828710.; sp=f850b167-800c-48d0-912d-956f588d119f
2024-04-25 07:07:15 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:15 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-25 07:07:15 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49938	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	729	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715048975233 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:15 UTC	697	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18513 Connection: close Date: Wed, 24 Apr 2024 14:48:31 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "56b11dee72df8e44c1e72bfd66e237ab" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 1552cf1578bd7fc2c77149d9897552ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: 9bMEYGWHPA0uP1O5z1sIcN06no10TSUcQi5_YNFLgBXX20V8Uof0Vw== Age: 58725
2024-04-25 07:07:15 UTC	15687	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 28 74 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 65 2e 6f 28 6e 2c 72 29 26 26 21 65 2e 6f 28 74 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 72 3a 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 Data Ascii: (()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,S
2024-04-25 07:07:15 UTC	2826	IN	Data Raw: 6e 63 20 65 3d 3e 7b 69 66 28 4b 28 42 29 3d 3d 3d 65 2e 6f 72 69 67 69 6e 29 74 72 79 7b 63 6f 6e 73 74 7b 6d 65 74 68 6f 64 3a 74 2c 64 61 74 61 3a 6e 7d 3d 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 61 74 61 3a 74 7d 3d 65 3b 6c 65 74 20 6e 3d 7b 7d 3b 74 72 79 7b 6e 3d 74 2e 72 61 77 3f 74 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 7b 51 28 22 55 6e 61 62 6c 65 54 6f 50 61 72 73 65 4d 65 73 73 61 67 65 22 2c 74 29 7d 6e 2e 63 6f 6d 6d 61 6e 64 7c 7c 51 28 22 45 6d 70 74 79 57 61 6c 6c 70 61 70 65 72 43 6f 6d 6d 61 6e 64 22 2c 74 29 3b 63 6f 6e 73 74 20 72 3d 60 61 70 69 5f 24 7b 6e 2e 63 6f 6d 6d 61 6e 64 7d 60 3b 72 65 74 75 72 6e 20 7a 5b 72 5d 7c 7c 51 28 60 4d 65 74 68 6f 64 4e 6f 74 46 6f 75 6e 64 3a 20 24 7b 72 7d 60 2c 74 29 2c 7b 6d Data Ascii: nc e=>{if(K(B)===e.origin)try{const{method:t,data:n}=(e=>{const{data:t}=e;let n={};try{n=t.raw?t:JSON.parse(t)}catch{Q("UnableToParseMessage",t)}n.command\|\|Q("EmptyWallpaperCommand",t);const r=`api_${n.command}`;return z[r]\|\|Q(`MethodNotFound: ${r}`,t),{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49939	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2026	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318. If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:07:15 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:15 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 59000c13a9de83fe9470b41a5b1ab48a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ETMHQXQ1sd3OkjJs-ICYh1Qe5Mczy8Fl6I1xIb0MhYk2yMM7h_hUtA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49940	18.244.194.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	561	OUT	GET /eu1/v5/datadog-rum-slim.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:15 UTC	590	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 106028 Connection: close Date: Thu, 25 Apr 2024 07:07:16 GMT Last-Modified: Tue, 23 Apr 2024 12:34:32 GMT ETag: "f57f5bbcb09d115f917b0efad0e910fa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=14400, s-maxage=60 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d775d0025d4d26af03f89c82cea6813e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: _xOj-eBg8Cs5ETXbgSv6x4B0erkPOf4D64k2QPc8PaVTDYVs-Ld4xw== Timing-Allow-Origin: *
2024-04-25 07:07:15 UTC	7628	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-04-25 07:07:15 UTC	16384	IN	Data Raw: 28 74 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 29 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 74 29 7b 76 61 72 20 65 3d 7b 7d 2c 6e 3d 6e 65 77 20 58 2c 72 3d 7b 67 65 74 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 65 29 7d 2c 73 65 74 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 48 28 69 29 3f 28 65 3d 4b 28 69 29 2c 74 2e 75 70 64 61 74 65 43 75 73 74 6f 6d 65 72 44 61 74 61 28 65 29 29 3a 72 2e 63 6c 65 61 72 43 6f 6e 74 65 78 74 28 29 2c 6e 2e 6e 6f 74 69 66 79 Data Ascii: (t)}))}));return function(){return n.forEach((function(t){return t.unsubscribe()}))}}))}function tt(t){var e={},n=new X,r={getContext:function(){return j(e)},setContext:function(i){"object"===H(i)?(e=K(i),t.updateCustomerData(e)):r.clearContext(),n.notify
2024-04-25 07:07:15 UTC	1024	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 43 6e 29 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 45 6e 28 22 68 74 74 70 3a 2f 2f 74 65 73 74 2f 70 61 74 68 22 29 3b 43 6e 3d 22 68 74 74 70 3a 2f 2f 74 65 73 74 2f 70 61 74 68 22 3d 3d 3d 74 2e 68 72 65 66 7d 63 61 74 63 68 28 74 29 7b 43 6e 3d 21 31 7d 72 65 74 75 72 6e 20 43 6e 3f 45 6e 3a 76 6f 69 64 20 30 7d 28 29 3b 69 66 28 6e 29 74 72 79 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 3f 6e 65 77 20 6e 28 74 2c 65 29 3a 6e 65 77 20 6e 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 55 52 4c 3a 20 22 2e 63 6f 6e 63 61 74 28 53 74 72 69 6e 67 28 6e 29 2c 22 20 22 29 2e 63 Data Ascii: function(){if(void 0===Cn)try{var t=new En("http://test/path");Cn="http://test/path"===t.href}catch(t){Cn=!1}return Cn?En:void 0}();if(n)try{return void 0!==e?new n(t,e):new n(t)}catch(n){throw new Error("Failed to construct URL: ".concat(String(n)," ").c
2024-04-25 07:07:15 UTC	16384	IN	Data Raw: 63 61 74 28 69 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 72 65 29 3b 69 66 28 72 3d 3d 3d 6e 65 29 72 65 74 75 72 6e 22 68 74 74 70 2d 69 6e 74 61 6b 65 2e 6c 6f 67 73 2e 22 2e 63 6f 6e 63 61 74 28 72 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 61 3d 6f 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 22 62 72 6f 77 73 65 72 2d 69 6e 74 61 6b 65 2d 22 2e 63 6f 6e 63 61 74 28 6f 2e 6a 6f 69 6e 28 22 2d 22 29 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 61 29 7d 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 22 2e 63 6f 6e 63 61 74 28 6f 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 74 29 7d 7d 28 74 2c 65 29 3b 72 65 74 75 72 6e 7b 62 75 69 6c 64 3a 66 75 6e 63 Data Ascii: cat(i,".").concat(re);if(r===ne)return"http-intake.logs.".concat(r);var o=r.split("."),a=o.pop();return"browser-intake-".concat(o.join("-"),".").concat(a)}(e,t);return function(t){return"https://".concat(o).concat(n,"?").concat(t)}}(t,e);return{build:func
2024-04-25 07:07:15 UTC	12016	IN	Data Raw: 5b 72 5d 3d 30 3d 3d 3d 69 3f 30 3a 78 74 28 69 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 72 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 55 28 61 72 2c 74 2e 65 6e 74 72 79 54 79 70 65 29 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6e 74 72 79 54 79 70 65 3d 3d 3d 61 72 2e 4e 41 56 49 47 41 54 49 4f 4e 26 26 74 2e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 3c 3d 30 7d 28 74 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 6e 74 72 79 54 79 70 65 3d 3d 3d 61 72 2e 52 45 53 4f 55 52 43 45 26 26 21 51 6e 28 74 2c Data Ascii: [r]=0===i?0:xt(i)}return t}function mr(t,e,n){var r=n.filter((function(t){return U(ar,t.entryType)})).filter((function(t){return!function(t){return t.entryType===ar.NAVIGATION&&t.loadEventEnd<=0}(t)&&!function(t,e){return e.entryType===ar.RESOURCE&&!Qn(t,
2024-04-25 07:07:15 UTC	16384	IN	Data Raw: 22 3b 66 75 6e 63 74 69 6f 6e 20 5a 72 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 58 72 28 74 2c 24 72 29 7c 7c 65 26 26 58 72 28 74 2c 65 29 7c 7c 69 69 28 74 2c 65 2c 65 69 29 7c 7c 69 69 28 74 2c 65 2c 6e 69 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 58 72 28 74 2c 65 29 7b 76 61 72 20 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 69 26 26 28 74 69 3d 22 63 6c 6f 73 65 73 74 22 69 6e 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 74 69 7d 28 29 29 6e 3d 74 2e 63 6c 6f 73 65 73 74 28 22 5b 22 2e 63 6f 6e 63 61 74 28 65 2c 22 5d 22 29 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 74 3b 72 3b 29 7b 69 66 28 72 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 65 29 29 7b 6e 3d 72 3b Data Ascii: ";function Zr(t,e){return Xr(t,$r)\|\|e&&Xr(t,e)\|\|ii(t,e,ei)\|\|ii(t,e,ni)\|\|""}function Xr(t,e){var n;if(function(){void 0===ti&&(ti="closest"in HTMLElement.prototype);return ti}())n=t.closest("[".concat(e,"]"));else for(var r=t;r;){if(r.hasAttribute(e)){n=r;
2024-04-25 07:07:15 UTC	16384	IN	Data Raw: 26 28 61 3d 64 69 28 72 2e 65 6c 65 6d 65 6e 74 2c 65 2e 61 63 74 69 6f 6e 4e 61 6d 65 41 74 74 72 69 62 75 74 65 29 29 2c 69 74 28 65 74 2e 5a 45 52 4f 5f 4c 43 50 5f 54 45 4c 45 4d 45 54 52 59 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 6f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 3d 30 3d 3d 3d 74 2e 73 74 61 72 74 54 69 6d 65 3f 22 4c 43 50 20 77 69 74 68 20 73 74 61 72 74 54 69 6d 65 20 3d 20 30 22 3a 76 6f 69 64 20 30 21 3d 3d 5a 69 26 26 74 2e 73 74 61 72 74 54 69 6d 65 3c 5a 69 2e 73 74 61 72 74 54 69 6d 65 3f 22 4c 43 50 20 77 69 74 68 20 73 74 61 72 74 54 69 6d 65 20 3c 20 70 72 65 76 69 6f 75 73 20 4c 43 50 22 3a 76 6f 69 64 20 30 21 3d 3d 5a 69 26 26 74 2e 73 69 7a 65 3c 5a 69 2e 73 69 7a 65 3f 22 4c 43 50 20 77 69 74 68 20 73 Data Ascii: &(a=di(r.element,e.actionNameAttribute)),it(et.ZERO_LCP_TELEMETRY)&&function(t,e){if(to)return;var n=0===t.startTime?"LCP with startTime = 0":void 0!==Zi&&t.startTime<Zi.startTime?"LCP with startTime < previous LCP":void 0!==Zi&&t.size<Zi.size?"LCP with s
2024-04-25 07:07:15 UTC	2048	IN	Data Raw: 74 42 79 74 65 73 43 6f 75 6e 74 2c 65 6e 63 6f 64 69 6e 67 3a 74 2e 65 6e 63 6f 64 69 6e 67 2c 66 6c 75 73 68 52 65 61 73 6f 6e 3a 65 2e 72 65 61 73 6f 6e 7d 7d 76 61 72 20 55 6f 3d 38 30 2a 77 2c 4d 6f 3d 33 32 2c 44 6f 3d 33 2a 43 2c 42 6f 3d 76 74 2c 56 6f 3d 64 74 3b 66 75 6e 63 74 69 6f 6e 20 46 6f 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 30 3d 3d 3d 65 2e 74 72 61 6e 73 70 6f 72 74 53 74 61 74 75 73 26 26 30 3d 3d 3d 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 2e 73 69 7a 65 28 29 26 26 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 63 61 6e 48 61 6e 64 6c 65 28 74 29 3f 48 6f 28 74 2c 65 2c 6e 2c 7b 6f 6e 53 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 6f 28 30 2c 65 2c 6e 2c 72 2c 69 29 7d 2c 6f 6e 46 61 Data Ascii: tBytesCount,encoding:t.encoding,flushReason:e.reason}}var Uo=80w,Mo=32,Do=3C,Bo=vt,Vo=dt;function Fo(t,e,n,r,i){0===e.transportStatus&&0===e.queuedPayloads.size()&&e.bandwidthMonitor.canHandle(t)?Ho(t,e,n,{onSuccess:function(){return Go(0,e,n,r,i)},onFa
2024-04-25 07:07:15 UTC	16384	IN	Data Raw: 73 2e 6f 6e 67 6f 69 6e 67 52 65 71 75 65 73 74 43 6f 75 6e 74 2d 3d 31 2c 74 68 69 73 2e 6f 6e 67 6f 69 6e 67 42 79 74 65 43 6f 75 6e 74 2d 3d 74 2e 62 79 74 65 73 43 6f 75 6e 74 7d 7d 2c 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 3a 6a 6f 28 29 2c 71 75 65 75 65 46 75 6c 6c 52 65 70 6f 72 74 65 64 3a 21 31 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 52 65 71 75 65 73 74 26 26 22 6b 65 65 70 61 6c 69 76 65 22 69 6e 20 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 61 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 72 2e Data Ascii: s.ongoingRequestCount-=1,this.ongoingByteCount-=t.bytesCount}},queuedPayloads:jo(),queueFullReported:!1},o=function(r,i){return function(t,e,n,r,i){var o=function(){try{return window.Request&&"keepalive"in new Request("http://a")}catch(t){return!1}}()&&r.
2024-04-25 07:07:15 UTC	1392	IN	Data Raw: 74 61 72 74 54 69 6d 65 29 2c 73 3d 7b 64 61 74 65 3a 75 2e 74 69 6d 65 53 74 61 6d 70 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 7b 69 64 3a 5f 65 28 29 2c 64 75 72 61 74 69 6f 6e 3a 62 74 28 61 2e 64 75 72 61 74 69 6f 6e 29 7d 2c 74 79 70 65 3a 22 6c 6f 6e 67 5f 74 61 73 6b 22 2c 5f 64 64 3a 7b 64 69 73 63 61 72 64 65 64 3a 21 31 7d 7d 3b 74 2e 6e 6f 74 69 66 79 28 31 32 2c 7b 72 61 77 52 75 6d 45 76 65 6e 74 3a 73 2c 73 74 61 72 74 54 69 6d 65 3a 75 2e 72 65 6c 61 74 69 76 65 2c 64 6f 6d 61 69 6e 43 6f 6e 74 65 78 74 3a 7b 70 65 72 66 6f 72 6d 61 6e 63 65 45 6e 74 72 79 3a 61 7d 7d 29 7d 7d 29 29 7d 28 63 2c 65 2c 67 29 2c 6a 69 28 63 2c 65 2c 67 2c 45 29 3b 76 61 72 20 49 3d 54 6f 28 63 2c 65 2c 6c 6f 63 61 74 69 6f 6e 2c 68 2c 53 2c 64 2c 45 2c 6e 2c 6f 29 2c Data Ascii: tartTime),s={date:u.timeStamp,long_task:{id:_e(),duration:bt(a.duration)},type:"long_task",_dd:{discarded:!1}};t.notify(12,{rawRumEvent:s,startTime:u.relative,domainContext:{performanceEntry:a}})}}))}(c,e,g),ji(c,e,g,E);var I=To(c,e,location,h,S,d,E,n,o),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49942	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2442	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.
2024-04-25 07:07:15 UTC	104	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":16,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-25 07:07:15 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Thu, 25 Apr 2024 07:07:15 GMT ETag: "28-HfI+TrRevDdkylP6fMXM4RhLFbc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: siyBj3AbOCmKk1W0gF-XrNDKAhM3E6ET2Irz24aN49vceznqlp3R2Q==
2024-04-25 07:07:15 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 31 36 7d Data Ascii: {"status":"ok","metric":"INP","time":16}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49941	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2236	OUT	GET /undefined HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.
2024-04-25 07:07:15 UTC	674	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 7084 Connection: close Date: Thu, 25 Apr 2024 07:07:15 GMT ETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: phXpUouh1N8pYJLt6KU1NfY9os5J-jJ84X-EXzqGaVr9KOBYtyUnLg==
2024-04-25 07:07:15 UTC	3613	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref
2024-04-25 07:07:15 UTC	3471	IN	Data Raw: 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 72 65 66 66 65 72 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 74 69 74 6c 65 3d 22 22 3e 6e 69 63 65 20 74 68 69 6e 67 73 20 77 65 20 77 72 6f 74 65 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 6d 61 69 6e 3e 3c 2f 64 69 76 3e 3b 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 69 64 3d 22 5f 5f 4e 45 58 54 5f 44 41 54 41 5f 5f 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 7d 7d 2c 22 70 61 67 65 22 3a 22 2f 34 30 34 22 2c 22 71 75 65 72 79 22 3a 7b 7d 2c 22 62 75 69 6c 64 49 64 22 3a 22 63 39 38 62 65 39 65 62 39 66 32 30 36 35 34 37 61 65 61 31 30 64 34 36 66 32 35 33 65 61 33 37 65 61 33 64 33 64 62 37 22 2c 22 72 75 6e 74 69 Data Ascii: _blank" rel="norefferer noreferrer" title="">nice things we wrote</a>.</p></main></div>;</div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{}},"page":"/404","query":{},"buildId":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","runti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49944	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2002	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.
2024-04-25 07:07:15 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:15 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QZWP9UlInrN0Bqjufo2wgXHDJxxq77HuCXMPfD2O-TaygSsxdfqLzg==
2024-04-25 07:07:15 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49943	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2442	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.
2024-04-25 07:07:15 UTC	122	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 39 34 36 37 32 39 30 37 37 35 32 35 32 38 31 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.004946729077525281,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-25 07:07:15 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Thu, 25 Apr 2024 07:07:15 GMT ETag: "3a-DRJu/sBcyOFgbCxMWKaxAvt00RI" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dfxPueX59TsCJa8OPHyiuyfzb7qQLCoGDxGyoi88AFfDVgzlbkUsZQ==
2024-04-25 07:07:15 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 39 34 36 37 32 39 30 37 37 35 32 35 32 38 31 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.004946729077525281}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49948	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2154	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	578	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 12:10:10 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 31240efd84da865ccb5c6adf215095b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bJkBcm0XQwWRhgSlFbCzeyuRQaS3MmfxJTxK-PKQ8oHJ5d7ggpjENg== Age: 154626
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 30 36 32 35 65 6d Data Ascii: m,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;padding-left:0;padding-right:0}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons .button:nth-child(2){margin-top:1.0625em
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 70 61 79 6d 65 6e 74 5f 5f 63 61 6e 63 65 6c 2c 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 62 65 64 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 73 75 62 74 69 74 Data Ascii: e Medium,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif}.payment__cancel,.payment__reactivate{border-top:1px solid #e8ebed}.payment__reactivate--text{margin-bottom:1.5rem}.payment__reactivate--subtit
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 37 34 31 64 39 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: :not(:last-child){margin-right:1rem}.contact-item .contact-item__option:focus,.contact-item .contact-item__option:hover{color:#3741d9}.contact-item .contact-item__option--disabled,.contact-item .contact-item__option--disabled:focus,.contact-item .contact-
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 61 78 2d 77 69 64 74 68 3a 34 38 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 2e 38 31 32 35 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 61 72 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 Data Ascii: ax-width:48rem){.account__menu{width:100%;margin-left:0}}.account__menu .verticalnav{margin-bottom:2em}@media(max-width:72.8125rem){.account__menu .verticalnav__arrow{margin-left:.25em}}.account__menu .verticalnav__list{margin:0;float:none}.account__menu
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 74 3a 2e 38 31 32 35 65 6d 3b 6c 65 66 74 3a 31 2e 31 32 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2e 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 38 31 32 35 65 6d 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 7b 6c 65 66 74 3a 31 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 38 37 35 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 39 33 37 35 65 6d 20 31 2e 32 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 32 36 38 Data Ascii: t:.8125em;left:1.125em;position:absolute;top:.875em;width:.8125em;z-index:0}.form-notification--validated .form-notification__message{left:1.25em;margin-left:1.875em;padding:.9375em 1.25em}.form-notification--validated .form-notification__icon{color:#5268
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 3b 63 6f 6c 6f 72 3a 23 34 38 34 61 34 64 7d 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 5f 5f 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 66 72 Data Ascii: a Grande,sans-serif;font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:1.125em;color:#484a4d}.free-account-tiers .tier__price{font-size:1em;margin-bottom:0}.fr
2024-04-25 07:07:16 UTC	13232	IN	Data Raw: 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4e 6f 72 6d 61 6c 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 77 69 64 74 68 3a 35 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e Data Ascii: ystem,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Normal,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;width:50%;font-size:.
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 20 23 68 61 6d 62 75 72 67 65 72 2d 73 68 61 70 65 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 20 2e 6c 6f 67 6f 2d 73 68 61 70 65 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 68 6f 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 68 65 61 64 65 72 2e 62 62 62 33 36 30 32 63 2e 70 6e 67 29 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 69 Data Ascii: mobile-ready .nav--plus #hamburger-shape,.is-mobile-ready .nav--plus .logo-shape{fill:#fff}.is-mobile-ready .nav--home{background-color:#f63}.is-mobile-ready .nav--plus{background-image:url(/_next/static/media/header.bbb3602c.png)}.is-mobile-ready .nav__i
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 37 36 39 32 33 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 38 34 61 34 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 70 61 64 64 69 6e 67 3a 2e 37 36 39 32 33 30 37 36 39 32 65 6d 20 2e 39 32 33 30 37 36 39 32 33 31 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 74 6f 6f 6c 74 69 70 2d 2d 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 74 6f 6f 6c 74 69 70 2d 2d 6d 61 6e 75 61 6c 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 61 72 72 6f 77 2e 30 63 Data Ascii: 76923em;background:#484a4d;color:#fff;font-size:.8125em;line-height:1.4;padding:.7692307692em .9230769231em;position:absolute;text-align:left;white-space:normal}.tooltip--hover:after,.tooltip--manual:after{background-image:url(/_next/static/media/arrow.0c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49949	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2154	OUT	GET /_next/static/css/7ec742af40df2646.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	575	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 911 Connection: close Date: Sat, 20 Apr 2024 14:55:28 GMT Last-Modified: Fri, 19 Apr 2024 22:52:04 GMT ETag: "e434b9481e572ce66aaaf238a1f3be93" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4b24194db427c7e0a216991d8bb1bfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Bm93EB1vFcwCS15UoKCoeVMgf64QIt86CICRieRoo8n1EpLuWJQWDg== Age: 403909
2024-04-25 07:07:16 UTC	911	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49947	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2185	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:16 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -AuoY0vlR2-HIM9QdHvMgzC-S2No7gEXJTaCFETClwGNzh4hlZK8bQ==
2024-04-25 07:07:16 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49950	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:15 UTC	2187	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:16 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 43Q9HFGVpFaH-4BrSzIuW4AThx2pN4K0crNJXzCdd2WWKvgKM23cvg==
2024-04-25 07:07:16 UTC	3542	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-25 07:07:16 UTC	8192	IN	Data Raw: 36 20 33 32 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 31 36 2e 32 2d 33 32 31 2e 32 63 2d 31 38 2e 37 2d 36 2e 38 2d 33 37 2e 39 2d 31 32 2d 35 37 2e 35 2d 31 35 2e 34 6c 35 2e 37 2d 33 32 2e 35 63 32 31 2e 35 20 33 2e 38 20 34 32 2e 36 20 39 2e 34 20 36 33 2e 31 20 31 36 2e 39 6c 2d 31 31 2e 33 20 33 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 37 30 2e 32 2d 32 39 36 2e 32 63 2d 31 37 2e 33 2d 39 2e 38 2d 33 35 2e 34 2d 31 38 2e 32 2d 35 34 2e 31 2d 32 35 6c 31 31 2e 32 2d 33 31 63 32 30 2e 35 20 37 2e 35 20 34 30 2e 33 20 31 36 2e 36 20 35 39 2e 33 20 32 37 2e 34 6c 2d 31 36 2e 34 20 32 38 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 Data Ascii: 6 32.5z"/> <path class="st1" d="M116.2-321.2c-18.7-6.8-37.9-12-57.5-15.4l5.7-32.5c21.5 3.8 42.6 9.4 63.1 16.9l-11.3 31z"/> <path class="st2" d="M170.2-296.2c-17.3-9.8-35.4-18.2-54.1-25l11.2-31c20.5 7.5 40.3 16.6 59.3 27.4l-16.4 28.6z"/> <path
2024-04-25 07:07:16 UTC	4096	IN	Data Raw: 33 2d 34 2e 32 20 33 32 2e 38 2d 34 2e 32 20 34 39 2e 34 68 2d 32 37 2e 34 63 30 2d 31 38 2e 31 20 31 2e 35 2d 33 36 2e 32 20 34 2e 36 2d 35 34 2e 31 6c 32 37 20 34 2e 37 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2d 32 36 37 2e 32 2d 39 36 2e 38 63 2d 35 2e 36 20 31 35 2e 36 2d 39 2e 39 20 33 31 2e 36 2d 31 32 2e 38 20 34 37 2e 39 6c 2d 32 37 2d 34 2e 37 63 33 2e 32 2d 31 37 2e 39 20 37 2e 39 2d 33 35 2e 34 20 31 34 2d 35 32 2e 35 6c 32 35 2e 38 20 39 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 2d 32 34 36 2e 36 2d 31 34 31 2e 38 63 2d 38 2e 32 20 31 34 2e 34 2d 31 35 2e 32 20 32 39 2e 34 2d 32 30 2e 38 20 34 35 6c 2d 32 35 2e 38 2d 39 2e 33 63 36 2e Data Ascii: 3-4.2 32.8-4.2 49.4h-27.4c0-18.1 1.5-36.2 4.6-54.1l27 4.7z"/> <path class="st2" d="M-267.2-96.8c-5.6 15.6-9.9 31.6-12.8 47.9l-27-4.7c3.2-17.9 7.9-35.4 14-52.5l25.8 9.3z"/> <path class="st3" d="M-246.6-141.8c-8.2 14.4-15.2 29.4-20.8 45l-25.8-9.3c6.
2024-04-25 07:07:16 UTC	4096	IN	Data Raw: 22 20 64 3d 22 4d 2d 32 32 34 2e 32 20 31 33 30 63 37 2e 36 20 31 33 2e 31 20 31 36 2e 33 20 32 35 2e 34 20 32 36 20 33 37 6c 2d 31 39 2e 31 20 31 36 2e 31 63 2d 31 30 2e 36 2d 31 32 2e 37 2d 32 30 2e 32 2d 32 36 2e 32 2d 32 38 2e 35 2d 34 30 2e 35 6c 32 31 2e 36 2d 31 32 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 2d 32 34 33 2e 36 20 38 39 2e 31 63 35 2e 32 20 31 34 2e 32 20 31 31 2e 37 20 32 37 2e 38 20 31 39 2e 33 20 34 30 2e 39 6c 2d 32 31 2e 36 20 31 32 2e 36 63 2d 38 2e 33 2d 31 34 2e 33 2d 31 35 2e 34 2d 32 39 2e 33 2d 32 31 2e 31 2d 34 34 2e 38 6c 32 33 2e 34 2d 38 2e 37 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 2d 32 35 35 2e 31 20 34 35 2e Data Ascii: " d="M-224.2 130c7.6 13.1 16.3 25.4 26 37l-19.1 16.1c-10.6-12.7-20.2-26.2-28.5-40.5l21.6-12.6z"/> <path class="st3" d="M-243.6 89.1c5.2 14.2 11.7 27.8 19.3 40.9l-21.6 12.6c-8.3-14.3-15.4-29.3-21.1-44.8l23.4-8.7z"/> <path class="st0" d="M-255.1 45.
2024-04-25 07:07:16 UTC	8192	IN	Data Raw: 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 2d 31 31 37 2e 39 20 32 30 34 2e 39 63 31 31 2e 39 20 36 2e 39 20 32 34 2e 35 20 31 32 2e 37 20 33 37 2e 34 20 31 37 2e 34 6c 2d 37 2e 38 20 32 31 2e 34 63 2d 31 34 2e 32 2d 35 2e 31 2d 32 37 2e 39 2d 31 31 2e 35 2d 34 31 2d 31 39 6c 31 31 2e 34 2d 31 39 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 2d 31 35 31 2e 38 20 31 38 31 2e 33 63 32 2e 37 20 32 2e 32 20 35 2e 33 20 34 2e 34 20 38 2e 31 20 36 2e 35 6c 38 2e 33 20 36 2e 31 20 38 2e 36 20 35 2e 37 63 32 2e 39 20 31 2e 38 20 35 2e 39 20 33 2e 35 20 38 2e 38 20 35 2e 33 6c 2d 31 31 2e 34 20 31 39 2e 38 63 2d 33 2e 32 2d 32 2d 36 2e 35 2d 33 2e 38 2d 39 2e 37 2d 35 2e 38 6c 2d 39 2e 34 2d Data Ascii: path class="st0" d="M-117.9 204.9c11.9 6.9 24.5 12.7 37.4 17.4l-7.8 21.4c-14.2-5.1-27.9-11.5-41-19l11.4-19.8z"/> <path class="st1" d="M-151.8 181.3c2.7 2.2 5.3 4.4 8.1 6.5l8.3 6.1 8.6 5.7c2.9 1.8 5.9 3.5 8.8 5.3l-11.4 19.8c-3.2-2-6.5-3.8-9.7-5.8l-9.4-
2024-04-25 07:07:16 UTC	8192	IN	Data Raw: 20 32 31 2e 32 2d 32 31 2e 35 20 33 30 2e 39 6c 2d 31 34 2e 36 2d 31 32 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 32 36 2e 37 20 31 35 30 2e 35 63 38 2e 38 2d 37 2e 34 20 31 36 2e 39 2d 31 35 2e 35 20 32 34 2e 33 2d 32 34 2e 32 6c 31 34 2e 35 20 31 32 2e 32 63 2d 38 2e 31 20 39 2e 36 2d 31 37 20 31 38 2e 35 2d 32 36 2e 36 20 32 36 2e 36 6c 2d 31 32 2e 32 2d 31 34 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 39 38 2e 36 20 31 37 30 2e 32 63 39 2e 39 2d 35 2e 38 20 31 39 2e 33 2d 31 32 2e 34 20 32 38 2e 31 2d 31 39 2e 37 6c 31 32 2e 32 20 31 34 2e 35 63 2d 39 2e 36 20 38 2e 31 2d 31 39 2e 39 20 31 35 2e 33 2d 33 30 2e 38 20 32 31 2e 36 6c 2d 39 Data Ascii: 21.2-21.5 30.9l-14.6-12.3z"/> <path class="st3" d="M126.7 150.5c8.8-7.4 16.9-15.5 24.3-24.2l14.5 12.2c-8.1 9.6-17 18.5-26.6 26.6l-12.2-14.6z"/> <path class="st0" d="M98.6 170.2c9.9-5.8 19.3-12.4 28.1-19.7l12.2 14.5c-9.6 8.1-19.9 15.3-30.8 21.6l-9
2024-04-25 07:07:16 UTC	4096	IN	Data Raw: 32 2d 35 2e 38 20 33 2e 39 2d 36 63 31 2e 33 2d 32 20 32 2e 35 2d 34 2e 31 20 33 2e 37 2d 36 2e 31 6c 31 33 2e 37 20 37 2e 39 63 2d 31 2e 33 20 32 2e 32 2d 32 2e 36 20 34 2e 35 2d 34 20 36 2e 37 6c 2d 34 2e 33 20 36 2e 35 2d 34 2e 36 20 36 2e 33 63 2d 31 2e 36 20 32 2e 31 2d 33 2e 33 20 34 2e 31 2d 34 2e 39 20 36 2e 31 6c 2d 31 32 2e 32 2d 31 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 30 35 2e 35 20 31 32 35 2e 31 63 37 2e 33 2d 36 2e 31 20 31 34 2d 31 32 2e 39 20 32 30 2e 31 2d 32 30 2e 32 6c 31 32 2e 31 20 31 30 2e 31 63 2d 36 2e 37 20 38 2d 31 34 2e 31 20 31 35 2e 34 2d 32 32 2e 31 20 32 32 2e 32 6c 2d 31 30 2e 31 2d 31 32 2e 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 Data Ascii: 2-5.8 3.9-6c1.3-2 2.5-4.1 3.7-6.1l13.7 7.9c-1.3 2.2-2.6 4.5-4 6.7l-4.3 6.5-4.6 6.3c-1.6 2.1-3.3 4.1-4.9 6.1l-12.2-10z"/> <path class="st1" d="M105.5 125.1c7.3-6.1 14-12.9 20.1-20.2l12.1 10.1c-6.7 8-14.1 15.4-22.1 22.2l-10.1-12.1z"/> <path class="s
2024-04-25 07:07:16 UTC	4096	IN	Data Raw: 36 20 32 39 2e 35 2d 31 31 2e 37 20 34 33 2e 37 6c 2d 32 31 2e 35 2d 37 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 32 30 34 2e 39 20 31 31 37 2e 39 63 36 2e 39 2d 31 31 2e 39 20 31 32 2e 37 2d 32 34 2e 35 20 31 37 2e 34 2d 33 37 2e 34 6c 32 31 2e 34 20 37 2e 38 63 2d 35 2e 31 20 31 34 2e 32 2d 31 31 2e 35 20 32 37 2e 39 2d 31 39 20 34 31 6c 2d 31 39 2e 38 2d 31 31 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 31 2e 34 20 31 35 31 2e 37 63 32 2e 32 2d 32 2e 37 20 34 2e 34 2d 35 2e 33 20 36 2e 35 2d 38 6c 36 2e 31 2d 38 2e 33 20 35 2e 37 2d 38 2e 36 63 31 2e 38 2d 32 2e 39 20 33 2e 35 2d 35 2e 39 20 35 2e 33 2d 38 2e 38 6c 31 39 2e 38 20 31 31 Data Ascii: 6 29.5-11.7 43.7l-21.5-7.8z"/> <path class="st3" d="M204.9 117.9c6.9-11.9 12.7-24.5 17.4-37.4l21.4 7.8c-5.1 14.2-11.5 27.9-19 41l-19.8-11.4z"/> <path class="st0" d="M181.4 151.7c2.2-2.7 4.4-5.3 6.5-8l6.1-8.3 5.7-8.6c1.8-2.9 3.5-5.9 5.3-8.8l19.8 11
2024-04-25 07:07:16 UTC	12288	IN	Data Raw: 2e 34 2d 37 2e 38 63 35 2e 31 20 31 34 2e 32 20 39 2e 31 20 32 38 2e 38 20 31 31 2e 38 20 34 33 2e 36 6c 2d 32 32 2e 34 20 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 31 32 2e 32 2d 33 37 2e 38 63 2d 32 2e 32 2d 31 32 2e 34 2d 35 2e 35 2d 32 34 2e 35 2d 39 2e 37 2d 33 36 2e 33 6c 31 39 2e 35 2d 37 2e 31 63 34 2e 37 20 31 32 2e 39 20 38 2e 32 20 32 36 2e 33 20 31 30 2e 37 20 33 39 2e 38 6c 2d 32 30 2e 35 20 33 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 32 31 35 2e 37 2d 2e 33 63 30 2d 31 32 2e 36 2d 31 2e 32 2d 32 35 2e 31 2d 33 2e 34 2d 33 37 2e 34 6c 32 30 2e 35 2d 33 2e 37 63 32 2e 34 20 31 33 2e 35 20 33 2e 37 20 32 37 2e 33 20 33 2e 37 20 34 Data Ascii: .4-7.8c5.1 14.2 9.1 28.8 11.8 43.6l-22.4 4z"/> <path class="st0" d="M212.2-37.8c-2.2-12.4-5.5-24.5-9.7-36.3l19.5-7.1c4.7 12.9 8.2 26.3 10.7 39.8l-20.5 3.6z"/> <path class="st1" d="M215.7-.3c0-12.6-1.2-25.1-3.4-37.4l20.5-3.7c2.4 13.5 3.7 27.3 3.7 4
2024-04-25 07:07:16 UTC	6910	IN	Data Raw: 31 2e 33 2d 32 20 32 32 2e 37 2d 33 20 33 34 2e 31 2d 33 76 31 37 2e 32 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 33 31 2d 31 37 36 2e 38 63 2d 32 2e 36 2d 2e 34 2d 35 2e 31 2d 2e 39 2d 37 2e 37 2d 31 2e 32 6c 2d 37 2e 38 2d 2e 38 2d 37 2e 38 2d 2e 35 63 2d 32 2e 36 2d 2e 31 2d 35 2e 32 2d 2e 31 2d 37 2e 38 2d 2e 31 76 2d 31 37 2e 33 63 32 2e 39 2e 31 20 35 2e 37 20 30 20 38 2e 36 2e 32 6c 38 2e 36 2e 35 20 38 2e 35 2e 39 63 32 2e 38 2e 34 20 35 2e 36 2e 39 20 38 2e 35 20 31 2e 33 6c 2d 33 2e 31 20 31 37 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 31 2e 32 2d 31 36 38 2e 37 63 2d 39 2e 38 2d 33 2e 35 2d 31 39 2e 39 2d 36 2e 32 2d 33 30 2e 32 2d 38 2e 31 Data Ascii: 1.3-2 22.7-3 34.1-3v17.2z"/> <path class="st3" d="M31-176.8c-2.6-.4-5.1-.9-7.7-1.2l-7.8-.8-7.8-.5c-2.6-.1-5.2-.1-7.8-.1v-17.3c2.9.1 5.7 0 8.6.2l8.6.5 8.5.9c2.8.4 5.6.9 8.5 1.3l-3.1 17z"/> <path class="st0" d="M61.2-168.7c-9.8-3.5-19.9-6.2-30.2-8.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49951	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2150	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4b24194db427c7e0a216991d8bb1bfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oFJ9Yrgj8bECjCyt8dGFpfhqOO5kaV9rTu4OevF_CrOOSLaQXv9G_g== Age: 144913
2024-04-25 07:07:16 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49952	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2152	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Sat, 04 Nov 2023 07:04:45 GMT Last-Modified: Fri, 03 Nov 2023 21:42:04 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 59000c13a9de83fe9470b41a5b1ab48a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cJjAwnwv6LloLF6ie2CURyd0r_aEInmsMdNpJfMBthg518byFR_y8A== Age: 14947351
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 Data Ascii: o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedStat
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 65 20 70 61 75 73 65 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 43 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 44 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 55 70 20 72 61 74 65 63 68 61 6e 67 65 20 72 61 74 65 43 68 61 6e 67 65 20 72 65 73 65 74 20 72 65 73 65 74 20 73 65 65 6b 65 64 20 73 65 65 6b 65 64 20 73 75 62 6d 69 74 20 73 75 62 6d 69 74 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 43 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 45 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 53 74 61 72 74 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 76 6f 6c 75 6d 65 43 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 Data Ascii: e pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(
2024-04-25 07:07:16 UTC	14808	IN	Data Raw: 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 63 61 28 72 2c 6c 29 3b 61 2e 74 61 67 3d 31 2c 61 2e 70 61 79 6c 6f 61 64 3d 74 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 66 61 28 65 2c 61 29 2c 68 69 28 65 2c 6c 2c 72 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 64 69 28 29 2c 72 3d 70 69 28 65 29 2c 6c 3d 63 61 28 6e 2c 72 29 3b 6c 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6c 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 66 61 28 65 Data Ascii: =e._reactInternals;var r=di(),l=pi(e),a=ca(r,l);a.tag=1,a.payload=t,void 0!==n&&null!==n&&(a.callback=n),fa(e,a),hi(e,l,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=di(),r=pi(e),l=ca(n,r);l.tag=2,void 0!==t&&null!==t&&(l.callback=t),fa(e
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 61 6f 28 74 2c 72 5b 31 5d 29 3f 72 5b 30 5d 3a 28 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 74 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 69 6f 28 29 3b 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 76 61 72 20 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 61 6f 28 74 2c 72 5b 31 5d 29 3f 72 5b 30 5d 3a 28 65 3d 65 28 29 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 74 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 57 6c 28 29 3b 51 6c 28 39 38 3e 6e 3f 39 38 3a Data Ascii: e;return null!==r&&null!==t&&ao(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function To(e,t){var n=io();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ao(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Lo(e,t){var n=Wl();Ql(98>n?98:
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 63 6c 28 44 61 29 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 75 3d 30 21 3d 3d 28 36 34 26 74 2e 66 6c 61 67 73 29 2c 6e 75 6c 6c 3d 3d 3d 28 73 3d 72 2e 72 65 6e 64 65 72 69 6e 67 29 29 69 66 28 75 29 6f 75 28 72 2c 21 31 29 3b 65 6c 73 65 7b 69 66 28 30 21 3d 3d 55 75 7c 7c 6e 75 6c 6c 21 3d 3d 65 26 26 30 21 3d 3d 28 36 34 26 65 2e 66 6c 61 67 73 29 29 66 6f 72 28 65 3d 74 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 73 3d 55 61 28 65 29 29 29 7b 66 6f 72 28 74 2e 66 6c 61 67 73 7c 3d 36 34 2c 6f 75 28 72 2c 21 31 29 2c 6e 75 6c 6c 21 3d 3d 28 75 3d 73 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 28 74 2e 75 70 64 61 74 65 51 Data Ascii: cl(Da),null===(r=t.memoizedState))return null;if(u=0!==(64&t.flags),null===(s=r.rendering))if(u)ou(r,!1);else{if(0!==Uu\|\|null!==e&&0!==(64&e.flags))for(e=t.child;null!==e;){if(null!==(s=Ua(e))){for(t.flags\|=64,ou(r,!1),null!==(u=s.updateQueue)&&(t.updateQ
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 76 61 72 20 72 3d 4a 61 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 6e 75 6c 6c 21 3d 3d 72 3b 29 7b 76 61 72 20 6c 3d 72 2e 71 75 65 75 65 3b 6e 75 6c 6c 21 3d 3d 6c 26 26 28 6c 2e 70 65 6e 64 69 6e 67 3d 6e 75 6c 6c 29 2c 72 3d 72 2e 6e 65 78 74 7d 6e 6f 3d 21 31 7d 69 66 28 5a 61 3d 30 2c 74 6f 3d 65 6f 3d 4a 61 3d 6e 75 6c 6c 2c 72 6f 3d 21 31 2c 7a 75 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 6e 2e 72 65 74 75 72 6e 29 7b 55 75 3d 31 2c 41 75 3d 74 2c 4d 75 3d 6e 75 6c 6c 3b 62 72 65 61 6b 7d 65 3a 7b 76 61 72 20 61 3d 65 2c 6f 3d 6e 2e 72 65 74 75 72 6e 2c 75 3d 6e 2c 69 3d 74 3b 69 66 28 74 3d 46 75 2c 75 2e 66 6c 61 67 73 7c 3d 32 30 34 38 2c 75 2e 66 69 72 73 74 45 66 66 65 63 74 3d 75 2e 6c 61 Data Ascii: var r=Ja.memoizedState;null!==r;){var l=r.queue;null!==l&&(l.pending=null),r=r.next}no=!1}if(Za=0,to=eo=Ja=null,ro=!1,zu.current=null,null===n\|\|null===n.return){Uu=1,Au=t,Mu=null;break}e:{var a=e,o=n.return,u=n,i=t;if(t=Fu,u.flags\|=2048,u.firstEffect=u.la
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 68 69 6c 64 29 2c 41 61 3d 74 2c 61 3d 6a 61 3d 21 30 29 2c 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 6c 2e 6d 75 74 61 62 6c 65 53 6f 75 72 63 65 45 61 67 65 72 48 79 64 72 61 74 69 6f 6e 44 61 74 61 29 29 66 6f 72 28 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 3d 32 29 28 61 3d 65 5b 6c 5d 29 2e 5f 77 6f 72 6b 49 6e 50 72 6f 67 72 65 73 73 56 65 72 73 69 6f 6e 50 72 69 6d 61 72 79 3d 65 5b 6c 2b 31 5d 2c 4b 61 2e 70 75 73 68 28 61 29 3b 66 6f 72 28 6e 3d 50 61 28 74 2c 6e 75 6c 6c 2c 72 2c 6e 29 2c 74 2e 63 68 69 6c 64 3d 6e 3b 6e 3b 29 6e 2e 66 6c 61 67 73 3d 2d 33 26 6e 2e 66 6c 61 67 73 7c 31 30 32 34 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 7d 65 6c 73 65 20 55 6f 28 65 2c 74 2c 72 2c 6e 29 2c 71 61 28 29 3b 74 3d 74 2e 63 68 69 6c 64 7d 72 65 Data Ascii: hild),Aa=t,a=ja=!0),a){if(null!=(e=l.mutableSourceEagerHydrationData))for(l=0;l<e.length;l+=2)(a=e[l])._workInProgressVersionPrimary=e[l+1],Ka.push(a);for(n=Pa(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags\|1024,n=n.sibling}else Uo(e,t,r,n),qa();t=t.child}re
2024-04-25 07:07:16 UTC	500	IN	Data Raw: 6c 61 79 29 26 26 30 3c 6f 3f 75 2b 6f 3a 75 3a 6f 3d 75 2c 65 29 7b 63 61 73 65 20 31 3a 76 61 72 20 69 3d 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 3d 32 35 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 69 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 69 3d 31 65 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 69 3d 35 65 33 7d 72 65 74 75 72 6e 20 65 3d 7b 69 64 3a 4e 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 61 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 65 2c 73 74 61 72 74 54 69 6d 65 3a 6f 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 69 3d 6f 2b 69 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 2c 6f 3e 75 3f 28 65 2e 73 6f 72 74 49 6e 64 65 78 3d 6f 2c 53 28 50 2c 65 29 2c 6e 75 6c 6c 3d 3d 3d 45 28 43 29 26 26 65 3d Data Ascii: lay)&&0<o?u+o:u:o=u,e){case 1:var i=-1;break;case 2:i=250;break;case 5:i=1073741823;break;case 4:i=1e4;break;default:i=5e3}return e={id:N++,callback:a,priorityLevel:e,startTime:o,expirationTime:i=o+i,sortIndex:-1},o>u?(e.sortIndex=o,S(P,e),null===E(C)&&e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49953	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2002	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:16 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bIXt43O-6uP9yFRWVx_i5kusHY5U3iurXqDf-6uMLhWxelOHqt6j2g==
2024-04-25 07:07:16 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49954	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	811	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:16 UTC	523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2878 Connection: close Date: Thu, 25 Apr 2024 07:07:17 GMT Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT ETag: "638b03103c59f408e100f75b696a497f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 66612380ff0f7a7a44c41f2c4a4c8294.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: NQZ0sKetUgmn56RHzHOxDHB-zgFGmRs4Tx1OWKTabuCo0NngoF6RXg==
2024-04-25 07:07:16 UTC	2878	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 57 61 6c 6c 70 61 70 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49955	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2147	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Wed, 01 Nov 2023 14:31:20 GMT Last-Modified: Wed, 01 Nov 2023 13:56:32 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e9832200ff971aca96b461ffc18b3368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SgkXtBrDRjtYRvZWAK7B5qRISbMetdavGafB6J4gqjrFcvj4oqs_FA== Age: 15179757
2024-04-25 07:07:16 UTC	15774	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 29 2c 54 2e 69 73 53 73 72 26 26 22 2f 34 30 34 22 21 3d 3d 44 2e 70 61 67 65 26 26 22 2f 5f 65 72 72 6f 72 22 21 3d 3d 44 2e 70 61 67 65 26 26 28 44 2e 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 44 2e 6e 65 78 74 45 78 70 6f 72 74 26 26 28 76 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 54 2e 70 61 74 68 6e 61 6d 65 29 7c 7c Data Ascii: guments)}return a(r,[{key:"componentDidCatch",value:function(e,t){this.props.fn(e,t)}},{key:"componentDidMount",value:function(){this.scrollToHash(),T.isSsr&&"/404"!==D.page&&"/_error"!==D.page&&(D.isFallback\|\|D.nextExport&&(v.isDynamicRoute(T.pathname)\|\|
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 63 72 69 70 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 29 7d 2c 74 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 29 7d 28 65 29 29 2c 74 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 63 2e 73 65 74 28 65 2c 74 3d 66 65 74 63 68 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 74 79 6c 65 73 68 65 65 74 3a 20 22 2e 63 6f Data Ascii: new Error("Failed to load script: ".concat(e))))},t.crossOrigin=void 0,t.src=e,document.body.appendChild(t)}))}(e)),t))},r=function(e){var t=c.get(e);return t\|\|(c.set(e,t=fetch(e).then((function(t){if(!t.ok)throw new Error("Failed to load stylesheet: ".co
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 2b 31 29 3b 65 2e 68 61 73 28 75 29 3f 6f 3d 21 31 3a 65 2e 61 64 64 28 75 29 7d 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 62 61 73 65 22 3a 74 2e 68 61 73 28 61 2e 74 79 70 65 29 3f 6f 3d 21 31 3a 74 2e 61 64 64 28 61 2e 74 79 70 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 65 74 61 22 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 73 3d 70 2e 6c 65 6e 67 74 68 3b 63 3c 73 3b 63 2b 2b 29 7b 76 61 72 20 6c 3d 70 5b 63 5d 3b 69 66 28 61 2e 70 72 6f 70 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 69 66 28 22 63 68 61 72 53 65 74 22 3d 3d 3d 6c 29 72 2e 68 61 73 28 6c 29 3f 6f 3d 21 31 3a 72 2e 61 64 64 28 6c 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 70 72 6f 70 73 5b 6c 5d 2c 64 3d 6e 5b 6c 5d Data Ascii: +1);e.has(u)?o=!1:e.add(u)}switch(a.type){case"title":case"base":t.has(a.type)?o=!1:t.add(a.type);break;case"meta":for(var c=0,s=p.length;c<s;c++){var l=p[c];if(a.props.hasOwnProperty(l))if("charSet"===l)r.has(l)?o=!1:r.add(l);else{var f=a.props[l],d=n[l]
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 34 3a 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 3b 63 61 73 65 20 32 35 3a 69 66 28 22 2f 61 70 69 22 21 3d 3d 67 26 26 21 67 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 61 70 69 2f 22 29 29 7b 65 2e 6e 65 78 74 3d 32 38 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 4b 28 7b 75 72 6c 3a 69 2c 72 6f 75 74 65 72 3a 79 7d 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 3b 63 61 73 65 20 32 38 3a 69 66 28 65 2e 74 30 3d 4f 2c 65 2e 74 30 29 7b 65 2e 6e 65 78 74 3d 33 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 33 32 2c 79 2e 66 65 74 63 68 43 6f 6d 70 6f 6e 65 6e 74 28 67 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: 4:O=S&&!("initial"in S)?S:void 0;case 25:if("/api"!==g&&!g.startsWith("/api/")){e.next=28;break}return K({url:i,router:y}),e.abrupt("return",new Promise((function(){})));case 28:if(e.t0=O,e.t0){e.next=33;break}return e.next=32,y.fetchComponent(g).then((fu
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 30 5d 26 26 28 6c 3d 22 3f 22 2b 6c 29 2c 69 3d 69 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 23 5d 2f 67 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6c 3d 6c 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 25 32 33 22 29 2c 22 22 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 75 29 7d 74 2e 75 72 6c 4f 62 6a 65 63 74 4b 65 79 73 3d 5b 22 61 75 74 68 22 2c 22 68 61 73 68 22 2c 22 68 6f 73 74 22 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 22 68 72 65 66 22 2c 22 70 61 74 68 22 2c 22 70 61 74 68 6e 61 6d 65 22 2c 22 70 6f 72 74 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 2c 22 71 75 65 72 79 22 2c 22 73 65 61 72 63 68 22 2c 22 73 6c 61 73 68 65 73 22 5d 7d 2c 38 38 37 33 Data Ascii: 0]&&(l="?"+l),i=i.replace(/[?#]/g,encodeURIComponent),l=l.replace("#","%23"),"".concat(a).concat(s).concat(i).concat(l).concat(u)}t.urlObjectKeys=["auth","hash","host","hostname","href","path","pathname","port","protocol","query","search","slashes"]},8873
2024-04-25 07:07:16 UTC	16384	IN	Data Raw: 64 72 65 6e 2e 73 65 74 28 61 2c 6e 65 77 20 65 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 28 61 29 2e 5f 69 6e 73 65 72 74 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 2c 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 21 31 7d 7d 5d 29 2c 65 7d 28 29 7d 2c 39 36 31 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 65 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: dren.set(a,new e),this.children.get(a)._insert(t.slice(1),r,n)}else this.placeholder=!1}}]),e}()},96112:function(e,t){"use strict";var r;Object.defineProperty(t,"__esModule",{value:!0}),t.setConfig=function(e){r=e},t.default=void 0;t.default=function(){re
2024-04-25 07:07:16 UTC	6334	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 21 3d 3d 72 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 72 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 6d 61 78 28 65 5b 72 5d 2d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 63 28 29 3b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 Data Ascii: avigationStart"!==r&&"toJSON"!==r&&(t[r]=Math.max(e[r]-e.navigationStart,0));return t}())},s=function(e,t){var r=c();return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49956	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2153	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 04 Nov 2023 08:53:06 GMT Last-Modified: Fri, 03 Nov 2023 21:42:04 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 793a32fc98b22fca416cf87070f3ac80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: V0KMbvzWi1K3SlJNc0o9ilMwvwC90txZO5CB1bqNAa8vMnnHJsPmBQ== Age: 14940851
2024-04-25 07:07:16 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49957	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	1950	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:16 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 e9832200ff971aca96b461ffc18b3368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: znDliAi99Bx4RhU7KTKH7ghThIbtyeW2b1blRWJVCpkbDASu9TxQaQ==
2024-04-25 07:07:16 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49958	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2152	OUT	GET /_next/static/chunks/pages/404-2628cd0d85d8ff64.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4562 Connection: close Date: Wed, 01 Nov 2023 13:34:04 GMT Last-Modified: Wed, 01 Nov 2023 13:25:52 GMT ETag: "34eae0e4b14ba01eee4d85c9c6fa8bbd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9ccf0420be8414e77edc70962db79938.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ur7-xWF2xUwTeegmhrw06gOwhVqCrkennWN627w8iVmmTuxf12xJQw== Age: 15183193
2024-04-25 07:07:16 UTC	4562	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 39 37 5d 2c 7b 33 30 35 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 34 30 34 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 33 32 39 33 38 29 7d 5d 29 7d 2c 31 32 31 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 72 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6e 3d 74 28 35 32 33 32 32 29 2c 6f 3d 74 28 31 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49959	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2002	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029732898&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:16 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qJ5JdKAL-MB3EBfz9HX0Fg2AZoVf1YwFtcWWp9Nbk40GQhKkTPjinA==
2024-04-25 07:07:16 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49960	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2174	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029735029&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -3bsdLWmT04oxs3VV220BOkavyhobS_qlOAF_rAxPvPi4y1kTRWO_A== Age: 144913
2024-04-25 07:07:16 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49961	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	2172	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029735029&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:16 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:04 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 fb7b7d7d496d12615fb9a61e1a0d5ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Zb_lRZ_naaYLBo89wag_07XQBZlfzc85S66t4fxa9k0mFdl3xPK18Q== Age: 144913
2024-04-25 07:07:16 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49963	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	1952	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _ga=GA1.2.224122617.1714028817; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028821.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _dd_s=rum=0&expire=1714029735029&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:17 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:17 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6b05c043343be4e7a403a603c9187f38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lD7kJpy2_dE8q2wkaxM6C58lKEmVKuEMrY-suL_qZeJHbOprEUGA7g==
2024-04-25 07:07:17 UTC	7638	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 2e 31 2d 33 30 2e 35 20 31 39 2e 36 2d 34 34 2e 34 20 33 31 2e 32 6c 2d 31 39 2e 33 2d 32 33 63 31 35 2e 32 2d 31 32 2e 38 20 33 31 2e 35 2d 32 34 2e 32 20 34 38 2e 37 2d 33 34 2e 32 6c 31 35 20 32 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2d 31 30 37 2d 32 39 32 2e 36 6c 2d 36 2e 33 20 32 2e 34 2d 33 2e 32 20 31 2e 32 63 2d 31 2e 31 2e 34 2d 32 2e 31 2e 38 2d 33 2e 31 20 31 2e 33 6c 2d 31 32 2e 34 20 35 2e 35 2d 31 32 2e 32 20 36 2e 31 63 2d 31 20 2e 35 2d 32 20 31 2d 33 20 31 2e 36 6c 2d 33 20 31 2e 37 2d 35 2e 39 20 33 2e 33 2d 31 35 2e 31 2d 32 36 20 36 2e 35 2d 33 2e 36 20 33 2e 32 2d 31 2e 38 20 33 2e 33 2d 31 2e 38 20 31 33 2e 33 2d 36 2e 36 20 31 33 2e 36 2d 36 63 31 2e 31 2d 2e 35 20 32 2e 33 Data Ascii: .1-30.5 19.6-44.4 31.2l-19.3-23c15.2-12.8 31.5-24.2 48.7-34.2l15 26z"/> <path class="st2" d="M-107-292.6l-6.3 2.4-3.2 1.2c-1.1.4-2.1.8-3.1 1.3l-12.4 5.5-12.2 6.1c-1 .5-2 1-3 1.6l-3 1.7-5.9 3.3-15.1-26 6.5-3.6 3.2-1.8 3.3-1.8 13.3-6.6 13.6-6c1.1-.5 2.3
2024-04-25 07:07:17 UTC	8192	IN	Data Raw: 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 33 37 2e 38 20 32 31 32 2e 32 63 31 32 2e 34 2d 32 2e 32 20 32 34 2e 35 2d 35 2e 35 20 33 36 2e 33 2d 39 2e 37 6c 37 2e 31 20 31 39 2e 35 63 2d 31 32 2e 39 20 34 2e 37 2d 32 36 2e 33 20 38 2e 32 2d 33 39 2e 38 20 31 30 2e 37 6c 2d 33 2e 36 2d 32 30 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2e 33 20 32 31 35 2e 36 63 31 32 2e 35 20 30 20 32 35 2e 31 2d 31 2e 32 20 33 37 2e 34 2d 33 2e 34 6c 33 2e 37 20 32 30 2e 35 63 2d 31 33 2e 36 20 32 2e 34 2d 32 37 2e 33 20 33 2e 37 2d 34 31 2e 31 20 33 2e 37 76 2d 32 30 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 2d 33 37 2e 31 20 32 31 Data Ascii: <path class="st1" d="M37.8 212.2c12.4-2.2 24.5-5.5 36.3-9.7l7.1 19.5c-12.9 4.7-26.3 8.2-39.8 10.7l-3.6-20.5z"/> <path class="st2" d="M.3 215.6c12.5 0 25.1-1.2 37.4-3.4l3.7 20.5c-13.6 2.4-27.3 3.7-41.1 3.7v-20.8z"/> <path class="st3" d="M-37.1 21
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 36 38 2e 37 20 36 31 2e 31 63 33 2e 35 2d 39 2e 38 20 36 2e 32 2d 31 39 2e 39 20 38 2d 33 30 2e 32 6c 31 37 20 33 63 2d 32 20 31 31 2e 33 2d 34 2e 39 20 32 32 2e 34 2d 38 2e 38 20 33 33 2e 31 6c 2d 31 36 2e 32 2d 35 2e 39 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 35 35 2e 36 20 38 39 2e 35 63 35 2e 32 2d 39 2e 31 20 39 2e 36 2d 31 38 2e 36 20 31 33 2e 31 2d 32 38 2e 34 4c 31 38 35 20 36 37 63 2d 33 2e 39 20 31 30 2e 38 2d 38 2e 37 20 32 31 2e 32 2d 31 34 2e 34 20 33 31 2e 31 6c 2d 31 35 2d 38 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 33 37 2e 37 20 31 31 35 Data Ascii: > <path class="st1" d="M168.7 61.1c3.5-9.8 6.2-19.9 8-30.2l17 3c-2 11.3-4.9 22.4-8.8 33.1l-16.2-5.9z"/> <path class="st2" d="M155.6 89.5c5.2-9.1 9.6-18.6 13.1-28.4L185 67c-3.9 10.8-8.7 21.2-14.4 31.1l-15-8.6z"/> <path class="st3" d="M137.7 115
2024-04-25 07:07:17 UTC	15102	IN	Data Raw: 22 20 64 3d 22 4d 31 36 35 2e 31 2d 31 33 38 2e 39 63 2d 38 2e 31 2d 39 2e 36 2d 31 37 2d 31 38 2e 34 2d 32 36 2e 37 2d 32 36 2e 35 6c 31 33 2e 33 2d 31 35 2e 39 63 31 30 2e 36 20 38 2e 38 20 32 30 2e 33 20 31 38 2e 35 20 32 39 2e 32 20 32 39 6c 2d 31 35 2e 38 20 31 33 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 38 36 2e 36 2d 31 30 38 2e 31 63 2d 36 2e 33 2d 31 30 2e 39 2d 31 33 2e 35 2d 32 31 2e 32 2d 32 31 2e 35 2d 33 30 2e 38 6c 31 35 2e 39 2d 31 33 2e 34 63 38 2e 38 20 31 30 2e 35 20 31 36 2e 38 20 32 31 2e 39 20 32 33 2e 36 20 33 33 2e 38 6c 2d 31 38 20 31 30 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 32 30 32 2e 36 2d 37 34 2e 31 63 2d Data Ascii: " d="M165.1-138.9c-8.1-9.6-17-18.4-26.7-26.5l13.3-15.9c10.6 8.8 20.3 18.5 29.2 29l-15.8 13.4z"/> <path class="st2" d="M186.6-108.1c-6.3-10.9-13.5-21.2-21.5-30.8l15.9-13.4c8.8 10.5 16.8 21.9 23.6 33.8l-18 10.4z"/> <path class="st3" d="M202.6-74.1c-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49962	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=1e5c40b4-e96f-41d7-a899-7635435e5880&batch_time=1714028835034 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1095 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:16 UTC	1095	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 31 35 32 35 37 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":1,"page_states":[{"state":"hidden","start":1525700000}]},"application":{"id":"
2024-04-25 07:07:17 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 1e5c40b4-e96f-41d7-a899-7635435e5880 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:17 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 31 65 35 63 34 30 62 34 2d 65 39 36 66 2d 34 31 64 37 2d 61 38 39 39 2d 37 36 33 35 34 33 35 65 35 38 38 30 22 7d Data Ascii: {"request_id":"1e5c40b4-e96f-41d7-a899-7635435e5880"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49964	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:16 UTC	726	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/bundle.5131ec90dd1db1689128.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:17 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 180046 Connection: close Date: Thu, 25 Apr 2024 07:07:18 GMT Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT ETag: "488f87c26a52060914792b3a55398913" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7b7f9409a41e78466e3ab2772654a73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: E296-yi8i-ih6gLafwjCq4r7gCY3oalNnCxPucLV9VGSXCDb8rTmKQ==
2024-04-25 07:07:17 UTC	15507	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 35 31 33 31 65 63 39 30 64 64 31 64 62 31 36 38 39 31 32 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 34 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 22 69 6e 74 65 72 61 63 74 69 76 65 22 2c 22 6d 61 73 6b 22 5d 7d 7d 2c 32 32 37 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 Data Ascii: /! For license information please see bundle.5131ec90dd1db1689128.js.LICENSE.txt /!function(){var t,e,n={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:["interactive","mask"]}},2274:function(t,e,n){"use strict";let
2024-04-25 07:07:17 UTC	2412	IN	Data Raw: 6f 2e 66 28 6e 2c 65 29 7d 7d 2c 38 39 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 38 39 31 29 2c 69 3d 6e 28 33 30 31 35 29 2c 6f 3d 6e 28 33 35 36 37 29 2c 73 3d 6e 28 39 32 32 33 29 2c 75 3d 6e 28 36 38 36 37 29 2c 61 3d 6e 28 37 33 33 33 29 3b 65 2e 66 3d 72 26 26 21 69 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 28 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 75 28 65 29 2c 69 3d 61 28 65 29 2c 63 3d 69 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 63 3e 6c 3b 29 6f 2e 66 28 74 2c 6e 3d 69 5b 6c 2b 2b 5d 2c 72 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 33 35 36 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: o.f(n,e)}},8915:function(t,e,n){"use strict";var r=n(7891),i=n(3015),o=n(3567),s=n(9223),u=n(6867),a=n(7333);e.f=r&&!i?Object.defineProperties:function(t,e){s(t);for(var n,r=u(e),i=a(e),c=i.length,l=0;c>l;)o.f(t,n=i[l++],r[n]);return t}},3567:function(t,e
2024-04-25 07:07:17 UTC	1024	IN	Data Raw: 74 29 29 2c 6e 3d 73 2e 66 3b 72 65 74 75 72 6e 20 6e 3f 61 28 65 2c 6e 28 74 29 29 3a 65 7d 7d 2c 38 38 34 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 30 33 39 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 72 28 74 29 29 74 68 72 6f 77 20 69 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 32 36 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 7c 7c 74 21 3d 74 26 26 65 21 3d 65 7d 7d 2c 37 30 39 3a 66 Data Ascii: t)),n=s.f;return n?a(e,n(t)):e}},8846:function(t,e,n){"use strict";var r=n(7039),i=TypeError;t.exports=function(t){if(r(t))throw i("Can't call method on "+t);return t}},2640:function(t){"use strict";t.exports=function(t,e){return t===e\|\|t!=t&&e!=e}},709:f
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 72 61 74 6f 72 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 65 2c 74 29 26 26 6c 28 69 2c 74 29 7d 29 29 3a 75 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 69 6e 63 6c 75 64 65 73 28 74 29 26 26 6c 28 69 2c 74 29 7d 29 29 2c 69 7d 7d 2c 37 39 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 32 36 31 29 2c 69 3d 6e 28 32 34 30 39 29 2e 68 61 73 2c 6f 3d 6e 28 34 35 38 29 2c 73 3d 6e 28 34 39 36 34 29 2c 75 3d 6e 28 33 32 35 37 29 2c 61 3d 6e 28 36 39 37 33 29 2c 63 3d 6e 28 34 31 34 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 2c 6e 3d 73 28 74 29 3b 69 66 28 6f 28 65 29 3c 3d 6e 2e 73 69 7a 65 29 72 Data Ascii: rator(),(function(t){f(e,t)&&l(i,t)})):u(e,(function(t){n.includes(t)&&l(i,t)})),i}},791:function(t,e,n){"use strict";var r=n(7261),i=n(2409).has,o=n(458),s=n(4964),u=n(3257),a=n(6973),c=n(4141);t.exports=function(t){var e=r(this),n=s(t);if(o(e)<=n.size)r
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 7c 74 2c 65 29 2c 65 2e 73 68 65 65 74 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 6e 29 7b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 6e 7c 7c 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 29 7b 72 65 Data Ascii: \|t,e),e.sheet}function E(t,e,n){t.insertBefore(e,n\|\|null)}function _(t){t.parentNode&&t.parentNode.removeChild(t)}function b(t){return document.createElement(t)}function C(t){return document.createElementNS("http://www.w3.org/2000/svg",t)}function U(t){re
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 24 7b 4d 7d 3b 20 6f 70 61 63 69 74 79 3a 20 24 7b 70 7d 3b 60 29 7d 2c 5b 61 2c 6c 2c 4d 2c 68 2c 67 2c 72 2c 69 2c 6f 2c 73 2c 75 2c 63 2c 66 2c 70 5d 7d 63 6c 61 73 73 20 76 20 65 78 74 65 6e 64 73 20 74 2e 66 5f 43 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 28 30 2c 74 2e 53 31 6e 29 28 74 68 69 73 2c 65 2c 4e 2c 4c 2c 74 2e 4e 38 2c 7b 63 6f 6c 6f 72 3a 36 2c 67 72 61 64 69 65 6e 74 53 74 61 72 74 43 6f 6c 6f 72 3a 37 2c 67 72 61 64 69 65 6e 74 45 6e 64 43 6f 6c 6f 72 3a 38 2c 67 72 61 64 69 65 6e 74 44 65 67 72 65 65 73 3a 39 2c 69 6d 61 67 65 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 31 30 2c 72 65 70 65 61 74 3a 31 2c 73 69 7a 65 3a 31 31 2c 6f 76 65 72 6c 61 79 43 6f 6c 6f Data Ascii: ackground-color: ${M}; opacity: ${p};`)},[a,l,M,h,g,r,i,o,s,u,c,f,p]}class v extends t.f_C{constructor(e){super(),(0,t.S1n)(this,e,N,L,t.N8,{color:6,gradientStartColor:7,gradientEndColor:8,gradientDegrees:9,image:0,position:10,repeat:1,size:11,overlayColo
2024-04-25 07:07:17 UTC	1024	IN	Data Raw: 64 65 78 4f 66 28 22 28 22 29 2b 31 2c 72 3d 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 29 2c 69 3d 65 2e 69 6e 64 65 78 4f 66 28 22 28 22 2c 6e 29 2c 65 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 7e 69 26 26 69 3c 72 3f 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 72 2b 31 29 3a 72 29 29 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4a 74 29 29 3a 6e 6e 2e 5f 43 45 26 26 72 6e 2e 74 65 73 74 28 74 29 3f 6e 6e 2e 5f 43 45 28 22 22 2c 74 29 3a 73 7d 28 74 29 29 7c 7c 65 7d 2c 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: dexOf("(")+1,r=e.indexOf(")"),i=e.indexOf("(",n),e.substring(n,~i&&i<r?e.indexOf(")",r+1):r)).split(",").map(Jt)):nn._CE&&rn.test(t)?nn._CE("",t):s}(t))\|\|e},ln=function(t,e,n,r){void 0===n&&(n=function(t){return 1-e(1-t)}),void 0===r&&(r=function(t){retur
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 2c 6e 29 7d 2c 69 7d 3b 56 74 28 22 4c 69 6e 65 61 72 2c 51 75 61 64 2c 43 75 62 69 63 2c 51 75 61 72 74 2c 51 75 69 6e 74 2c 53 74 72 6f 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 3c 35 3f 65 2b 31 3a 65 3b 6c 6e 28 74 2b 22 2c 50 6f 77 65 72 22 2b 28 6e 2d 31 29 2c 65 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 70 6f 77 28 74 2c 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 4d 61 74 68 2e 70 6f 77 28 31 2d 74 2c 6e 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 2e 35 3f 4d 61 74 68 2e 70 6f 77 28 32 2a 74 2c 6e 29 2f 32 3a 31 2d 4d 61 74 68 2e 70 6f 77 28 32 2a Data Ascii: ,n)},i};Vt("Linear,Quad,Cubic,Quart,Quint,Strong",(function(t,e){var n=e<5?e+1:e;ln(t+",Power"+(n-1),e?function(t){return Math.pow(t,n)}:function(t){return t},(function(t){return 1-Math.pow(1-t,n)}),(function(t){return t<.5?Math.pow(2t,n)/2:1-Math.pow(2
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 2c 44 3d 79 2e 63 61 6c 6c 62 61 63 6b 53 63 6f 70 65 2c 7a 3d 79 2e 72 75 6e 42 61 63 6b 77 61 72 64 73 2c 78 3d 79 2e 79 6f 79 6f 45 61 73 65 2c 4f 3d 79 2e 6b 65 79 66 72 61 6d 65 73 2c 41 3d 79 2e 61 75 74 6f 52 65 76 65 72 74 2c 6b 3d 65 2e 5f 64 75 72 2c 53 3d 65 2e 5f 73 74 61 72 74 41 74 2c 77 3d 65 2e 5f 74 61 72 67 65 74 73 2c 49 3d 65 2e 70 61 72 65 6e 74 2c 45 3d 49 26 26 22 6e 65 73 74 65 64 22 3d 3d 3d 49 2e 64 61 74 61 3f 49 2e 76 61 72 73 2e 74 61 72 67 65 74 73 3a 77 2c 43 3d 22 61 75 74 6f 22 3d 3d 3d 65 2e 5f 6f 76 65 72 77 72 69 74 65 26 26 21 5f 2c 51 3d 65 2e 74 69 6d 65 6c 69 6e 65 3b 69 66 28 51 26 26 28 21 4f 7c 7c 21 6a 29 26 26 28 6a 3d 22 6e 6f 6e 65 22 29 2c 65 2e 5f 65 61 73 65 3d 63 6e 28 6a 2c 4a 2e 65 61 73 65 29 2c 65 2e Data Ascii: ,D=y.callbackScope,z=y.runBackwards,x=y.yoyoEase,O=y.keyframes,A=y.autoRevert,k=e._dur,S=e._startAt,w=e._targets,I=e.parent,E=I&&"nested"===I.data?I.vars.targets:w,C="auto"===e._overwrite&&!_,Q=e.timeline;if(Q&&(!O\|\|!j)&&(j="none"),e._ease=cn(j,J.ease),e.
2024-04-25 07:07:17 UTC	16384	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 74 29 7d 7d 2c 75 6e 69 74 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 2b 28 65 7c 7c 4f 65 28 6e 29 29 7d 7d 2c 69 6e 74 65 72 70 6f 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 69 73 4e 61 4e 28 65 2b 6e 29 3f 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 31 2d 74 29 2a 65 2b 74 2a 6e 7d 3b 69 66 28 21 6f 29 7b 76 61 72 20 73 2c 75 2c 61 2c 63 2c 6c 2c 66 3d 6f 74 28 65 29 2c 4d 3d 7b 7d 3b 69 66 28 21 30 3d Data Ascii: n(t){return e.reduce((function(t,e){return e(t)}),t)}},unitize:function(t,e){return function(n){return t(parseFloat(n))+(e\|\|Oe(n))}},interpolate:function t(e,n,r,i){var o=isNaN(e+n)?0:function(t){return(1-t)e+tn};if(!o){var s,u,a,c,l,f=ot(e),M={};if(!0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49965	54.230.253.37	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	560	OUT	GET /packs/js/wallpaper-api-v2.js HTTP/1.1 Host: prod-cdn.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:17 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10327 Connection: close Date: Mon, 22 Apr 2024 12:42:20 GMT Last-Modified: Tue, 27 Jun 2023 07:15:46 GMT ETag: "4b0b7d731b18d770c7c8e83ccbb777f8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c22de0e2f2b4d640c1ce19166b5e21e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: AcsSaAoO25_jkKoa1y0m85NnCfBnxZmPk8UL_70TEoONBR8G3kg5OQ== Age: 239098
2024-04-25 07:07:17 UTC	10327	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49967	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028835450 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:17 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:17 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: SPV33SR353GF6Z0VSB80 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:17 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49968	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	3322	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028835353&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1487684618.1714028836&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028835353&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A15.435%2B02%3A00&epn.hit_timestamp_unix=1714028835435&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028835353-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028835353-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=7&tfd=1923&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028834318.; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:17 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:17 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775984; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 c3682aca833ec89fee878eefdd066f02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: JcTI2AROUoeEe0420TCch55v_7JbZufVHYbOkBvwtAjpM1wjZq0JCg==
2024-04-25 07:07:17 UTC	664	IN	Data Raw: 32 39 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 38 35 32 35 33 38 35 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 Data Ascii: 291event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028
2024-04-25 07:07:17 UTC	596	IN	Data Raw: 32 34 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 38 35 32 35 33 38 35 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 Data Ascii: 24devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2
2024-04-25 07:07:17 UTC	656	IN	Data Raw: 32 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 36 35 37 37 35 31 30 32 36 26 66 73 74 3d 31 37 31 34 30 32 38 38 33 37 34 37 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 Data Ascii: 289event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=657751026&fst=1714028837478&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&
2024-04-25 07:07:17 UTC	355	IN	Data Raw: 31 35 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4a 59 4c 47 4c 77 55 6b 34 38 37 4f 48 31 55 61 47 62 73 45 73 31 65 78 4f 55 39 72 47 7a 4f 4e 64 70 63 57 42 42 38 74 6e 32 69 6a 59 46 5a 43 25 32 46 36 77 36 44 57 59 25 32 42 73 41 6a 4a 36 64 71 77 47 51 30 65 56 65 74 32 41 45 70 31 75 55 35 73 47 69 4f 25 32 42 38 59 41 6f 6c 52 6f 55 42 66 25 32 46 38 56 68 63 63 69 62 78 64 36 46 59 59 72 57 51 6f 36 68 38 7a 67 57 4e 71 4e 34 7a 7a 45 49 44 51 54 48 38 25 32 46 75 65 55 7a 33 34 58 57 45 74 4c 5a 34 64 4f 4a 73 4b 45 6c 75 4b 6e 49 69 75 4b 48 68 65 6b 41 78 37 69 4d 33 4d Data Ascii: 15cevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=JYLGLwUk487OH1UaGbsEs1exOU9rGzONdpcWBB8tn2ijYFZC%2F6w6DWY%2BsAjJ6dqwGQ0eVet2AEp1uU5sGiO%2B8YAolRoUBf%2F8Vhccibxd6FYYrWQo6h8zgWNqN4zzEIDQTH8%2FueUz34XWEtLZ4dOJsKEluKnIiuKHhekAx7iM3M
2024-04-25 07:07:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49969	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	650	OUT	GET /api/segment?pid=712597&pdata=sid%3D%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:17 UTC	443	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:17 GMT Content-Length: 27 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:17 UTC	27	IN	Data Raw: 70 64 61 74 61 20 63 6f 6e 74 61 69 6e 73 20 65 6d 70 74 79 20 76 61 6c 75 65 0a Data Ascii: pdata contains empty value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49972	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	720	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028835450 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, not-navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:17 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:17 GMT x-amzn-RequestId: 81e86a85-2af0-43a0-ba4f-021f14208744 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 ecd7f85aad45b54f0ed576acc263d458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: qCIVB5fkG9QGcigWsAZ7MFUg4N9nwsH9XSDTmTGznSnfCVtWqYN0qg==
2024-04-25 07:07:17 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49973	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028835450 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:18 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:17 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: H53J8694NVB6EDXGM0KF Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:18 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49974	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	861	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1487684618.1714028836&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:17 UTC	854	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1487684618.1714028836&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49976	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	909	OUT	GET /rp.gif?ts=1714028836136&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:17 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49977	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	1383	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:18 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10888951064602688181"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"10888951064602688181","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"10888951064602688181","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"10888951064602688181","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"10888951064602688181","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49971	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; FPAU=1.1.2028829226.1714028821; __td_signed=true; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1
2024-04-25 07:07:17 UTC	1226	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 39 63 61 32 34 33 37 37 66 34 38 32 32 30 32 34 30 34 32 34 30 39 34 31 35 35 2f 61 39 62 30 62 65 35 66 30 39 31 39 34 38 30 34 39 65 35 64 38 64 64 31 30 35 64 35 38 32 65 36 32 30 32 34 30 34 32 34 30 39 34 32 32 38 2f 66 36 32 65 32 34 3f 74 72 6b 3d 54 52 4e 5f 54 44 4c 5f 30 31 26 75 74 6d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm
2024-04-25 07:07:18 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:18 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:18 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:18 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49980	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	1343	OUT	GET /pagead/viewthroughconversion/778938880/?random=657751026&fst=1714028837478&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:18 UTC	1271	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=657751026&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqGh7ZuBegIG-vogVEkKupRerq7Lb9lHR3oaoMmqZniriHggeI&random=2546010966 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49982	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	905	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1714028836243&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028836130&coo=false&eid=1714028835353-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49987	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028836272&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1064616060626372 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49983	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	1015	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1714028836243&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028836130&coo=false&eid=1714028835353-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:18 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:18 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:18 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49979	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	1283	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:18 UTC	1137	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49975	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	767	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	388	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:18 GMT Content-Length: 281 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:18 UTC	281	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 70 76 3d 31 2e 31 2e 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0">https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49986	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028836273&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1004247723602958 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49988	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	2378	OUT	GET /_set_cookie?val=JYLGLwUk487OH1UaGbsEs1exOU9rGzONdpcWBB8tn2ijYFZC%2F6w6DWY%2BsAjJ6dqwGQ0eVet2AEp1uU5sGiO%2B8YAolRoUBf%2F8Vhccibxd6FYYrWQo6h8zgWNqN4zzEIDQTH8%2FueUz34XWEtLZ4dOJsKEluKnIiuKHhekAx7iM3MXiGguRubYO87MqwV5XsfsxNQY%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:18 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:18 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8b047a56cedc9f5e8593136caff4a83e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: BCgljXgFDxWpMOLeV4T2wKq0fnk4KdAhuLZ6LxDFBu8-mH4I6SZAPQ==
2024-04-25 07:07:18 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49989	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	3137	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028835353&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1487684618.1714028836&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028835353&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A07%3A15.435%2B02%3A00&epn.hit_timestamp_unix=1714028835435&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028835353-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028835353-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=7&tfd=1923&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:18 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:18 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775983; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 977ac41beb5fbb1d70f7ee898340f5f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: UG2BEl7EmgQ7AfsGW4KM1eYQX8L-8wb-fbkYOm4P4ETW0UINyOytNg==
2024-04-25 07:07:18 UTC	661	IN	Data Raw: 32 38 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 35 37 35 35 39 38 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 Data Ascii: 28eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=125755985;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817
2024-04-25 07:07:18 UTC	593	IN	Data Raw: 32 34 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 35 37 35 35 39 38 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 24aevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=125755985;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2
2024-04-25 07:07:18 UTC	654	IN	Data Raw: 32 38 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 39 30 30 30 34 35 31 35 31 26 66 73 74 3d 31 37 31 34 30 32 38 38 33 38 31 36 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 287event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=900045151&fst=1714028838167&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&ur
2024-04-25 07:07:18 UTC	359	IN	Data Raw: 31 36 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 56 6f 38 4a 54 42 44 4b 7a 66 67 57 4b 55 77 55 44 52 6f 43 6e 47 37 6a 48 42 30 74 25 32 46 45 33 4e 5a 25 32 46 6c 4e 7a 57 50 78 6f 73 66 44 76 6d 4f 79 37 76 67 37 57 64 6c 72 67 56 78 62 41 57 31 52 51 6c 50 25 32 46 4e 6c 76 61 61 71 4b 69 50 68 4c 59 32 59 70 58 46 38 67 43 4c 74 25 32 46 53 52 53 4f 44 46 38 77 62 4a 5a 7a 25 32 42 69 49 32 4c 62 5a 78 66 42 61 4f 68 36 37 41 4b 70 69 73 4a 42 39 53 44 25 32 42 4e 4e 54 53 7a 4d 54 67 73 68 4d 6e 72 69 75 59 53 44 31 35 58 44 47 72 68 43 43 69 36 51 6f 37 69 6b 48 63 51 66 33 Data Ascii: 160event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=Vo8JTBDKzfgWKUwUDRoCnG7jHB0t%2FE3NZ%2FlNzWPxosfDvmOy7vg7WdlrgVxbAW1RQlP%2FNlvaaqKiPhLY2YpXF8gCLt%2FSRSODF8wbJZz%2BiI2LbZxfBaOh67AKpisJB9SD%2BNNTSzMTgshMnriuYSD15XDGrhCCi6Qo7ikHcQf3
2024-04-25 07:07:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49985	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:17 UTC	1600	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028836276 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:18 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 4382553432605147 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49990	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	777	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 88148 Connection: close Date: Thu, 25 Apr 2024 07:07:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 23 Oct 2023 14:49:35 GMT ETag: "f9e4d4a5820cb8d9d23104783d01b4bf" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b0d9885fa66f307673d2636510f36b60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: SH5rhUS2cWPZJ-amH3kjH3yljkxXNKl64_EZg8Iy3NfrTRnQTHVqLQ==
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 58 54 00 10 00 00 00 05 28 c8 00 01 57 ed 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 5a 1b 83 e5 40 1c d1 28 06 60 00 8b 5e 11 08 0a 8d df 58 8a f2 21 0b bb 10 00 01 36 02 24 03 bb 0c 04 20 05 8f 09 07 81 a4 10 5b 6b 53 b4 0e fe 5d 8c ed 7d d9 a1 28 79 20 c5 1a dc 61 66 11 51 3a 87 98 24 9b 00 62 a5 70 fd 4f ec 0e b6 64 98 60 d9 db 2a 37 fd fb 21 0d 1f 48 d5 da bd 53 5d 41 e6 fd 6d a2 80 9e db 36 55 f2 c0 ab ae e8 ff ff ff ff ff ff ff ff ff ff ff df 9f 2c c2 df fc d9 b9 cb de 2f b9 24 10 02 e1 ab 28 28 58 6d ab 15 15 b5 b6 7d 8f ab f3 08 2a a2 87 4f 25 2a 04 64 d4 da 84 80 76 84 20 46 01 63 74 13 e4 d0 63 8a 06 b3 40 87 39 16 2a 97 48 62 25 9c a8 56 d2 41 49 70 18 93 Data Ascii: wOF2XT(W?FFTMZ@(`^X!6$ [kS]}(y afQ:$bpOd`7!HS]Am6U,/$((Xm}O%dv Fctc@9Hb%VAIp
2024-04-25 07:07:18 UTC	453	IN	Data Raw: d5 a2 28 c4 f5 7d 73 33 21 66 35 39 bb 3c 7d 97 46 9f b6 0f 0e d7 b6 52 57 a7 c4 9c bd 81 fa 68 23 47 96 ea 0c 7e b9 55 7a c2 b2 16 dd 51 1d ae 37 99 35 3d 73 4e 8f d0 71 4b 07 3b 2d 75 f7 92 05 9e c6 fd 0d 6a a7 16 c5 ce 05 fa 84 1d 2c 61 75 a9 ae 36 33 93 b3 4b b1 40 d0 6b 94 fc a6 5d 8e 20 52 50 03 98 78 6d 30 0c ab a2 50 27 ed fd 41 86 dd 45 b4 61 4d 70 9d eb da 30 95 7c 76 d7 88 ae 07 55 2f d0 77 13 c6 ad 03 e2 e5 dd 11 ba 3b 0e 9a 7b bb 6f e4 c1 60 e6 21 a6 47 84 1e b3 f1 84 d0 d3 03 e4 bd 3d b7 f7 62 d0 f7 92 cc 2b 44 af 31 bd 49 fa bd dd 62 bd 4b c2 b4 4c 68 85 96 55 42 6b 38 de 11 7a 0f 69 1d c6 07 62 1f d9 f8 44 d3 37 70 3e 2f 99 cd 6d d1 6d 30 f0 05 0d 5f d1 f6 2d e7 fb 7d 3f a8 d8 01 6d bb 60 fc 89 b9 df 88 fa 83 9e bf 10 fd 43 de ff a4 ef 1e Data Ascii: (}s3!f59<}FRWh#G~UzQ75=sNqK;-uj,au63K@k] RPxm0P'AEaMp0\|vU/w;{o`!G=b+D1IbKLhUBk8zibD7p>/mm0_-}?m`C
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 22 dc c0 b8 99 ca 7b 6a 92 e0 0e 18 77 09 ee 01 36 c1 1f 10 3c c4 7e 44 f0 18 e2 09 f4 53 a2 67 ac 7b 87 c6 08 f6 e5 92 be 5a 54 ef 1b 48 df e2 2f 12 2c e5 7c 97 d7 67 af 92 cb bb b6 11 e1 3d 54 34 7a 1f a0 3f 2e 75 73 8b 4a 3f b3 a8 9b db 74 fb 05 d3 af 8c 6f 82 ef d6 fd 26 d8 51 6b 92 ef 0f ec fd 03 79 ff a4 bd 7f d1 db bf 31 f6 9f 65 b7 b3 eb 67 ff 0f a4 07 1c c0 70 a0 7f cf e2 e0 01 f6 0a 48 af 08 ff 4a 08 ae 0c e3 2a 00 2f 83 70 35 d8 57 4f fa 21 be d4 6a fa 9a 75 bf 07 60 31 64 ec a2 1b 7a d5 91 86 a0 58 09 a1 26 8c d0 54 de a2 70 41 2d 30 22 08 22 01 eb c1 a3 09 62 b0 6b 13 d4 81 a8 0b 5d 8f a8 3e eb aa 68 b4 85 8d 5b d2 f8 84 7a 45 48 93 f0 1b 12 24 e7 7c 95 54 76 1a b9 bc 7a 06 21 13 2a 3d d3 cb 86 ce 59 ea bd e5 55 ea b3 a8 8d 0a ba 0d 61 da 04 Data Ascii: "{jw6<~DSg{ZTH/,\|g=T4z?.usJ?to&Qky1egpHJ/p5WO!ju`1dzX&TpA-0""bk]>h[zEH$\|Tvz!=YUa
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 6c 67 31 f4 ba e4 c1 70 41 66 a8 ba 7b 51 57 0d 72 d6 17 47 30 ba c4 54 5b 0e bc 99 3e 40 89 b9 d2 89 2e d0 15 a0 b5 50 4a 4e d0 54 3e cc 13 64 0a ae 51 95 6b fb 58 00 b6 81 75 00 15 3b 0c 74 9f 9a f0 e6 32 26 d9 0d 5d 66 6d 04 23 49 70 8c 82 00 fe c6 a0 33 88 fa 91 2f ad 42 8f 16 a4 12 a1 b1 1c c8 1f a8 a2 b7 58 b1 31 59 73 2d 57 77 bb 87 a4 77 d8 02 e8 af 3b 7d 62 5c 68 fb 07 32 0a 95 cc 40 3c dc 9b 86 92 0b 5d f6 22 aa d6 ef 52 4e 8f 1b d9 1c 89 8d eb ee 26 d5 d7 25 80 95 2d 53 de 95 10 b1 1f 62 2b 07 ab 73 f5 99 33 38 c9 14 58 28 4c 90 55 e2 99 18 52 7b 94 be 82 dd 43 6b 3f 8b e7 d1 95 25 6c e9 45 18 9e 4f 77 33 ca 9b 56 17 05 21 05 9f 30 aa 5d 5b 68 74 9e fa c9 03 78 54 62 66 ce 60 a2 38 0a fb d3 f5 d9 03 a2 cd f0 2d bd 09 b6 c2 ae 79 b2 f0 1d 91 c7 Data Ascii: lg1pAf{QWrG0T[>@.PJNT>dQkXu;t2&]fm#Ip3/BX1Ys-Www;}b\h2@<]"RN&%-Sb+s38X(LUR{Ck?%lEOw3V!0][htxTbf`8-y
2024-04-25 07:07:18 UTC	2048	IN	Data Raw: 1a 49 94 91 29 07 f3 58 9b af 64 2d ca 2b 0f 86 61 fa 9c 8b 6d de 8d 41 c3 23 36 c4 30 a4 17 b8 f6 4d ea 8c 50 82 d0 42 2a 01 67 0b 67 39 74 0a 6f 20 b7 d6 86 26 cb 89 aa 65 d2 99 11 aa c6 f7 d2 92 65 18 5c b1 68 65 12 83 35 83 fc 1b 6d cf 1d b0 dc 4d 2b cc 38 87 73 66 bb 27 12 46 fb 6e 6c c2 0e 1a 91 93 2e e7 b6 6d 0c 66 30 8b 5d 89 68 2b d4 1b 59 39 9e 1e 9d 1b 4d b7 37 28 3b a8 80 b8 5b 53 f7 2c c4 08 7b 49 f9 37 07 20 64 b9 79 57 e8 74 e3 cb c7 ce 69 9c 7f b0 cb 0e 90 da 9e 79 b0 96 b9 28 c8 5b f3 cb 22 23 8b 36 e1 ee a7 fc 4f b3 42 7e 35 16 1d 43 26 7c f2 78 f7 a6 76 a7 a3 73 c9 f8 fc 91 2d f4 d0 f8 96 ed f4 b4 4d e7 89 a9 14 7d 99 87 fd 6e 93 40 62 d5 17 dd b1 c1 dc d4 79 48 87 7a 66 51 e8 42 98 62 6c 81 93 36 91 d5 d3 ed 45 c1 0b 67 47 47 38 61 ce Data Ascii: I)Xd-+amA#60MPB*gg9to &ee\he5mM+8sf'Fnl.mf0]h+Y9M7(;[S,{I7 dyWtiy(["#6OB~5C&\|xvs-M}n@byHzfQBbl6EgGG8a
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: e1 c1 69 2a 59 ae dd 59 90 4a e2 59 52 c9 a8 13 7c 99 fe 14 85 72 7a 8f 5a 9b 5a 02 cb 91 b7 dc 8f 8b 1b e6 d4 fb c9 78 14 c3 6d 58 ef 57 55 7e cf aa 3a 53 59 f5 7c 8d f6 79 fd fb 95 ac f7 f5 e0 b5 ea f6 3c 96 0c 18 9e a7 a3 59 82 ec 19 06 ca 92 c5 d3 05 8b 85 fc 2d ee 99 6a c1 30 e8 3a 7c 4f a0 43 59 35 3e 37 bb 97 66 c0 b9 34 f9 b3 58 43 b7 77 22 ad bf df 5b 94 a2 c3 45 82 d4 b9 71 a7 5e 36 fe 4f 02 4d 7e dc 5e 77 44 42 13 1d 15 a9 25 58 47 25 1c 30 76 c0 ae 01 70 46 01 b2 c7 04 56 8b bc 36 d0 c5 8f 9d 81 6d 22 fd f0 4b a5 9c 09 5c a1 f3 c6 fa 1a de 0f a9 1a 89 8a 9f 98 1e 3e 43 2f 39 48 78 8b 00 7a 14 cf 6b f1 5f 9e 77 4d 7f 75 65 6b 7f ee a5 a9 23 97 c2 a4 7b 94 4a 29 59 a0 9d e8 ba 22 c0 9e b5 5a 9c e3 ee 4b f3 5d 66 30 69 1f de 5f c9 4e 8c be 8f d8 Data Ascii: i*YYJYR\|rzZZxmXWU~:SY\|y<Y-j0:\|OCY5>7f4XCw"[Eq^6OM~^wDB%XG%0vpFV6m"K\>C/9Hxzk_wMuek#{J)Y"ZK]f0i_N
2024-04-25 07:07:18 UTC	1024	IN	Data Raw: 77 30 35 4e 04 a6 c6 6b 0e 31 51 06 ea be 6a 86 c2 04 9a 18 78 76 84 94 bc de 42 be 1b f1 69 bd 51 ec 68 6c 54 d1 94 55 0f ee 82 1b a6 68 c6 5c 3c 68 54 e2 45 56 c5 ad 05 6d ba 35 32 be df 79 f3 0c cf 8d dc a0 44 a6 e7 2e 55 08 4a be 37 e1 1a d5 40 d5 65 2b d2 3d 21 10 ef e8 a4 49 8e 1a ad 47 04 b3 b0 7b f6 ac 2d 21 77 a3 b9 f6 c1 2c 0f 36 18 2e b7 f1 f0 45 c3 22 5f de ff de b1 d2 17 c5 93 d7 56 c7 a0 6c 82 c1 18 5a 2b e7 fe a0 53 71 c4 64 bf 12 a7 ce 93 8c b9 65 01 6a 9d 27 25 cb 33 42 4c be 3b 46 95 3e 4d 6d 95 d4 97 3e ab 86 52 0e 61 c7 7c 25 5f 5c ed 44 27 28 80 bd ac 3d ea 92 2f b9 5d 19 a1 18 ea b8 07 9d 8e 0c f8 e0 ab 26 ca 87 52 44 f3 f0 f2 43 1f 09 7c a8 65 b1 c9 33 f4 68 cb c6 92 fa 45 c3 14 8e 85 a4 99 a9 b0 80 c5 a4 f4 ba 3e 31 71 80 d0 11 3d Data Ascii: w05Nk1QjxvBiQhlTUh\<hTEVm52yD.UJ7@e+=!IG{-!w,6.E"_VlZ+Sqdej'%3BL;F>Mm>Ra\|%_\D'(=/]&RDC\|e3hE>1q=
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 78 11 ce 05 c0 b3 ab 20 c6 42 fc 40 6b d5 86 6c a6 4d e2 14 2f ed 85 99 17 14 ab de 1e ab 98 68 72 c1 38 84 14 6e fd 78 61 75 ca 67 ea d8 9b 40 92 ce 23 fb 9e 2b 45 73 d9 47 62 10 5b 2a 32 b2 bc 11 2b c6 93 34 92 4e 93 51 f2 e3 a0 14 83 5f 74 09 1e 02 a9 02 d8 23 1d ba 0a c4 0e 94 cf b4 d8 65 d7 fb 8d 1e 3f 98 03 36 42 5e 43 a4 b1 c2 57 f6 63 51 cd 99 ae dd c9 aa 83 45 35 f6 96 5a c8 8d 47 48 9e e8 31 60 bc 0a 14 35 f5 92 62 5a 53 14 e6 ed 40 da 4e f8 98 42 3b 10 d1 6c 6a 69 ca 29 7e 76 0e b3 fe ca 5b d5 de fe a2 0d 10 1d 84 af 79 ae 83 68 27 7c df 8c 2a 6e 05 0b c8 04 d0 5e e7 09 0c 0d 2d 0b ec 39 0a b0 60 16 55 36 e6 b1 6e c5 27 cd 6d 44 25 e9 31 01 0b e0 82 7b 92 bd ad 29 25 0e 1d c0 5b 57 23 a6 e1 4b 3a e8 75 1d 42 3d e8 3a 3f 1c 3a 80 b8 f9 3f 00 09 Data Ascii: x B@klM/hr8nxaug@#+EsGb[2+4NQ_t#e?6B^CWcQE5ZGH1`5bZS@NB;lji)~v[yh'\|n^-9`U6n'mD%1{)%[W#K:uB=:?:?
2024-04-25 07:07:18 UTC	2703	IN	Data Raw: 67 ea 02 be f9 df 55 b1 e9 3f ea 4b 9d 2a 67 9d 3c 83 1e 78 b5 4d f4 d3 2a 4f 5a 39 f2 1e 91 28 47 4a be 8f a7 ec 3d 63 42 d0 91 84 b7 0d ea 65 2e 5d a5 12 5a 1f 77 ea 29 6f 3f dd 3e c5 62 c6 d1 33 f2 77 51 1e 5d 22 06 e1 de de c3 cd 60 66 70 33 9f 13 33 83 99 9b 79 43 cb 2c d5 60 6f dc c3 7e bd 97 8c 1d ea ef e8 a8 42 8a cf 85 9d 6b 6c c5 2f 46 59 f2 36 b2 b3 96 c7 48 ec 20 44 74 02 91 31 1d 46 70 80 a6 1d 64 21 51 91 af 16 31 35 62 5d e5 ef 72 3a db d4 12 c6 15 46 0b 12 1f be bc 19 45 0f 65 d3 20 4e 5c eb 2f 71 b8 e0 b5 96 ef f3 78 73 9a 0e a0 cf 08 bc 5f 26 b0 4e c9 50 c5 9b 1a 9d 53 b9 12 6c 5b 9a cc b0 8d b1 6e 6b d6 15 05 0c 14 7b c3 2c fe 51 d7 1b 53 57 15 02 6a 26 17 ee 1f fe f9 f4 43 37 94 e9 2f c8 00 06 be e1 fb 81 b5 41 5e 49 fb 89 f7 7f 23 b5 Data Ascii: gU?Kg<xMOZ9(GJ=cBe.]Zw)o?>b3wQ]"`fp33yC,`o~Bkl/FY6H Dt1Fpd!Q15b]r:FEe N\/qxs_&NPSl[nk{,QSWj&C7/A^I#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49992	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	792	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 514648 Connection: close Date: Thu, 25 Apr 2024 07:07:19 GMT Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT ETag: "f714ed5c817117aa20b0caa4bac76725" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b76498b6ac7fd194024e4e5c7f2fb4d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: TiMGE8iFUrsAycuc1b4ekoag-g6QG6lqSh4i_T2NkfJ97o0qMyzp1A==
2024-04-25 07:07:18 UTC	1540	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f 09 0f 25 0f 41 0f 5e 0f 7a 0f 96 0f b3 0f cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 Data Ascii: %:Ody'=Tj"9Qi*C\u&@Zt.Id%A^z&Ca~1Om&Ed#Cc'Ij4Vx&Il
2024-04-25 07:07:18 UTC	1024	IN	Data Raw: f3 69 ae 3d ee 55 e2 65 85 78 7d 2b 03 97 43 3d 9c fe 4d cf 3b f3 55 3c bb af 7d dc c9 0f a1 ce f1 ef 97 a3 d0 ef 3f ad a1 c4 f1 75 3f 97 e5 da 9b ad 66 f7 7a f0 4f b0 e8 1a 58 d3 b3 d7 9f 96 d4 79 8a eb 4f ad be 2c e8 ea 17 3d 0e 6c d6 11 45 9b 79 7b bb a8 45 bd 50 36 cb 0f a9 5a 5d cc f4 a2 b3 44 2c f1 b0 46 bb 03 30 e0 b9 19 f6 b6 75 2c b7 99 8c 44 83 62 3a 30 55 1c 75 8f ae 2f 1b 85 8f e5 31 f9 69 5c b1 7a 76 54 ff 00 63 be cc 7c ef 3d f3 f8 e7 0e 56 fb 17 b4 78 7d 27 be b7 e1 bd 76 fd 17 9e f0 b7 da f9 69 cf ce fa 17 4e 5d 2d ee 9e 77 17 1f ad 1a f4 b1 98 e9 f9 e8 46 3b 74 af b5 e7 a5 0c f7 5b cf 3d e9 1d 73 ca af 34 f1 20 7e d6 36 cb 67 95 39 16 25 f4 ac 47 55 48 d3 72 1f 51 2d 3f 0b bd 15 65 f3 cd 8d 14 96 65 56 cb 5b 8f 14 c4 5e 8f 53 43 a3 7f 33 Data Ascii: i=Uex}+C=M;U<}?u?fzOXyO,=lEy{EP6Z]D,F0u,Db:0Uu/1i\zvTc\|=Vx}'viN]-wF;t[=s4 ~6g9%GUHrQ-?eeV[^SC3
2024-04-25 07:07:18 UTC	8949	IN	Data Raw: 4f 6a 74 4f 41 d1 3d 29 dc 4f 61 b8 91 49 34 92 7d 1d 46 b6 52 ad 94 55 d4 d1 94 92 4d 44 8f 00 e0 2c cf 0d 0d 7b 14 f2 33 3b 5e 7d bd 02 be 48 b6 dc e6 62 42 6b 1c f9 e1 ad a6 67 5a f8 8c be 6f aa 5f c1 d7 91 ba 35 57 7e 87 1e cf 53 62 1c a4 24 d7 c8 38 76 0a 8e 65 58 f9 2a f5 b4 ff 00 53 d5 7e df 4d dd bf c4 b4 a2 53 fc f7 a2 9a ac c6 6f 9f f4 04 78 f4 42 74 fc 33 c7 bb f3 46 0e 66 8e 23 42 4e 7e a3 b7 1d ce 05 b9 d5 55 ae ca a4 e3 e4 aa f7 eb 93 75 71 d7 31 f4 29 a7 67 96 6d 19 41 5d 76 9b 2c 66 2d 76 b3 0d fe 51 fa 2e 32 ed 56 59 de 56 b9 fe 17 a8 67 ec 59 52 7b dc af 67 7b 1c da 25 c2 e8 ce de 77 b6 cd db 98 9d 8a e5 e3 f6 4e a2 a3 3a 10 16 3f ea f3 d5 bc a5 ed 8f 9d 7c dd 89 ae 11 bb 9d 08 4b d3 eb 62 75 18 2b 1c 5c b9 cc 4a cf 1c 26 a9 de e3 53 13 Data Ascii: OjtOA=)OaI4}FRUMD,{3;^}HbBkgZo_5W~Sb$8veX*S~MSoxBt3Ff#BN~Uuq1)gmA]v,f-vQ.2VYVgYR{g{%wN:?\|Kbu+\J&S
2024-04-25 07:07:18 UTC	12807	IN	Data Raw: 35 15 f2 7f 44 e6 ef 3d 63 fa 1c 59 1e fb e8 c7 4b 8a de 15 9c ad d6 0d 8e 5d 31 15 39 60 19 18 59 ed 66 dd 5c ab 0c b2 b7 45 b8 f7 91 bb 14 d7 ab 19 35 66 3c 33 22 56 dd 53 6c 13 7d 17 23 cd 75 d9 65 cd 17 2b df 4b 14 b9 cc be 91 fa be 0e 06 06 06 07 41 b0 c0 d0 60 6c 30 30 30 30 30 30 30 34 1b 0c 0c 0d 06 02 c2 68 d6 8c 60 ab 15 46 d8 18 59 55 49 5b a2 93 11 07 e8 dc b7 8b 77 13 4a 69 d9 6d f4 b8 2f 0c d7 35 fa 38 8d 00 a4 6e 65 c7 4b 26 a5 a5 15 86 89 16 24 61 c7 48 ec 91 21 86 49 3c 92 d1 d3 8d 99 a3 26 01 47 0d ac a4 db 02 c4 3f 31 ca a6 7a 99 3b 00 dc 3d 5c ae 50 c4 ec 62 37 3b 89 2f 7b 67 d3 a4 b4 f2 ba d2 58 a0 92 fd ae 57 3d 0f 92 ac 8f 7b 02 e6 97 31 6c b7 7c 7d e6 7c c6 c6 0f d0 bc fc cd 93 79 2d 54 46 ba 7a 7e 70 d3 c5 35 bf 14 a1 c6 ea ca fc Data Ascii: 5D=cYK]19`Yf\E5f<3"VSl}#ue+KA`l00000004h`FYUI[wJim/58neK&$aH!I<&G?1z;=\Pb7;/{gXW={1l\|}\|y-TFz~p5
2024-04-25 07:07:18 UTC	2553	IN	Data Raw: 38 72 a4 93 c8 a1 d7 96 5c 58 e5 db 8e a3 f8 b3 2e 3b 8a 3b 13 7c f5 65 a6 de d8 53 7d 21 bc 45 bd 9d 29 97 ba d5 72 66 19 bd 70 62 1e e3 f9 ee dc bf 9e e8 1f 6e 7b bb cc db 3b d0 d4 4f d4 79 eb 3d c8 f5 4d 2a a8 a4 3d 7e 3b 09 d2 42 ae 12 6e a9 02 e4 98 6a 74 a5 b1 ba c8 47 45 4c 4b 72 cb d0 cd fc fa d4 b9 fd 13 24 9c b7 3b 3a ca 99 76 a4 7d b6 92 8d 51 76 a8 28 39 80 32 54 6b b5 d5 45 d2 9e 3d 33 fe 2d 30 4e ac e9 96 d4 41 d4 94 ae f4 2b e3 17 a4 8d b7 f2 65 6b 39 3d 62 eb 8f 56 99 27 ab c0 67 72 ba b0 6f 4b 8c 3b 16 cf 36 98 d9 9d 21 95 92 44 f3 55 92 86 7d 0d 0a 35 7a 35 a3 98 be 57 e7 1a ad 7b f2 dc 09 a3 cd 61 88 7b 16 04 22 3d f1 81 dc 08 5b 2d 18 62 76 58 38 ea 94 0a 43 29 cc c6 bd 14 37 45 6f 0c 34 03 31 ea 07 1b 47 cf 8f d5 fb b8 18 18 18 1d 06 Data Ascii: 8r\X.;;\|eS}!E)rfpbn{;Oy=M*=~;BnjtGELKr$;:v}Qv(92TkE=3-0NA+ek9=bV'groK;6!DU}5z5W{a{"=[-bvX8C)7Eo41G
2024-04-25 07:07:18 UTC	8459	IN	Data Raw: 30 e2 a8 3a c8 8b 27 d1 8b c0 b1 53 b0 35 74 1b 9a 3c af 29 9f 89 8e 89 72 2b e3 4f 63 49 78 b4 46 bb 18 28 9b 07 c2 f7 cc df 4b e1 cb 57 4e d5 8e c8 ca af 41 d4 65 25 65 64 65 ca 6e 9b aa 8a b3 d5 e7 1b cf 78 ab 2e 3a ad 73 e7 bd bb 7a 47 9a 6b 48 90 c2 b8 f0 ea 09 62 ac 1a 9a 54 62 1c f0 3b f3 5d 0f f5 79 a8 fd 3c 4e 22 e6 9f 3f 6c 5f bf 92 62 8a 87 a6 b5 2c ea bf 46 84 cd 37 a3 46 65 0c f0 d5 de ef 6e 62 90 bd 9a dd 27 ee 07 9f 1d 1d fc d5 54 6b d2 3b 97 b1 ac e7 91 99 7e e4 bc 3b 6e e2 cc f3 e7 18 15 86 64 56 91 a5 c4 80 ed 48 ce 71 76 21 ef 9c 4b 58 e7 45 ce fa dc dd fb d7 75 6a 8f 1d 54 28 c6 b5 9e 87 7e 7a db 34 e6 3d 7e 85 dc ec 99 9f 38 2b 5a cd 6a 97 6c b0 2d 59 93 3b 45 9a ad 88 fa b2 d9 54 b1 3e 63 1b 2b 5b 35 f6 da e2 a2 02 2b 72 67 88 83 b7 Data Ascii: 0:'S5t<)r+OcIxF(KWNAe%edenx.:szGkHbTb;]y<N"?l_b,F7Fenb'Tk;~;ndVHqv!KXEujT(~z4=~8+Zjl-Y;ET>c+[5+rg
2024-04-25 07:07:18 UTC	8949	IN	Data Raw: ba 9f 99 0d 2b 49 19 2f 94 31 eb 19 07 56 7b 4d d4 b1 03 f3 51 0a 46 40 f5 66 89 56 cf 28 da 60 85 81 ca d8 06 83 d5 c9 a8 14 2a 3a 48 d2 21 77 80 de c0 6d 61 a5 b9 71 b5 bd 92 34 12 27 27 24 c1 e7 f8 ab 4b 49 6d 10 bf 18 39 5a 13 9a b3 0a a2 44 2c 35 91 d5 c3 62 c7 b0 b8 21 b7 46 7d 2c c3 9d 1d 8e 2a ad 72 f3 d4 ea 6d 68 76 3b 11 4f 77 7a 0f 47 65 a8 f9 cf 97 95 fc 3f 9f 35 54 89 00 16 c4 75 d9 58 e3 b2 9a 96 8f 3b 56 39 b0 5a e5 c2 e5 2c bd 85 d7 44 6d 30 e2 c7 5c 83 c6 aa d8 7c f2 a8 6b d3 54 a5 55 72 b7 9f d5 5c 7d bd b0 77 a9 d9 22 61 e8 c7 7d 5a 6e 57 99 dc fa 4c f2 5d 90 99 d0 b5 12 2c 7c e2 a1 ce b5 c5 56 57 4d 3b 14 42 fb 50 07 95 bc c9 63 79 15 3f a2 6c 87 5a ff 00 9c 4f a4 fa 5c 0c 0c 0c 0e 83 61 81 81 81 a0 c0 d8 68 30 36 18 18 1a 0d 86 83 61 Data Ascii: +I/1V{MQF@fV(`:H!wmaq4''$KIm9ZD,5b!F},rmhv;OwzGe?5TuX;V9Z,Dm0\\|kTUr\}w"a}ZnWL],\|VWM;BPcy?lZO\ah06a
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: df b2 bc 98 e6 63 b0 e6 63 89 87 65 16 cb 5c ed cd 4b aa 40 d3 9d d5 0a 65 46 f4 ca 34 ba 05 aa cb d7 8d 49 65 e7 97 53 aa 8b d7 55 d7 6b 65 4a 2c 06 22 9f fa 0e 43 76 fa 1c 35 58 f3 cb a5 65 19 56 ab 8d 56 ed bb e9 89 fa 18 7a 20 f2 b0 52 2b 56 c0 10 ab 53 84 b5 bf b9 08 ab 95 3a 0e d0 35 5c 6e 20 19 43 b5 41 ca 83 d5 01 bb 0e a2 75 b2 71 25 0b 54 09 12 99 70 e7 c2 1b 58 71 65 0a da f5 8f e8 54 05 bb 26 e5 39 17 a1 56 5b 3b a5 f2 bd ea 56 af 4b 9e 5d d7 96 0c 59 59 96 a8 c3 56 6a 2b 11 94 49 5e a2 35 07 53 02 44 09 0a 65 49 13 8b a1 33 65 01 da bc 59 48 4e a0 d9 5f 31 22 12 0b 4e a6 06 03 55 49 ea 2d 4f b2 b2 2c 9c 41 84 e4 18 c0 84 a9 d8 ca 2b 2d f5 42 95 5a cb e2 7a 04 2e 5f 76 cd f9 1e 9c b3 f3 ce 8b 53 a4 a8 36 a3 2f ab 09 56 b0 17 58 d1 de a8 9a e4 Data Ascii: cce\K@eF4IeSUkeJ,"Cv5XeVVz R+VS:5\n CAuq%TpXqeT&9V[;VK]YYVj+I^5SDeI3eYHN_1"NUI-O,A+-BZz._vS6/VX
2024-04-25 07:07:18 UTC	1024	IN	Data Raw: e8 ff 00 68 9b dc 3b 3b 14 87 08 bb 2d 29 c7 d1 de cc 52 f4 55 33 90 9c 3a 3f d8 7b ff 00 b1 47 d0 a3 ea 51 45 14 14 fe f2 7d b4 df da ff 00 94 a8 df dc 87 b0 8c 02 64 c2 27 b8 16 16 26 30 e5 14 e4 51 47 d1 c8 a9 06 56 b3 21 be 87 d2 48 83 d4 b4 cb 53 1e e8 8e f3 60 fd 84 06 66 c8 ca b1 96 c8 3a 18 fd a7 1f 59 1d 48 52 7b 50 1f b6 54 63 a6 70 80 ca ed 28 b4 ab 16 3e 35 23 cb dc f6 fd 40 a8 a6 ec 40 89 04 d5 fb 17 fb d8 fb 2b f4 86 58 43 dd 6e bf c6 82 a0 70 ec f5 9d ff 00 20 7b 41 44 74 7c 9d 8b 6b 37 c4 ed 94 32 5c 97 59 b6 8e 2a d5 b9 7d 59 9b cb 79 a4 96 e2 d7 58 89 ca be b6 4b 26 8f 14 2c 88 f1 e9 83 75 3a e1 61 d4 6a 47 59 b6 ad c7 59 af dc d6 b0 fa f3 12 5b f5 2b f1 e5 9a fb 9f 87 2c 91 87 ae 61 aa 35 a5 d1 f2 d3 08 7e c2 3b 2d a8 ec 83 f5 bb b4 84 Data Ascii: h;;-)RU3:?{GQE}d'&0QGV!HS`f:YHR{PTcp(>5#@@+XCnp {ADt\|k72\Y*}YyXK&,u:ajGYY[+,a5~;-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49978	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028836192 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:18 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49991	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	744	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-25 07:07:18 UTC	570	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 656132 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:04:40 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding Content-Range: bytes 0-656131/656132 X-Cache: Hit from cloudfront Via: 1.1 be19c47e504fffea4cece5471967bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: PADyZVXkTMjTWOoWLwGsEqGS9ixW6xSLgNlaQjbQq5QRwougWcISEQ== Age: 173
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 09 f1 92 6d 64 61 74 00 00 02 f5 06 05 ff ff f1 dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 30 36 35 20 61 65 30 33 64 39 32 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 32 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 31 3a 30 78 31 31 31 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypmp42mp42iso2avc1mp41freemdatEH, #x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: cc 06 bf fa ee d2 2f ef b0 ec 76 c0 f4 8f c8 37 e4 ad 5a 27 ba aa 43 27 a5 2a b1 fb d6 6c c7 73 88 62 a4 c3 f0 c3 37 38 86 73 ae 1e 1a f6 7a 95 f5 65 b1 a3 e3 8e 01 f1 e6 8a e5 33 02 86 dd eb ba d1 5b 9e 42 d7 8f 05 8a 63 1a 07 24 fb 04 e4 2f 2b 83 84 49 54 6c 66 cf 37 15 9d 85 6c 1f 66 0b ee 58 84 f3 f9 1e 71 0b bc 1e 3d 02 e2 7d e4 bb 8f 27 46 af ee aa b2 ec c8 94 dd 0f d6 a9 b3 3b cc 7e f6 c7 19 99 98 e0 22 1b d6 fc 8f 0d 53 df fc 83 df c5 bd d9 3f 8e ad d5 de ff 07 66 cf b4 24 62 e4 0d 6a 29 ee 38 36 cc 78 3c 3c bb b6 4d a2 cd 4e 3a be e7 28 03 a7 24 d3 42 10 ef 95 65 f2 c5 bd 9d e2 cc d0 5b 40 88 e6 c8 14 34 57 d3 1b dc a1 f7 b5 42 82 b9 7d 84 cf 04 b0 8a 3d 61 a3 2b d8 c1 21 d2 87 cb 80 97 cc 83 58 6b c2 b0 d2 fc 44 18 01 4b 9c fc 52 c1 37 e3 0d 4a Data Ascii: /v7Z'C'*lsb78sze3[Bc$/+ITlf7lfXq=}'F;~"S?f$bj)86x<<MN:($Be[@4WB}=a+!XkDKR7J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49993	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028835450 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:18 GMT x-amzn-RequestId: bf6cbeb7-cfd1-4baa-8437-9f69eb512646 X-Cache: Miss from cloudfront Via: 1.1 e05f9b3de38fbfe53441974080c25cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: Z1cbQ8AlfEuXoHyS9yYegIYhSy-8kOZDPupp2ucuqiI-aA4Wg2el8Q==
2024-04-25 07:07:18 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49994	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	912	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1487684618.1714028836&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:18 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49995	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	675	OUT	GET /rp.gif?ts=1714028836136&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:18 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49996	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1076	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:18 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10888951064602688181"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"10888951064602688181","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"10888951064602688181","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"10888951064602688181","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"10888951064602688181","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49997	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	671	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1714028836243&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028836130&coo=false&eid=1714028835353-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49998	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1323	OUT	GET /pagead/1p-user-list/778938880/?random=657751026&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqGh7ZuBegIG-vogVEkKupRerq7Lb9lHR3oaoMmqZniriHggeI&random=2546010966 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50000	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1631	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028836753&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:18 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZVSS9sNXE1TnhhSzVaT0RvQW83UXB1NWxxK2ZHV1o2MFFEZ3c1b3VNR0EvaWk4UjRXcDdPekwvUlFSNG81aE85VlRaNldJMjAvSVJtcTZhK3NHVjVkRUJvdVYrU1h0RmlsckNrcS9rUHJHaz0mSjZVYUU3czU0dTQ2OW5jaFVxWXZ4c2gyOW9rPQ=="; Expires=Fri, 25 Apr 2025 07:07:18 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4339052413538934 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50001	173.194.219.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:18 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50002	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1175	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50004	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028836273&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1412758538994246 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50006	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1398	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028836276 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:18 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1353011841814639 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50003	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	708	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1714028836243&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028836130&coo=false&eid=1714028835353-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:18 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:18 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:18 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50007	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	2145	OUT	GET /_set_cookie?val=JYLGLwUk487OH1UaGbsEs1exOU9rGzONdpcWBB8tn2ijYFZC%2F6w6DWY%2BsAjJ6dqwGQ0eVet2AEp1uU5sGiO%2B8YAolRoUBf%2F8Vhccibxd6FYYrWQo6h8zgWNqN4zzEIDQTH8%2FueUz34XWEtLZ4dOJsKEluKnIiuKHhekAx7iM3MXiGguRubYO87MqwV5XsfsxNQY%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:18 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:18 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 1af918bb74ca14562ee109e74044387e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: ZXFlKdFLrvX_qo9b8p9areppWkyqG9jl202HAE0_X6SFz3lYD2NxDg==
2024-04-25 07:07:18 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50005	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028836272&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZra1YvZGdLdVc2eUhMTWQ5aVFGamVqM1FpUGp1SnFkUUpKUXMwNjZFc0FhMjFnd21MeHZDSHJFV2htejR2Q2lCWklFSXZDQjg1TjFRVk8yYlJuV0Fxd2VNeTlQb0xzTElycmp1QytURkN2dz0mMmkyK3dKYTV2VDJjbisrRGZpalp3aURNeG5zPQ=="
2024-04-25 07:07:18 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1311276226541050 Date: Thu, 25 Apr 2024 07:07:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:18 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50009	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	801	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=622592-656131 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-25 07:07:18 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 33540 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 25 Apr 2024 07:04:40 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0fe01300cc0fd23ed9b49b075bd8fc3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 0xqJ4FpAIW-2lPrQb5bpu2CqGD8bh27K1AxVM5Cy1qPDdTS5bXqiow== Age: 173 Content-Range: bytes 622592-656131/656132
2024-04-25 07:07:18 UTC	15832	IN	Data Raw: 8c eb 00 2a 6f c1 95 2b 14 0b 88 5e 5d 2a 1a b9 63 54 15 2a bd c5 6c 80 a1 46 03 9b f8 15 d1 8a 87 3e a0 76 6f 3b 1c 3c cf 7c b0 e5 f8 8f fa 48 1c 77 ca 01 ca 96 b8 87 15 57 bc 2e cb 1d 34 c7 01 42 6a 56 99 0f 9b fa a7 46 d2 e0 c7 14 90 24 bd 1f 08 d0 16 97 bd 6c 6c ca 48 d3 79 ce 62 f5 69 5e e3 4d dd 6a c0 84 df 1e 4e d3 11 e2 d6 38 ac e4 ef be bd ef 0d 61 45 fd 73 45 65 bb 54 c2 c7 1d 45 ce 6d 62 12 25 d4 42 2e 69 ab e5 00 ad 05 d0 31 78 45 17 3f 05 a3 11 78 3e 1c 09 19 9c 9a c8 44 38 55 0e 1d 01 58 8d 45 fd 21 ed 71 d7 82 4b 5f 9d 5c cf 62 9c 03 1e 84 a3 e1 a1 a7 55 f8 8c 38 1d 5b f4 b2 e8 88 c3 f5 25 6f 0b cd 1c 65 de 23 38 59 f2 61 37 07 93 2e e8 99 b5 67 f6 a4 37 4f 81 a9 af 59 d5 4b 1b 89 69 ad 81 59 37 b9 8f 8b a2 8b 0e 38 23 30 61 87 a2 c5 6a 21 Data Ascii: o+^]cT*lF>vo;<\|HwW.4BjVF$llHybi^MjN8aEsEeTEmb%B.i1xE?x>D8UXE!qK_\bU8[%oe#8Ya7.g7OYKiY78#0aj!
2024-04-25 07:07:18 UTC	16384	IN	Data Raw: a9 ee 17 c0 59 68 e4 0e fc 9e e9 4b 27 bd 12 df 3d 66 f7 ca 1a a3 5f 81 71 31 13 a8 b0 65 b3 2a 39 c2 aa 76 a8 1f ae eb 68 6b 37 0e 6f bf 51 a7 90 0f 2a c7 e0 1b 4c 2b 37 80 10 7f b7 b5 ff 96 5e d4 92 e5 ad e0 a8 7d 48 16 4f 49 e5 bd 3c 49 4f c9 bb 44 8a 18 03 0d 6c 9b 38 54 77 a3 e2 78 d2 cb d5 74 85 e8 07 8e 10 14 b7 fb ad a5 0d a8 f2 ea 8e 41 30 4f 0e 2f 45 f8 08 c5 b7 db 98 1d bd b6 47 19 b7 52 d5 6f 19 d3 ba 07 24 67 b0 8c d1 2e 73 f8 1d 81 a6 30 56 d6 d4 00 cf 18 c4 41 68 fd f8 c2 42 db 60 1a fa 56 11 dc 5e 0c 31 a7 99 57 c8 70 59 16 83 cb 1c 0a a8 56 6b da 4d c6 86 2d a9 f6 1b ba 5a af a6 2b b7 1d e2 d1 8e f9 18 cf 1d 48 9d f2 aa 8f 1d 00 13 65 2e 76 64 12 e2 9d b5 e4 e8 85 7b ce c5 f8 c0 72 11 33 9a fc 1f b9 58 3d 25 22 d2 86 11 e7 ee 57 b5 78 d6 Data Ascii: YhK'=f_q1e9vhk7oQL+7^}HOI<IODl8TwxtA0O/EGRo$g.s0VAhB`V^1WpYVkM-Z+He.vd{r3X=%"Wx
2024-04-25 07:07:18 UTC	1324	IN	Data Raw: 7b 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 6b 6d 70 34 61 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 10 00 00 00 00 bb 80 00 00 00 00 00 33 65 73 64 73 00 00 00 00 03 80 80 80 22 00 02 00 04 80 80 80 14 40 15 00 00 00 00 00 08 ca 00 00 08 ca 05 80 80 80 02 11 90 06 80 80 80 01 02 00 00 00 14 62 74 72 74 00 00 00 00 00 00 08 ca 00 00 08 ca 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 00 ee 00 00 04 00 00 00 01 b4 73 74 73 63 00 00 00 00 00 00 00 23 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 04 00 00 00 02 00 00 00 01 00 00 00 0b 00 00 00 01 00 00 00 01 00 00 00 0c 00 00 00 02 00 00 00 01 00 00 00 13 00 00 00 01 00 00 00 01 00 00 00 14 00 00 00 02 00 00 00 Data Ascii: {stsdkmp4a3esds"@btrtsttsstsc#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49999	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	818	OUT	GET /track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a
2024-04-25 07:07:18 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:18 GMT Content-Type: text/html Content-Length: 938 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSgDMgsIwNvnt6LA8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Fri, 25 Apr 2025 07:07:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:18 UTC	938	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50012	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1089	OUT	GET /pagead/1p-user-list/778938880/?random=657751026&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqGh7ZuBegIG-vogVEkKupRerq7Lb9lHR3oaoMmqZniriHggeI&random=2546010966 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50013	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	1429	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028836753&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVSS9sNXE1TnhhSzVaT0RvQW83UXB1NWxxK2ZHV1o2MFFEZ3c1b3VNR0EvaWk4UjRXcDdPekwvUlFSNG81aE85VlRaNldJMjAvSVJtcTZhK3NHVjVkRUJvdVYrU1h0RmlsckNrcS9rUHJHaz0mSjZVYUU3czU0dTQ2OW5jaFVxWXZ4c2gyOW9rPQ=="
2024-04-25 07:07:19 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:19 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZVdk9FZXFnRitvUmN3d2Z5c3Y1aGdJcDFPaFd6Z2U0anRPQ0puUzF0Szg3SHhkQkxYTGx0THhMcHJqNzRoZGNQZElUT3Q3SzlaY3czcjU5OG1YUUtNbUh3RDZSMC9FNlB0NmYyS1FtME1oaz0mMDRWRU9vWG9sbU1EQytwV1pXYm9DQWl2aUdZPQ=="; Expires=Fri, 25 Apr 2025 07:07:19 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1671383767787955 Date: Thu, 25 Apr 2024 07:07:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50011	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:18 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028836192 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 927 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:18 UTC	927	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 31 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"1","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-25 07:07:19 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:19 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:19 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:19 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50008	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028827467\|1\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:19 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:19 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50014	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	801	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=622592-656131 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-25 07:07:19 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 33540 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 25 Apr 2024 07:04:40 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a080982e88a54647df03225aa56b97c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: q7HaVvsWGlY6s3vciQ57cyIFo5qenJiXBDRrytpSOL5b7MJBNZHDNQ== Age: 174 Content-Range: bytes 622592-656131/656132
2024-04-25 07:07:19 UTC	15832	IN	Data Raw: 8c eb 00 2a 6f c1 95 2b 14 0b 88 5e 5d 2a 1a b9 63 54 15 2a bd c5 6c 80 a1 46 03 9b f8 15 d1 8a 87 3e a0 76 6f 3b 1c 3c cf 7c b0 e5 f8 8f fa 48 1c 77 ca 01 ca 96 b8 87 15 57 bc 2e cb 1d 34 c7 01 42 6a 56 99 0f 9b fa a7 46 d2 e0 c7 14 90 24 bd 1f 08 d0 16 97 bd 6c 6c ca 48 d3 79 ce 62 f5 69 5e e3 4d dd 6a c0 84 df 1e 4e d3 11 e2 d6 38 ac e4 ef be bd ef 0d 61 45 fd 73 45 65 bb 54 c2 c7 1d 45 ce 6d 62 12 25 d4 42 2e 69 ab e5 00 ad 05 d0 31 78 45 17 3f 05 a3 11 78 3e 1c 09 19 9c 9a c8 44 38 55 0e 1d 01 58 8d 45 fd 21 ed 71 d7 82 4b 5f 9d 5c cf 62 9c 03 1e 84 a3 e1 a1 a7 55 f8 8c 38 1d 5b f4 b2 e8 88 c3 f5 25 6f 0b cd 1c 65 de 23 38 59 f2 61 37 07 93 2e e8 99 b5 67 f6 a4 37 4f 81 a9 af 59 d5 4b 1b 89 69 ad 81 59 37 b9 8f 8b a2 8b 0e 38 23 30 61 87 a2 c5 6a 21 Data Ascii: o+^]cT*lF>vo;<\|HwW.4BjVF$llHybi^MjN8aEsEeTEmb%B.i1xE?x>D8UXE!qK_\bU8[%oe#8Ya7.g7OYKiY78#0aj!
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: a9 ee 17 c0 59 68 e4 0e fc 9e e9 4b 27 bd 12 df 3d 66 f7 ca 1a a3 5f 81 71 31 13 a8 b0 65 b3 2a 39 c2 aa 76 a8 1f ae eb 68 6b 37 0e 6f bf 51 a7 90 0f 2a c7 e0 1b 4c 2b 37 80 10 7f b7 b5 ff 96 5e d4 92 e5 ad e0 a8 7d 48 16 4f 49 e5 bd 3c 49 4f c9 bb 44 8a 18 03 0d 6c 9b 38 54 77 a3 e2 78 d2 cb d5 74 85 e8 07 8e 10 14 b7 fb ad a5 0d a8 f2 ea 8e 41 30 4f 0e 2f 45 f8 08 c5 b7 db 98 1d bd b6 47 19 b7 52 d5 6f 19 d3 ba 07 24 67 b0 8c d1 2e 73 f8 1d 81 a6 30 56 d6 d4 00 cf 18 c4 41 68 fd f8 c2 42 db 60 1a fa 56 11 dc 5e 0c 31 a7 99 57 c8 70 59 16 83 cb 1c 0a a8 56 6b da 4d c6 86 2d a9 f6 1b ba 5a af a6 2b b7 1d e2 d1 8e f9 18 cf 1d 48 9d f2 aa 8f 1d 00 13 65 2e 76 64 12 e2 9d b5 e4 e8 85 7b ce c5 f8 c0 72 11 33 9a fc 1f b9 58 3d 25 22 d2 86 11 e7 ee 57 b5 78 d6 Data Ascii: YhK'=f_q1e9vhk7oQL+7^}HOI<IODl8TwxtA0O/EGRo$g.s0VAhB`V^1WpYVkM-Z+He.vd{r3X=%"Wx
2024-04-25 07:07:19 UTC	1324	IN	Data Raw: 7b 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 6b 6d 70 34 61 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 10 00 00 00 00 bb 80 00 00 00 00 00 33 65 73 64 73 00 00 00 00 03 80 80 80 22 00 02 00 04 80 80 80 14 40 15 00 00 00 00 00 08 ca 00 00 08 ca 05 80 80 80 02 11 90 06 80 80 80 01 02 00 00 00 14 62 74 72 74 00 00 00 00 00 00 08 ca 00 00 08 ca 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 00 ee 00 00 04 00 00 00 01 b4 73 74 73 63 00 00 00 00 00 00 00 23 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 04 00 00 00 02 00 00 00 01 00 00 00 0b 00 00 00 01 00 00 00 01 00 00 00 0c 00 00 00 02 00 00 00 01 00 00 00 13 00 00 00 01 00 00 00 01 00 00 00 14 00 00 00 02 00 00 00 Data Ascii: {stsdkmp4a3esds"@btrtsttsstsc#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50015	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	796	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:19 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 36189 Connection: close Date: Thu, 25 Apr 2024 07:07:20 GMT Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT ETag: "998a47703d2bd3c00db0bc1be6e30a11" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5a439504ade3c1726d22c85807033e14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: MpkVj1Ir61DMpHlOFWLxTNaj8AWVw8RtFT6X-zsW6isG_eJrF39erg==
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 8d 24 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 f0 df 05 00 00 00 00 00 00 00 00 80 71 57 05 ff 47 0e 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4$IDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S)qWG
2024-04-25 07:07:19 UTC	628	IN	Data Raw: b8 32 84 a5 20 b5 6b 23 22 fa 39 50 44 d4 60 19 99 72 73 73 6d dc 45 c8 04 2c 2b 2b 2b c3 be 21 af 6e dd ba b8 c9 c6 8d 4b 28 d0 5e 11 ed 0d 96 99 99 99 88 48 f4 10 11 11 11 11 11 85 2b 3b 77 f6 71 a0 0a 02 14 fa b2 70 e5 88 d9 c1 bb 5f 46 54 87 4e c5 0b 99 b8 a7 59 33 44 8d 7a 87 a4 02 d1 88 6c 57 d4 e0 3d 41 e9 0d fc e5 72 38 f2 48 1f 12 1e 1a 22 3a a5 45 d4 60 29 22 12 b1 8a 8a 8a 42 2a 30 55 58 58 e8 7a a3 a6 8d b4 08 20 fb 9c a1 17 6c 13 71 a1 0d d6 5e ec 08 fe b9 22 22 22 22 22 22 22 22 e2 ad c7 2e 3e b8 70 a5 59 19 80 96 b3 b4 34 0b 57 06 3f 74 2a de 29 02 72 72 72 5c 1a 3d dc 80 40 a9 54 e0 2d a2 54 22 81 3b de 1a 10 cd 2a 2a 90 5f 49 01 fe 73 2e 4c 18 ed 53 b8 32 cc 34 4c 42 01 fd 4a 44 44 01 4b 11 51 83 a5 ee 5f ef 47 fe ba 1f f8 8c 89 89 a1 51 Data Ascii: 2 k#"9PD`rssmE,+++!nK(^H+;wqp_FTNY3DzlW=Ar8H":E`)"B0UXXz lq^"""""""".>pY4W?t)rrr\=@T-T";**_Is.LS24LBJDDKQ_GQ
2024-04-25 07:07:19 UTC	6396	IN	Data Raw: b8 c9 02 b1 79 79 79 1c 04 51 78 d2 f6 88 ea fd a2 4d 9b 36 d6 2c 6b fb 44 f5 3a 94 f3 de 8e c3 d8 d8 d8 80 ee 17 22 22 22 22 22 22 22 22 a9 c0 f8 07 9a 55 5f a8 69 af 1f 66 66 96 e0 70 fe ec ac 6a ab d6 40 3e bb ad 02 f2 f7 11 de 1c 58 0f ce 3e 1b a7 b5 32 94 e5 13 1c 23 07 c0 a0 41 3e 02 47 d6 ac 81 93 4e c2 15 7d fb c2 3b d3 09 98 1c 0e 50 99 b3 7e e3 d4 75 16 b0 74 e3 7d a5 9a 34 90 d5 21 9a 59 41 47 15 81 20 c9 88 d3 b9 82 dc 71 04 fc e9 4f 3e 44 0d 96 e1 6e 27 01 24 22 0a 58 8a 88 b4 6a d5 8a a3 8e 3a ca c2 51 b6 ec cf 9e 5c b1 64 41 ab 50 b3 6e dd 3a dc 66 f7 e5 8b 2f be e8 b4 f2 79 cc f5 70 68 6e 6e ae 42 c6 b2 8f 51 37 b5 e8 d2 a5 8b 1d 77 d5 fb 45 f3 e6 cd 9d bf 77 5b 52 52 12 81 26 22 22 22 22 22 22 22 b2 12 b8 e1 c1 6d 8c 7f 00 27 64 99 9a 9a Data Ascii: yyyQxM6,kD:""""""""U_iffpj@>X>2#A>GN};P~ut}4!YAG qO>Dn'$"Xj:Q\dAPn:f/yphnnBQ7wEw[RR&"""""""m'd
2024-04-25 07:07:19 UTC	9482	IN	Data Raw: e2 b8 ee ba eb 88 56 1b 36 6c f0 bc c5 b2 5d bb 76 78 a9 6f df be 3c f4 d0 43 16 50 8e aa 06 4b 6b ec bc f2 ca 2b 11 11 11 11 11 11 11 11 91 bd eb dc 71 ff e1 ca 0f 0b 89 3a 22 eb 77 35 5a 9e f1 40 a6 d3 84 f7 d3 4f 7e c2 51 55 55 15 3f fc e0 e7 a9 a7 fc 9c 3b d4 cf c5 e3 e1 f9 9f a0 80 e0 28 01 c6 af 81 c1 0f 64 32 7d ba 9f 50 64 63 e2 ad c5 d4 82 50 9f 96 21 61 2c 0b 18 3e 13 ae 19 ea 67 c5 0a 7f c8 16 a6 bc f5 96 9f cb 1f c8 64 03 07 42 8a 81 67 56 c0 c5 f7 6f 60 fe 7c 3f a1 cc f6 df 47 1f f5 73 da f0 4d dc 3f 03 e6 01 55 04 4e 26 70 d9 e8 7c 16 2d f2 07 e8 39 07 4f 7d 56 0e e7 8d d9 e9 04 6c 4b 4b 4b 09 45 cb 97 fb 79 f0 41 3f a3 e6 22 22 0a 58 8a 48 28 e9 de bd 7b c8 06 f4 b6 6c d9 42 6e 6e 2e 6e 6b d4 a8 11 77 df 7d f7 3e c6 1d 4b 7a 7a 3a 6e ea d9 Data Ascii: V6l]vxo<CPKk+q:"w5Z@O~QUU?;(d2}PdcP!a,>gdBgVo`\|?GsM?UN&p\|-9O}VlKKKEyA?""XH({lBnn.nkw}>Kzz:n
2024-04-25 07:07:19 UTC	3299	IN	Data Raw: 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 ab 27 a5 34 1d 43 01 00 00 00 00 00 00 00 00 00 28 de 0e 0a 2c 2f c5 50 00 00 00 00 00 00 00 00 00 00 f2 db 41 81 65 7a f1 64 52 bb dd be 14 43 03 00 00 Data Ascii: K%K%@` X,K%@` X,'4C(,/PAezdRC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50016	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	941	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1985253857;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:19 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50017	108.156.154.126	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	755	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSgDMgsIwNvnt6LA8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-25 07:07:19 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 10:51:37 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 254481445d8132fe5e910798564f6684.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: mBuAnEKQmd5P8_twh4oR5T4nf9HPBFyuU2YqOsqFxG-MXq4vTZCeTg== Age: 72943
2024-04-25 07:07:19 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50018	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	799	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:19 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 37028 Connection: close Date: Thu, 25 Apr 2024 07:07:20 GMT Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT ETag: "62615becf8831f197e70175a43c41000" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 de2c3d5b490f5c11f73379ab363c4046.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: YO2gio4owDNo8bnZ-zcBjJfTX_2HvhUdy-7NAoA4FXQ0XzVa337jbw==
2024-04-25 07:07:19 UTC	1542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 90 6b 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 06 29 c6 9d ff 2e 00 00 00 00 00 00 00 00 00 50 c5 ff 41 8e ff 03 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4kIDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S).PA
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 00 00 00 00 00 40 ce f9 98 6e 2b 58 0e 2b 7b b7 88 85 7e 71 c9 da 0d 1d 07 9e 06 9d 60 d9 6e b7 3f 3d d6 2c 00 00 00 00 00 00 00 00 00 60 b1 15 fc c9 3e 86 3a 56 1f 7d af 5d 57 31 24 39 1a d7 bb 2c fd df eb dc 73 cf fd 78 ce f9 bc 58 b3 00 00 00 00 00 00 00 00 00 80 6e 2b d8 6d 06 0b 93 2b 17 57 b3 da 31 7c 69 c0 95 0f 3b ec b0 5d a9 23 d6 2c 00 00 00 00 00 00 00 00 00 20 75 74 9b c1 7f fe e7 7f fe 85 88 58 a8 4d b2 2c a9 62 88 72 2c af 54 de 5c 39 be 9c 9c 9c dc 15 6b 1e 00 00 00 00 00 00 00 00 00 b0 d8 0c a6 9e ab a0 d6 2c a6 d1 3f 22 bc 77 64 99 0a 2b 77 d7 51 47 1d b5 a9 d5 6a 5d 1e 6b 1e 00 00 00 00 00 00 00 00 00 d0 6d 06 8f 3c f2 c8 cd 1f 75 84 a5 de b0 d0 2a 8e 4c 60 99 ba ab ff 77 ca b1 e5 69 a7 9d 76 63 44 4c c6 38 00 00 00 00 00 00 00 00 00 00 Data Ascii: @n+X+{~q`n?=,`>:V}]W1$9,sxXn+m+W1\|i;]#, utXM,br,T\9k,?"wd+wQGj]km<u*L`wivcDL8
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: d6 ad 5b 13 c6 8f 6b 3c b8 88 88 88 88 88 48 9b 46 86 2b 8d b2 32 3c 95 c8 77 cd 98 11 1a e1 4a bb a4 32 e8 c1 25 19 d2 82 a8 66 a6 0a b5 25 3a 54 84 7e db 5d a4 b0 30 22 5c 06 02 7f 1a 08 6f fe a9 39 33 b3 7d 9c 7f be 8f 5e bd 7c 21 14 ae 94 4e 66 75 ea 44 34 4b 8a 21 30 44 44 01 4b 11 11 13 ae 9c 36 6d 1a e3 c7 8f 47 44 42 92 d5 a6 47 63 cf 9e 3d 6e 1b 5c 30 e5 e7 e7 5b 6d d0 34 0d 96 a1 ea b9 e7 9e 63 c9 92 25 34 95 48 7d 7d bd 27 01 dd d8 d8 58 d3 62 a9 f1 e0 22 22 22 22 22 22 a1 12 ae bc 80 46 87 08 d7 6f c2 53 19 bd f9 da ec d9 0e d3 37 45 62 b8 52 4a b0 27 25 85 26 90 2e 5d 88 12 1a 0d d9 40 f0 75 ee 4c 54 6b d6 2c 16 39 b8 31 c0 f3 17 c1 d3 d9 3e ce 3a cb 47 97 90 7d 91 92 ce 48 40 f3 be 22 a2 80 a5 88 88 69 c6 fb ed 6f 7f cb 95 57 5e 49 42 42 02 Data Ascii: [k<HF+2<wJ2%f%:T~]0"\o93}^\|!NfuD4K!0DDK6mGDBGc=n\0[m4c%4H}}'Xb""""""FoS7EbRJ'%&.]@uLTk,91>:G}H@"ioW^IBB
2024-04-25 07:07:19 UTC	2718	IN	Data Raw: c0 ec ec ec fd f1 b2 94 d3 16 76 75 60 99 72 4e 6e 65 ba 6f df be 5f 36 1a 8d b3 d1 75 00 00 00 00 00 00 00 00 00 80 7a bd 7e 6e ff fe fd 7f 88 56 a9 78 7f d8 a9 81 65 fb bb cf 5b 2e 62 66 66 a6 72 f5 ea d5 9f 46 d7 01 00 00 00 00 00 00 00 00 00 ae 5d bb f6 93 ac 15 cc d9 86 9d 8a 37 8a 9d 39 c1 32 e5 14 a4 0b 49 37 46 97 c3 c3 c3 ff a8 d7 eb cf 46 d7 00 00 00 00 00 00 00 00 00 00 6a b5 da 73 59 23 b8 40 57 98 0a 6e d2 ce a4 4e 98 60 99 6e 3d bc 5c 34 c4 ac 9f 3f 7f fe 07 d1 35 00 00 00 00 00 00 00 00 00 80 0b 17 2e 7c 3f 6b 04 6f 12 4e a6 db 6d 14 57 2c b0 cc 29 45 53 e4 2b b4 0e 7c b1 0b 3a 7c f8 f0 c1 6a b5 7a 2c 00 00 00 00 00 00 00 00 00 80 8e 97 35 81 59 1b 18 99 e2 4d 61 db bd 62 4e bf b8 7a 2b c2 73 7e a8 dc 6f bc c8 85 3c fd f4 d3 5f 6a 34 1a 63 Data Ascii: vu`rNneo_6uz~nVxe[.bffrF]792I7FFjsY#@WnN`n=\4?5.\|?koNmW,)ES+\|:\|jz,5YMabNz+s~o<_j4c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50019	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	426	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:19 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 514648 Connection: close Date: Thu, 25 Apr 2024 07:07:19 GMT Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT ETag: "f714ed5c817117aa20b0caa4bac76725" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 dc58b273ef46a25eae399cc2a3f90854.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: qhdUlv6MKYscgPa_zKL7rU8kMP7xsP6e3UjnT-Zs33Z8cvfVUcu_vg== Age: 1
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: bc 06 d1 ed 27 9b ec 50 3e bc 26 5d 35 b3 5f 2b a2 02 88 4d 7a 83 94 d1 1c b4 68 81 66 0e c8 e1 5b 2f 0f 2f af 77 dd 6b 77 0b d2 2b 79 fe f9 cd dc 5a d9 ea fc 95 47 6b 13 ee a0 a5 d9 dc 15 39 c5 03 98 26 e8 59 d3 90 70 24 bc 73 dc 94 f2 0c ab d7 2d d2 a6 2d 46 6b 91 64 30 ae da c5 73 12 8b 1d 38 75 b5 f6 42 de 49 a4 bf 4c f1 38 18 18 18 1d 06 06 c3 41 b0 d0 60 60 6c 30 30 30 30 30 34 18 1b 0d 06 c1 fd 97 4a d5 6e 22 b0 90 02 d0 55 d5 77 35 e8 55 ef 7f 59 cf 65 57 ac fd 8a a5 ab 9e 12 db 19 6d c0 21 26 b2 ea 72 cd 2e ee 8f 35 13 9f d1 6f 8e 98 ae 3a b0 f1 23 2c 8f 12 66 24 da ba 9a 32 b5 6c ab 53 44 bb 33 21 69 c4 7b 3d 0e de 57 3d 67 35 28 1d 0b 8a ee d4 c0 d3 a1 c9 8e a7 16 54 4d bd cd 45 f3 e7 49 d4 a9 d4 cc 84 64 d1 b5 cd 9a d1 15 ce 23 1d 25 56 b7 9c Data Ascii: 'P>&]5_+Mzhf[//wkw+yZGk9&Yp$s--Fkd0s8uBIL8A``l000004Jn"Uw5UYeWm!&r.5o:#,f$2lSD3!i{=W=g5(TMEId#%V
2024-04-25 07:07:19 UTC	11977	IN	Data Raw: d8 5b 4e 20 da 0c 55 61 27 5e 09 3f 53 3e 39 ee 8d a7 2a df 37 d2 8a d5 b7 b6 64 59 ab 5a 86 ee 36 a7 18 9a d9 8d 65 4f 8a aa 49 86 ca 74 af 65 de d6 90 ca 30 f0 c3 40 3c 48 ea c7 56 58 fa 71 90 29 2b 64 12 78 90 f9 db e3 fe 86 5e 25 0d 28 79 64 55 4d 90 7a a8 0a 11 32 e6 36 ae ae 96 3a b3 a2 4d fb 4f c6 81 62 0f 2b ad d7 62 ed 76 3a 68 79 13 57 3e b7 ea a9 1e 1d d4 8e e9 aa c5 34 75 ea ad 53 59 52 57 53 89 06 55 b1 62 b7 9a 10 1a 12 e6 38 26 79 c5 6f 9e de 93 8b dc 30 84 f6 42 ad 18 57 b3 67 1e 6c 54 cc 92 76 1b 6b f7 a0 ea 27 b4 1b 56 3c b3 21 53 64 f7 9b 4a 5a ad 6e bf 7c e9 8e 25 27 cc e6 ac a2 dd 1e 75 a5 c9 ea 17 eb e7 cf 74 2a a3 4d 41 36 9a a2 d3 fa 39 34 7f b9 c0 4d 64 1a 01 a0 37 04 b5 c9 aa cf 79 ea e0 6e bc b8 73 23 ff 00 9f 47 08 ce 74 56 44 Data Ascii: [N Ua'^?S>97dYZ6eOIte0@<HVXq)+dx^%(ydUMz26:MOb+bv:hyW>4uSYRWSUb8&yo0BWglTvk'V<!SdJZn\|%'utMA694Md7yns#GtVD
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 8c 33 ee 68 15 35 b1 ec 9a 38 bd 57 4e cc ac 2b ea 41 65 7d f0 74 c5 bd ec 12 2a 59 0e f4 b1 33 ee a5 35 45 cc d5 df 7f 8b f8 eb 0b e3 2a 8e bb 35 bc 39 ba 26 4f 32 c8 ba 49 1f 87 31 7f 7e 27 4f 27 35 2b e8 da a8 ef d5 dd ff 00 c4 c3 1e f6 f5 cb 9e 7a 62 9e fb 38 b3 44 9b c4 5b 29 9a d7 87 53 5f 98 5e 8a b2 56 89 5a 24 55 93 50 c5 2c 91 54 d3 b2 56 87 f4 83 cf bd cb a5 1f 0c 1d 63 62 82 a9 f2 75 f4 fe c6 06 06 06 07 41 b0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 d0 6c 30 30 30 34 1b 07 5e 4d d9 76 47 12 4a 53 ab 42 d5 12 25 f7 97 5e f5 e7 0b 16 d4 fd 58 4c d9 5a bd 56 9b 49 55 4b 0a e4 e9 85 bf 89 c1 26 a3 4b 16 be 90 b4 f5 d6 1b 88 3c 65 1c 0c 40 34 49 88 61 d2 4c 2b 2a 57 24 09 5a a5 d8 3a b7 b2 7a 3c 09 b7 95 73 2f 57 25 3d 99 7d 1d 7a 86 12 9b 5e 19 d9 44 98 c7 Data Ascii: 3h58WN+Ae}tY35E59&O2I1~'O'5+zb8D[)S_^VZ$UP,TVcbuAl0004^MvGJSB%^XLZVIUK&K<e@4IaL+*W$Z:z<s/W%=}z^D
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 3f 59 22 ce b7 10 ac de 97 1b 08 10 25 ce 46 83 96 ed 57 af 91 1a 74 05 ac fb f2 24 65 91 86 16 24 c2 49 c8 95 5a dd 52 97 6c ea a9 26 ca c6 83 24 0e 63 25 5e 59 74 3b 33 5f 1f ec cc 93 6d 46 81 69 4e a0 4c 04 66 78 f7 54 37 f4 f3 85 82 42 cb a6 4d c5 b5 71 2c 5b 59 56 a2 d0 94 aa 3d ee 41 17 ad d7 9e f5 ba ec 5a aa d3 75 bb 7a da a2 fd f8 93 dd 4d 43 1d 49 e4 87 8e 4b 1b b7 20 64 ab e7 47 46 05 33 52 ec 93 15 c0 72 38 71 a6 95 70 81 52 0b 3c aa d1 26 22 56 33 42 0e a8 47 d3 0f 0e 7c a3 e8 13 ee b1 d1 96 57 32 34 27 eb 6a 62 fa 6c 1d 4a 84 47 52 8b ef 89 c5 66 73 4b 27 4a 12 77 66 c9 8d d8 a3 58 86 19 04 65 33 35 19 9a c4 55 16 57 b8 5c 83 a8 32 03 31 12 47 17 41 5b a9 2f a1 35 65 60 db 4e 34 08 ac 1b c7 13 18 07 aa 65 5a 5c e5 5a 0c 5d 6a 45 b5 26 35 44 Data Ascii: ?Y"%FWt$e$IZRl&$c%^Yt;3_mFiNLfxT7BMq,[YV=AZuzMCIK dGF3Rr8qpR<&"V3BG\|W24'jblJGRfsK'JwfXe35UW\21GA[/5e`N4eZ\Z]jE&5D
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 3d 00 40 7f a2 0a 1e b9 59 44 fa 65 12 8b 93 9e 02 2e 05 17 81 fd 4b 8a 7a 83 a0 93 25 3c 22 3b 5a 9c 87 bb fd 98 ac 7b 57 f7 09 de ce f6 07 a9 f6 47 d0 a3 ea 51 45 14 14 e1 56 8f 29 d1 04 e1 84 c7 60 46 ee 99 52 3f ab 1f 92 ee ab 0b 09 c1 39 3b d0 fa 94 f5 af fb 71 e8 47 a1 58 52 42 d7 a9 aa 16 a8 6c be 03 5e f6 50 98 cb 0c 5f 6c c3 eb 21 15 2f b5 03 fb 65 34 60 58 f6 8f d9 15 7c fd 78 4e 08 b3 b5 07 28 e5 c2 63 c3 c4 f5 bb 54 bf 64 27 30 bb aa 9d b9 a6 d0 a8 9c 38 94 e7 65 4a ec 02 d2 03 9c a7 a6 6d 4d bc ae 48 bd 75 af 92 a6 8b b2 2d 83 3e 43 ab d6 77 0d 54 71 c3 5e 36 61 4d 1e 19 1d a6 d0 bb b7 f2 03 bb a0 af 63 6d 26 9f 84 08 89 8c 34 e7 09 f9 72 d8 44 c8 04 9c da 4c 58 d9 4f 79 b6 2a f4 ab 6a 5a 4f d3 f3 ae d5 4a dc 57 13 01 2a 4f a1 72 96 3a 77 51 Data Ascii: =@YDe.Kz%<";Z{WGQEV)`FR?9;qGXRBl^P_l!/e4`X\|xN(cTd'08eJmMHu->CwTq^6aMcm&4rDLXOyjZOJWOr:wQ
2024-04-25 07:07:19 UTC	4542	IN	Data Raw: f3 1c 5e c1 02 9a 53 5b 90 e2 02 07 f4 61 61 4d fd e6 94 c2 b2 81 40 a1 d1 67 f5 d8 7e 06 72 5a a3 39 58 45 80 a3 03 4a 35 9a 8d 54 6a 95 f8 ce 5f 8e e5 f0 b9 7c 4e 5d a5 75 44 a0 53 7b 70 5d 94 5c b2 82 25 01 e8 4a f9 fb 54 9b 02 4b ac 67 fa 97 26 9f 42 87 a3 bd 8a 01 48 dc 3d ce ec 92 39 3b e4 85 c1 c5 c8 1c 2e f2 84 b8 46 5e 8e ea b0 b0 89 59 f4 21 14 5e 42 f9 0a 13 10 bf 20 27 ec 40 2f d8 07 a6 db 21 47 69 cf 20 f4 2e ca 09 bd 16 51 8d 16 64 1a ed 09 d5 da 9d 5c b9 47 4f af e3 35 08 5a 17 68 58 4e 28 a9 56 b7 d9 1f 40 50 f5 3e 85 39 12 b2 8a 72 97 dd ad e9 4b a2 77 49 0f b6 3a 93 da 9d 1b 5e d7 d8 68 0f ec 22 af df 03 43 96 15 9e 8d 36 59 18 87 6a 65 3a d9 9d 23 b6 1e d1 9e 85 07 f6 97 dd 13 ba f5 a0 d3 04 ee 4e 94 94 d6 10 b3 81 f3 61 77 97 16 8e 8e Data Ascii: ^S[aaM@g~rZ9XEJ5Tj_\|N]uDS{p]\%JTKg&BH=9;.F^Y!^B '@/!Gi .Qd\GO5ZhXN(V@P>9rKwI:^h"C6Yje:#Naw
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 46 1e f7 8c 00 bf de b4 a1 81 f6 b2 d3 28 4e 98 04 fb 41 58 93 bc 55 aa 5e c3 0b d8 9d f2 85 5e cc 9f 2c af 0c 0d 9c 48 2d 45 de bb 0b 03 9a 00 8f fb 45 39 56 3f 46 3a 18 f2 a4 94 31 36 c8 62 16 c3 89 0b b8 15 ee a4 e8 20 d9 87 3d 58 67 d6 5a a4 62 8d 58 04 36 6a c5 ca 8d df 84 1b 73 4c 9d 42 67 08 75 60 08 18 d6 a9 47 72 79 00 88 b0 bb 88 03 af e9 39 59 2d 43 aa ca cf a5 86 17 07 c6 9c cc 06 c4 ad 76 65 b6 5b 19 75 cf 91 32 42 99 2f 72 74 ad 2a 33 d8 7b da e1 11 c9 88 80 0b f2 9c 70 9a 7a e5 3d a1 e3 61 23 ab 08 ef 09 1d 76 4c b6 13 dc b5 9f 53 ec f5 10 0e e9 a9 5e 86 da ad 82 d7 c1 84 02 61 2c 5f 33 8a b6 10 08 a6 a7 20 13 0f ee 40 72 65 1f 48 43 d9 a7 af e6 37 0d 9d ae 5f 20 5d e1 77 85 9c a2 dc a7 40 d2 a5 80 81 57 ab 43 b0 84 81 07 65 06 02 43 fa 4d Data Ascii: F(NAXU^^,H-EE9V?F:16b =XgZbX6jsLBgu`Gry9Y-Cve[u2B/rt*3{pz=a#vLS^a,_3 @reHC7_ ]w@WCeCM
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 21 a9 d6 99 22 b0 ce c5 5a 20 e5 3b 8b 53 1a 41 71 40 a7 1f 4c a0 8a 25 14 3d 25 76 01 44 a0 81 c2 ac e0 e6 ed 24 11 b2 59 25 9d d6 2b 3a 69 37 0f f8 a3 6e b5 f6 1d 16 b2 28 93 ed 43 12 ad 47 fc 8b a3 a7 df 15 aa 8e ae e0 f5 dc 17 70 27 b4 85 84 1c a3 6f 72 d6 4c 62 72 c2 28 94 51 59 4d 29 dd 50 3f d4 cb ee 53 0f 43 ec e4 d4 fe a5 ce 40 26 8c 22 ac fd b5 7e c8 fd 87 ae cb d8 bb e9 f7 4d 77 a1 fd 05 14 e4 e5 17 b1 59 41 13 85 24 9d c9 91 17 a6 b0 34 7e 90 82 61 cf a0 56 51 47 d2 44 06 4d 66 7c 60 b9 12 9c 51 51 47 de 47 44 d4 e5 94 5d 84 4a 79 42 cf 62 96 c9 0b e4 24 92 a4 71 4f c9 47 0d 4e 76 54 85 ae 42 20 99 08 29 ed 0d 4e 72 c9 0b e6 00 3e 70 be 5e e4 d6 14 61 c0 0f 6c 69 f2 09 14 a5 ab 8e 00 4b 7d 30 b0 9a d4 02 1d 53 9a 98 30 9a 80 41 05 9f 5c ac ac Data Ascii: !"Z ;SAq@L%=%vD$Y%+:i7n(CGp'orLbr(QYM)P?SC@&"~MwYA$4~aVQGDMf\|`QQGGD]JyBb$qOGNvTB )Nr>p^aliK}0S0A\
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: bd 58 a0 88 c7 a5 23 f4 84 ff 00 6a 3f 6d d3 f4 b5 c1 54 7e 4e 7d 25 98 b1 f1 5a 05 15 da 09 73 bb 55 90 25 8e 27 e5 90 bb e9 9d d8 35 dd f5 db 6f 56 91 23 65 67 d2 c8 5c 53 08 22 69 a2 7b 58 c6 c8 0d 30 c4 c9 30 1e e2 54 68 74 4e c1 41 80 17 3b 02 b1 c1 74 88 84 d7 27 85 11 ca 09 cc 0e 42 16 97 4f 1f c8 0c 2d ed 35 8c 4f ae 72 9e 3e a0 30 82 7b 32 23 77 70 03 ae 55 a3 d3 bb ab 3a a0 dc 22 a7 76 5e d6 e5 43 49 8d 76 b2 0f 98 d6 ab f1 1d a3 87 c3 40 87 cb 72 66 be 5b c7 e8 81 dd ae ae e3 26 ba 86 a7 f1 4c 72 77 ad a4 66 6a cc 76 1c 0a 96 70 c5 2c 8e 95 52 83 0f d8 b3 0f 85 9d ce b0 de c3 18 c9 f8 32 9e cc 06 c4 8c 19 81 b2 96 11 29 05 cf 2e 4e 7e 43 47 5a 03 f7 05 c0 d5 3c 9f 21 33 61 17 17 2c fa 12 a2 1f 55 8f ed 90 b0 88 44 a2 11 40 22 56 51 2a 38 cb d5 Data Ascii: X#j?mT~N}%ZsU%'5oV#eg\S"i{X00ThtNA;t'BO-5Or>0{2#wpU:"v^CIv@rf[&Lrwfjvp,R2).N~CGZ<!3a,UD@"VQ*8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50021	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	800	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=32768-622591 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-25 07:07:19 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 589824 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 25 Apr 2024 07:04:40 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 538cf444f0c6dac6454a3baf06f65b9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: WeeyUc2mZPv8BCmCkZrPmX5YuQCd_akr2littd__KE-I1S7OYu1U7g== Age: 174 Content-Range: bytes 32768-622591/656132
2024-04-25 07:07:19 UTC	15832	IN	Data Raw: fc 82 79 c6 03 42 4d d1 35 17 32 cb ad 64 94 3c 98 32 89 62 ae 23 56 ba c1 be 61 d0 ba 2c 7d bf 1f ae 0b 85 a3 70 e5 12 f0 39 1f 9b 8c 6d 85 69 84 f8 6e a3 ed 35 19 f9 c9 9d 2c 1a 20 f1 3b 8f d9 e6 e8 01 a8 f7 3b 85 48 18 09 d2 8a a0 97 27 93 9a 1c cf d3 52 c3 1a 3e 3d 4d 59 c2 72 0b 11 92 c8 4c 55 f1 b0 82 26 48 6a 43 66 2f 97 21 9b ac 2d 43 40 0d 62 ab d8 80 d8 7f 46 89 a3 a1 75 df 1e 3b a0 1f d0 df 6e 6b 4b bb 92 c2 33 83 01 d8 c0 fb 50 d2 e7 9d 3c 37 4c 2f 7d 01 2c e7 e4 5e 68 97 9d 2b 0a 6d 89 c9 bd 7b d0 87 dd 97 3f 5d d0 a9 c7 bb 81 c2 75 b9 0f cf ff cb dd f2 76 bb 55 56 a0 a3 d6 df 82 98 a5 ac 2f 71 85 6d c9 1b 52 c7 49 ee c8 d9 6d d7 8c 2f cc 9e 05 ec 50 7a 2f f8 cf 7d 47 19 39 20 b6 d4 03 00 9b 6a 31 19 77 08 ba 1e fc 26 a3 92 ff 9b 42 9e a7 28 Data Ascii: yBM52d<2b#Va,}p9min5, ;;H'R>=MYrLU&HjCf/!-C@bFu;nkK3P<7L/},^h+m{?]uvUV/qmRIm/Pz/}G9 j1w&B(
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: e0 91 cf fc 3d 63 94 58 0d d4 ca 16 00 8a ba f9 f1 1a 70 6e 78 1a 0b 98 9e 96 80 2a 61 14 71 fa 03 27 33 5f 07 3f 49 54 25 c5 61 b1 63 a6 0f ab 71 e5 3d 41 21 c1 96 45 25 5b f7 42 0a 0e 14 30 6b 4f d5 64 63 6a df 30 66 4c 5d 56 8f 70 6e d2 42 15 57 8f 41 7b c2 42 a3 22 a3 c6 00 b2 1c 2a e3 3d 67 0c 6d e3 05 84 50 db 15 e4 b5 90 ea 88 92 0e 46 50 d9 11 0d a2 f4 1b fe 08 bf fc 71 a7 f0 a2 1e ea a7 f0 85 b7 05 69 f5 89 da d2 ab 4e 27 4a 77 29 e7 de da c5 95 51 bf fa b0 9c b1 7d ac f1 42 b9 c6 70 df 9c ea 06 25 64 da 8e b8 f9 32 3c 52 b7 f6 40 f6 11 c5 f2 8b 28 84 ef f1 0d 97 7f 11 b4 01 40 2a 57 44 83 e6 cb 10 e5 1d 6f 9b 4c 9d d9 4f 8a 48 93 49 76 07 50 04 32 8f 33 0e 8e 5a f5 40 35 44 42 8e bb 32 0e e8 1c 84 be 4d 1f de 40 18 c7 da d6 59 73 1e e3 35 91 47 Data Ascii: =cXpnxaq'3_?IT%acq=A!E%[B0kOdcj0fL]VpnBWA{B"=gmPFPqiN'Jw)Q}Bp%d2<R@(@*WDoLOHIvP23Z@5DB2M@Ys5G
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: b2 f1 8a b3 e9 03 20 f4 ae f9 db 5a d2 0e 34 f7 44 fa 55 f3 29 1f 5a 21 c4 88 aa 84 8f a5 f0 ad 34 de 82 ab bf 8b 23 d0 42 30 03 0c 36 05 3b 60 b6 45 38 92 b0 05 30 20 01 f1 2e 5d 21 89 06 03 45 4d bc ec d7 11 b2 af 09 c0 8d 03 a0 c5 f2 e3 3b d1 7c 8e ce 6c 9e 9b ba 06 38 64 1d 8e b6 26 42 f3 b1 8f e6 b0 ac 85 d2 52 3c 71 3f 40 92 cc 80 21 28 64 1d 8f b4 4e 42 9b a4 04 7b 4b 66 18 11 16 69 a9 da ea 74 64 12 3f a0 ac 05 71 15 ea 3b ad 4e cc 31 3a b1 06 af 14 95 6c 47 46 13 a5 45 2c ae 36 65 e5 68 81 6d ee c0 86 b9 b6 56 87 4b 91 34 1e c4 2b 27 4d 82 d6 df 29 d7 9d 61 5e f4 43 b9 81 3b 0f 78 d4 82 75 cb 20 a3 6d 3f a2 27 90 82 e1 90 36 66 3a 07 bf 64 73 42 d1 c3 81 fa 3f 19 a7 0d 88 f6 f6 b2 a0 89 06 ad 0f 5d ac 3b cc 46 17 79 81 d2 48 7b 2f 8d a7 7d dd 6f Data Ascii: Z4DU)Z!4#B06;`E80 .]!EM;\|l8d&BR<q?@!(dNB{Kfitd?q;N1:lGFE,6ehmVK4+'M)a^C;xu m?'6f:dsB?];FyH{/}o
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: b4 92 08 ee e4 c5 9b ed 8d 82 be 1c 32 32 ad be 93 a6 0f bc ba 4b e2 04 e9 c9 11 72 e1 47 79 32 b8 de e8 92 cb 8a 8c a7 e4 45 d8 c1 7c 93 7b 43 b9 e2 02 4b 9f a1 96 af 44 fa 8b 42 b2 03 d8 8d d2 16 68 8d 2c bd be 74 62 42 86 90 cd 0c e4 d3 78 3c 51 d7 12 c4 8c 06 6a 6e 54 7f f6 30 04 e0 2e 60 8c 61 20 d3 6a ba ac 2d ab 3b a1 f6 ee 09 bc 7d 38 10 a6 85 1c 47 e7 3a d4 39 ab 87 a0 84 33 78 c4 89 7e f4 cb ac 97 99 5c 2d 5f 88 70 cd 8f 71 8c 08 b2 53 d1 4c f8 86 2b 09 65 7a 56 ad 40 38 4c e1 b7 03 77 4a 25 d4 e0 9d 0e 97 d4 0f 99 d5 7d a1 7a 7c 6a 25 38 5d 5a bd 87 73 10 be 37 d9 33 a1 5f 3a 1b 99 4e 16 f1 94 18 19 8b ef 75 10 ea ce e7 b8 8d ad 0c c2 4b 47 da bc fd f8 06 a6 bc 6f 95 ac 8f 8a 4d 4c 94 2d 28 3c 2d 92 23 28 e8 f4 ce fb e8 1c db fc 43 5f f2 88 75 Data Ascii: 22KrGy2E\|{CKDBh,tbBx<QjnT0.`a j-;}8G:93x~\-_pqSL+ezV@8LwJ%}z\|j%8]Zs73_:NuKGoML-(<-#(C_u
2024-04-25 07:07:19 UTC	16384	IN	Data Raw: 86 10 57 2d e2 15 7c f3 d8 16 6a 25 8a f4 23 9f 10 38 0f 8d 82 87 28 40 ca 3b 5c 82 41 b8 a8 74 6f 82 2e 27 cc 5b 49 95 17 34 0c 4b ea ee 5a 62 2c 1a 5f bb e2 74 a1 79 91 36 55 46 c2 35 9f ff 4a b1 0c 8a 6f d7 77 a6 78 57 0c 6e f5 84 a0 b8 df 20 80 61 b2 ee a6 43 5e 4b cb a8 d9 2f 07 31 19 7f a9 96 d5 44 69 5e e1 92 b4 f0 48 1c 43 1a b1 1e 64 64 aa cd 95 e3 fa 20 8e cf 8f f2 47 cc 6a ed 07 c8 99 ce d1 27 12 d0 9a c2 70 00 00 32 3e da a2 8f ac 51 aa 70 ad cc 91 0a 2c e7 10 e1 c8 43 3d c3 3d ca 9c bb 98 6b f5 e5 86 4c 88 14 30 44 95 19 7a 49 6f 93 ee ba 24 84 02 b0 31 18 81 5a 5f 13 60 c7 60 4a 23 fc 40 9b 91 40 67 fc f1 ad 33 7e 4c 9b 00 c6 af 45 ac fb d8 cf 83 1f 94 33 1f 6c 30 50 e1 cd 7b b0 08 11 9c 16 35 de 68 08 b8 6f c0 20 88 c8 ec 39 ce f0 9e 3c eb Data Ascii: W-\|j%#8(@;\Ato.'[I4KZb,_ty6UF5JowxWn aC^K/1Di^HCdd Gj'p2>Qp,C==kL0DzIo$1Z_``J#@@g3~LE3l0P{5ho 9<
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 9e 7e 60 60 b5 66 c6 d2 fd 86 07 6d b1 5b 40 f5 5c 08 dd 40 07 ea bb b7 78 66 a9 33 d5 3c 66 c2 31 09 3f a8 df 05 68 09 51 b1 61 6d 94 f6 d9 aa 63 14 76 a9 60 a9 ed c2 e7 eb 88 28 ee 61 5e 8d 0c 87 77 d9 f3 c3 cc 3e bf ec f2 67 51 89 ed ca 51 72 4b c4 a4 6a e3 bb c7 c6 19 4b d1 0c a6 d8 51 03 a5 5c b7 93 a0 4a a7 35 b3 5e 8a d0 40 a1 75 44 5a f8 e8 95 84 97 40 ce d2 8f 49 b3 55 3c b6 fd 98 24 2f 69 f6 67 12 99 b8 46 ec 6b 63 c7 51 25 4f b6 ec 75 02 f5 1a eb 61 ba ab 31 0d 0c 97 09 44 7d be 8f 34 ba c8 cf aa 95 31 1b 42 95 b4 c2 0a 07 0b 26 a4 56 1c 37 b6 6b b7 0d 67 31 ce dc 61 22 81 07 68 4e 64 f8 3c 0c 12 ae 5a 99 f4 4e 52 5b 56 cd a1 62 05 7c 97 36 ed 42 e0 63 02 c4 d7 7d 7b d5 93 e8 e4 45 ed 0a c4 f6 a3 50 a1 71 6e 2c 86 1d ef 8d 1e b6 0c 68 3d c3 95 Data Ascii: ~``fm[@\@xf3<f1?hQamcv`(a^w>gQQrKjKQ\J5^@uDZ@IU<$/igFkcQ%Oua1D}41B&V7kg1a"hNd<ZNR[Vb\|6Bc}{EPqn,h=
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: bc 0c cd 9c ca 63 0f cb 8d 59 44 06 1c f0 6e 7f c6 28 bb 28 5e 36 51 09 b9 4c 30 22 cb 2b 4e 70 2a 7f 6f 8e cb e9 24 d6 f5 82 ad fd ac 18 b2 5d b9 aa 89 04 93 91 57 ce ac 7f 71 0c f5 90 d1 ce af ee e5 a0 dd f5 77 c2 fe 86 ad 7e ca 16 5f 91 07 da e4 a9 d4 fc 99 40 f3 10 45 1d b2 42 23 a8 89 81 77 5f af ca 6b eb 98 42 ec 79 0f 1d c3 3a 11 37 ba 85 7b 9f d7 7f 10 82 49 ac 46 eb b8 60 e8 ec 94 4f 1d d6 ee 6a 1e b4 d8 6f 7e da 7c 30 5e be 1c 0f 42 35 02 b9 c6 da d0 1c 71 8e 51 60 8b b5 5c 66 a7 e5 0a c3 62 11 9a 3e 62 e4 0f fe cb 2f 9e 18 e4 7e 94 3d c0 8a a2 39 cc 86 21 aa 40 fc cf 5c 60 76 4a 46 ef 20 aa b3 6f e0 ad cb 05 05 ce 83 80 d7 df 5d 25 2b 9d e9 19 24 dc 45 db 3e da 2a d2 50 e7 ec 2e 8e 7f d0 fa 8c 85 db 7e 11 1f 7d 38 0e 50 62 b1 5e 4d 13 23 49 f7 Data Ascii: cYDn((^6QL0"+Npo$]Wqw~_@EB#w_kBy:7{IF`Ojo~\|0^B5qQ`\fb>b/~=9!@\`vJF o]%+$E>P.~}8Pb^M#I
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 6a 4b 5e 94 6f df bc f6 e0 51 51 75 01 c1 02 3b 16 3f b1 eb 03 81 95 cd d6 d1 a1 db 25 1b 64 98 cb 44 ca 7a d8 e0 10 b4 71 18 dc f3 dc 5b 94 90 d9 35 de 41 4b d3 71 41 d0 54 5b ad bc 59 f5 73 13 f9 53 32 be e3 71 39 cb 91 c1 5c 9b b6 17 d2 1a 6c db 0e 8a e1 f4 fc 96 c0 fa a9 9a 3e 09 8e 64 46 49 05 d0 c2 53 33 16 d8 e7 e6 85 f6 f1 bf 8d 4d c0 b0 83 10 d3 64 5e 23 79 01 2a c9 ea 99 32 05 86 15 a1 b5 4d 79 5b 08 27 79 84 2d 60 5a 2f c2 07 ef 40 33 6a 18 b6 3f 25 95 8b c5 d5 68 3a 98 16 77 4d b8 71 93 f7 33 6e c9 69 5e 88 c5 55 e2 9f 36 b0 c9 7b 89 9b f8 3c f5 ee 7a 9c 10 24 6c 9d 40 f8 41 fe 66 3d 10 9c 9b 15 f6 53 95 fe 25 ab a4 55 4b 9a 0e c9 db 18 6e f6 64 a9 47 2c 4c da be e2 1b 52 2d b1 59 c9 37 cb 34 74 82 f1 aa ab dd e8 11 63 bf ef 2f f6 3d f7 e3 df Data Ascii: jK^oQQu;?%dDzq[5AKqAT[YsS2q9\l>dFIS3Md^#y*2My['y-`Z/@3j?%h:wMq3ni^U6{<z$l@Af=S%UKndG,LR-Y74tc/=
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: cf 83 4c 16 7c 45 2e 76 f6 ed d2 65 84 83 a4 32 07 79 07 6c ec 4f e8 65 9e 81 40 8a 7f 7a 1c ba 87 7d ba ee 15 4b be 50 ec 8a 30 89 5a e8 3c 07 c2 cd 6a 00 55 d6 69 83 c8 fe fc e6 b9 97 8b 6c f4 72 30 fc 67 d1 24 a9 27 b9 d9 a5 86 04 7c 33 dd 0d 73 e2 e7 6e e9 b8 d5 9a b2 b4 31 9b 88 ad e0 73 fe 38 c6 36 ed 93 cd 91 a3 db b5 76 8d 02 ed 63 c4 7c 22 01 7c 2a 5f e5 19 e4 96 40 67 d0 b7 64 f5 6e 80 00 02 3a 23 a7 d0 46 4f 02 e0 86 e0 0a 3a 1c ee 61 c3 bf 90 c1 2f a3 30 7a 00 9d 8f 0d ed fe d3 35 93 c1 50 3d 95 e5 b6 f9 9e 20 2e 13 e7 21 52 7e 91 5a cc 39 3a 71 f3 32 82 5d 1f a5 6b 3d 08 f7 83 64 72 00 de c8 c5 b2 85 fb 07 7d be 15 52 e7 90 8c b9 21 6c 27 fd 3c d6 02 3c 0c 48 73 01 cf fb d8 9f 2f c0 6f 67 2c 54 0b 47 52 b0 0d f5 bd fd ff 68 ba 95 f0 b7 27 68 Data Ascii: L\|E.ve2ylOe@z}KP0Z<jUilr0g$'\|3sn1s86vc\|"\|*_@gdn:#FO:a/0z5P= .!R~Z9:q2]k=dr}R!l'<<Hs/og,TGRh'h
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: e6 52 40 ef 33 9a 22 41 d5 2b ca 1f 41 71 1f e9 a2 ad 67 41 b1 86 c4 cf 2d 59 48 21 90 a0 43 df e9 3c 5f 5b 9f 9c 07 26 bc c6 69 4a b1 5c 64 94 98 6a 4f 1c c3 e5 47 68 eb 91 28 0c f8 8e 10 f3 de 5e bc fb 05 0c 1b 2f bb f1 e8 75 d8 26 d2 7f 65 ab 00 4e b1 a6 64 54 7c 8d 78 6f 0b b9 c4 0c 81 d2 26 8b f8 2f b5 80 a1 9d ca 69 36 7f c0 0c 6d 45 f6 d4 3e 49 94 d2 d2 13 98 96 70 9c 01 cd 7b f4 cd 04 2a c8 25 79 2f d5 a3 77 6a e2 57 8c ca 5c ef f4 e0 90 c2 10 9c 1d 46 cd 83 8e 84 26 9c de 8d d7 b9 1a 6f 4a 79 0c 04 fd 2b b6 f0 20 f0 8d 60 10 ef c3 b6 e3 fc be d6 e2 f0 0b fb 06 ee 3d 18 64 28 f2 32 11 73 6c 79 f2 bc 3a 2d d7 3e b7 0b 59 f6 97 98 89 46 95 33 a0 04 51 62 1f e8 57 4e 53 91 dc 6d 02 9a 75 10 cd 4d 01 df d2 dc 2d 66 9e 6a a9 93 c9 0b 56 8a 85 ff f7 af Data Ascii: R@3"A+AqgA-YH!C<_[&iJ\djOGh(^/u&eNdT\|xo&/i6mE>Ip{*%y/wjW\F&oJy+ `=d(2sly:->YF3QbWNSmuM-fjV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50023	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:19 UTC	1045	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YWRjZmRhMWQtYjMxYi00OTQwLTgzYmItZGY5MDQ2ZjUzODhh&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:20 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a&google_gid=CAESEG_gxsiPJj6fH2PskJq3N8w&google_cver=1 Date: Thu, 25 Apr 2024 07:07:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:20 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50027	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	430	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:20 UTC	493	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 36189 Connection: close Date: Thu, 25 Apr 2024 07:07:20 GMT Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT ETag: "998a47703d2bd3c00db0bc1be6e30a11" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e05f9b3de38fbfe53441974080c25cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: cnkLdA2zgvXHTviJ7uL7aGRwbalNrsaI7U6mgDoSe_WUaLkux0VOjg== Age: 1
2024-04-25 07:07:20 UTC	15891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 8d 24 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 f0 df 05 00 00 00 00 00 00 00 00 80 71 57 05 ff 47 0e 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4$IDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S)qWG
2024-04-25 07:07:20 UTC	99	IN	Data Raw: 40 07 e0 b0 ba d0 b1 23 ce 3a ec b0 04 e7 b8 aa 5d bb 36 ee 53 83 a5 d7 8d b4 ab 56 05 f6 f9 c3 56 1d a0 45 0b 77 7e f6 d8 46 84 11 51 c0 52 44 44 be fe fa 6b 77 03 96 2e fc 22 98 ec f2 e5 6a 16 7e 2a 2a 2a 22 50 ac b6 dd 3e a7 05 23 dd 62 95 ea 22 c1 64 23 b7 2d 90 7d f6 d9 67 bb 1a 82 6c d2 a4 Data Ascii: @#:]6SVVEw~FQRDDkw."j~***"P>#b"d#-}gl
2024-04-25 07:07:20 UTC	1908	IN	Data Raw: 89 13 b0 0c 27 d6 fc fb df ff fe 97 39 73 e6 20 22 d1 41 44 44 44 44 44 14 ae 1c 37 bc e9 7e 27 f7 ac 5a 85 a7 3a ff 4e b8 f2 c3 c2 d0 b9 5f ec e3 d4 54 aa f5 e9 43 b5 f1 e3 fd 2c 4c 67 3f a4 18 f7 34 4c 02 f2 90 83 d4 0a 5c b9 d0 fc e9 d1 3e c2 51 83 06 0d 88 21 8b 4a 22 df 4e dc 51 93 0c 5b ef fa d4 98 85 62 df 1f dd 90 30 a1 80 a5 0b ba 00 27 77 81 81 03 6d 12 5e 5b 27 48 19 8a e2 6b 01 55 d1 16 b0 ac 47 4d dd 78 a3 8f 1b 09 4f 0d 11 11 05 2c 45 82 4a c1 1e f1 72 9c b5 fb bf 7c 9b 50 69 b0 cc cb cb 23 d0 0a 0a 0a 5c 1d 75 6e 2f 4c 8a 04 db ca 95 2b a9 16 a5 e1 e1 8a 8a 0a 9e 7a ea 29 e6 ce 9d 8b 88 88 88 88 88 88 88 44 be c4 03 0c 57 9a fc 7c 3c d5 80 3d 8d 1f 1f 5a e1 ca 10 a4 80 65 43 05 2c 0f 45 af ba 44 35 bb 30 3e 09 c8 51 c0 32 f8 6d 77 e1 4f 23 Data Ascii: '9s "ADDDDD7~'Z:N_TC,Lg?4L\>Q!J"NQ[b0'wm^['HkUGMxO,EJr\|Pi#\un/L+z)DW\|<=ZeC,ED50>Q2mwO#
2024-04-25 07:07:20 UTC	12792	IN	Data Raw: b3 0a 4a 60 07 90 09 64 11 8e 14 b0 cc c9 c9 e1 f3 cf 77 00 41 3b de aa 8f 35 5b e5 e5 b6 76 1f 6b a5 a5 bb 8e b5 02 28 ac 80 6d c0 26 20 9f e8 d5 09 38 ed 34 1f 5e b1 63 22 2d 6d 07 19 19 b0 76 2d ac 2b 86 1d 40 31 50 b4 6b 55 01 f1 40 1c 10 0b d4 05 1a 03 4d 6c 25 c2 fd f7 b7 23 26 26 86 c0 53 c0 f2 db 6f fd 6c d8 40 30 54 9f c7 bb 9f 43 aa cf e5 ea 55 5c 0c 56 f6 bc b3 08 f2 80 4c 60 0b 50 41 0d 89 88 02 96 22 a2 06 cb da b5 6b 73 ea a9 a7 72 c1 05 17 90 9c 9c cc fe e8 ea dc 1f 9c 2b 25 9b 36 6d 8a 9b e2 e2 e2 18 36 6c 18 a3 47 8f b6 a0 a5 6b 6d a4 43 87 0e a5 49 93 26 b8 6d d1 a2 45 94 96 96 22 d1 25 29 29 89 f3 cf 3f 9f d3 4f 3f 3d 0c 46 43 88 88 88 88 88 88 88 88 28 64 d9 80 c8 30 e4 62 9c 8b c9 83 4f e6 14 5b a0 a1 dc b5 d7 07 2f bd 34 99 57 46 e5 Data Ascii: J`dwA;5[vk(m& 84^c"-mv-+@1PkU@Ml%#&&Sol@0TCU\VL`PA"ksr+%6m6lGkmCI&mE"%))?O?=FC(d0bO[/4WF
2024-04-25 07:07:20 UTC	5499	IN	Data Raw: 00 7e 49 47 03 60 76 76 36 57 af 5e cd 89 13 27 ca 13 e2 2f 5f be cc 5a 34 37 37 97 6b d7 ae 95 ef bc 72 e5 8a b8 f2 c7 03 00 00 00 00 00 00 00 c0 82 25 00 cd 66 33 f7 ef df 2f b7 6d db b6 f4 f5 f5 65 df be 7d e5 76 ef de 9d 8d 1b 37 fe cc 6f 29 e1 67 a5 52 69 5d 89 3e 3f 7e fc 98 55 03 00 00 00 00 00 00 00 00 02 4b 00 de bf 7f 5f 6e 72 72 32 2d 5d 5d 5d d9 b5 6b d7 bf a2 cb bd 7b f7 66 eb d6 ad e9 ee ee ce ff ab d1 68 64 71 71 31 33 33 33 e5 a6 a7 a7 33 3f 3f 9f 2f 5f be 04 00 00 00 00 00 00 00 00 04 96 6b 16 00 2b 2b 2b 79 f5 ea 55 b9 3b 77 ee e4 9b 12 5e 6e da b4 29 9b 37 6f fe ee 6f 6f 6f 6f f9 dd d3 d3 93 e5 e5 e5 d4 6a b5 d4 eb f5 72 e5 f7 d7 bf 25 ae 14 52 76 1c 00 00 00 00 00 00 00 00 81 25 00 c2 cb a5 a5 a5 72 eb 09 00 00 00 00 00 00 00 00 fc 92 Data Ascii: ~IG`vv6W^'/_Z477kr%f3/me}v7o)gRi]>?~UK_nrr2-]]]k{fhdqq13333??/_k+++yU;w^n)7ooooojr%Rv%r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50020	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028836192 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:20 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:20 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:20 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50026	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	792	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:20 UTC	489	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1618888 Connection: close Date: Thu, 25 Apr 2024 07:07:21 GMT Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT ETag: "9459ab37c159826cc66c30f9f6df33d0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 dc58b273ef46a25eae399cc2a3f90854.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 06_aFoXLvfiNWYDYctuC6DJX-5NEa1USHIEqWpQZCks-Y3JHYg6I-w==
2024-04-25 07:07:20 UTC	1538	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 03 c8 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 01 03 02 0a 0b ff da 00 08 01 01 00 00 00 00 fc ff 00 f3 33 3a 7a cd 66 6f 5b d6 f3 35 bc d6 f1 46 3b 7b f7 bf 59 eb d7 bf 5e bd fb f7 ef a7 be 9e fb 76 12 2c cc Data Ascii: JFIFHH3:zfo[5F;{Y^v,
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 8c 84 6a d5 8f cf e6 86 dc ea a2 32 4d 6f aa 5a 84 ae 2a d0 59 d7 84 90 bc 2b 03 f9 b9 a6 48 d1 e5 03 c0 c9 b8 9f 4e a1 53 4e f2 f5 ae a9 b8 6f 00 d9 c7 1a 61 7d 14 56 2d 77 42 c2 22 9e a2 6d 1b ea 2b e2 2b 92 5b e8 f7 e9 7f e2 dd 63 46 44 dd ad da 31 bc 35 6e 12 cc 7f 56 2f cc 9a 20 4c f6 0e 4b 38 4f 62 26 03 42 24 36 fc eb 5a 69 33 33 3d fb d6 f3 35 bf 3e b3 5b cd 66 6f 14 63 ba 6c 48 f4 e9 57 ad 0b 39 3a 51 a8 4f cf 55 71 e0 b0 60 d3 03 33 93 c5 09 ef b2 48 ec 51 e8 40 c4 e1 f1 59 f9 ec b2 98 6f 9a 99 02 db 40 e5 cb 8c ae 7f a4 6c 93 f4 67 5d f6 29 58 71 de 6a d3 0c 2b ef 60 d1 f2 48 cf 7b 27 ab 66 89 97 60 6c 78 e2 56 3a 2f c4 a8 f8 ec 8c 7c c6 19 7d 2b 5a 87 ce 0c e8 fa 47 a4 9a 6d fb d0 8e b8 e1 d6 7c 11 96 af 09 f5 76 c2 a2 87 0a 07 21 09 8b 38 ac Data Ascii: j2MoZ*Y+HNSNoa}V-wB"m++[cFD15nV/ LK8Ob&B$6Zi33=5>[foclHW9:QOUq`3HQ@Yo@lg])Xqj+`H{'f`lxV:/\|}+ZGm\|v!8
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: a6 ec ad 17 92 cf ea 92 1c 4d e4 43 00 d4 46 98 80 ff 00 c2 5b 5b 7a 7e 42 63 d3 b9 f5 a2 9e 58 d9 b7 cd 74 a1 9d 54 77 54 04 52 25 7e e5 9d b6 28 32 29 a5 15 d6 8a 93 a6 a9 ae 68 45 34 e5 8a b4 50 12 e5 85 e2 56 4b 8e b5 2d 4c 9e 22 16 0b 45 f4 9e 85 91 11 75 69 0c 21 13 29 62 8f 21 47 d1 3f 1f 8c a8 cf 62 0a 1c 89 3b e4 8d f6 48 72 a7 68 1d 44 52 c5 67 65 56 5b f0 11 99 99 d3 d6 6b 33 33 33 7a cd eb 33 7a 39 f7 cf 5a f1 d3 d7 6c ce 27 ae 22 cd a8 76 4e d8 d5 b6 cd 44 0a ee 2c 50 c3 f2 b5 6b 48 9f e2 00 59 2a 48 2b f6 64 4d 2a 06 36 47 ab 06 70 fc fd 50 b3 9a b5 72 20 80 9f 46 12 6d 9b 1c a1 72 cd d8 36 b1 d9 95 90 a5 8b 91 b1 45 bf c7 69 58 aa 6e 42 a8 0a 13 5d 5f 0c 85 72 14 e5 ae 55 31 6e 2c 96 8c 2e 53 3e e3 28 57 10 65 db 68 bd 4b 27 31 6a dc 45 64 Data Ascii: MCF[[z~BcXtTwTR%~(2)hE4PVK-L"Eui!)b!G?b;HrhDRgeV[k333z3z9Zl'"vND,PkHYH+dM6GpPr Fmr6EiXnB]_rU1n,.S>(WehK'1jEd
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 50 2a b6 8d 6e 85 9d ec 9e 60 dd 3c db a5 48 d6 bc 65 9b 7d 1e a9 6c f1 91 33 b4 08 39 77 0d 66 2e 33 b3 46 27 93 30 c5 e5 3d 4b 81 7b 16 72 b0 f2 c2 f6 37 e6 5f bc 4b ac fc 90 f8 99 af fb db de 57 4c 8b 47 d7 2b 95 fd 29 ee 88 d9 b5 f2 8f 40 e5 a5 d2 ca 48 d7 fc f3 6f b6 a1 bc 56 23 50 9a b5 ca 48 61 0d ca eb 74 f2 7f a5 3c 87 9d fb 36 f5 4c 92 c9 6b 5a ce 90 b3 27 5a ae 03 9f 59 e8 12 97 6b 49 cc 55 38 61 d3 14 71 32 92 78 00 00 00 00 00 00 00 00 0e 6b 0d 94 23 66 f1 b6 39 97 05 8a ef 1e aa 19 a4 8a 48 24 8a 08 26 82 64 56 cd 69 a9 a2 fd a2 12 91 ef 78 9a 44 22 4c 61 61 90 d6 a7 3c d9 ef 3a 94 ee 6b 8b fa af 13 9c a7 55 db f2 1f 61 9b 84 a4 57 1d af 75 8e c2 f4 db fd c3 27 a4 b1 df d6 a8 66 36 7b 6e 46 d3 44 ab ca e5 a3 3e f0 1f b4 36 5d 17 32 d8 58 49 Data Ascii: P*n`<He}l39wf.3F'0=K{r7_KWLG+)@HoV#PHat<6LkZ'ZYkIU8aq2xk#f9H$&dVixD"Laa<:kUaWu'f6{nFD>6]2XI
2024-04-25 07:07:20 UTC	3072	IN	Data Raw: c3 50 79 6f 25 61 17 ba 3d a1 78 5c e4 9a 1f b6 c0 00 00 00 00 00 00 00 01 10 9c 84 12 33 4a 11 24 c8 52 22 82 28 24 92 d2 2f cc 44 d1 4d ac 69 e3 9c 4f 48 97 ab 18 f1 f1 3d 61 a0 ce 57 f2 eb ac 63 46 6d a0 35 e9 f8 06 2d 78 85 66 e1 76 e8 80 a9 95 a4 95 ce 54 d5 68 b8 65 2d 50 f7 66 b0 15 58 98 94 1d f1 ab a7 2c e0 e2 5f 4a 21 5e 8c 7c fa 1e 5e f7 71 b2 ce 2c a7 07 21 3e 65 6a c9 ce f9 e5 7a 17 d5 2a 9e 89 74 84 c2 94 4a af bd d8 2b aa c3 57 ba 94 87 63 d0 29 0e c1 0e 28 91 0e bc cd 8e 5e 09 5f 3f 44 b8 22 17 0d f3 c8 9f 14 6c 9f 61 15 79 15 ae 62 36 5e 38 35 36 a3 28 72 67 24 bf ce 6a f4 8d ae a3 0f 8d f9 9a e1 e3 bb ee f3 b0 7a 06 4a 87 5c 80 71 6a 9f 6f 23 3e 8c 6a 10 bd b2 45 7b dc 00 00 00 00 00 00 00 00 11 86 54 89 a6 42 f0 a4 49 a3 72 14 ae a4 1d Data Ascii: Pyo%a=x\3J$R"($/DMiOH=aWcFm5-xfvThe-PfX,_J!^\|^q,!>ejz*tJ+Wc)(^_?D"layb6^856(rg$jzJ\qjo#>jE{TBIr
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 31 13 72 09 32 6a 80 68 70 e2 35 36 55 9f 0a 60 6e b5 0d cf 2c 4d 67 05 55 cc a5 b2 ff 00 60 be 6c 96 06 cd d9 57 64 76 10 00 00 00 00 00 00 00 00 45 a1 ce bd 34 22 d1 eb 1e 12 43 97 20 33 97 ad 2d 0c 92 48 89 26 8b 48 fb 2c 94 8b 74 df aa 3b ca 9d 2e 62 49 34 fa b3 c6 4d d9 c6 a5 a5 d8 1b 91 ac 6b 56 cc ec 96 14 5a 9e 2a b3 6c c5 d3 7e d2 9e 59 47 cb b9 4d bc 79 1e b3 67 5d 81 b2 db fd 32 ed d3 93 21 11 9e 63 3b 3f a7 65 9d 2e b1 4b c3 70 99 9b 2b 5c 8f 4f 50 9a b3 77 a4 32 28 17 a1 b6 65 4e d2 5c e7 d1 12 1e 55 f9 b5 b4 6d af 27 ec 8f 14 71 2a 1c 04 a4 5e 2e db ab a2 57 90 f6 db 2a 8e a3 a7 19 30 47 8c 20 ac e9 b7 41 a2 69 34 67 d5 04 65 53 57 f3 67 85 de d8 ee d0 d0 6b 3a 5e c1 79 9e 71 27 6a b1 69 f7 33 32 64 58 75 f6 20 00 00 00 00 00 00 00 00 46 37 Data Ascii: 1r2jhp56U`n,MgU`lWdvE4"C 3-H&H,t;.bI4MkVZl~YGMyg]2!c;?e.Kp+\OPw2(eN\Um'q^.W*0G Ai4geSWgk:^yq'ji32dXu F7
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 9f 7a c3 e7 f2 d6 d9 dc b0 dd 64 b3 2c f9 27 43 df fc eb 52 33 3d 9b a5 47 a3 bc 93 96 e9 f2 55 9a 1d 44 c5 55 d3 db 5f e6 03 ca c0 0d ed e6 49 b5 fe f8 c7 8e 43 d4 9e f9 ef 83 07 21 40 8b 01 58 41 4d d4 99 0b 6d ca 2f 71 b8 a2 13 9c 07 d5 e6 fa 8f 3f c2 f1 b5 62 7b a7 7c 20 ec 39 58 7d 88 aa 51 04 c4 9e f0 ba 55 23 f1 ba fe 85 9d 1e 3b 7c f7 61 cb f3 4e d5 d7 be 14 9c 18 7c da 86 ea 59 24 f5 de fb eb 9f ef 8b cc 2f 25 35 a5 8b 5f 72 2e 78 9f a0 12 49 24 92 49 24 92 49 25 6d 3a 6b 3c f1 8d 49 7a bd 77 be bb d7 b9 de bd ca 8e 85 c8 df 62 8a 6f 5a fe 53 51 28 1d 13 b8 28 cb 24 b9 c8 e6 1f 40 f4 3f 91 79 07 dc 58 5c bd 36 87 31 96 1b ac 98 55 97 28 d9 ef b8 10 f4 a3 cb 77 aa 23 41 7b c7 f4 f6 59 b0 35 f7 30 5a fb 46 46 71 97 78 6a b3 ac f4 18 13 eb 43 f5 e9 Data Ascii: zd,'CR3=GUDU_IC!@XAMm/q?b{\| 9X}QU#;\|aN\|Y$/%5_r.xI$I$I%m:k<IzwboZSQ(($@?yX\61U(w#A{Y50ZFFqxjC
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 9c 3a 8e 51 47 20 82 e1 fd 1e 4a 7c a9 4b 2d 51 a6 ab 5e a4 b3 48 54 a7 81 41 1a c5 87 d5 15 89 e8 e4 ee f2 f2 f4 f8 3f ee 22 5f d4 0e 98 d8 a6 12 61 2e b8 0c c7 7c ad 8b 8b 99 5c 24 1a f2 f1 86 5e dd cc ad 1b c4 f4 72 19 23 c8 51 d1 77 83 79 79 a4 ef 8f 83 20 76 b2 41 16 3f 29 c7 50 bb 28 23 4e 7a a6 65 23 80 34 6d bd 13 68 5d 00 40 dc da 51 d1 8d db 59 ba cf 0c ef 11 80 43 2c b7 9b e7 2e 0e bb f8 87 0e 71 55 17 a7 97 c4 47 c8 e1 6a ed bd 71 8e 69 a0 7a 3e 0c 3c 76 f6 0d 89 39 8b 4d 13 44 4e 80 58 58 99 36 aa 2d 95 b8 4b d4 71 06 f2 c2 f1 49 61 32 5b a3 b3 14 ac c0 a7 c0 55 92 f6 4f 2d 16 1a 09 ec 50 cc 84 91 0c 70 e5 31 96 32 19 1e 1a c4 9e 2e fd 9e 22 39 ad cd 9f de ac 65 39 8f c0 b1 cf 6b 2b 7b cf 25 f6 5c 3b f7 10 96 ca f7 6c 43 60 6d f1 08 4b 67 21 Data Ascii: :QG J\|K-Q^HTA?"_a.\|\$^r#Qwyy vA?)P(#Nze#4mh]@QYC,.qUGjqiz><v9MDNXX6-KqIa2[UO-Pp12."9e9k+{%\;lC`mKg!
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: 10 45 b9 0c 5a a2 85 d6 ba 2d 53 68 4e c2 2e 9a 2d 57 97 e4 c7 e7 7b de d1 31 98 b1 48 46 9b 6e df e7 b2 01 04 5e 12 82 c1 33 c9 c8 b0 26 0e 05 d9 18 31 ad ac 09 93 21 ec c6 7d f6 7f a6 5b 37 eb c7 7b f8 de 93 65 1b c6 3f 7d 51 bf bc 61 bc b1 ed ae 30 a3 78 d8 fd 63 e5 8e f4 32 64 0a 4f d2 e1 d5 a6 3f 58 8e 91 c6 e2 c5 f8 85 58 8c 65 65 a1 6c 81 f5 6c 77 dd 4c df 38 59 54 00 23 18 63 84 e1 d1 d4 4c b8 92 bb 38 1d 76 33 af 88 08 a5 84 54 62 c5 16 46 9e c8 f8 67 1d 1c 8f 9d 88 02 a0 c2 26 9e a0 b3 4d 5e 47 0a 35 5a cc f0 e0 07 75 ea 65 13 f6 32 d1 7a 5b 42 55 6a ca 65 46 b4 1a 77 5e 5b 98 d7 96 5c 95 5a fb 5e f4 fb 7b c4 82 4d 7d 77 e0 17 22 23 3c 7d 73 24 15 e6 74 35 7a c6 ec 2a 3a ef 33 64 b8 79 e4 43 11 56 1a 71 f3 4a 3c 25 29 59 b0 f6 d9 b7 e7 20 18 3b Data Ascii: EZ-ShN.-W{1HFn^3&1!}[7{e?}Qa0xc2dO?XXeellwL8YT#cL8v3TbFg&M^G5Zue2z[BUjeFw^[\Z^{M}w"#<}s$t5z*:3dyCVqJ<%)Y ;
2024-04-25 07:07:20 UTC	4096	IN	Data Raw: 83 19 8d ac c1 dd 99 07 29 78 50 ee 74 30 3b fe e6 3f 6c bd 5f ef 3f 77 f8 51 7a 03 d7 5d 47 e4 1e 91 f6 4f d8 9f db 93 d4 ff 00 73 57 d6 3f 6f fe 4f eb fe 7e 26 4d e4 c9 93 b7 ce 2e 87 f0 32 17 74 da ba 11 42 08 61 77 41 5c 53 94 51 34 b9 26 64 73 4b 33 bb 74 d1 33 21 64 2c b1 fe 8b ec c3 62 3f 54 69 96 9d 18 59 ce ee a3 66 ef aa 82 fe 2a 2c 8f de d1 f4 32 14 0b 88 bd e7 f1 26 dc 86 23 24 f5 ca 36 61 5b 1d 37 44 64 2a 52 07 06 4d d8 ca 77 f0 69 aa 11 e5 28 fe a2 48 b6 53 98 f2 72 4f 28 ec 37 9e a9 b3 0d 79 36 0c 6d 1c 92 33 12 da 1a c5 52 62 43 8b 92 45 dd e1 81 30 46 28 ca 69 94 90 13 08 d1 9a 77 0c 78 8a b1 50 8c 5a 85 a6 4d 5e 40 2f 16 d0 88 97 8d 88 e4 22 5a e8 b9 87 af 3e 65 cc 2d 77 6e 4c ed b5 a9 bd 6e 0d cc e0 b1 30 5c e2 ac f5 4a 92 cf 57 13 93 Data Ascii: )xPt0;?l_?wQz]GOsW?oO~&M.2tBawA\SQ4&dsK3t3!d,b?TiYf,2&#$6a[7DdRMwi(HSrO(7y6m3RbCE0F(iwxPZM^@/"Z>e-wnLn0\JW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50025	68.67.161.182	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	809	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:20 UTC	1568	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:07:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dadcfda1d-b31b-4940-83bb-df9046f5388a AN-X-Request-Uuid: 0ce25d93-05f7-405a-82a5-63084ae55fff Set-Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:07:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50030	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	433	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:20 UTC	493	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 37028 Connection: close Date: Thu, 25 Apr 2024 07:07:20 GMT Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT ETag: "62615becf8831f197e70175a43c41000" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 be19c47e504fffea4cece5471967bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: VZohJ9hLkmNPhF4jkWqf7nlYkR6HOy31jF0Rx2RJTWPrp3MVL4EVKg== Age: 1
2024-04-25 07:07:20 UTC	15891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 90 6b 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 06 29 c6 9d ff 2e 00 00 00 00 00 00 00 00 00 50 c5 ff 41 8e ff 03 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4kIDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S).PA
2024-04-25 07:07:20 UTC	16384	IN	Data Raw: e5 83 dc 79 67 65 fc d1 a2 19 2c 4c 0b ae 11 e1 a6 b1 f2 a9 97 60 03 25 53 3e 30 f5 75 78 a7 65 3e 61 61 61 7e 9f 4f 3e f9 92 12 eb ea 56 f8 fd 1e ee d8 b1 83 57 76 e2 b9 17 be 83 2b 8e 1f f7 eb 3e 67 83 06 f1 44 b0 83 13 84 0c 11 51 c0 52 44 ca 95 2b 57 6c 02 39 a6 49 2c b8 89 48 42 42 02 9d 3a 75 c2 b6 63 c7 8e 31 79 f2 64 76 ee dc e9 49 50 cc 84 e9 c6 8d 1b 87 4d 66 ac 4a c7 8e 1d 4d 5b a6 b5 c0 5f b0 ca ce ce 66 eb d6 ad ee 13 c1 87 0e 1d 32 9b 09 32 9b 70 be 69 3b 3c 17 d8 37 63 a5 8b c9 d8 6c 71 1c c7 6d 6a 8c 8d 8d f5 64 4c 78 a0 02 96 a6 31 d3 36 13 0e 2e 89 44 44 44 44 44 44 1e e9 0c dd ba f9 38 67 cb 16 82 c2 96 2d 0e e3 df 20 04 49 05 ec 39 9a 8d 1f 24 05 48 4c f4 e1 0f 33 79 69 e6 72 02 22 0d d8 ba d5 f1 eb 6b 4e 4c 8c a5 3c 19 e4 52 74 02 f1 Data Ascii: yge,L`%S>0uxe>aaa~O>VWv+>gDQRD+Wl9I,HBB:uc1ydvIPMfJM[_f22pi;<7clqmjdLx16.DDDDDD8g- I9$HL3yir"kNL<Rt
2024-04-25 07:07:20 UTC	2903	IN	Data Raw: 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 Data Ascii: K%@` X,K%@` X X,K%@`
2024-04-25 07:07:20 UTC	1850	IN	Data Raw: 8f 3e 9e 33 ad 72 f1 09 96 ad 6f bb d5 c8 32 cd 9f 25 d6 1f 2b 23 dd ea 44 cb fc 7a 35 ff 72 b3 ff a8 bf ff fd ef 9f 38 7b f6 ec 57 e6 e6 e6 46 62 49 00 00 00 00 00 00 00 00 00 00 29 a5 4a b9 5c 3e 92 35 7a 59 ab 97 35 7b 45 fb be 76 27 57 e6 36 88 2b 60 30 f2 2d c7 24 cb b8 61 3a 65 df e2 51 e5 0b 5a 26 58 b6 e8 6b 7d da fa fa 43 87 0e dd 1d 11 f7 6e d9 b2 65 d3 bb df fd ee 0f 0e 0d 0d 7d 74 f3 e6 cd 1f 19 18 18 d8 1d bd 07 00 00 00 f8 3f 7b 77 c0 d1 31 10 c6 71 fc 7f ad d9 08 30 5a 40 64 ef ff 4d 14 4a 03 18 70 25 80 2b 33 70 e7 b6 d9 ae 06 87 b3 9e 2c 45 f4 fd 70 9e f9 ed e0 0e c0 79 1e 00 00 00 00 00 00 00 00 f0 2d cb b2 bc 39 e7 1e 86 61 b8 ef ba ee d1 5a eb d3 6e 94 72 d7 4a f1 df d7 8f 2b 93 3c c9 7e c5 f9 4f 3e a2 3c b0 47 3a b8 3c 36 7c 3f 3f db Data Ascii: >3ro2%+#Dz5r8{WFbI)J\>5zY5{Ev'W6+`0-$a:eQZ&Xk}Cne}t?{w1q0Z@dMJp%+3p,Epy-9aZnrJ+<~O><G:<6\|??

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50032	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	785	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:21 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 39025 Connection: close Date: Thu, 25 Apr 2024 07:07:21 GMT Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT ETag: "ae3014c64b170b87e558aaab76e68dbb" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0fe01300cc0fd23ed9b49b075bd8fc3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: KCkoykOkDYDVelkI8mvf0sCrWsAmh56p3LNTCb4TeN5BVBjn_FDCjA==
2024-04-25 07:07:21 UTC	1542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 e1 08 06 00 00 00 4b 01 86 44 00 00 00 09 70 48 59 73 00 00 10 9c 00 00 10 9c 01 26 cd 3a 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 98 06 49 44 41 54 78 01 ed 7d 07 a0 1d 45 f5 f7 99 d9 fb 5e 7a f2 d2 0b 01 92 d0 09 bd f7 22 20 4d 90 62 28 2a 08 c8 87 0a a2 62 41 50 91 f7 57 2c 60 01 0b a2 58 c0 86 25 d2 ab 08 12 90 aa f4 a2 94 40 02 09 21 bd 97 97 f7 ee dd f3 9d d9 3a 33 3b bb 77 f7 de 7d 25 30 bf 64 de ee 9d 9d 72 66 76 76 ce 99 33 33 67 18 58 58 58 f4 38 b0 fd a0 ca d2 b5 cf 8f eb 72 b1 0d 38 1b 8c dc ed ef 20 ab 32 74 3b aa 9c 2d 1e d7 7f a7 b9 ac 7d 46 15 2c 2c 4a 02 3e 30 a9 3f ac ab 8c 02 07 db ba 5a f8 20 c6 70 40 f8 ac 02 d0 Data Ascii: PNGIHDRKDpHYs&:4sRGBgAMAaIDATx}E^z" Mb(*bAPW,`X%@!:3;w}%0drfvv33gXXX8r8 2t;-}F,,J>0?Z p@
2024-04-25 07:07:21 UTC	16384	IN	Data Raw: 14 e7 a9 23 ec bc e0 50 3d 3c 4a 5f 6e b7 6a e6 32 66 0e 7d 73 dd 63 a6 b4 62 a9 95 a5 a4 63 aa 1c 96 f8 8d 50 2f 9e ec cf a6 42 0e 18 05 99 5c 7d 74 10 87 25 3f 7a 93 70 41 f9 7c 90 ee ee 5f 72 e4 c8 bf 2d 7f ff b0 c9 69 a9 8e b8 75 e9 f5 c4 82 9e 35 76 26 19 8e f2 3c 1b db 8b b7 5e 12 54 cf ca fe 30 0d 79 21 7c 19 72 60 e1 f9 23 cf 80 ce ce 17 29 ce f9 34 fd d1 5a 84 29 c7 f5 18 d2 20 d3 12 c0 65 27 20 ef 7a 7e d1 57 c6 7d 03 9a 44 7d 81 10 12 f7 32 7d 54 27 87 2f b9 7c f3 bd a0 00 50 63 66 61 e7 8d c6 36 94 33 4d 4c 63 42 2c 62 98 59 cf 30 e5 59 58 de 54 01 02 9d 8d a1 17 d1 71 f7 56 5b 75 dd f5 e7 fb a8 fa ee 27 9a 0e 51 e9 03 83 70 20 bd f3 48 20 36 c5 81 58 c0 28 f0 1e 52 81 30 46 cd 0b cc 74 ea cf 83 bc a9 6f f8 00 94 8c 98 49 87 ed 2f 1c 98 30 4d Data Ascii: #P=<J_nj2f}scbcP/B\}t%?zpA\|_r-iu5v&<^T0y!\|r`#)4Z) e' z~W}D}2}T'/\|Pcfa63MLcB,bY0YXTqV[u'Qp H 6X(R0FtoI/0M
2024-04-25 07:07:21 UTC	1024	IN	Data Raw: 21 a2 3b 50 37 55 6c 07 be 70 58 e5 62 a8 d6 5e a6 af f9 90 44 27 cb 74 c6 1d fe 94 fd f5 df 3a c3 06 50 b5 10 69 d0 d2 63 60 4c 0f 33 99 2d 40 3e 61 c2 9b f3 f8 64 47 b5 f6 c8 8a cd 77 d8 0b 0a 81 99 19 3e d3 3b 4d fd 19 87 34 66 9c 4c 2b c9 1c e9 ef 28 28 09 f4 81 8f a9 4f 07 cf 7a 36 ba ab 6b 40 be ce df a7 7e a2 59 83 10 77 ac f1 ef 34 e1 c0 44 57 b6 f0 60 0e 1b 33 cd ae 75 eb 0c 82 8f 13 8f 44 a5 fc 12 82 80 29 6d 6c 20 4c c8 40 c8 71 e6 8c 87 92 30 f9 07 3f 78 99 f2 58 ac e6 af d1 86 32 43 f6 7e 6f f2 da f9 3f ee 57 2f ed 59 ed ed fd 49 13 b0 79 c4 c4 13 e9 31 8d c1 07 fe 7e 07 bc 15 e4 01 b2 ed 64 86 ac b4 17 89 e6 f0 19 75 aa 4f 24 d2 a8 3a a0 0a 17 9a 80 10 09 00 b2 36 20 89 67 af f9 ea 46 f4 bc 12 8e a6 13 9a 01 a9 cd ca 7e f2 08 3b 16 04 54 41 Data Ascii: !;P7UlpXb^D't:Pic`L3-@>adGw>;M4fL+((Oz6k@~Yw4DW`3uD)ml L@q0?xX2C~o?W/YIy1~duO$:6 gF~;TA
2024-04-25 07:07:21 UTC	16384	IN	Data Raw: ba d0 cd eb 77 ca 01 a3 4e a8 cb 39 64 ab e8 01 fc ce 04 a4 e7 19 8d 25 73 b4 ed 7f ac 4c 49 9f 41 9d 45 83 66 7f 2d 3e 8b c3 8f a4 09 dd 5c 5b c1 8c 79 15 a6 85 67 d3 99 12 86 6a 34 9f 6a 37 03 4b f6 3d 66 aa 58 d4 95 4e 07 87 9c cf 06 c1 ba 75 1f ae 97 1f 8d f6 36 95 df 63 f6 3d 83 ec 91 3e 07 75 31 a1 1c 2e 1e 95 d5 cd 27 60 00 35 c7 99 92 a4 98 19 d2 4d 30 3e 63 da f2 08 d4 5c 86 38 7f 34 84 21 ef 31 50 22 6a d0 32 43 ae 17 75 7d 43 b2 3e 7c 66 85 75 35 01 0c 9d 7d 40 53 b9 2b 42 09 32 c3 08 3e 1a a9 0f 6f 81 8e 29 99 74 63 cb 36 ca b4 04 24 19 b6 2c 80 72 64 0f 98 53 aa 68 53 0f 9a d3 18 7c da 9a 86 1a 87 d1 26 21 c1 94 86 3a 1d 11 b7 dd a4 90 a0 4f 93 70 83 46 20 78 77 d2 94 82 ba 3e c1 69 eb 5a 0b 23 74 7a 69 be 5e 0a cf 14 c1 2b 9a 32 81 f8 19 34 Data Ascii: wN9d%sLIAEf->\[ygj4j7K=fXNu6c=>u1.'`5M0>c\84!1P"j2Cu}C>\|fu5}@S+B2>o)tc6$,rdShS\|&!:OpF xw>iZ#tzi^+24
2024-04-25 07:07:21 UTC	160	IN	Data Raw: 50 1c df a6 fa 7d 0d 1a c3 25 e0 9f e6 5a 04 a2 7d 67 59 d5 2b b2 ae 43 7c c3 df 78 97 0a d9 a5 2e b0 a3 3a 12 16 0d 8b 6e 6f 16 6b 16 ce 81 06 40 6d 4a b4 8b af 43 71 34 a2 29 2b 13 62 cd c6 9a 02 e1 07 e1 7b 68 ab fc 7b 1d 3d 22 34 d0 c7 23 56 74 af 2c 10 45 34 c0 41 f0 2e 03 fa 47 5c 17 3d ce 76 1e f8 8b dc 1a 42 50 f7 8d 2c 0a 3c 09 36 30 a0 7f e0 52 d1 e3 dd c5 48 30 d7 09 8f 26 50 fd 0a 06 ff 03 28 8e 2c a1 6c 11 14 83 50 b9 8b b5 06 d6 d4 74 36 8e 87 e2 f8 7a 9e 29 89 Data Ascii: P}%Z}gY+C\|x.:nok@mJCq4)+b{h{="4#Vt,E4A.G\=vBP,<60RH0&P(,lPt6z)
2024-04-25 07:07:21 UTC	3531	IN	Data Raw: 0c 08 fb 1c 45 0f b2 db 11 7d a3 64 65 22 b7 00 16 4c 7f 16 6d 83 83 c1 e2 3d 81 be b8 e5 52 40 34 f0 0d 71 8b 58 3d 9a c5 31 b3 45 b7 93 de 1b a8 3a 9b c1 3d 50 4c 68 13 d8 17 36 3c 88 15 e0 45 0d 96 fd 8e ea b7 c8 a8 ca 04 c1 18 8a d6 ef fb 33 9e bd 00 c5 21 56 ec 8b e3 e7 ef c3 06 4f 90 ed 83 28 bb 0f d8 1f 8a a1 0a 4d ee 0a 08 84 ca df 15 8b e5 f5 7f bd ad e9 ab 15 0c df 97 f8 87 45 37 a2 99 2d 97 b9 41 9d 98 d8 0e 58 64 9e 56 6c 6b 5a 01 e5 80 51 fe 37 43 63 18 5e 30 7c 3d 69 be a8 96 41 a0 e9 fd e4 d4 71 ad a4 3a 98 0e c5 e6 4a c5 0e 81 09 14 77 1e 6c 38 d8 05 8a e3 0e 68 12 62 01 a1 60 d6 50 4c ad 3c 41 2c da a4 b8 0b 0c cf 84 8d 85 d3 a1 38 44 fb 13 db fe 0e a1 b4 c5 c2 d9 ab c1 9f 8f 7f 15 7a 0f e7 11 2d 1f 84 c6 50 da 49 90 e8 5b 5f 2d da 3e 1e Data Ascii: E}de"Lm=R@4qX=1E:=PLh6<E3!VO(ME7-AXdVlkZQ7Cc^0\|=iAq:Jwl8hb`PL<A,8Dz-PI[_->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50028	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	1042	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a&google_gid=CAESEG_gxsiPJj6fH2PskJq3N8w&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSgDMgsIwNvnt6LA8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-25 07:07:20 UTC	556	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:20 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI-qS3nYzA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSABKAMyCwjA2-e3osDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:20 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50031	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	922	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSgDMgsIwNvnt6LA8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-25 07:07:20 UTC	556	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:20 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSABKAMyCwjA2-e3osDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:20 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50033	68.67.161.182	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:20 UTC	1034	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dadcfda1d-b31b-4940-83bb-df9046f5388a HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; receive-cookie-deprecation=1; uuid2=6142091251808246355
2024-04-25 07:07:20 UTC	1489	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:07:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6142091251808246355&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a AN-X-Request-Uuid: 584066a1-0ab6-4b21-91e5-67bb507f32a3 Set-Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:07:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50034	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:21 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=c91a99ae-8b59-4e8a-ba54-a40b16703558&batch_time=1714028839354 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1392 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:21 UTC	1392	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 31 35 32 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":2,"page_states":[{"state":"hidden","start":1525700000},{"state":"passive","sta
2024-04-25 07:07:21 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: c91a99ae-8b59-4e8a-ba54-a40b16703558 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:21 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 63 39 31 61 39 39 61 65 2d 38 62 35 39 2d 34 65 38 61 2d 62 61 35 34 2d 61 34 30 62 31 36 37 30 33 35 35 38 22 7d Data Ascii: {"request_id":"c91a99ae-8b59-4e8a-ba54-a40b16703558"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50035	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	997	OUT	GET /track/cmf/appnexus?ttd=1&anid=6142091251808246355&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCNa45YqMwPI8EAUYBSABKAMyCwjA2-e3osDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:07:22 UTC	556	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:22 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUYBSACKAMyCwjA2-e3osDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:22 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50037	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=4d795b47-33f8-4ccd-86c9-a4ce9a6513b6&batch_time=1714028840938 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 18221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:22 UTC	16384	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 33 65 65 38 62 33 36 2d 39 34 30 64 2d 34 33 61 63 2d 62 30 31 33 2d 64 65 37 30 39 62 65 66 65 61 35 30 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 30 32 38 38 34 30 39 33 37 2c 22 73 65 72 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 35 2e 39 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0}},"application":{"id":"03ee8b36-940d-43ac-b013-de709befea50"},"date":1714028840937,"service":"desktop-web-renderer","version":"0.5.9","source":"br
2024-04-25 07:07:22 UTC	1837	OUT	Data Raw: 69 65 6e 74 53 6c 69 63 65 72 31 3d 55 53 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 32 3d 31 39 39 30 37 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 22 5d 2c 22 69 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 69 2e 67 69 66 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4d 7a 51 77 4d 7a 51 35 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 7a 4e 54 45 7a 4d 43 77 69 59 33 51 69 4f 69 49 69 4c 43 4a 6a 61 43 49 36 4d 7a 51 35 4d 44 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d Data Ascii: ientSlicer1=US&moatClientSlicer2=199071' type='text/javascript'></script>"],"impressionTrackers":["https://donny.wetransfer.com/i.gif?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIzNTEzMCwiY3QiOiIiLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM
2024-04-25 07:07:22 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 4d795b47-33f8-4ccd-86c9-a4ce9a6513b6 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:22 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 34 64 37 39 35 62 34 37 2d 33 33 66 38 2d 34 63 63 64 2d 38 36 63 39 2d 61 34 63 65 39 61 36 35 31 33 62 36 22 7d Data Ascii: {"request_id":"4d795b47-33f8-4ccd-86c9-a4ce9a6513b6"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50039	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	419	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:22 UTC	493	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 39025 Connection: close Date: Thu, 25 Apr 2024 07:07:21 GMT Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT ETag: "ae3014c64b170b87e558aaab76e68dbb" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a080982e88a54647df03225aa56b97c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: UuUlamgvcRCN9x4NiujGj2OhjWk9qFiQbphjzDe7ip94fWesSbjMSA== Age: 1
2024-04-25 07:07:22 UTC	15891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 e1 08 06 00 00 00 4b 01 86 44 00 00 00 09 70 48 59 73 00 00 10 9c 00 00 10 9c 01 26 cd 3a 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 98 06 49 44 41 54 78 01 ed 7d 07 a0 1d 45 f5 f7 99 d9 fb 5e 7a f2 d2 0b 01 92 d0 09 bd f7 22 20 4d 90 62 28 2a 08 c8 87 0a a2 62 41 50 91 f7 57 2c 60 01 0b a2 58 c0 86 25 d2 ab 08 12 90 aa f4 a2 94 40 02 09 21 bd 97 97 f7 ee dd f3 9d d9 3a 33 3b bb 77 f7 de 7d 25 30 bf 64 de ee 9d 9d 72 66 76 76 ce 99 33 33 67 18 58 58 58 f4 38 b0 fd a0 ca d2 b5 cf 8f eb 72 b1 0d 38 1b 8c dc ed ef 20 ab 32 74 3b aa 9c 2d 1e d7 7f a7 b9 ac 7d 46 15 2c 2c 4a 02 3e 30 a9 3f ac ab 8c 02 07 db ba 5a f8 20 c6 70 40 f8 ac 02 d0 Data Ascii: PNGIHDRKDpHYs&:4sRGBgAMAaIDATx}E^z" Mb(*bAPW,`X%@!:3;w}%0drfvv33gXXX8r8 2t;-}F,,J>0?Z p@
2024-04-25 07:07:22 UTC	10956	IN	Data Raw: bc 38 52 1d f8 83 67 37 9a 82 17 6e 60 b5 6b 69 41 52 49 c3 c2 bf 8b 8e 3b 96 52 f7 ce 3a 8a 8c 45 79 2e b6 61 e1 e5 cd fd 52 84 79 d6 5c 78 15 fa 28 18 58 58 58 f4 18 16 9d 75 ec 10 ac e0 8e b5 4a 75 1c f5 7b 3b d1 48 68 53 ea 59 07 7b 0f 19 ab 52 27 b8 9a c6 4d b3 5c c4 99 0e 6f 79 be cb a9 bc be f1 95 d3 d7 81 85 45 03 98 77 db 39 03 dd ae 15 3b 50 e3 1a e9 32 77 1b f2 da 9c d8 6d 1b fd ee 17 89 4c 0c 3b 88 75 ad e7 cc 7d a7 ca f8 9b 0c aa 6f 61 95 fd f7 3f 5d 2d 73 4e 6a d0 b6 82 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 Data Ascii: 8Rg7n`kiARI;R:Ey.aRy\x(XXXuJu{;HhSY{R'M\oyEw9;P2wmL;u}oa?]-sNj
2024-04-25 07:07:22 UTC	12178	IN	Data Raw: 00 e7 5d 15 b1 ea 3d c8 59 a8 3e d4 05 86 ca 3d 8b c2 0c c7 b5 95 8b a0 47 21 db 5f 08 e9 e1 ea 6f 89 66 84 ca 9e 23 66 3f bc cd 88 d9 0f 6d 33 7c f6 83 34 0a 82 b3 a4 2d 94 39 d2 f1 16 96 9c bf 6c cb 0f ec 08 0d d0 6a ac bf 28 2f dd bf 67 81 87 7e 79 18 b5 d8 63 59 a2 de ea 5d 33 9e 61 56 1c 96 9a 8e d3 c9 cf 82 86 11 a4 83 da fb d4 de 63 7c 5f 16 f4 72 9b f3 c5 5e 7c c7 cd 82 46 58 33 e2 85 5b f2 62 cd e4 42 45 62 0a 7b 52 b8 ed e4 fa 50 77 43 30 e8 c4 9a 71 f4 7f 70 fb c1 55 4a f3 71 25 1f 94 17 20 fa 8b c8 a8 87 fa 50 62 81 a2 79 b1 e5 a3 5b 7c e6 a8 dc 1a 37 df 4e 03 03 90 16 ab 29 f7 28 ed cc c0 72 77 30 b8 ae 03 8a 1d 06 79 61 20 e8 0b ea 38 94 b9 dd 53 5f a0 27 ef 9e 88 17 05 c6 0b 1f a1 09 db 09 f1 a9 8c c9 85 90 da 29 90 fe 2e 85 1e c0 2a b6 6e Data Ascii: ]=Y>=G!_of#f?m3\|4-9lj(/g~ycY]3aVc\|_r^\|FX3[bBEb{RPwC0qpUJq% Pby[\|7N)(rw0ya 8S_').*n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50040	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	426	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:22 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1618888 Connection: close Date: Thu, 25 Apr 2024 07:07:21 GMT Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT ETag: "9459ab37c159826cc66c30f9f6df33d0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a080982e88a54647df03225aa56b97c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: RWchiR75Ew6dXeBDvSeqLp06XY-BinWEuenWNyBdSRsaTi6XuwesJA== Age: 2
2024-04-25 07:07:22 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 03 c8 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 01 03 02 0a 0b ff da 00 08 01 01 00 00 00 00 fc ff 00 f3 33 3a 7a cd 66 6f 5b d6 f3 35 bc d6 f1 46 3b 7b f7 bf 59 eb d7 bf 5e bd fb f7 ef a7 be 9e fb 76 12 2c cc Data Ascii: JFIFHH3:zfo[5F;{Y^v,
2024-04-25 07:07:22 UTC	16384	IN	Data Raw: c1 64 21 4a dd dd 78 9e a5 23 47 09 a3 a4 8b 77 63 5f d1 8c 69 7d 8e 2a 56 de 21 b2 01 32 5e c5 4a 7a ea 5e 5c 6c 60 aa db 01 49 4e a8 a0 76 92 4c cb 66 8a 3b b4 4d 17 0f 7d 8c 87 0f 32 76 dd 17 0c 2a 25 6e c1 9c ac 5a b7 66 4e 84 a1 0c cc cf 7e b3 33 33 33 33 7a cc cc d6 cd c5 7a f5 eb d7 bf 5e fd 7a f7 eb a7 4e 9d bb f5 eb db b8 81 5d fb 89 1c 3d 1e d9 84 3c 0e 10 78 6d 9c 28 97 29 c3 97 19 6d d1 d5 8f 87 8a 95 5a d2 6e 55 4b f7 17 a4 4b 52 ef cf 3a c1 63 cc 1b 8f 36 24 52 e5 bc 75 2e be 64 d0 40 d6 7e a5 a0 73 48 22 5b e2 40 3d af 23 ce 8c 96 e8 29 75 28 7c b0 4a 6a c1 48 46 b8 4d 70 0d 63 e5 1c fc a3 a0 ca c1 12 90 0c 7d 20 4e 19 e6 3f 90 6f 5e 85 b9 8f ab b2 ae 7c 1d 67 70 8e 1d 20 a4 53 6e cb 32 11 8b 17 92 21 5c 70 f3 b0 92 2b e8 1c 44 27 43 f1 67 Data Ascii: d!Jx#Gwc_i}V!2^Jz^\l`INvLf;M}2v%nZfN~3333zz^zN]=<xm()mZnUKKR:c6$Ru.d@~sH"[@=#)u(\|JjHFMpc} N?o^\|gp Sn2!\p+D'Cg
2024-04-25 07:07:22 UTC	11977	IN	Data Raw: 37 ac 74 4c 96 e1 e2 df 35 7a db e8 7d d7 cf 1a f6 63 7d bf d0 66 ec 99 76 67 70 9c 6a b7 0f ae 4a e7 35 aa c6 a7 98 d9 9c c3 53 7d 6f e2 e9 dd 8a af 71 bc c9 d7 d9 2a a4 ac d3 d5 4d 13 96 4e 5b 2c 06 e5 b7 3e a1 e9 aa d5 28 37 6b 05 2d 86 99 b1 79 73 35 90 a3 7a 5b 36 87 80 65 7a de c0 00 00 00 00 00 00 00 00 d0 bc e0 e7 00 e7 39 ce 02 f3 85 21 48 9a 68 24 83 64 4d 67 41 e4 e8 ae c7 58 51 ec 64 7e 8b 99 e9 7e 78 b1 37 e7 21 75 39 14 f0 7f 63 d0 0e 01 99 55 29 ce 6e d9 c5 0b 7a a6 6b 16 5b 96 5f 83 44 3e 2e e4 8b 0c ad 18 fb 8f 2d 50 c8 5d b1 ca f4 b4 a2 3f 3b f1 e8 16 5b 36 f5 a9 4d 37 56 51 12 2e a3 76 ec 2c 1b 1c bf 9d 32 df 44 1e 7b cd db 5d 65 6b ed 92 5e 69 b3 4f 1e e4 1e 9d bd f8 93 ce 7b e7 90 bd d3 ec eb 5e 4d 7b 61 7c 6e b5 8f 33 c5 d5 95 bf 99 Data Ascii: 7tL5z}c}fvgpjJ5S}oq*MN[,>(7k-ys5z[6ez9!Hh$dMgAXQd~~x7!u9cU)nzk[_D>.-P]?;[6M7VQ.v,2D{]ek^iO{^M{a\|n3
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: 89 7b 98 21 5a c7 dc 4e 6b 97 76 6f 35 a9 38 da f4 05 98 9a 3a d8 71 6b 86 b3 5f e6 d4 2d 3d 2e 48 a7 78 b3 e0 31 13 52 85 d0 90 69 25 e6 7d 2a 7b 4f 67 e6 ab 34 8f 21 ae 54 ed 1a c1 40 cc bd 1c c2 d8 58 9a 3c 91 e5 ca 97 4a 50 99 78 92 49 a5 4c cf a4 ea 77 82 52 2f f5 7c f5 97 bd 00 00 00 00 00 00 00 00 01 0a db bd 39 8e 73 f4 dc e0 e1 41 38 5e 14 a4 e7 08 08 b1 df 1d b2 2f 14 0a 79 96 1c 57 ad 9b 52 6f d1 68 d9 06 1a 05 2e 97 e8 e5 b2 09 0b 05 81 94 84 aa d9 23 34 2b 3b 6c 3c 75 e3 91 f1 51 71 11 72 55 ec 5b d6 15 25 2e 86 ab c2 c8 ac ce 01 1b c1 e3 a5 27 a3 29 14 cd 06 32 d5 21 60 73 05 13 7c 5f bd 39 fb ca cd 4a 2d b2 19 65 36 46 2e cd 60 7a 1d dc f4 e7 11 95 64 f3 4d 03 5e 7d 80 92 21 29 fb 1d 96 46 5e 9c a3 e8 a6 02 7a bb 1d c9 69 6b 6b 46 93 5e 59 Data Ascii: {!ZNkvo58:qk_-=.Hx1Ri%}*{Og4!T@X<JPxILwR/\|9sA8^/yWRoh.#4+;l<uQqrU[%.')2!`s\|_9J-e6F.`zdM^}!)F^zikkF^Y
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: d6 3f 0f 99 ed 85 bc d0 6b 2b c4 16 88 fb 00 72 e1 75 93 9d 1f b8 27 ea 66 69 1d 8b 06 66 8b 41 61 9b c2 ea ba dd 5f 3e f4 4d ad 67 56 e1 b9 be 61 57 d8 6a f9 6b ba 1d 37 33 75 d0 da 03 8b 8b 4d 8d fa df 27 05 3f 2b fb c7 e2 be fd ab f9 d3 35 b4 db e0 f5 d5 35 59 80 9a d7 79 ef be 27 78 9e f7 ca f7 cc d9 9f ec ef e7 e9 24 92 49 24 92 49 24 92 5d 67 38 fc e9 7a 1d 75 1e 80 59 b2 5c fe 7d 05 2e 5f 57 3c d3 4b 24 93 be 49 25 1e 31 b9 c4 c5 7a c6 d6 11 a7 24 eb 29 0b 9e 62 0d ca d4 49 2d 15 37 43 a3 fa d3 83 e4 b2 1a 1d 6e 07 23 da f0 01 68 c3 0f df 75 9b 97 f9 5d 9b ba 9d 72 fb 7d 5d fd 29 f9 fb 3b 38 b6 ff 00 26 c9 aa e2 98 a8 b5 d4 3d 0b 4c 48 da 98 89 cd 6a 38 61 5d 81 50 42 1e 5f 5f ab c9 f2 82 b7 31 5e dd 33 9d 13 ad 34 9d 35 cf 3e ec 9a 9c 8d 7c 39 8e Data Ascii: ?k+ru'fifAa_>MgVaWjk73uM'?+55Yy'x$I$I$]g8zuY\}._W<K$I%1z$)bI-7Cn#hu]r}]);8&=LHj8a]PB__1^345>\|9
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: 83 d7 79 7d f1 5f 21 cb 50 33 5b a3 6c a4 13 ab d0 58 9b 51 5c 3c 1e a6 fb 03 df e9 51 f8 e1 5b 61 67 71 6b 5e 13 b9 27 ca 74 44 39 96 9b 82 05 86 ce d6 99 47 1b 7c 73 5f 71 9a a3 b8 12 be 16 c2 bc b9 1d ce 3e fe e2 c4 87 fa 9a c3 58 47 4b 49 24 92 49 24 92 49 24 93 97 be 7a 92 2e 49 24 af 1f c7 32 82 86 3b ee 97 34 8f 92 49 26 9e 93 51 87 cc 75 19 f3 43 4d de b6 3c 1f 09 27 aa 7d 0b e9 cb 36 c4 9e 75 9e ba ad d0 4d f4 86 97 e3 51 25 26 ce df 17 b7 e7 84 47 17 b3 46 d8 fd 84 c8 9a c1 d9 eb 5c 64 8c 26 11 21 cb 41 cd b9 05 6c 62 f9 e3 ce 2a 2e 89 9c c9 6b fb af 43 b9 f2 b2 bc 3d 3f 79 bb b9 27 8c 7c 91 45 81 86 cf 4d a3 d1 9e ed a6 a2 73 c6 ab 18 54 ef 5c c1 e4 f2 79 62 90 6f 25 2c bb 28 01 96 2c b7 cf 79 87 69 41 c4 d4 5d 6a ed b4 74 d4 ed 90 8f 58 8a c0 Data Ascii: y}_!P3[lXQ\<Q[agqk^'tD9G\|s_q>XGKI$I$I$z.I$2;4I&QuCM<'}6uMQ%&GF\d&!Alb*.kC=?y'\|EMsT\ybo%,(,yiA]jtX
2024-04-25 07:07:23 UTC	14808	IN	Data Raw: 72 63 6b 11 62 05 86 e9 54 1f ae 33 df bc db ec e1 a2 d6 a4 3e f5 2d 4b 07 1a 8d 71 73 7f e4 4b 09 c4 53 63 0a a5 9a f7 43 2f 8f 7c 9e 3a 2b 19 3e 1d c8 d3 e2 1a fc 4d 5f c8 20 7d d2 58 16 d9 73 1b 0e 4a b5 cc 7d bc 3d ca 79 91 c8 e2 e3 c6 53 42 ce 09 a6 35 91 8c 4a b6 de a5 a6 a7 a2 e1 f9 39 98 37 44 5e 28 3f b6 43 62 27 db 48 c4 41 ca b4 ed c8 af 22 ee 80 ca 4a ef 1b bf 37 5b 11 cd 65 0d 00 8d 34 f1 5b 88 62 81 9a 67 e6 49 00 90 1c 9d 1c 3c 30 8f 9c 9d 5c e6 93 6d 81 ef 54 98 62 65 b4 57 f4 ca 0e 5f 0f e6 63 6b 0b 8d f2 7f 87 e0 54 63 b8 b3 67 a5 48 7c 53 9f 12 60 22 a7 c4 dc 67 11 d7 c7 e5 b3 99 0a b4 ab 58 c7 c9 92 ca 54 39 b8 65 e3 90 e8 96 b7 78 82 e4 14 e6 c8 f1 2d eb 96 65 c5 dd b9 3e 32 bc 55 eb 44 3a d1 2e 27 28 b1 f7 b2 b2 4e a1 81 a4 0d ac cb Data Ascii: rckbT3>-KqsKScC/\|:+>M_ }XsJ}=ySB5J97D^(?Cb'HA"J7[e4[bgI<0\mTbeW_ckTcgH\|S`"gXT9ex-e>2UD:.'(N
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: 64 2e 7b d2 32 31 52 06 d4 65 a1 47 01 ca 8a 07 15 cb 5c b5 b5 68 b4 58 be 98 49 45 18 a2 65 a2 74 ff 00 91 4e 3d c7 e4 a3 f4 db f2 72 7d 5a c4 a2 87 21 69 93 65 6c 26 cc 1a 6c c3 26 cb 42 9b 29 59 36 42 ab ae f9 5d d3 4f 12 de 2e b5 ec 9c ed 73 86 70 5c d1 75 b9 90 13 22 74 f2 a9 0f 55 aa 90 81 d7 2b a3 45 d7 f7 03 d1 16 89 d3 76 8f 9a fe 45 fc 02 db a2 31 db 16 d2 14 3d 19 d3 ce 4e 3a a8 a6 10 52 5a 73 5a fc 1a ba 62 ec d8 cb 63 2e 5b 2e 53 a8 f1 66 62 38 b2 17 7a 00 ea 5a 91 46 cf a6 ee 58 b3 3a 2e c6 91 6e d0 bb c1 ba 19 cb 5e 6c 6c a4 b6 fa 05 f9 c0 5e dd 82 5b 89 fb 05 0b 2a dd 0f 8b 3a bf c0 ff 00 0b 26 4c c8 59 03 28 d5 14 6e fc cb 6c ec a2 77 e5 47 ef d8 fd 39 99 cd 04 f6 60 9d a0 2d c0 56 37 f8 95 a2 78 ee c5 f7 34 be f3 4b 76 5e e6 22 7a 2d 65 Data Ascii: d.{21ReG\hXIEetN=r}Z!iel&l&B)Y6B]O.sp\u"tU+EvE1=N:RZsZbc.[.Sfb8zZFX:.n^ll^[*:&LY(nlwG9`-V7x4Kv^"z-e
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: 32 29 c5 91 4c 65 f9 0c 99 7f 1f cd 82 da 03 64 99 3d 93 26 de cb 98 3d 9d 17 45 a2 1f 54 5e 71 7d 94 fe ed 86 f9 8a 3f 5e 3f db ff 00 a0 c9 93 21 50 ac e0 bb b0 d7 34 c3 d5 68 a2 89 e4 7f 95 56 3b b7 24 b4 fc 82 d3 b6 97 a8 50 a1 59 a5 bf c1 1e 9c c8 c1 9d d9 46 1b 95 ab 3c 96 16 d5 46 cb 29 e9 67 d3 b0 59 d3 3a 65 e2 43 bb b3 47 43 a6 bb 09 6d 75 cb 4d e1 5d e3 44 f2 91 a6 39 34 1a 8f 32 7a 16 e3 44 52 83 b1 13 97 cc 16 3b 53 0b 9c a4 6f ab 3b 3f 45 af c7 4a b9 da b0 39 6e 23 e6 e1 ad 07 18 e0 b8 83 17 66 5c 9c 1c 39 98 8f 21 56 2c 2e 22 b4 7c 63 81 92 ee 47 31 2d 83 b7 05 89 a7 ce 99 46 7a eb db c3 e7 14 8a 0c 7f 0e e0 2d e5 78 7a 9e 74 ae 5b c4 e1 23 b3 37 78 b8 67 b9 f5 76 4f 29 ba 13 21 7a 59 09 08 e0 87 74 92 d2 af 13 94 0f b9 80 81 79 2d eb 70 3a Data Ascii: 2)Led=&=ET^q}?^?!P4hV;$PYF<F)gY:eCGCmuM]D942zDR;So;?EJ9n#f\9!V,."\|cG1-Fz-xzt[#7xgvO)!zYty-p:
2024-04-25 07:07:23 UTC	16384	IN	Data Raw: 4f 6b 28 3f c3 16 d6 93 30 db 96 fb 42 4a 76 8b ca 23 fd e0 7d 6f 74 76 77 c7 df 6f f2 8b 58 f3 79 42 ca 4f 59 03 bf 98 29 26 45 26 62 1a 76 d3 f3 f6 44 ac ab 2b c9 71 3a 15 38 06 d9 2b 58 0c c0 22 50 7e af b5 33 f7 f3 35 f5 fe c2 a3 0f be c8 be 04 21 d6 cd d5 b6 a0 a4 9d e3 ef 58 6f 6b 8a 55 e1 3f 9b 75 29 9a 93 c0 d4 8e a3 9c 25 5f e1 9a fd fb d0 97 48 9f 8c d2 7b 67 0a d1 a6 52 a9 8b c4 1a 65 31 0a 6c fc e5 9d 5a 33 b6 e2 85 e6 cf 64 d3 f5 61 df 51 cf b3 1f da 54 a4 20 ba 02 54 32 55 ed 59 ee 9c 31 68 b3 ba 5c 75 65 61 37 ae 80 95 aa ef ba f6 38 45 9a db 6b 57 8e 78 1d 0a d8 56 49 4d e4 8c 35 8d dc f3 85 2e d0 a7 0b 49 af 8c 48 0a 34 9d 33 ae 60 c2 ed 36 dd 23 6c 24 f8 94 0a 17 94 07 44 7a 38 5e 5e 00 50 6b 43 8c b7 74 04 48 25 32 92 13 77 21 13 58 9f Data Ascii: Ok(?0BJv#}otvwoXyBOY)&E&bvD+q:8+X"P~35!XokU?u)%_H{gRe1lZ3daQT T2UY1h\uea78EkWxVIM5.IH43`6#l$Dz8^^PkCtH%2w!X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50038	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2
2024-04-25 07:07:22 UTC	2758	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 36 32 63 37 37 61 34 31 2d 32 33 66 66 2d 34 39 33 34 2d 62 66 64 35 2d 66 39 31 37 30 30 30 66 36 35 37 65 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"62c77a41-23ff-4934-bfd5-f917000f657e","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:23 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:23 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:23 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50043	44.198.210.177	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	774	OUT	GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1714028833656 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:23 UTC	727	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: prod-xre-app42.ash11 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER Access-Control-Allow-Origin: d9.flashtalking.com P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: flashtalkingad1="GUID=5959F712AA4942";Comment="Flashtalking Cookie";Path=/;Domain=flashtalking.com;Expires=Sun, 25-May-2025 17:07:22 GMT;SameSite=None;Secure set-cookie: _D9J=3d102f36485448189d6bb2c772f3d08f; path=/; Max-Age=31536000; Expires=Fri, 25-Apr-2025 07:07:23 UTC; SameSite=None; Secure;Domain=flashtalking.com
2024-04-25 07:07:23 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50044	130.211.115.4	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:22 UTC	634	OUT	GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:23 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 07:07:23 UTC P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Length: 35 Content-Type: image/gif Connection: close
2024-04-25 07:07:23 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50042	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:23 UTC	2934	OUT	GET /i.gif?e=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&s=LNPdacX2yPbH5pZyBil1Lmeu7pE HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028836..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.1; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:23 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50046	44.198.210.177	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:23 UTC	626	OUT	GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1714028833656 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5959F712AA4942"; _D9J=3d102f36485448189d6bb2c772f3d08f
2024-04-25 07:07:23 UTC	556	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: prod-xre-app40.ash11 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER Access-Control-Allow-Origin: d9.flashtalking.com P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" set-cookie: _D9J=3d102f36485448189d6bb2c772f3d08f; path=/; Max-Age=31536000; Expires=Fri, 25-Apr-2025 07:07:23 UTC; SameSite=None; Secure;Domain=flashtalking.com
2024-04-25 07:07:23 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50045	3.214.158.55	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:23 UTC	790	OUT	GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1714028833656&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1 Host: tracker.samplicio.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:23 UTC	448	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Type: image/gif Content-Length: 35 Connection: close Set-Cookie: _ftv=f9c6793f-073a-44af-b6a9-225217e27b0c; Max-Age=63072000; Expires=Sat, 25 Apr 2026 07:07:23 GMT; SameSite=None; Path=/; Domain=.samplicio.us; Secure Strict-Transport-Security: max-age=604800 X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: bbd0af57fda3c9b8a2780a916f7a5a99
2024-04-25 07:07:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50047	130.211.115.4	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:23 UTC	400	OUT	GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:23 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 07:07:23 UTC P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Thu, 25 Apr 2024 07:07:23 GMT Content-Length: 35 Content-Type: image/gif Connection: close
2024-04-25 07:07:23 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50048	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:23 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2
2024-04-25 07:07:24 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:24 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50050	44.193.171.244	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:24 UTC	607	OUT	GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1714028833656&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1 Host: tracker.samplicio.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ftv=f9c6793f-073a-44af-b6a9-225217e27b0c
2024-04-25 07:07:24 UTC	448	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:24 GMT Content-Type: image/gif Content-Length: 35 Connection: close Set-Cookie: _ftv=f9c6793f-073a-44af-b6a9-225217e27b0c; Max-Age=63072000; Expires=Sat, 25 Apr 2026 07:07:24 GMT; SameSite=None; Path=/; Domain=.samplicio.us; Secure Strict-Transport-Security: max-age=604800 X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: 32554d32b89b28f812e4ac8d14dd2b98
2024-04-25 07:07:24 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50051	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:24 UTC	2701	OUT	GET /i.gif?e=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&s=LNPdacX2yPbH5pZyBil1Lmeu7pE HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2
2024-04-25 07:07:25 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50058	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:27 UTC	2325	OUT	GET /legal/ccpa HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _dd_s=rum=0&expire=1714029743049&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:27 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10041 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Thu, 25 Apr 2024 07:07:27 GMT ETag: "2739-ALofNU/glRg/EAZuisZaxc9xMmg" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 a39699152176bddffd29fe58063d838a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lOlEi9HIwl61z8YFhJ7YPdWgcPXebZTG_bCwroadOqV6bnFUD5cJfQ==
2024-04-25 07:07:27 UTC	10041	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50059	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:28 UTC	2146	OUT	GET /_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028835.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2
2024-04-25 07:07:28 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 516 Connection: close Date: Thu, 25 Apr 2024 05:58:30 GMT Last-Modified: Thu, 25 Apr 2024 05:55:17 GMT ETag: "442c1398c605b69d6cc3349439d63049" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7c221513394b3b02bda5f198eb4ca6d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DxrE2rZzZxk0V5L4J-yjC2-CLKGdt9GlYY4STDDo5_MhcuGxCJKw6w== Age: 4139
2024-04-25 07:07:28 UTC	516	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 36 33 5d 2c 7b 37 39 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 32 39 30 36 36 29 7d 5d 29 7d 2c 32 39 30 36 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50060	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:28 UTC	651	OUT	GET /api/segment?pid=712597&pdata=sid%3D2%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:28 UTC	748	IN	HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: Location: https://di.rlcdn.com/api/segment?pdata=sid%3D2%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92&pid=712597&redirect=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 07:07:28 GMT; Secure; SameSite=None Date: Thu, 25 Apr 2024 07:07:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50063	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:28 UTC	3406	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A26.641%2B02%3A00&epn.hit_timestamp_unix=1714028846641&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028846511-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1172&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:28 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:28 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775972; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 2e67705592d9e70f39603d15b26f4690.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 7kqfFBRtx1gTRsCBbWdcUcnT63g8JMFcfID_kPL98fPGcXvj5UTV9Q==
2024-04-25 07:07:28 UTC	672	IN	Data Raw: 32 39 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 34 39 30 39 32 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 Data Ascii: 299event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.17140
2024-04-25 07:07:28 UTC	604	IN	Data Raw: 32 35 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 34 39 30 39 32 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 Data Ascii: 255event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A
2024-04-25 07:07:28 UTC	660	IN	Data Raw: 32 38 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 37 34 30 37 36 34 34 39 37 26 66 73 74 3d 31 37 31 34 30 32 38 38 34 38 36 35 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 Data Ascii: 28devent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1740764497&fst=1714028848657&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200
2024-04-25 07:07:28 UTC	353	IN	Data Raw: 31 35 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 57 73 4f 57 43 25 32 46 74 69 34 4f 30 63 65 45 25 32 46 42 41 75 30 49 77 59 6d 5a 7a 64 43 47 70 5a 56 75 61 31 46 52 58 6f 44 6e 32 64 63 74 58 57 71 32 50 53 6f 54 6b 4e 7a 53 4e 66 57 31 32 62 30 37 68 47 61 68 55 45 68 52 43 56 47 4e 34 36 37 72 71 32 52 48 4a 47 5a 31 75 76 69 6f 63 6f 79 70 78 54 66 6f 6f 32 4b 5a 6f 46 58 59 69 63 7a 45 73 4a 5a 51 4f 6f 32 42 43 44 42 5a 56 51 75 39 62 25 32 42 41 25 32 46 76 4f 79 49 43 76 78 38 67 6f 43 38 4c 57 6c 4d 62 38 43 6d 32 63 47 6f 77 34 43 47 70 62 75 6e 72 62 37 33 54 38 33 66 Data Ascii: 15aevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=WsOWC%2Fti4O0ceE%2FBAu0IwYmZzdCGpZVua1FRXoDn2dctXWq2PSoTkNzSNfW12b07hGahUEhRCVGN467rq2RHJGZ1uviocoypxTfoo2KZoFXYiczEsJZQOo2BCDBZVQu9b%2BA%2FvOyICvx8goC8LWlMb8Cm2cGow4CGpbunrb73T83f
2024-04-25 07:07:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50062	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:28 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:28 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:28 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 5QEPMGMFZKEJXZP0CDVV Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:28 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:28 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:28 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50070	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:28 UTC	722	OUT	GET /api/segment?pdata=sid%3D2%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:07:29 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:07:29 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50071	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	710	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:29 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:29 GMT x-amzn-RequestId: a315ea9f-f2fe-46b7-8109-f0b0e742843e Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 7b7f9409a41e78466e3ab2772654a73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: A-S5ln_0dHZ1qwb97xz4g7JtSWyI1cw7Dka1JxvEVvuUox-Ro-nbpg==
2024-04-25 07:07:29 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50074	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	1347	OUT	GET /pagead/viewthroughconversion/778938880/?random=1740764497&fst=1714028848657&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:29 UTC	1275	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1740764497&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq8IwpVWav_9PnZgHV4zTB9yseWLE2AZFqevvKLUfWL2u2j_K0&random=3007985919 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50075	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	2376	OUT	GET /_set_cookie?val=WsOWC%2Fti4O0ceE%2FBAu0IwYmZzdCGpZVua1FRXoDn2dctXWq2PSoTkNzSNfW12b07hGahUEhRCVGN467rq2RHJGZ1uviocoypxTfoo2KZoFXYiczEsJZQOo2BCDBZVQu9b%2BA%2FvOyICvx8goC8LWlMb8Cm2cGow4CGpbunrb73T83fWRGkmR89Ar4yrr75ifYAdJQ%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:29 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:29 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 6bd5ca7e040fe8f272f923f5af2b843e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: adTGm25cLSWPT35AVZn5I4mI_dQQeIpWX21oriM_pDOcc_3IxnS1nQ==
2024-04-25 07:07:29 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50073	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	1391	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:29 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"583656143138504020"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"583656143138504020","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"583656143138504020","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"583656143138504020","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"583656143138504020","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50072	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	1291	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:29 UTC	1145	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50057	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:29 UTC	2461	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817; _dd_s=rum=0&expire=1714029743049&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:29 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-25 07:07:30 UTC	1468	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:07:30 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; domain=.wetransfer.com; path=/; expires=Sat, 25 Apr 2026 07:07:30 GMT; secure Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-59fw9-22046 X-Permitted-Cross-Domain-Policies: none X-Request-Id: d4cb653e13de311978ea756583fca2a5 X-Runtime: 0.007545 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: W9ovBUwCTlwPBxg7NXTotYwGifwI48C-Toe-cCuv0mxIMBGAYUrxmA==
2024-04-25 07:07:30 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50076	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	2228	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:30 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Sun, 14 Apr 2024 02:00:46 GMT Last-Modified: Fri, 12 Apr 2024 16:57:00 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8a2c86277035e206275b398626c28834.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EFA2rHU593iflpvIakkZEdV8UaW6dJLsu_Ghwck1ZrCiaz1DYjIxUA== Age: 968805
2024-04-25 07:07:30 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50077	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	1327	OUT	GET /pagead/1p-user-list/778938880/?random=1740764497&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq8IwpVWav_9PnZgHV4zTB9yseWLE2AZFqevvKLUfWL2u2j_K0&random=3007985919 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:30 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50078	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	1183	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:30 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50079	64.233.185.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:30 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:30 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50080	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: fc8d706f-5a3a-4212-b6cd-833348100cc9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:07:31 UTC	380	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:30 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1498 RateLimit-Reset: 4 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50085	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:30 UTC	875	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1866827202.1714028847&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	868	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1866827202.1714028847&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50088	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	3141	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1714028816&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A26.641%2B02%3A00&epn.hit_timestamp_unix=1714028846641&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028846511-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1172&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa18j96.a.1.b; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:31 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:31 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775970; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 74e2a75ed2c90f5498599c99b3925b22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: XPoDshcwcIbfJ6frsGB4KLTdJjGhjmMdNkTdcseuvpFEMna1xgtYMQ==
2024-04-25 07:07:31 UTC	673	IN	Data Raw: 32 39 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 33 34 34 32 38 35 33 38 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 Data Ascii: 29aevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1344285384;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714
2024-04-25 07:07:31 UTC	605	IN	Data Raw: 32 35 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 33 34 34 32 38 35 33 38 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 Data Ascii: 256event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1344285384;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3
2024-04-25 07:07:31 UTC	659	IN	Data Raw: 32 38 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 38 35 37 30 30 36 39 30 31 26 66 73 74 3d 31 37 31 34 30 32 38 38 35 31 32 37 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 Data Ascii: 28cevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=857006901&fst=1714028851273&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&
2024-04-25 07:07:31 UTC	359	IN	Data Raw: 31 36 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 30 4d 75 72 39 49 5a 73 5a 57 58 38 46 42 68 71 42 59 79 62 25 32 46 41 37 56 4f 4c 4a 49 53 51 46 57 72 6f 25 32 42 25 32 42 4e 55 4f 62 59 4f 66 38 5a 68 64 32 70 50 4a 73 30 41 4f 35 6e 46 48 4c 37 4e 57 52 59 4c 56 70 4b 44 39 6e 6c 6c 30 35 54 50 57 4d 39 68 25 32 46 56 6a 61 6d 68 52 67 33 48 78 69 36 71 71 6d 25 32 46 4a 6c 43 5a 6d 76 63 42 59 65 54 55 78 4d 43 55 53 4c 39 47 73 4d 58 78 4e 69 4c 41 6e 6c 46 57 68 47 4e 39 42 52 37 75 66 30 30 25 32 42 66 69 41 4c 70 34 6d 71 38 63 41 48 56 4d 63 4d 4c 76 71 58 55 50 31 70 63 Data Ascii: 160event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=0Mur9IZsZWX8FBhqBYyb%2FA7VOLJISQFWro%2B%2BNUObYOf8Zhd2pPJs0AO5nFHL7NWRYLVpKD9nll05TPWM9h%2FVjamhRg3Hxi6qqm%2FJlCZmvcBYeTUxMCUSL9GsMXxNiLAnlFWhGN9BR7uf00%2BfiALp4mq8cAHVMcMLvqXUP1pc
2024-04-25 07:07:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50087	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:31 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:31 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 0PW8SJ98DEZCJ9XNNQ01 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:31 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50097	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	909	OUT	GET /rp.gif?ts=1714028849398&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:31 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50092	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	993	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUYBSACKAMyCwjA2-e3osDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:07:31 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:31 GMT Content-Type: text/html Content-Length: 967 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiy4PWwo8DyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:31 UTC	967	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50100	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028849586&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVdk9FZXFnRitvUmN3d2Z5c3Y1aGdJcDFPaFd6Z2U0anRPQ0puUzF0Szg3SHhkQkxYTGx0THhMcHJqNzRoZGNQZElUT3Q3SzlaY3czcjU5OG1YUUtNbUh3RDZSMC9FNlB0NmYyS1FtME1oaz0mMDRWRU9vWG9sbU1EQytwV1pXYm9DQWl2aUdZPQ=="
2024-04-25 07:07:31 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3801634601550456 Date: Thu, 25 Apr 2024 07:07:31 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:31 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50102	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028849587&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVdk9FZXFnRitvUmN3d2Z5c3Y1aGdJcDFPaFd6Z2U0anRPQ0puUzF0Szg3SHhkQkxYTGx0THhMcHJqNzRoZGNQZElUT3Q3SzlaY3czcjU5OG1YUUtNbUh3RDZSMC9FNlB0NmYyS1FtME1oaz0mMDRWRU9vWG9sbU1EQytwV1pXYm9DQWl2aUdZPQ=="
2024-04-25 07:07:31 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1132551964811161 Date: Thu, 25 Apr 2024 07:07:31 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:31 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50104	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028849605&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50103	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	1023	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028849605&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:31 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:31 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:31 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50101	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	1603	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028849588 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVdk9FZXFnRitvUmN3d2Z5c3Y1aGdJcDFPaFd6Z2U0anRPQ0puUzF0Szg3SHhkQkxYTGx0THhMcHJqNzRoZGNQZElUT3Q3SzlaY3czcjU5OG1YUUtNbUh3RDZSMC9FNlB0NmYyS1FtME1oaz0mMDRWRU9vWG9sbU1EQytwV1pXYm9DQWl2aUdZPQ=="
2024-04-25 07:07:31 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:31 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1407292094050268 Date: Thu, 25 Apr 2024 07:07:31 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:31 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50096	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028849474 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:31 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50106	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	2530	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 116 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _dd_s=rum=0&expire=1714029749742&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19ak0.a.2.c
2024-04-25 07:07:31 UTC	116	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 37 30 37 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":1707.7000000000116,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-25 07:07:31 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:31 GMT ETag: "38-TVAtbm44wFeWdOyQLoK7KpzLT+A" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YWMTuxQye1gwnVYtkMEWpsgZzwkEvSprHlqhbKnW7QuLnkKbWu7fsA==
2024-04-25 07:07:31 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 31 37 30 37 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 7d Data Ascii: {"status":"ok","metric":"FCP","time":1707.7000000000116}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50107	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	2530	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 116 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _dd_s=rum=0&expire=1714029749742&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19ak0.a.2.c
2024-04-25 07:07:31 UTC	116	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 37 35 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":753.3999999999942,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-25 07:07:31 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:31 GMT ETag: "38-zU2VAeMONBQOIJnTU18+Fr5WnUM" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 3ec7e9c692b1d4a7242f8470f755efa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DpWgZeco3HaM0B8ScWPHF6wVkvHqlpkeH2uoz6Am42q6jg91zQ8daw==
2024-04-25 07:07:31 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 37 35 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 7d Data Ascii: {"status":"ok","metric":"TTFB","time":753.3999999999942}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50108	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiVTA3Mjl5TnltSFFaVmx2eGJzbjBoZCIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5996 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-662a011a-48f7e17d299da0f31f67788b X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:31 GMT Age: 26 X-Served-By: cache-pdk-kfty2130044-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714028852.697042,VS0,VE2 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:31 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-25 07:07:31 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-25 07:07:31 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-25 07:07:31 UTC	1378	IN	Data Raw: 22 7d 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 73 6b 69 70 2d 6d 65 6d 62 65 72 73 68 69 70 73 2d 74 61 62 6c 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 30 33 2d 61 73 73 6f 63 69 61 74 65 2d 74 72 61 6e 73 66 65 72 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 Data Ascii: "},"value":"control"},"skip-memberships-table":{"key":"on","value":"on"},"transfer-details-03-associate-transfer":{"key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"exper
2024-04-25 07:07:31 UTC	484	IN	Data Raw: 61 70 6f 6c 6c 6f 2d 74 72 61 6e 73 66 65 72 6c 69 73 74 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 Data Ascii: apollo-transferlist":{"key":"on","metadata":{"experimentKey":"exp-1"},"value":"on"},"workspace-settings":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50110	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	926	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1866827202.1714028847&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:31 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50105	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:31 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 37 32 61 66 36 31 39 61 35 32 30 36 65 31 65 63 35 34 38 30 66 62 32 37 63 39 30 34 65 65 39 63 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 34 39 37 39 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=72af619a5206e1ec5480fb27c904ee9c&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028849792%2C%22event_id%22%3A2%2C%22session_id%22%3A1714028821782%2C%22
2024-04-25 07:07:32 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0133-679850d56d98e69b5cb6c952 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:32 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50111	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	1635	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028850104&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVdk9FZXFnRitvUmN3d2Z5c3Y1aGdJcDFPaFd6Z2U0anRPQ0puUzF0Szg3SHhkQkxYTGx0THhMcHJqNzRoZGNQZElUT3Q3SzlaY3czcjU5OG1YUUtNbUh3RDZSMC9FNlB0NmYyS1FtME1oaz0mMDRWRU9vWG9sbU1EQytwV1pXYm9DQWl2aUdZPQ=="
2024-04-25 07:07:32 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:32 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="; Expires=Fri, 25 Apr 2025 07:07:32 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7901485390611365 Date: Thu, 25 Apr 2024 07:07:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50114	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	1084	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:32 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"583656143138504020"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"583656143138504020","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"583656143138504020","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"583656143138504020","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"583656143138504020","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50113	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028846671 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:32 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:32 GMT x-amzn-RequestId: 94736c58-8130-471d-b92b-6514cd74cf10 X-Cache: Miss from cloudfront Via: 1.1 8fec22e4e0f460412a9f95c3ff89a9b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: PoPCRNqLYyGo5_ppXx7_-fG8TWmCTAX19BvSJHkjjeA0PQVaUgwkgg==
2024-04-25 07:07:32 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50115	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:31 UTC	2086	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028846.0.0.988032707; _ga=GA1.1.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _dd_s=rum=0&expire=1714029749742&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19ak0.a.2.c
2024-04-25 07:07:32 UTC	582	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Thu, 25 Apr 2024 07:07:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-klm97-27587 X-Request-Id: a74be5964643b5b6d3142686f0dc087d X-Runtime: 0.001477 X-Cache: Error from cloudfront Via: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pm0NjUTg-OcD6TKAhe74KGdPHnmlMmaEHDBfDcMC_no5WClQpe4qPg==
2024-04-25 07:07:32 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50117	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	488	OUT	GET /api/segment?pdata=sid%3D2%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:07:32 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:07:32 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50118	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028849474 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:32 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 32 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"2","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-25 07:07:32 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:32 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:32 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:32 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50121	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028850724 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:32 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:32 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: TDHWVR3DMMGRWCXV2XZD Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:32 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:32 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:32 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50122	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	3411	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A30.584%2B02%3A00&epn.hit_timestamp_unix=1714028850584&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028846511-62-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-62-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3963&tfd=5149&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028841..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.2; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19b99.g.2.i; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707
2024-04-25 07:07:32 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:32 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775968; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8b047a56cedc9f5e8593136caff4a83e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: LSaIL0N7iAJ4saFb0W3b0ww9CwAuhJl_6AUltkdV0b3RHKaQKEfC2A==
2024-04-25 07:07:32 UTC	673	IN	Data Raw: 32 39 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 36 33 38 30 37 36 31 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 Data Ascii: 29aevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714
2024-04-25 07:07:32 UTC	605	IN	Data Raw: 32 35 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 36 33 38 30 37 36 31 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 Data Ascii: 256event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3
2024-04-25 07:07:32 UTC	660	IN	Data Raw: 32 38 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 30 32 30 39 39 31 35 38 39 26 66 73 74 3d 31 37 31 34 30 32 38 38 35 32 37 31 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 Data Ascii: 28devent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2020991589&fst=1714028852715&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200
2024-04-25 07:07:32 UTC	355	IN	Data Raw: 31 35 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 72 57 45 4c 58 4c 36 33 44 6e 53 31 55 41 78 6a 64 56 57 53 6f 77 4c 46 67 4e 72 6e 64 4c 6e 4e 62 4c 64 76 43 53 72 36 35 53 46 4d 42 62 76 31 71 54 41 57 35 62 34 58 75 4c 44 44 41 7a 4e 49 30 32 35 62 39 44 6c 49 25 32 46 65 25 32 42 4b 70 38 4a 59 52 56 34 4a 48 74 53 25 32 42 37 64 6a 48 66 53 32 42 57 58 56 53 79 4a 66 32 73 68 66 57 39 71 59 53 70 47 62 63 68 4b 44 4f 66 6b 50 75 4b 49 33 72 69 4a 25 32 42 58 31 36 72 75 25 32 42 43 6e 50 7a 5a 69 41 36 36 34 75 53 46 69 51 65 58 58 75 4e 48 30 55 31 5a 6f 49 43 35 44 30 46 71 Data Ascii: 15cevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=rWELXL63DnS1UAxjdVWSowLFgNrndLnNbLdvCSr65SFMBbv1qTAW5b4XuLDDAzNI025b9DlI%2Fe%2BKp8JYRV4JHtS%2B7djHfS2BWXVSyJf2shfW9qYSpGbchKDOfkPuKI3riJ%2BX16ru%2BCnPzZiA664uSFiQeXXuNH0U1ZoIC5D0Fq
2024-04-25 07:07:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50120	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	967	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028850711&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:32 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5767346400289820 Date: Thu, 25 Apr 2024 07:07:32 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50119	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028850719 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:32 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:32 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50128	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	909	OUT	GET /rp.gif?ts=1714028850583&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:33 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50126	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028850578&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-62-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50136	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	1640	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028851187&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZCdHpxV2tLeU5vcHVydTZTdlJBc2E0UU9yd0FoZWUrbXVuMGFJN01RdlVQU200VFo1WHY1Q0dkdUpaRHlPd1RScGJpMi9jL01sMWxiWEI0ZXF3QisybElrbzkydjIvZU01dFd4bUU5TTVDTT0mYmwrRkRwZm11dGF1ZTlYREdwMkdrVzNyekdzPQ=="; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1246674433350739 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50127	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	1018	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028850578&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-62-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:33 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:33 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50134	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:33 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 12QCD2C6X9PTARG6PTNV Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50137	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	1954	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:33 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Sun, 14 Apr 2024 02:00:46 GMT Last-Modified: Fri, 12 Apr 2024 16:57:00 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9ccf0420be8414e77edc70962db79938.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xyRiXEzj011h8f5XqmPOK1arMHbqf01Rt_7U7BygpaWLaKazFJBY8Q== Age: 968808
2024-04-25 07:07:33 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50123	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1977 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028837542\|2\|1\|bat.bing.com/p/insights/c/a; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bj7.j.2.l; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.3
2024-04-25 07:07:32 UTC	1977	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6f 43 49 41 50 39 6f 43 49 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-25 07:07:33 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:33 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50139	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	949	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=164909244;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50138	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	1093	OUT	GET /pagead/1p-user-list/778938880/?random=1740764497&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtq8IwpVWav_9PnZgHV4zTB9yseWLE2AZFqevvKLUfWL2u2j_K0&random=3007985919 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50143	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028849586&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1391932812439231 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50148	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028849605&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:33 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50146	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	675	OUT	GET /rp.gif?ts=1714028849398&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:33 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50150	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028849605&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50147	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028849587&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3420545702651090 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50149	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:32 UTC	1401	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028849588 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9955821430860090 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50153	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	710	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028850724 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:33 GMT x-amzn-RequestId: a03c637e-bdfe-4e16-b816-af889f6ae7b9 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 b27acef8f82d05ea139bb88da71a2520.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: _n3LoAQJ0pveI-SFjN_kaZ3kLm2n74S_5cTuFQBHzmmvrRkJ0GunEw==
2024-04-25 07:07:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50152	151.101.194.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-662a0135-6c42d7246debedab69a45e8f X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:33 GMT X-Served-By: cache-pdk-kfty2130079-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028853.188398,VS0,VE72 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:33 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50151	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1392	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:33 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10909644595968643277"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"10909644595968643277","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"10909644595968643277","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"10909644595968643277","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"10909644595968643277","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50154	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	2090	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029749742&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:33 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:33 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1VBSnp-qBVobiPS7tzz9Wn5l_8fzz10gtrUqJ5k8HeRem_vFLlzEMA==
2024-04-25 07:07:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50156	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1433	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028850104&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZVNXZPTHBRRXB5OEVGR09WSGlKaGpvMEhOeHBDdmk0OEtrK1FPaU1yczViSEM0dUR0YU9nL0Y3Mklxbmg3NWwvN3pJcXBuR0lXM3NPZFFvSU12WDNzRU5GMHRMN0tNVEtpSzBTbkQ3amNRWT0mOUNPZGl6NCtkcWtJN2NKNFp0VkpqSnNtUVdNPQ=="; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6087859802390075 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50159	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	765	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028850711&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY5KyttdXpTQnFLbTVLVm9MK1l2RndlTFMyVVZlblVaQ3UvMjNFSEdzTzJaRmlZSGRUYTVrM3N6NDhNWGU3YjdUc0t0K2RYWEpCelk1Z1VHbnpZUkdOR3d3SjFVSTBUYzZYWnZBQW9VTWFiMD0mUUNFWXlJaW05MXRnc0xJNWVENUhnd1V0VWhvPQ=="
2024-04-25 07:07:33 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1723131182096012 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50160	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028850724 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:33 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: ZMKYR43K421M2QN6E8KJ Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:33 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50124	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 31 61 33 31 36 39 64 65 32 62 61 37 31 34 34 66 62 38 64 32 63 39 39 30 37 35 62 30 61 32 66 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 35 30 34 30 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 Data Ascii: checksum=51a3169de2ba7144fb8d2c99075b0a2f&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028850401%2C%22event_id%22%3A11%2C%22session_id%22%3A1714028821782%2C%2
2024-04-25 07:07:33 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0135-202193540d60d1de774da88c Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:33 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50140	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:07:33 UTC	327	IN	HTTP/1.1 304 Not Modified Date: Thu, 25 Apr 2024 07:07:33 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1497 RateLimit-Reset: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50157	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0135-3e94714a189e26c0630fcb40 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:33 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50164	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1292	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:33 UTC	1146	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50165	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1347	OUT	GET /pagead/viewthroughconversion/778938880/?random=2020991589&fst=1714028852715&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:33 UTC	1275	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=2020991589&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqz4IreIYPbP2Ab7Fv5ss6J7ywbfbK_E_NJfe3-9fz-V5pXc8E&random=3021121201 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50166	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	2378	OUT	GET /_set_cookie?val=rWELXL63DnS1UAxjdVWSowLFgNrndLnNbLdvCSr65SFMBbv1qTAW5b4XuLDDAzNI025b9DlI%2Fe%2BKp8JYRV4JHtS%2B7djHfS2BWXVSyJf2shfW9qYSpGbchKDOfkPuKI3riJ%2BX16ru%2BCnPzZiA664uSFiQeXXuNH0U1ZoIC5D0FqaaOIIY2yNgCJafgF4uL3hgOtQ%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:33 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:33 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 9cc8ca4ac849ea5ac6feda62b07aea7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: RqGFuBVO5iGuvW8n4bryRbVdZ9J8qtq7vrD4LsyJJyDEeIhM4g95PQ==
2024-04-25 07:07:33 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50169	44.195.207.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50158	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028849474 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:33 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:33 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50171	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	3169	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028846511&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1866827202.1714028847&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028846511&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=2&ep.hit_timestamp_local=2024-04-25T09%3A07%3A30.584%2B02%3A00&epn.hit_timestamp_unix=1714028850584&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028846511-62-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028846511-62-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3963&tfd=5149&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:33 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:33 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775967; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 f713e2110e2ab0ef29a25c0a3c181edc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: vjcxw5CGCxP65aF7a6FHpSsufWditunTDk0nwhp-I1Sga_FK7PWlag==
2024-04-25 07:07:33 UTC	671	IN	Data Raw: 32 39 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 34 31 38 35 38 34 37 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 Data Ascii: 298event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1441858472;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.171402
2024-04-25 07:07:33 UTC	603	IN	Data Raw: 32 35 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 34 31 38 35 38 34 37 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 Data Ascii: 254event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1441858472;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%
2024-04-25 07:07:33 UTC	658	IN	Data Raw: 32 38 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 36 32 37 39 33 34 34 31 38 26 66 73 74 3d 31 37 31 34 30 32 38 38 35 33 37 36 39 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 28bevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1627934418&fst=1714028853769&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:07:33 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 39 4e 73 69 75 6e 4f 69 54 50 5a 55 4f 4c 56 71 51 41 6f 33 61 37 6c 4b 68 66 72 43 39 5a 50 58 64 47 5a 49 56 71 30 78 6d 38 32 47 5a 25 32 42 50 78 41 61 4f 54 54 46 6c 36 6b 39 72 6c 73 75 47 79 4f 43 36 73 37 52 36 4b 71 6b 42 67 67 57 45 4f 74 55 55 50 4c 75 49 4c 4d 6e 68 25 32 42 6f 39 59 43 69 52 4a 76 6c 44 77 61 52 78 42 5a 4a 63 6e 5a 6d 63 37 51 46 76 32 59 6c 67 36 37 78 79 38 4b 55 39 79 41 4f 53 25 32 42 71 6d 78 6d 64 47 70 35 56 25 32 46 4a 33 65 67 48 45 6b 38 75 75 55 76 4d 34 4e 6f 6a 6f 4f 59 69 51 39 77 52 34 41 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=9NsiunOiTPZUOLVqQAo3a7lKhfrC9ZPXdGZIVq0xm82GZ%2BPxAaOTTFl6k9rlsuGyOC6s7R6KqkBggWEOtUUPLuILMnh%2Bo9YCiRJvlDwaRxBZJcnZmc7QFv2Ylg67xy8KU9yAOS%2BqmxmdGp5V%2FJ3egHEk8uuUvM4NojoOYiQ9wR4A
2024-04-25 07:07:33 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50173	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028850578&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-62-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50175	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	675	OUT	GET /rp.gif?ts=1714028850583&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:33 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50177	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1714028850578&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028849481&coo=false&eid=1714028846511-62-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:33 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50176	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1438	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028851187&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZVNXZPTHBRRXB5OEVGR09WSGlKaGpvMEhOeHBDdmk0OEtrK1FPaU1yczViSEM0dUR0YU9nL0Y3Mklxbmg3NWwvN3pJcXBuR0lXM3NPZFFvSU12WDNzRU5GMHRMN0tNVEtpSzBTbkQ3amNRWT0mOUNPZGl6NCtkcWtJN2NKNFp0VkpqSnNtUVdNPQ=="
2024-04-25 07:07:33 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="; Expires=Fri, 25 Apr 2025 07:07:33 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1822384529961838 Date: Thu, 25 Apr 2024 07:07:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50183	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028850724 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:33 GMT x-amzn-RequestId: 52cb9dab-7a01-4838-b0d5-2fc0668ea28e X-Cache: Miss from cloudfront Via: 1.1 a080982e88a54647df03225aa56b97c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: T-S6q4aKVxop3Z1aEXZCxhGVHyZADK-1Qz1D4-D1zhdU0PRcyfFZ1g==
2024-04-25 07:07:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50184	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1085	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:33 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"10909644595968643277"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"10909644595968643277","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"10909644595968643277","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"10909644595968643277","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"10909644595968643277","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50178	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:33 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DNM28ADJPVM2GXDGQ3ZP Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50185	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	2090	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029749742&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:33 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:33 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nOByPXaSRYuA0gdR84qtvOlpnhPM5lrMaSVnPVQRfoPSPxjDPn7dfg==
2024-04-25 07:07:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50170	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1089	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiy4PWwo8DyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:07:33 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:33 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwjKjbvGo8DyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:33 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50161	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028850719 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:33 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 32 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"2","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-25 07:07:34 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:34 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:34 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50188	64.233.185.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:33 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:33 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:33 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50191	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1327	OUT	GET /pagead/1p-user-list/778938880/?random=2020991589&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqz4IreIYPbP2Ab7Fv5ss6J7ywbfbK_E_NJfe3-9fz-V5pXc8E&random=3021121201 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50192	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	1184	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50193	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	2530	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029752161&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:33 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 35 36 32 32 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":5622.600000000006,"tags":{"rating":"poor","page_group":"/legal","country":"US"}}
2024-04-25 07:07:34 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Thu, 25 Apr 2024 07:07:34 GMT ETag: "37-dx+z7gRvEo2vPtQAuiwwSvVM354" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: yHRSaCDgSumbWbf1GAgulyME1gfq4eNMDxsEKS12ZyyapxTIlngAdw==
2024-04-25 07:07:34 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 35 36 32 32 2e 36 30 30 30 30 30 30 30 30 30 30 36 7d Data Ascii: {"status":"ok","metric":"LCP","time":5622.600000000006}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50194	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:33 UTC	2530	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029752161&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:33 UTC	118	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.005007831527222084,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-25 07:07:34 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Thu, 25 Apr 2024 07:07:34 GMT ETag: "3a-9i3g5MVb/jBD5MKj57At+4Cn9MA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oN_ASeqY4Jo9-XarKjKsgwUt1j702HgcMX6is2fK3DSCz1uoXofH-w==
2024-04-25 07:07:34 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.005007831527222084}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50187	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:34 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:34 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50186	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 5289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028851..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.6; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:34 UTC	5289	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 65 69 64 22 3a 22 61 35 30 30 64 64 33 63 2d 32 65 37 61 2d 34 35 33 30 2d 61 39 35 66 2d 32 62 30 31 65 61 62 39 31 66 38 65 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/legal/ccpa","page":"/","eid":"a500dd3c-2e7a-4530-a95f-2b01eab91f8e","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","
2024-04-25 07:07:34 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:34 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:34 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50189	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:34 UTC	1226	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 39 63 61 32 34 33 37 37 66 34 38 32 32 30 32 34 30 34 32 34 30 39 34 31 35 35 2f 61 39 62 30 62 65 35 66 30 39 31 39 34 38 30 34 39 65 35 64 38 64 64 31 30 35 64 35 38 32 65 36 32 30 32 34 30 34 32 34 30 39 34 32 32 38 2f 66 36 32 65 32 34 3f 74 72 6b 3d 54 52 4e 5f 54 44 4c 5f 30 31 26 75 74 6d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm
2024-04-25 07:07:34 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:34 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:34 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50195	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=70ce5100-4355-4bef-a394-884ef27c92e1&batch_time=1714028852569 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	1549	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 33 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 31 35 32 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":3,"page_states":[{"state":"hidden","start":1525700000},{"state":"passive","sta
2024-04-25 07:07:34 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 70ce5100-4355-4bef-a394-884ef27c92e1 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:34 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 37 30 63 65 35 31 30 30 2d 34 33 35 35 2d 34 62 65 66 2d 61 33 39 34 2d 38 38 34 65 66 32 37 63 39 32 65 31 22 7d Data Ascii: {"request_id":"70ce5100-4355-4bef-a394-884ef27c92e1"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50199	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	2145	OUT	GET /_set_cookie?val=rWELXL63DnS1UAxjdVWSowLFgNrndLnNbLdvCSr65SFMBbv1qTAW5b4XuLDDAzNI025b9DlI%2Fe%2BKp8JYRV4JHtS%2B7djHfS2BWXVSyJf2shfW9qYSpGbchKDOfkPuKI3riJ%2BX16ru%2BCnPzZiA664uSFiQeXXuNH0U1ZoIC5D0FqaaOIIY2yNgCJafgF4uL3hgOtQ%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:34 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:34 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 bf2be852aaf805fb40deebbbbca361e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: LT1qTDBdwyvng3lbR7IcD1zhUPGOibZO1B5yToCnVb2tDJNkhPnK2A==
2024-04-25 07:07:34 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50198	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0136-25537ed145f46f7b74a050ea Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:34 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50201	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	633	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0fa9aecd8cce758c9 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-25 07:07:34 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50203	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	1093	OUT	GET /pagead/1p-user-list/778938880/?random=2020991589&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0h1v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqz4IreIYPbP2Ab7Fv5ss6J7ywbfbK_E_NJfe3-9fz-V5pXc8E&random=3021121201 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50207	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	2090	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029752576&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:34 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:34 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SIaRxxRszwb_geO6uP1hZ-pBFhh0wOcOk01bmC_pPPSmdfcrbbmvOw==
2024-04-25 07:07:34 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50206	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	950	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1663807611;gtm=45h91e44n0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50196	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:34 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Thu, 25 Apr 2024 07:07:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50205	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028850719 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:35 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:34 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:35 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50212	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:34 UTC	2349	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029753051&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:07:35 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:35 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BWj_TCVJvCyLJCgjVItdQd8cORjyXxdTc_dNQ07lYX606SXr4o13FA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50213	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:35 UTC	2090	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029752576&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:35 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:35 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bEQvySZWtR60oBG-uO4SVe1vz6BT16Vv59-i9Mbxkavf3J6Jtwlotw==
2024-04-25 07:07:35 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50208	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:35 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:35 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:35 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50214	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:35 UTC	2187	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:35 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-23868141-bd48-45de-a476-ac29f1c40d92","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:07:36 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:35 GMT ETag: W/"4529-j3Fta546II0b6JqjtpcyMcvjO98" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17705 Connection: Close
2024-04-25 07:07:36 UTC	16001	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 33 34 35 31 39 31 36 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 38 31 38 30 32 38 35 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 32 31 37 38 35 36 31 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 39 38 39 37 36 30 37 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 38 34 36 30 36 33 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4f 44 51 32 4d 44 59 7a 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 4d 77 4f 54 67 35 Data Ascii: {"creatives":[{"adId":523451916,"creativeId":348180285,"flightId":512178561,"campaignId":309897607,"advertiserId":2846063,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyODQ2MDYzLCJhdCI6OTU5LCJidCI6MCwiY20iOjMwOTg5
2024-04-25 07:07:36 UTC	1704	IN	Data Raw: 77 65 74 72 61 6e 73 66 65 72 2e 6e 65 74 2f 73 74 61 74 69 63 2f 70 67 2d 73 63 72 69 70 74 2d 70 6f 63 2e 6a 73 5c 22 5c 6e 20 20 74 69 6d 65 73 74 61 6d 70 3d 5c 22 31 37 31 34 30 32 38 38 35 35 37 31 35 5c 22 5c 6e 20 20 62 61 6e 6e 65 72 2d 77 69 64 74 68 3d 5c 22 33 30 30 5c 22 5c 6e 20 20 62 61 6e 6e 65 72 2d 68 65 69 67 68 74 3d 5c 22 32 35 30 5c 22 5c 6e 62 61 6e 6e 65 72 2d 77 69 64 74 68 2d 66 6f 72 6d 61 74 3d 5c 22 33 30 30 5c 22 5c 6e 62 61 6e 6e 65 72 2d 68 65 69 67 68 74 2d 66 6f 72 6d 61 74 3d 5c 22 32 35 30 5c 22 5c 6e 20 20 64 65 61 6c 2d 69 64 3d 5c 22 49 58 37 31 32 38 35 37 36 31 36 32 36 31 37 34 39 33 32 38 5c 22 5c 6e 3e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 Data Ascii: wetransfer.net/static/pg-script-poc.js\"\n timestamp=\"1714028855715\"\n banner-width=\"300\"\n banner-height=\"250\"\nbanner-width-format=\"300\"\nbanner-height-format=\"250\"\n deal-id=\"IX712857616261749328\"\n></script>","<script type='text/javasc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50219	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:35 UTC	2114	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7; _dd_s=rum=0&expire=1714029753051&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:07:36 UTC	679	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:07:35 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a2c86277035e206275b398626c28834.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: X8xTivfO1ZJHZMUKF4CvdDxSsDWRzpkNVyVA1q0UELmL-xT21yooEg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50217	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:35 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:36 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:36 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50221	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:36 UTC	918	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064485338 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029752171
2024-04-25 07:07:36 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab36a19cbebfafa013306497524434c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: mySabapbqXghqvZUGbiKWGzcli4OHO6sPL9poDJVDRDvKDpjwDxuJg== Age: 74832
2024-04-25 07:07:36 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50220	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:36 UTC	1932	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028852..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.7
2024-04-25 07:07:37 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:37 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-25 07:07:37 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50222	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:37 UTC	934	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064485338 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029752171 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-25 07:07:37 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Apr 2024 07:07:37 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "56b11dee72df8e44c1e72bfd66e237ab" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 bce792b40f7864360050d3276b4991f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: wU08rB0-IkoZFlTz2TiM2daJpHvcjVoK8Fq4ocvMMRMSYIYSGY7mOA== Age: 58747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50029	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:37 UTC	813	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:37 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:21 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:38 GMT ETag: "f05235538f0c742e45c43c011a5b2fec" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 666d79e4c40246d6a13b80f4b926818a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: h8Wa5dQaoNEohU7MMjXUdgxvJLTLwQmpuNCEcqGddVAqOwhqBeOteA==
2024-04-25 07:07:37 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50223	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:37 UTC	730	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/bundle.8109b10fbdcaff69fa1c.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:38 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 229619 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:39 GMT ETag: "dad7e2c18e4a9909920276fe5afaaa16" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 be19c47e504fffea4cece5471967bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: -GPACGQ9wDbgffdsqDqoLYmOUbr9zjSumZH6XBzMfdL_4KSjXWrtPQ==
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 38 31 30 39 62 31 30 66 62 64 63 61 66 66 36 39 66 61 31 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 38 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 63 69 72 63 6c 65 46 69 6c 6c 65 64 2f 69 6e 64 65 78 2e 6a 73 22 3a 31 38 30 35 2c 22 2e 2f 63 69 72 63 6c 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 35 37 35 33 2c 22 2e 2f 64 65 66 61 75 6c 74 2f 69 6e 64 65 78 2e 6a 73 22 3a 39 34 30 34 2c 22 2e 2f 73 71 75 61 72 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 36 39 38 34 7d 3b Data Ascii: /! For license information please see bundle.8109b10fbdcaff69fa1c.js.LICENSE.txt /!function(){var t,e,n={854:function(t,e,n){var r={"./circleFilled/index.js":1805,"./circleStroke/index.js":5753,"./default/index.js":9404,"./squareStroke/index.js":6984};
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 37 2e 36 35 35 32 38 20 37 2e 39 33 33 35 32 43 38 2e 30 34 35 38 31 20 37 2e 35 34 32 39 39 20 38 2e 36 37 38 39 37 20 37 2e 35 34 32 39 39 20 39 2e 30 36 39 35 20 37 2e 39 33 33 35 32 4c 31 31 2e 38 33 32 32 20 31 30 2e 36 39 36 32 4c 31 34 2e 35 39 34 38 20 37 2e 39 33 33 35 32 43 31 34 2e 39 38 35 33 20 37 2e 35 34 32 39 39 20 31 35 2e 36 31 38 35 20 37 2e 35 34 32 39 39 20 31 36 2e 30 30 39 20 37 2e 39 33 33 35 32 43 31 36 2e 33 39 39 36 20 38 2e 33 32 34 30 34 20 31 36 2e 33 39 39 36 20 38 2e 39 35 37 32 31 20 31 36 2e 30 30 39 20 39 2e 33 34 37 37 33 4c 31 33 2e 32 34 36 34 20 31 32 2e 31 31 30 34 4c 31 36 2e 32 31 31 33 20 31 35 2e 30 37 35 33 43 31 36 2e Data Ascii: enodd" clip-rule="evenodd" d="M7.65528 7.93352C8.04581 7.54299 8.67897 7.54299 9.0695 7.93352L11.8322 10.6962L14.5948 7.93352C14.9853 7.54299 15.6185 7.54299 16.009 7.93352C16.3996 8.32404 16.3996 8.95721 16.009 9.34773L13.2464 12.1104L16.2113 15.0753C16.
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 2e 38 31 37 34 34 20 34 2e 39 33 34 30 38 20 36 2e 37 30 32 32 34 20 35 2e 31 35 34 38 38 20 36 2e 34 37 31 38 34 43 35 2e 33 37 35 36 38 20 36 2e 32 34 31 34 34 20 35 2e 35 30 35 32 38 20 35 2e 39 31 30 32 34 20 35 2e 35 34 33 36 38 20 35 2e 34 37 38 32 34 48 37 2e 35 38 38 34 38 5a 22 20 66 69 6c 6c 3d 22 23 46 39 46 39 46 39 22 2f 3e 5c 6e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 30 35 37 20 35 2e 34 37 38 32 34 43 31 35 2e 34 32 38 39 20 36 2e 33 38 30 36 34 20 31 35 2e 31 31 36 39 20 37 2e 31 30 30 36 34 20 31 34 2e 35 36 39 37 20 37 2e 36 33 38 32 34 43 31 34 2e 30 33 32 31 20 38 2e 31 36 36 32 34 20 31 33 2e 32 32 30 39 20 38 2e 34 33 30 32 34 20 31 32 2e 31 33 36 31 20 38 2e 34 33 30 32 34 43 31 31 2e 35 30 32 35 20 38 2e 34 33 30 32 34 20 31 30 Data Ascii: .81744 4.93408 6.70224 5.15488 6.47184C5.37568 6.24144 5.50528 5.91024 5.54368 5.47824H7.58848Z" fill="#F9F9F9"/>\n<path d="M15.5057 5.47824C15.4289 6.38064 15.1169 7.10064 14.5697 7.63824C14.0321 8.16624 13.2209 8.43024 12.1361 8.43024C11.5025 8.43024 10
2024-04-25 07:07:38 UTC	14808	IN	Data Raw: 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 22 53 79 6d 62 6f 6c 22 29 3b 72 65 74 75 72 6e 20 69 28 65 29 26 26 6f 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 28 74 29 29 7d 7d 2c 32 37 37 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 37 33 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 6f 2c 73 3d 6e 3f 74 3a 74 2e 69 74 65 72 61 74 6f 72 2c 61 3d 74 2e 6e 65 78 74 3b 21 28 69 3d 72 28 61 2c 73 29 29 2e 64 6f 6e 65 3b 29 69 66 28 76 6f 69 64 20 30 21 3d 3d 28 6f 3d 65 28 69 2e 76 61 6c 75 65 29 29 29 72 65 74 75 72 6e 20 6f 7d 7d 2c 39 33 35 36 3a 66 75 6e 63 74 69 6f Data Ascii: typeof t}:function(t){var e=r("Symbol");return i(e)&&o(e.prototype,a(t))}},2779:function(t,e,n){"use strict";var r=n(6733);t.exports=function(t,e,n){for(var i,o,s=n?t:t.iterator,a=t.next;!(i=r(a,s)).done;)if(void 0!==(o=e(i.value)))return o}},9356:functio
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 69 28 74 68 69 73 29 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 72 3c 6e 3b 29 6f 28 61 72 67 75 6d 65 6e 74 73 5b 72 2b 2b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 73 28 65 2c 74 2c 6e 29 7d 29 2c 7b 41 53 5f 45 4e 54 52 49 45 53 3a 21 30 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 7d 2c 33 36 32 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 35 34 29 2c 69 3d 6e 28 35 35 31 34 29 2c 6f 3d 6e 28 39 33 33 30 29 2c 73 3d 6e 28 37 31 39 39 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 72 28 7b 74 61 72 67 65 74 3a 22 4d 61 70 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 Data Ascii: ction(t){for(var e=i(this),n=arguments.length,r=0;r<n;)o(arguments[r++],(function(t,n){s(e,t,n)}),{AS_ENTRIES:!0});return e}})},3622:function(t,e,n){"use strict";var r=n(6454),i=n(5514),o=n(9330),s=n(7199),a=TypeError;r({target:"Map",proto:!0,real:!0,forc
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 21 2f 5e 68 74 74 70 28 73 3f 29 3a 2f 2e 74 65 73 74 28 74 29 29 3b 29 74 3d 6e 5b 72 2d 2d 5d 2e 73 72 63 7d 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 75 74 6f 6d 61 74 69 63 20 70 75 62 6c 69 63 50 61 74 68 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 22 29 3b 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 23 2e 2a 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2e 2a 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 5b 5e 5c 2f 5d 2b 24 2f 2c 22 2f 22 29 2c 69 2e 70 3d 74 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 32 33 3a 30 7d 3b 69 2e 66 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 69 2e 6f 28 74 2c 65 29 3f 74 5b 65 Data Ascii: !/^http(s?):/.test(t));)t=n[r--].src}if(!t)throw new Error("Automatic publicPath is not supported in this browser");t=t.replace(/#.$/,"").replace(/\?.$/,"").replace(/\/[^\/]+$/,"/"),i.p=t}(),function(){var t={23:0};i.f.j=function(e,n){var r=i.o(t,e)?t[e
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 5c 2d 4d 5d 5b 5c 64 2e 5c 2d 2c 5c 73 5d 2f 2c 24 65 3d 2f 5b 22 27 5d 2f 67 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 2c 72 2c 69 3d 7b 7d 2c 6f 3d 74 2e 73 75 62 73 74 72 28 31 2c 74 2e 6c 65 6e 67 74 68 2d 33 29 2e 73 70 6c 69 74 28 22 3a 22 29 2c 73 3d 6f 5b 30 5d 2c 61 3d 31 2c 75 3d 6f 2e 6c 65 6e 67 74 68 3b 61 3c 75 3b 61 2b 2b 29 6e 3d 6f 5b 61 5d 2c 65 3d 61 21 3d 3d 75 2d 31 3f 6e 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2c 22 29 3a 6e 2e 6c 65 6e 67 74 68 2c 72 3d 6e 2e 73 75 62 73 74 72 28 30 2c 65 29 2c 69 5b 73 5d 3d 69 73 4e 61 4e 28 72 29 3f 72 2e 72 65 70 6c 61 63 65 28 24 65 2c 22 22 29 2e 74 72 69 6d 28 29 3a 2b 72 2c 73 3d 6e 2e 73 75 62 73 74 72 28 65 2b 31 29 2e 74 72 69 6d 28 29 3b 72 65 74 Data Ascii: \-M][\d.\-,\s]/,$e=/["']/g,Pe=function(t){for(var e,n,r,i={},o=t.substr(1,t.length-3).split(":"),s=o[0],a=1,u=o.length;a<u;a++)n=o[a],e=a!==u-1?n.lastIndexOf(","):n.length,r=n.substr(0,e),i[s]=isNaN(r)?r.replace($e,"").trim():+r,s=n.substr(e+1).trim();ret
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 5f 6c 6f 63 6b 3a 30 2c 5f 68 61 73 50 61 75 73 65 3a 30 2c 5f 66 6f 72 63 69 6e 67 3a 30 7d 29 3b 76 61 72 20 58 65 2c 4a 65 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 2c 73 29 7b 76 61 72 20 61 2c 75 2c 63 2c 6c 2c 66 2c 64 2c 68 2c 70 2c 76 3d 6e 65 77 20 4d 6e 28 74 68 69 73 2e 5f 70 74 2c 74 2c 65 2c 30 2c 31 2c 67 6e 2c 6e 75 6c 6c 2c 69 29 2c 67 3d 30 2c 6d 3d 30 3b 66 6f 72 28 76 2e 62 3d 6e 2c 76 2e 65 3d 72 2c 6e 2b 3d 22 22 2c 28 68 3d 7e 28 72 2b 3d 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 72 61 6e 64 6f 6d 28 22 29 29 26 26 28 72 3d 77 65 28 72 29 29 2c 6f 26 26 28 6f 28 70 3d 5b 6e 2c 72 5d 2c 74 2c 65 29 2c 6e 3d 70 5b 30 5d 2c 72 3d 70 5b 31 5d 29 2c 75 3d 6e 2e 6d 61 74 63 68 28 4b 29 7c 7c 5b 5d 3b 61 3d 4b 2e Data Ascii: _lock:0,_hasPause:0,_forcing:0});var Xe,Je,Ke=function(t,e,n,r,i,o,s){var a,u,c,l,f,d,h,p,v=new Mn(this._pt,t,e,0,1,gn,null,i),g=0,m=0;for(v.b=n,v.e=r,n+="",(h=~(r+="").indexOf("random("))&&(r=we(r)),o&&(o(p=[n,r],t,e),n=p[0],r=p[1]),u=n.match(K)\|\|[];a=K.
2024-04-25 07:07:38 UTC	1576	IN	Data Raw: 21 30 2c 72 29 2c 6e 7c 7c 7b 7d 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 69 2e 72 65 73 65 74 54 6f 28 65 2c 74 2c 6e 2c 72 29 7d 3b 72 65 74 75 72 6e 20 6f 2e 74 77 65 65 6e 3d 69 2c 6f 7d 2c 69 73 54 77 65 65 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 67 65 74 54 77 65 65 6e 73 4f 66 28 74 2c 21 30 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 64 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 65 61 73 65 26 26 28 74 2e 65 61 73 65 3d 51 65 28 74 2e 65 61 73 65 2c 6b 2e 65 61 73 65 29 29 2c 45 74 28 6b 2c 74 7c 7c 7b 7d 29 7d 2c 63 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 74 28 44 2c 74 7c 7c 7b 7d 29 Data Ascii: !0,r),n\|\|{})),o=function(t,n,r){return i.resetTo(e,t,n,r)};return o.tween=i,o},isTweening:function(t){return g.getTweensOf(t,!0).length>0},defaults:function(t){return t&&t.ease&&(t.ease=Qe(t.ease,k.ease)),Et(k,t\|\|{})},config:function(t){return Et(D,t\|\|{})
2024-04-25 07:07:38 UTC	16384	IN	Data Raw: 72 20 69 3d 6e 2d 65 2c 6f 3d 32 2a 69 3b 72 65 74 75 72 6e 20 5a 28 65 29 3f 79 65 28 65 2c 74 28 30 2c 65 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 3a 73 65 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2b 28 28 74 3d 28 6f 2b 28 74 2d 65 29 25 6f 29 25 6f 7c 7c 30 29 3e 69 3f 6f 2d 74 3a 74 29 7d 29 29 7d 2c 64 69 73 74 72 69 62 75 74 65 3a 70 65 2c 72 61 6e 64 6f 6d 3a 6d 65 2c 73 6e 61 70 3a 67 65 2c 6e 6f 72 6d 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 43 65 28 74 2c 65 2c 30 2c 31 2c 6e 29 7d 2c 67 65 74 55 6e 69 74 3a 75 65 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 73 65 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 Data Ascii: r i=n-e,o=2*i;return Z(e)?ye(e,t(0,e.length-1),n):se(r,(function(t){return e+((t=(o+(t-e)%o)%o\|\|0)>i?o-t:t)}))},distribute:pe,random:me,snap:ge,normalize:function(t,e,n){return Ce(t,e,0,1,n)},getUnit:ue,clamp:function(t,e,n){return se(n,(function(n){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50224	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	785	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/LandRoverWeb-Medium.4427ee73c2ac6d6a97d7.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:39 UTC	681	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 41124 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 16 Apr 2024 17:45:00 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "d747e7e3db3ecf479e1164662f582a12" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 ac876676fb21384353e1db9584b0c1de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: uoJ1Li4iwmazQL_DBN5gYjd-25gvvtjtLbEr-S7G7Sc1Ak_zDj9aCA==
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a0 a4 00 10 00 00 00 02 3d 20 00 00 a0 43 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 e4 76 1c bd 2a 06 60 00 94 2a 08 83 1a 09 8c 23 11 0c 0a 84 d2 14 83 e4 02 0b 8b 16 00 01 36 02 24 03 96 28 04 20 05 89 5f 07 ae 09 0c 84 5b 5b 59 ff 91 06 a5 87 7f be 22 ad 0d 8b e9 36 04 00 a7 3a 35 b2 fa a3 2e 88 63 6c 20 3d 2c 3d b7 f8 29 d4 9a 96 50 82 37 7d 28 6e 07 da fe 3b cb fb b2 ff ff ff ff ff 7f 47 b2 90 31 bd bf c0 fd 27 09 00 00 a8 6a b5 ed d6 6e 90 47 ce a6 a4 e4 4c bc b6 60 8e c1 e6 0e 46 3e 89 0d ee 15 b3 63 29 65 cd 46 61 e4 58 11 83 b2 67 2c 5b b4 b2 e3 28 67 ad 83 cd 23 9c e5 e9 b2 d9 05 d5 e9 28 16 cd d9 22 7a cd ce 32 44 dc c8 dc 64 6a a6 b3 42 c4 ef 54 5a 86 c7 f3 e3 d5 1a 76 1b 11 98 Data Ascii: wOF2= Cv`#6$( _[[Y"6:5.cl =,=)P7}(n;G1'jnGL`F>c)eFaXg,[(g#("z2DdjBTZv
2024-04-25 07:07:39 UTC	10463	IN	Data Raw: f9 48 85 26 51 d8 2f 26 49 58 16 2b d3 82 88 80 fb 4b b4 c2 d5 32 a2 3a d3 08 62 89 11 eb 6c 46 61 99 27 da 86 24 17 62 26 35 f5 d2 ca 41 15 ab 35 d9 da 26 2c 06 7d bf c2 94 06 86 16 14 71 28 03 af 1a 82 b4 f7 5a 66 ea 3b 96 0b 86 21 50 64 d5 5b a5 08 ca 78 f7 78 f7 78 62 a1 e3 12 87 6b 97 e2 b5 22 cc f5 22 e1 37 0e 76 1f f8 5c 4e 12 ca b8 df 7c 6b a2 30 71 55 16 36 ec 6a 09 57 c1 62 a5 32 94 c3 b9 c1 9c 44 55 46 e5 83 bb c8 fa 68 b9 c6 82 22 41 8c e0 32 ab 51 f7 99 2f 9d 11 f0 8f b1 fa 90 78 1b aa 95 d5 88 b0 2c 75 f6 e1 c6 e5 97 0f 8c 93 08 20 f6 f3 65 1e cb f2 6d b1 f9 f7 9a 90 fb 20 54 47 99 ff ae 39 16 40 a8 4b 8b be 5e 04 53 b7 60 13 24 30 e6 fd f0 f4 fe f5 34 34 9b 26 b2 bf d7 ac a9 a5 ca 0b 72 29 ae d6 f2 d8 43 e5 ac fe e7 dc 11 ce 7e a6 09 fa 0d Data Ascii: H&Q/&IX+K2:blFa'$b&5A5&,}q(Zf;!Pd[xxxbk""7v\N\|k0qU6jWb2DUFh"A2Q/x,u em TG9@K^S`$044&r)C~
2024-04-25 07:07:39 UTC	14277	IN	Data Raw: fc 5e 76 94 74 bf b3 c4 5c f5 50 63 25 71 76 75 25 d0 99 ae c0 6b 78 89 3a 53 18 d4 78 2a d0 48 00 c4 50 3c 14 10 00 ed 14 0f 19 04 80 ba 4d 71 10 ce 52 63 97 80 ce f6 15 34 25 df 05 92 f3 d5 25 5f 90 4a 1d 0a f1 64 02 17 a2 02 5d 69 46 70 a5 25 30 9b 1c 8a c6 32 9e bc 86 97 38 63 9a 7f 7d 70 51 27 0a e3 fa ed 04 43 e0 a8 4b fa 81 07 58 02 9a 0e d5 73 a2 c1 14 55 a6 b8 90 4c a9 06 9c 13 a7 53 78 37 aa f5 5f fa e0 5a cb 90 55 af 03 9b 43 49 58 31 90 00 f4 e9 92 fc a2 27 46 53 02 49 55 e8 49 b4 6c 34 ac a0 9d 66 2b fd 5c f1 4b 60 ab 2e 79 f8 60 e6 c0 93 16 1e 9a 42 69 fe f3 08 5b 5a 9f fb b8 28 df b2 e2 f1 96 b6 97 5b fe 79 c2 ef bc bd 5c 74 84 12 0c ce 8f e8 8f 9e fa 7b f3 9b c5 52 98 2d e3 e2 6f fa e7 47 dd 7e c1 37 b4 23 fc d1 71 40 19 7d 0e f6 1f d9 e2 Data Ascii: ^vt\Pc%qvu%kx:Sx*HP<MqRc4%%_Jd]iFp%028c}pQ'CKXsULSx7_ZUCIX1'FSIUIl4f+\K`.y`Bi[Z([y\t{R-oG~7#q@}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50227	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	790	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/grain.2c6cfe7dc5dab33d9c07.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:39 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 22140 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:21 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "1ac622908c72eb05313dba1e55b5707d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ecd7f85aad45b54f0ed576acc263d458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: AYp8osfMVd9nUvxTxh_UYhjPO1GTltNMx9sKV4rLGv1VpCEcEsYv1Q==
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 02 03 00 00 00 04 13 66 e6 00 00 00 0c 50 4c 54 45 2d 2d 2d 80 80 80 bf bf bf ee ee ee e1 8d 44 49 00 00 00 04 74 52 4e 53 0a 0a 0a 0a cb 83 02 bc 00 00 56 1b 49 44 41 54 78 da 15 d1 fb 43 92 f7 c2 00 f0 ef c3 4d 50 b4 07 04 04 45 03 05 2f a5 85 a6 a6 cd da f3 e0 03 82 b7 00 c1 5b 5a a0 68 da ac a9 69 b7 55 03 05 2f a5 05 86 a6 a5 a5 a5 ad 5a 6d da 6d b5 77 9d 03 26 66 65 0d 4d cb 9a 35 2b bb ed 6c 7b 75 d5 d6 ce 69 7b 2f 7f c1 e7 87 0f e0 e9 b6 bf 3c fb b0 3c 6c e7 7d 1a 99 7a 2b f7 ed f2 b3 0c fc 79 8d 49 94 1e f3 e7 da da 1d 63 ed d9 7d af 09 0a c1 d9 3d e7 7c 91 56 6a a2 2c 47 1a c6 04 8c 8a c1 19 1e 23 0f b6 12 3e bd d8 86 94 d2 68 89 b3 fc 09 62 05 20 32 da 65 d7 0c 0e 0a 33 bc Data Ascii: PNGIHDR,,fPLTE---DItRNSVIDATxCMPE/[ZhiU/Zmmw&feM5+l{ui{/<<l}z+yIc}=\|Vj,G#>hb 2e3
2024-04-25 07:07:39 UTC	5756	IN	Data Raw: 22 78 ff bc 22 c1 8e ea f0 af 57 4b 65 31 6c 9d 24 86 8a ad 7a 6d 31 64 73 09 8a cd 25 21 de cc 93 6d 43 20 f5 93 b2 45 d9 b6 67 f0 d3 b5 8c fe 90 d2 cd a8 62 a7 0a b4 08 bc ae 78 0c 18 10 01 e0 a8 11 f2 47 22 d7 81 a3 07 d6 a0 52 2f 9d 7a 6c 08 6f f8 c6 34 9d 30 20 48 89 a2 20 c0 58 1e 59 31 56 ae 78 ca 08 5f 20 c1 8b 80 ec e4 4d 5f 1e eb 97 9f ca d6 88 15 00 63 81 87 c4 ee 9b b2 c0 64 6c 3e f4 02 33 17 fb 57 05 d7 e4 dc 14 1e 93 af 27 b7 ac 9b 2c ae 0b 60 b9 06 b8 7b 1b a0 08 fb f0 e2 5b 76 cc 94 25 90 e7 e4 ee cd 79 5c c1 16 08 b4 a0 fa f9 0d 90 63 b8 44 f4 07 20 b3 97 b2 2e 5a 26 39 07 2f a2 5c a6 40 fe 39 34 b7 ad 17 b4 f5 8a a2 6a b6 65 ea e7 58 66 09 a8 d9 d9 80 91 37 7a 8a 06 bb 2c 7b 27 9d b8 c6 a1 69 7e 5d f9 bc 51 56 f1 f2 3c 73 1b 33 10 08 92 Data Ascii: "x"WKe1l$zm1ds%!mC EgbxG"R/zlo40 H XY1Vx_ M_cdl>3W',`{[v%y\cD .Z&9/\@94jeXf7z,{'i~]QV<s3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50226	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	786	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/1.54cf34588a1445a7e768.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:39 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 367532 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "919afcc9672a5541843a4796383ff076" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e3098dac6011d7b876f33fc65717302a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: lDdmu2_hWIgUDNU-4gseMas5fjNDJw1FGuG2ym4sFBCd21yiYtKk1w==
2024-04-25 07:07:39 UTC	15867	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c2 00 11 08 06 99 07 a2 03 01 22 00 02 11 01 03 11 01 ff c4 00 38 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 45 0e e7 dd f8 4c 03 57 25 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T"8ELW%
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: b7 d7 9d 9a 5c 6f 6b eb f0 56 b5 4a a7 6c 7c 9f dc fb 46 45 b4 7c fb ab f2 2e fc ae 61 66 e5 f4 f5 5f a3 9d 52 7a 6f d3 a8 2c f6 bd 0a 21 ce ee 35 18 cb 72 74 22 eb 7e 14 a1 9e b7 9b 3d 67 57 41 52 19 eb a2 1a 03 35 63 8d 3c 6f 4c 19 04 9b d1 c9 7c de 1e dd 08 67 b4 b7 db 3a 38 68 46 83 cd 68 c7 36 2e ba 22 a9 19 ab 8d 45 f1 ab 25 a3 1c 2f 8e 9a 2e 2a 49 9b ca 94 5b b8 d4 16 57 5e 8b 25 f5 99 29 bd 18 d1 65 d0 8d 09 c9 7d 50 69 2f c2 92 5b 8d 51 5b 76 34 9f 36 f2 cf 91 6d e9 b6 b1 6d aa c4 b8 d5 1e ad 4e 93 2d b9 51 83 5a 2a 82 34 07 4a 5a c5 b9 52 6c cb f1 a6 f9 d5 b9 67 ca 4b 92 a2 f6 dc 26 7c 6e 74 a1 9e f1 7a 59 ef 65 c2 66 c7 78 d2 59 ea 2e 4e 83 39 e8 cb 31 2e 9b e5 ad 4d 27 ca 7c cd 46 ce 8c ce 9a cd 8e f3 a8 3a 10 b9 d2 bb cf 1b 7c 7a f3 72 72 ef Data Ascii: \okVJl\|FE\|.af_Rzo,!5rt"~=gWAR5c<oL\|g:8hFh6."E%/.I[W^%)e}Pi/[Q[v46mmN-QZ4JZRlgK&\|ntzYefxY.N91.M'\|F:\|zrr
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 5d 1a d3 9c 2f 94 c5 a9 8a d5 20 d7 b1 70 03 72 92 3d 14 f9 e4 cf 59 56 e8 2f e2 73 84 f4 ad 1b 3c 93 73 d1 37 cf 34 da ed 86 79 96 87 a1 57 de 33 26 d8 91 d2 e1 66 64 36 7b 9c 54 97 a6 a7 cc 65 47 6b 53 07 a5 14 76 fa 2a f2 72 f7 3a 87 03 b9 e9 85 3c f3 ad eb 27 1c ef 33 db 64 e5 c3 de e8 72 cc 6d ff 00 3c e8 0f 46 d0 e6 2c 9a 10 ab 68 81 2b 4c b3 2c d2 9a 76 2a e8 56 4d ab c4 67 e5 6f cd ff 00 d0 cf cf 2f 6f 9b bd b0 02 e7 9f 97 0a d6 7e 7e 99 50 d6 3e 99 ac 51 87 3f a5 dd 73 5f 6a fc 77 7c f5 a9 7a d5 0f a3 f9 8f 34 1f af c1 d3 c8 25 df 5c c7 bb cd 57 d0 7c 06 75 e7 ef dd 7a 5f 0f 4f cf 25 f4 2c 57 a7 9c 8f 4f d9 70 f5 f9 63 e5 e8 f8 3f 57 65 c4 fc 3e c3 60 cf 9b fa 7f 86 78 69 db fa bf 80 c7 8f 67 8d 79 65 59 2c da a7 72 cb 6e 46 c2 2c 62 d0 ef ae 67 Data Ascii: ]/ pr=YV/s<s74yW3&fd6{TeGkSvr:<'3drm<F,h+L,vVMgo/o~~P>Q?s_jw\|z4%\W\|uz_O%,WOpc?We>`xigyeY,rnF,bg
2024-04-25 07:07:39 UTC	15325	IN	Data Raw: cd a4 2a 01 02 08 47 c5 9a d6 1d 14 83 6a 87 eb 48 96 3d 47 b4 b7 20 6e b6 ca 0e 46 91 d3 43 17 8a 10 86 cb 29 8d 35 34 2d e3 6d 70 b6 e8 1c e5 22 80 ca 55 8c 71 e1 f5 8e d9 10 ed 48 22 79 94 87 48 f3 42 28 8d 18 62 ad 22 15 da 8c 8a 78 55 25 00 f6 e0 07 24 5a 41 fc d0 43 1a 85 52 89 04 2c 71 1c 51 26 5c e6 02 48 a7 89 08 19 16 c1 c2 06 68 a2 8f c0 81 22 71 e7 48 8b 80 f2 43 0c a4 10 62 b6 54 d0 fb 44 65 5c 34 08 47 c4 45 06 80 2c 56 dd b9 36 91 96 29 f3 46 18 0b 78 5b 74 56 61 4c b1 eb 8a 58 62 67 66 2b 6d 0b 6c e4 c7 10 5c 96 11 c6 83 06 0b 5d 42 95 b6 89 1f 57 6b 6b 58 d8 30 d2 de 59 06 16 18 03 15 a7 8a d8 cd 91 ed a3 7c e1 2d a3 73 82 60 54 f8 2f b7 86 79 01 a9 60 86 22 40 16 f6 fa 9a 5b 58 16 36 72 62 83 19 a5 82 16 fa 31 41 a0 14 b6 f6 ba fc 16 28 Data Ascii: *GjH=G nFC)54-mp"UqH"yHB(b"xU%$ZACR,qQ&\Hh"qHCbTDe\4GE,V6)Fx[tVaLXbgf+ml\]BWkkX0Y\|-s`T/y`"@[X6rb1A(
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: b8 78 81 2c ea 54 10 08 71 ad 7f 07 61 1b 95 ed ad 1f 04 00 c5 1b 39 53 32 27 8c b8 c6 4e 19 b2 88 18 79 a7 89 8b 06 58 fb 6c 71 4f 36 92 80 3b 68 eb e5 88 0d 9a 8b 0c e4 1f 39 29 4e 91 a6 05 2c a3 70 1a 49 8c cd aa 82 85 7c a4 43 53 95 d5 30 ec f2 82 46 0c 93 87 02 a6 5d 99 18 a7 86 3b cc d8 61 a8 4c 9a 2a 7f a8 94 39 3a b4 5b 9d a9 15 08 00 fd 48 42 63 4c bc 98 49 01 ed ea 74 f2 d1 b4 4c 19 43 30 f0 15 74 52 06 18 83 5b 68 ca 8c e0 f8 d4 3b 02 0a ab 79 34 7f e2 9d 02 8f 0b f3 6c bb c2 51 b6 57 d4 63 04 32 ae 5b 2b a6 46 e7 01 86 77 19 2b 28 5f e5 23 28 f8 af 91 f7 1a 83 e4 bb 1e f2 2d 31 52 72 09 5d 6b 00 a9 21 73 a0 04 90 ec 69 fe 25 30 ff 00 16 50 02 81 93 4c 36 60 09 1f bb 41 0a f9 a4 25 ce cc c0 07 d8 f6 fc 83 4c 18 1f 3b 0c 56 c1 70 42 e0 79 27 25 Data Ascii: x,Tqa9S2'NyXlqO6;h9)N,pI\|CS0F];aL*9:[HBcLItLC0tR[h;y4lQWc2[+Fw+(_#(-1Rr]k!si%0PL6`A%L;VpBy'%
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 28 2e 41 a2 4b a8 0a 10 0c e5 01 06 8a e0 16 25 f6 00 53 9f 88 c7 87 19 a0 81 fe 25 88 2a 4d 36 59 41 a5 c6 06 7b 7f 30 f4 63 56 c9 08 9a fd c8 14 ae 07 90 05 46 58 c8 76 40 de 70 ab 85 63 41 14 a6 41 46 5c 14 27 25 68 7d 93 5e 47 d0 5c fc ab 50 87 01 4a 87 cb 36 a7 e8 ab 1c 0a 0c b4 50 8d 8b be cc 98 05 1c ea 1a 49 15 d1 63 2b 10 41 9a df 56 f9 09 50 fd e8 20 5c 38 9b e6 18 bb c4 a9 b0 ce 24 43 4d 0a bb 09 15 90 26 29 df 3a ab 35 b1 84 87 11 9e d9 2c ab 92 b5 da 91 ce ce 8e ac 86 22 61 48 d5 ca c4 14 c2 d4 80 2e a4 2a 60 96 19 f8 ec 62 54 50 4d 76 df 6d a9 db 72 a4 92 cb e4 48 03 ba 90 24 11 0c 05 7f 3b 54 92 4a 0e b4 88 a1 86 01 f9 30 08 73 e4 91 85 f3 b6 c4 d2 cf a9 c1 91 dc 90 0a 46 22 ce 1a 43 a9 4a 58 42 2f cc 8e d8 1a fd b0 34 48 27 34 f2 7f 4a 14 Data Ascii: (.AK%S%M6YA{0cVFXv@pcAAF\'%h}^G\PJ6PIc+AVP \8$CM&):5,"aH.`bTPMvmrH$;TJ0sF"CJXB/4H'4J
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 00 15 83 5a 9a d6 8a d6 2b 02 99 4f e5 83 41 4b 12 0f b7 8d ab da a5 18 00 fa 89 8a fd ac e8 2a e3 47 1e 3b 46 bb 32 62 a1 56 5f e4 28 90 05 49 21 39 14 bf 75 e4 56 4c b6 c0 09 15 95 c8 31 d7 a7 bc fc 9c 2f 55 5a 4a 9c 5d ea dd 71 51 35 7c b1 a8 b4 0a 96 ee b5 eb 1f 11 cb f5 5f 51 a7 05 c5 73 de 97 7a 8f d1 90 b0 e7 a2 22 41 e3 4a 08 33 5d 93 9f 1d a3 5d aa ed d7 6c 56 ab 58 5a e9 51 2c 1c 9c 12 2f 49 c8 2e b8 d5 51 1d a9 72 41 31 a8 fa 95 7f 64 1a 11 26 a4 9c 6b 1a 05 55 26 4d de 67 40 b8 a0 a4 11 98 ff 00 68 96 37 6a d3 2e b1 c1 04 a0 f9 82 07 09 91 2b b6 86 3a 1e 05 5c 38 86 4f 2a c4 e6 bb a4 29 5a 40 e2 1c c8 cc 59 c9 8c 19 f6 08 58 3b 00 24 49 26 40 a2 59 e3 0c bd d1 b7 6b 1a 6d 1b 10 1e 58 9d d7 54 0b ac 58 67 12 32 7c 50 2a c4 11 45 bc 91 ae ca 16 Data Ascii: Z+OAKG;F2bV_(I!9uVL1/UZJ]qQ5\|_Qsz"AJ3]]lVXZQ,/I.QrA1d&kU&Mg@h7j.+:\8O)Z@YX;$I&@YkmXTXg2\|P*E
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: cb 23 22 2d cb 2a 80 59 e2 11 86 12 b1 48 f7 30 14 29 93 21 58 cf 86 48 dc 8a 99 70 85 96 3f 16 e2 82 af 69 9a b4 47 85 4b 85 fa ac b7 da ef dc 21 4f 69 d1 4e a5 0a 13 94 01 94 8a 45 0a dd b0 31 bb 03 12 6a 1f 67 c8 50 29 8e a4 32 33 32 85 67 97 25 41 70 d2 08 f2 82 20 fa b4 9d 90 14 04 94 1c 2a 89 31 a6 94 1d 83 0c 9f bc 51 8c e8 03 06 0a a5 16 cd 11 a4 71 52 44 b1 b1 03 66 72 45 6a 34 c1 97 e2 eb 49 92 30 bc 74 31 7b b0 8a b0 ac 31 2a 8e 4e e0 aa 1c 5c dc 4a 5d aa e2 e2 51 b3 0b 7b 81 3f 29 73 2d 49 72 a0 57 33 c4 f1 fc 83 7c e7 f4 cb 84 9e e2 46 8a f3 d2 fe a4 b6 5d ed 27 e1 bd 42 e3 81 0c fc ef 35 03 84 b9 ff 00 13 27 d3 8e a3 b1 23 14 39 8e 3c e2 85 f5 bb 0f 06 e2 17 fa ee 2d 78 6d 42 b4 44 1c d0 8d d0 e6 84 4c a4 93 a3 0f 03 05 7c 80 cd 44 0a 15 86 Data Ascii: #"-YH0)!XHp?iGK!OiNE1jgP)232g%Ap 1QqRDfrEj4I0t1{1*N\J]Q{?)s-IrW3\|F]'B5'#9<-xmBDL\|D
2024-04-25 07:07:39 UTC	398	IN	Data Raw: 7c 50 55 5a 7e 8a b1 63 80 3a 3e c6 39 32 0f 47 d8 f7 0b 89 ba 36 d1 b2 c5 ba 37 8f 65 d4 1e 8a e3 44 88 43 f4 6d 98 35 27 46 d8 95 f2 bd 25 69 e7 53 d1 b6 87 c8 93 a4 2d 02 f8 3d 1d 67 9c 96 e9 0b 46 18 12 74 8d bc 7f 52 74 a4 4d 52 74 94 46 87 4a 46 46 19 3a 59 58 36 5f a7 0a b6 1b fc 38 b4 dd 3d a0 a3 c1 b2 ae 48 e0 9c 8c 93 c3 47 83 96 e0 e3 fa 23 83 88 fd 1e 05 3e 89 e1 11 73 5f a3 a0 03 23 89 8e bf 47 4a fd 26 3a 1c 54 67 e8 f1 f0 d1 b0 8a 92 c2 1c 1a fd 3d 73 9a 36 11 0a 36 00 79 a3 62 83 ef da 2d 7b 54 22 85 ac 59 c5 1b 78 40 cd 76 22 14 63 41 f6 60 4c 8a 31 e2 b4 52 2b 54 06 b4 51 58 18 af ea b3 f9 f9 a6 2d 8a 0b fd d3 17 1f 5f 23 59 14 d4 58 81 59 34 1b 06 84 a5 be f8 e4 82 e2 fe 38 a7 e6 3a 72 7b 05 33 c2 a3 22 95 71 5a 93 4c 87 c5 00 29 42 6a Data Ascii: \|PUZ~c:>92G67eDCm5'F%iS-=gFtRtMRtFJFF:YX6_8=HG#>s_#GJ&:Tg=s66yb-{T"Yx@v"cA`L1R+TQX-_#YXY48:r{3"qZL)Bj
2024-04-25 07:07:39 UTC	12792	IN	Data Raw: a4 8a 3c 1e cc f3 38 66 86 34 91 11 04 41 a1 f0 15 97 ce ab 08 d5 9e 95 23 c0 dd d6 dd ad c0 8d ad 8a a8 d8 46 23 03 4b 66 44 56 26 6e e4 c8 31 ab 45 13 bd 58 4e c1 25 2f 6c 7b 32 60 5e b6 92 ab 0f 71 2d ca 6a ca 92 c7 00 cb 15 65 66 65 60 64 0a 22 90 31 60 ff 00 b6 41 20 de 18 88 5a c9 9b 2f 52 1f 08 d4 dd d2 db b2 26 e8 c6 a5 61 ae b4 b2 36 44 6d 2a 40 a8 59 99 50 a6 5a 36 88 01 99 24 07 00 38 df 18 6c 94 c0 85 8e 70 75 28 4a 8c 76 f2 69 06 b8 c8 74 d4 61 95 9d 4b a6 08 fb 39 08 29 57 b8 da 81 6e c5 8e 1d a5 2a 95 17 24 5c ae 63 b9 50 49 78 ee 70 81 07 bc 82 dd 86 4d d8 9a 77 c6 92 b9 a2 ba 62 99 d4 a7 9b cb 03 71 fb 8b 6f 6c 90 85 c3 c6 01 dc 49 31 32 1a e2 f0 e5 83 74 25 e2 71 7e b6 73 9b f2 70 6b c6 ce e5 cf ee bd 23 1c 52 0f 14 c7 c1 a9 5b c9 cc c7 Data Ascii: <8f4A#F#KfDV&n1EXN%/l{2`^q-jefe`d"1`A Z/R&a6Dm@YPZ6$8lpu(JvitaK9)Wn$\cPIxpMwbqolI12t%q~spk#R[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50228	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	786	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/2.35fa86589c24243c6674.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:39 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 694264 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:53 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "8c006c906057fb2ad82d54007c88e1f8" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 666d79e4c40246d6a13b80f4b926818a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: fGb1lchoPD_rplgnVAJQIpGTYws-H5Vs5JCT6jecFqGo9plDzUsZEg==
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: ff d8 ff e1 0f fe 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 a2 a0 03 00 04 00 00 00 01 00 00 05 bf a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifMM*V^(ifHH02210100
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 3c 96 de 72 37 da 32 b2 b4 ab b5 77 7d da eb 81 c8 56 7b fd 97 90 db f9 86 2f ba bf 35 76 6f 7e 96 d0 ac 51 29 dd f7 57 fd ad d5 ca a4 3f 69 b9 fb 3f dd 4b 75 a2 f3 4d b9 b9 45 b8 8f 3f ba db f2 ee a5 c9 aa 03 b6 7d 49 ee 66 fb 3f 97 ea db 9a b2 ee 6f 12 db 49 df 23 7f 1f cd f2 d5 2f f4 9f b3 34 7f 2a f5 5a d2 b6 d6 2d b4 e4 5f b4 2a 4b b9 3c a6 8d aa be c9 50 dc c7 bf b6 4b cb cf f7 be ee df f6 aa 9c b6 17 36 cf 6e f6 ea 7c a6 ce ee 7e eb 56 94 30 c5 32 35 e4 6c 59 76 b3 32 aa b5 6f 59 df 69 f0 a7 97 24 65 96 2d aa aa bf 2a b3 56 86 c7 3d f6 6d f7 3b ee 21 55 55 3f c3 f2 d5 3b e8 59 2c e1 8f e5 fb e7 76 df bd 5d 6d ec d0 dc a4 36 f6 6d b1 58 ff 00 e3 ab 55 92 ce cb fb 4a 37 b3 5f 37 ef 6e 5a e7 32 99 89 79 13 a3 33 a2 af ee be 55 ac 4b c9 7c eb 9f f4 b9 Data Ascii: <r72w}V{/5vo~Q)W?i?KuME?}If?oI#/4Z-_K<PK6n\|~V025lYv2oYi$e-*V=m;!UU?;Y,v]m6mXUJ7_7nZ2y3UK\|
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: f9 8c b2 ec 3f 2d 53 d5 5e 6f b1 ad c7 d9 f7 7c ff 00 7b 6f 98 df 35 68 73 7b 33 aa 7f 10 fd be ce 6f 31 7c a9 e2 db 2b 6e fe eb 7c bb 6a e3 ff 00 a1 a4 32 5c 46 ec ad b7 fd d5 dd 58 9a 3d cd cd fa 49 24 92 ac 5b 97 74 9f 2f f7 6b b3 bc d6 e6 8b 4d 68 e3 98 dd 6e f9 63 f3 fe 66 56 ac e6 1e c9 97 d1 37 fd 8e 4f 2d 62 48 97 6b 37 f7 97 77 de a9 75 fd 6d 26 fd e6 d3 17 9b fd da e4 de ee 1b 8f de 6f d8 db 15 7e f3 6d dd 4f 48 74 dd f1 c7 1c 86 55 f9 59 9b fd aa cc cc e8 6c f5 26 b6 d3 5a 3b 85 dd e6 be e5 db fe cd 09 79 30 4f 2e e3 3f bd fe 2a e2 75 5b 89 5e e5 6e 37 2a ec 3f c4 df c2 df c5 4c b6 b9 b9 b1 b9 6d 42 df fd 64 a8 8b fb af f6 6a 74 68 ae 46 74 ee f7 29 7f b2 de 3f 92 2a d5 b3 bf 98 4d fb b5 f9 36 ed 6a e6 2c 35 58 5f 52 5f ed cc a6 df bd 1f cb b7 Data Ascii: ?-S^o\|{o5hs{3o1\|+n\|j2\FX=I$[t/kMhncfV7O-bHk7wum&o~mOHtUYl&Z;y0O.?u[^n7?LmBdjthFt)?*M6j,5X_R_
2024-04-25 07:07:39 UTC	14808	IN	Data Raw: 17 78 9b e1 df 89 d7 4b d6 23 78 3c f6 dd 6f 22 ab 49 1b 7f c0 9a bc d7 52 4f ec db 56 7d 42 6f df e7 77 cb b6 bf 6e fc 49 e1 bd 1f 5a b0 b8 d0 fc 61 6b f6 cb 5d bb 59 77 7c df ef 2f f7 2b f3 73 e3 1f ec 9d ad d9 b4 de 20 f8 67 70 fa a5 87 f1 5a b7 fc 7c c7 fd ef f7 ab 9a ac 37 71 3d 5c 1e 26 2d a8 d4 76 b1 f2 1b cb a9 5c c3 2c 96 eb 2f ef 7e 6d ab fc 5f ef 56 ef 83 2d b4 db c7 93 50 d4 26 48 15 51 96 4f 31 5b 6d 70 0c f7 88 92 47 bc c4 d1 2e dd b5 4e cd 1f fe 3e 24 93 67 95 b6 bc af ac f2 b4 7d 22 c1 f3 41 ab d8 fb 0f c2 0f 0e 95 aa f9 91 2a ff 00 a2 ba b6 e8 b7 79 73 47 4c f8 95 a9 26 af 0e a1 79 67 22 f9 52 dc 2e ef 97 fd 5a af f0 aa d7 88 68 3a ac 5a 94 d6 fa 5c 4d 2c 12 a7 9b bb 71 6d db bf ba b5 ea 3a de 9a 9a 6c 3f e8 ec b2 ba ac 4a bf c3 fb cf ba Data Ascii: xK#x<o"IROV}BownIZak]Yw\|/+s gpZ\|7q=\&-v\,/~m_V-P&HQO1[mpG.N>$g}"A*ysGL&yg"R.Zh:Z\M,qm:l?J
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 89 6b a1 77 b6 fb 67 fa 43 6c 44 3b 55 bf dd ae 23 47 76 d3 ad 5a e2 cf 67 ef 55 be f2 fc cd b7 e5 ad cd 37 5b 86 f1 e4 d3 ee 23 45 db fe ad 5b ef 7c cb 51 32 8e a2 19 9e 18 56 e2 b3 52 e5 f5 1d 62 18 e4 8c c4 90 7d ef f6 aa f4 d0 cb 61 6d 0c 71 b1 4d df 2f dd dd b6 a9 d8 33 cd 7f 24 9f 73 6f dd 56 ff 00 c7 aa 0e 73 bf 86 14 77 58 e3 cf de dc b5 c2 f8 ca f3 ed 2e b6 db 76 32 7f 17 f7 ab d0 3e d3 6d e5 79 7f c5 b6 bc c7 5e 85 2f 2f d8 46 db 7f da ab 81 53 81 83 73 7e 97 36 6b a7 c8 bf dd fb d5 4e e5 3c d6 58 ea 18 61 df 34 82 df e6 55 ab 96 7b df cc b8 ad 4e 39 dd 90 de 23 bd b3 79 6d f2 35 78 e7 89 ef 11 ff 00 77 22 aa 7f 0a d7 aa 6b d7 90 c3 61 e5 c8 db 6b c9 75 56 49 bc cf bb ba a2 7b 17 86 86 a6 24 c3 c9 85 7e 6f 96 8b 6b 32 f0 ac 96 f5 0b bf c8 d6 db Data Ascii: kwgClD;U#GvZgU7[#E[\|Q2VRb}amqM/3$soVswX.v2>my^//FSs~6kN<Xa4U{N9#ym5xw"kakuVI{$~ok2
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 92 45 2a d9 dd 5d 6c 33 5a a6 9f fb cc ed 9e 53 14 7b 97 6b 35 62 24 28 9e 74 71 af 7d bf ee d5 f3 81 72 d9 fc a4 92 4b 86 3e 56 c6 fb bf 75 ab 07 c5 56 d6 12 d9 47 24 6a 57 f7 55 b0 8f 6d f6 0f b1 c8 a6 b8 fd 7b 55 48 61 ff 00 57 f3 67 73 47 9a a8 6c 73 9e 21 e2 6b 39 61 4f 33 96 8b 25 b6 d7 19 a6 bf 9d 73 1f cc 5b e7 da df ee d7 67 a8 df df dc ff 00 a3 ee 55 46 56 65 6d 9b 97 fb b5 9b 61 a2 27 cd 3c 9f 37 cb b7 fb b5 66 b0 d8 eb 6c 34 d7 99 23 8f 72 fc ae df c3 58 fa be cb 3d d6 ff 00 c4 c6 b6 1e cf ec 76 4a f7 6a df 2e ef 9b f8 ab 95 f1 0f 93 78 9f 68 92 46 48 93 6f cd 9a 39 3c 82 1b 1c c5 c5 cc cc ff 00 79 55 b6 ed 5a e5 5e ed 2d 9f cb 91 76 b3 7d dd d5 d2 5c 58 ec db 25 a4 9b b6 ad 72 57 f7 30 fc b1 ed 56 fe f3 50 13 81 94 b0 a2 5c dc 5c 6e dd bb e6 Data Ascii: E*]l3ZS{k5b$(tq}rK>VuVG$jWUm{UHaWgsGls!k9aO3%s[gUFVema'<7fl4#rX=vJj.xhFHo9<yUZ^-v}\X%rW0VP\\n
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: d7 49 0b 5c c3 0a ef 6d dc aa ed 53 b6 b3 66 fb 4c ac df 6b 8c fe e9 d5 63 fe eb 31 5a d8 b6 fb 4c de 67 da 3e e2 3a ff 00 b5 57 0d 8e 13 76 18 7c e4 87 cb 9b e5 6d ad b5 4d 51 7b 34 b6 dc 97 72 7c db fe ef f0 ed a8 ec e6 84 5c ad bf 9c 11 55 37 7c bf c3 59 d3 3b de 5f ae 3e 64 89 d9 a1 ff 00 6a ac 09 af ad 9e 54 f9 d5 65 ff 00 65 69 df 69 74 45 f9 7e 49 72 bf 2a ff 00 76 a7 77 bc 7d bf 66 6f 95 be 66 f9 7e ed 4d 65 71 f3 a5 b6 e5 55 e7 f8 77 50 6b 0d 8a 1f 60 b3 79 56 ee db 63 a2 67 76 ef e1 ae 9e ce da 5b c4 58 f4 f8 fc a9 76 ed ff 00 7b 77 f7 aa b5 cd 85 9c 36 6b 27 9d fb f6 7f 99 76 d6 94 d7 f6 93 6d b3 91 82 cb f5 f9 b6 ad 05 9b 1a 6e 8f e4 cb e5 df db b2 b3 7d e6 fb d5 df fd 9a e6 c3 4e 93 47 f2 d6 5e 77 33 6d f9 95 bf bd 58 9a 06 f9 a6 fb 45 bc 9b Data Ascii: I\mSfLkc1ZLg>:Wv\|mMQ{4r\|\U7\|Y;_>djTeeiitE~Ir*vw}fof~MeqUwPk`yVcgv[Xv{w6k'vmn}NG^w3mXE
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 54 66 bc f3 bf da a5 85 3e d9 74 bb eb a4 b3 d1 ed 9f e7 8b 6d 05 69 13 91 f2 28 f2 2b bc fe c5 b6 f5 a3 fb 16 db d6 a7 91 0f eb 28 ff d3 a6 e9 79 0a ac 76 ca 77 56 c4 2f 37 f7 ab 9f 86 e5 dd 37 fd d6 6a df b3 85 13 4d 6f b4 7f cb 5a fb 39 9f 1e 69 c5 72 9f f2 cf ef 29 ad b9 66 74 46 fb 3e da e4 ad a5 b9 f3 bf 85 6d f6 fd e5 3f 36 ea d6 4b 5b 6f b4 ef f9 51 99 3e f7 f7 95 6a 21 33 9b 93 95 9b 50 fd ed f2 2f c9 5a 56 f0 ef 45 8e db 6f fb b5 4e cd 1b 74 7f 2e ea d2 d3 5d 12 6f de 2e cf ef 55 c0 66 94 32 de 26 df 3d 57 ee fc cc a6 b5 61 fb eb ff 00 8e d6 6c 29 17 cb e5 ee f9 aa fe f8 61 45 f9 bf bd 5a 81 d6 a7 93 32 79 75 a5 b1 dc 2c 9b 7e 5a e4 92 e5 df 6c 96 ec ac 8d f7 6b 4a 19 5b fe 5a 31 6a e7 33 f6 66 d8 78 5f 77 ef 17 6b 7d d6 a9 93 e4 ff 00 59 fd df Data Ascii: Tf>tmi(+(yvwV/77jMoZ9ir)ftF>m?6K[oQ>j!3P/ZVEoNt.]o.Uf2&=Wal)aEZ2yu,~ZlkJ[Z1j3fx_wk}Y
2024-04-25 07:07:39 UTC	398	IN	Data Raw: 1b ff 00 42 dd f3 7f c0 6b 37 c4 c8 d0 c3 1d bc 7f 79 8f cd 41 47 86 eb d6 cf 67 60 d6 f2 46 15 a5 2b 5e 51 e2 4b 37 4d b7 11 af de f9 5a bd 5f 56 dc 8f e5 dd e2 56 67 f3 3f bd f2 d7 0d 79 71 33 ea 51 db f9 3e 7d bb 2e e6 55 ae 83 ce 9c f5 3c 5b fb 03 f7 be 67 3f de ad bf b3 3d b5 b7 d8 e3 93 e4 9d 57 cc f9 6b a4 99 1e 69 96 de ce dd 60 69 4b 6e fb cd 5a b7 1a 3a 0f b4 01 f2 aa 25 02 e6 47 1f 61 a0 a6 ab 76 b1 fc bf 27 dd ff 00 79 6b 8e d5 7c 25 a8 de 3c df 63 55 f9 5f 73 2f fb b5 ee fa 56 89 67 6d 67 bf ef 33 2f dd ae 5f 55 7f ec dd 35 be c0 dd fe 6d d5 9c fd e2 8f 8c 3c 73 f0 a3 44 f8 85 61 26 87 e3 8b 31 75 04 aa cb b7 f8 97 fd d6 af c7 0f 8e 9f b0 06 ab f0 8a 6b cf 1c 78 2e 49 75 bd 11 0f fc 7a ed fd fd ba ff 00 b5 fe ca d7 f4 8d fd 95 7f a8 e9 ad a8 Data Ascii: Bk7yAGg`F+^QK7MZ_VVg?yq3Q>}.U<[g?=Wki`iKnZ:%Gav'yk\|%<cU_s/Vgmg3/_U5m<sDa&1ukx.Iuz
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 97 29 ae 2e af b5 94 5d f4 47 96 eb 7e 12 4b 9b 0f 2e dd 62 89 27 4f 3d 64 65 fb bf 36 ed b4 ff 00 ec af 35 16 ce ee ea 29 5a 25 56 59 22 45 fe ef dd dc d5 e8 b1 dc df eb 0d 63 79 e2 75 7b c7 de 91 49 0a a7 99 b5 61 ff 00 5b 5c 92 68 ee ef 79 6f b7 ca 81 9f 74 32 44 ff 00 bc 93 fd 9a c6 74 75 3a 21 57 4d 59 cf 6a 56 da aa 68 eb 71 b5 62 66 65 55 e7 e5 f2 eb c5 e3 d1 e6 d6 ef e4 b7 d3 d9 d5 53 e5 6f e2 5f 97 f8 ab da ef af 1e 5b 69 23 d6 23 2d e5 3b 2f 97 b9 99 7f 79 fc 4d 5c c4 7a 6d ff 00 86 f5 88 ee 2c e1 f9 96 2f 32 4d cd 5b 72 7b a8 aa 35 b9 2e 71 96 76 16 d7 f3 7f c4 c1 bc df 29 76 ab 27 cb e5 ed fe f2 ff 00 76 ba 1d c9 67 a0 cd 67 1c 2e 8b 2b aa f9 8c bf 7b cc ff 00 55 5e 99 e1 28 7f b6 b4 eb a9 2e 2d de 76 da 91 2f cb fb cf 9b ef 7d da c3 97 41 d4 Data Ascii: ).]G~K.b'O=de65)Z%VY"Ecyu{Ia[\hyot2Dtu:!WMYjVhqbfeUSo_[i##-;/yM\zm,/2M[r{5.qv)v'vgg.+{U^(.-v/}A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50225	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	786	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/3.59da582bcc0c43060327.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:39 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 537972 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "5b44d2013a07b79e24a7d614caee6bf2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 be19c47e504fffea4cece5471967bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: w2w9LHSJQBK1lUkQMM7MkldSf276qVeZQaKba6MEiHXPbnbO9Kr0eA==
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: ff d8 ff e1 0f fe 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 a2 a0 03 00 04 00 00 00 01 00 00 05 bd a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifMM*V^(ifHH02210100
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 54 1b 40 7e c3 4e 4e 94 fa 28 35 0d 9e d4 51 4f 4e b4 1c e3 d1 2b e5 df db 63 41 f1 3f 88 7f 65 3f 1c 69 7e 0f 9a f1 75 19 74 b9 7c 95 d3 d7 75 cc cd ff 00 3c 17 fe ba fd c6 af a9 2a 44 d8 e8 d1 d2 9e a1 09 f2 c9 48 ff 00 3f 97 f1 f7 8c ad 5c da dc 69 d1 f9 91 9d ad fb ae e3 83 4c ff 00 85 8b e2 cf fa 07 47 ff 00 7e ab fb 68 ff 00 86 25 fd 96 3b f8 33 4e ff 00 be 68 ff 00 86 24 fd 95 ff 00 e8 4c d3 bf ef 9a f2 fe a9 e6 7b ff 00 db 51 ec 7f ff d0 f7 0a 28 a2 bf 48 3f 37 23 f2 e9 db 16 9d 45 00 14 dd 8b 4e a2 80 0a 6e c5 a7 51 47 38 0f d8 68 d8 6a 5a 62 74 a0 08 a8 ab 14 50 04 49 d6 a5 a2 99 c3 8a 00 7d 31 37 d3 e8 4e d4 01 5e ac 51 45 00 37 62 d3 a8 a2 82 39 d0 51 45 14 04 f6 0a 66 c1 4f a2 af 9c c8 28 a2 8a 80 0a 28 a3 67 b5 1c e0 14 51 45 00 14 6c f6 a2 Data Ascii: T@~NN(5QON+cA?e?i~ut\|u<*DH?\iLG~h%;3Nh$L{Q(H?7#ENnQG8hjZbtPI}17N^QE7b9QEfO((gQEl
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 58 a2 80 0a 62 74 a7 d1 40 05 15 62 8a 00 af f3 ec ab 15 1f 97 52 50 01 45 14 50 01 45 14 50 01 45 14 fd 86 b9 c0 65 14 55 8a 00 ab b1 69 d5 2a 74 a7 d0 05 7a b1 45 14 00 51 45 14 00 51 45 58 a0 0a f4 54 bf 26 ca 6e f8 e8 39 c6 54 bb 05 2f 0c 29 d4 1d 04 7f 22 54 75 2e c1 4f a0 02 ab d5 8a 28 02 bd 15 62 8a 00 28 a6 6c 14 fa 00 2a c5 43 b1 aa 4d 8b 40 0e a7 7f 15 36 8a 00 b1 45 14 50 01 52 7f cb 3a 8e 9f b0 d0 00 9d 68 d8 6a 7f 92 8d 8d 40 0d a7 72 d5 35 47 b3 fe 59 d0 00 89 8a 92 91 12 a4 44 dd 41 ce 32 9a 9f 76 a5 d8 69 db 05 00 45 45 58 f2 28 d9 fc 14 00 53 f6 1a 11 06 2a 6d 8f b2 80 2b 54 df c5 f8 54 9b 1a 8d 8d 41 d0 36 9d fc 14 e7 4a 77 cd ed 40 10 d5 8a 29 fb 0d 00 32 93 ee 8f a5 2f 96 f4 fd 86 80 19 4e fe 2a 11 3e 4a 7a 25 06 3c cc 8a 9f b0 d3 bc Data Ascii: Xbt@bRPEPEPEeUitzEQEQEXT&n9T/)"Tu.O(b(lCM@6EPR:hj@r5GYDA2viEEX(Sm+TTA6Jw@)2/N>Jz%<
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: f6 66 ae 62 bb 59 ad bc d8 5a 3a c7 fe c7 ff 00 9e 6d 5a f2 36 10 aa 8e 79 fb 54 75 b8 fa 3c dd 37 2d 43 fd 93 77 51 c8 cd 39 91 93 45 68 35 85 ca 75 53 55 be cc e9 fc 26 a4 a2 0a 2a 4f 2e 8f 2e 80 23 a2 a4 f2 e8 f2 e8 02 3a 2a 4f 2e 8f 2e 80 23 a2 a4 f2 e9 bb 1a 80 1b 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 04 9e 63 53 fc ea 82 8a 00 b3 e7 0a 93 cd 35 4a 8a 0a e6 66 87 9d 4f de 6b 32 8a 8e 44 69 ed 99 ad b9 6a 44 6f 2e b1 f7 35 49 e7 35 4f 20 fd b1 ad e6 35 4d b9 ab 23 cd 7a b3 e6 a2 7b 62 8e 42 bd b1 a3 e7 3d 3f ce ac d4 9a 1f ef 55 9d e3 fb cb 47 21 b7 b6 34 92 f2 a4 f3 4d 66 f0 df c3 4c a8 2b db 1a fb f7 ff 00 76 ad 25 c7 3d eb 0f 78 a7 a4 bd aa 79 11 a4 2b 1b 69 2f 6d cb 57 d2 e5 fc ba e6 fc e6 a7 a4 b5 3e cc da 18 83 a1 4b 97 ff 00 96 95 65 25 Data Ascii: fbYZ:mZ6yTu<7-CwQ9Eh5uSU&O..#:O..#EPEPEPEPcS5JfOk2DijDo.5I5O 5M#z{bB=?UG!4MfL+v%=xy+i/mW>Ke%
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 54 d0 c3 b9 2b 56 6b 6a 2d ad be f5 00 66 bc 34 7d 9c d6 f7 d9 c5 33 ec d4 01 81 f6 51 4e f2 6b 69 ec ea 3f b2 8a 00 c6 fb 35 22 5b 6e ad af b2 8a 77 d9 de 82 79 91 89 f6 6a 3e cd 5b a9 6d be 9f f6 6a 0d 79 ce 7b ca 15 17 92 d5 d1 fd 9b 75 1f 66 f9 a8 32 e6 47 3c 90 d1 e4 56 f7 d8 f7 bd 56 fb 1f cf 47 27 90 73 23 1f ca 34 6c 15 d0 fd 9b 72 ad 42 f6 5d a8 0e 64 60 dc c3 be cf fd d7 ac ad 82 ba d9 ad b1 6d 37 fc 05 bf f6 5f fd 9a b1 3c 9a 89 ec 51 9b e4 ee a8 51 2b 5f 62 d5 7f 27 ef 7d 6b 20 2a 6c 35 a2 ff 00 bd b6 8e 4f f8 0b 7f c0 69 9e 48 ab 96 49 be 19 23 ff 00 81 50 5c c6 5b 25 59 d8 68 86 1d 8f 5a 1b 0d 74 1c 33 d8 cf d8 68 d8 6b 43 61 a3 61 a0 c8 cf f2 85 1b 0d 68 6c 34 6c 34 01 4f c9 a3 c9 ab 9b 0d 3b 60 a0 be 73 37 61 a3 ca 15 a1 b0 d1 b0 d0 41 9f Data Ascii: T+Vkj-f4}3QNki?5"[nwyj>[mjy{uf2G<VVG's#4lrB]d`m7_<QQ+_b'}k *l5OiHI#P\[%YhZt3hkCaahl4l4O;`s7aA
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: 24 a0 0e 91 dc 62 a1 0f bf ad 56 4b 94 9b f8 b7 53 b7 2d 00 5a a9 a1 bf b9 b3 7c 5b c8 c9 59 fb 96 8d cb 40 1d a5 b7 8d af 93 f7 77 11 ac b5 73 fe 13 6c 7f ac 87 f5 af 3f dc b5 12 4b 40 1d e3 78 c2 f1 f8 da 89 44 7e 36 74 ff 00 8f 85 5a e1 37 35 36 80 3d 17 fe 13 68 bf e7 89 a6 ff 00 c2 68 9f f3 c7 f5 af 39 de 2a 2a 00 f4 ef f8 4c 2d ba 49 19 ab 90 f8 a7 4d 71 f7 b6 d7 92 d1 40 1e d9 0e ab 63 70 3f 77 32 d4 df 6c 87 76 37 ad 78 7a 3b 25 4b e7 bd 00 7b 66 f3 49 bf e6 af 1c 4b f7 4f f5 72 14 ff 00 81 55 f8 75 bd 49 3f d5 cc 5a 80 3d 43 72 d7 ca 3f b6 96 aa 9a 6f c0 3d 4b fb d2 cb 12 2f fd f5 ba bd c1 3c 4d 72 9f f1 f0 aa d5 f0 97 ed eb e3 f8 65 f0 36 9f e1 b8 f2 ac d3 1b 99 3f dd 55 da b5 8c f9 ac 7a f9 15 1e 7c 4c 4f c4 cf 88 9e 3f f8 1b e2 df 83 f3 59 c7 Data Ascii: $bVKS-Z\|[Y@wsl?K@xD~6tZ756=hh9**L-IMq@cp?w2lv7xz;%K{fIKOrUuI?Z=Cr?o=K/<Mre6?Uz\|LO?Y
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: cc ac ad 1f e2 17 c5 d8 9d be cd ab 3c bf 36 e6 dd b5 b7 57 cd fa 96 8f e1 2f 02 a4 3f f0 90 49 75 b2 7f dd 7d a9 5b e5 dd 5b d6 73 7c 3d b6 b3 b7 d4 35 0b ab db 5b 78 3e ec 8b bb f7 d5 9f 3b 7d 4d 7d 94 3b 23 e9 61 fb 46 fc 48 d2 74 af b4 6a 17 91 41 b2 5d ac d2 22 ad 65 68 ff 00 18 fe 24 43 34 fa bd 9e ad 15 d2 b6 e6 68 eb e7 2d 6f 4d f8 75 e3 b6 ba 92 df c4 1f 62 b7 f9 be cf 6e ca db 56 b0 74 af 82 d7 2b a6 36 a7 67 e2 4b 28 9b 7e d8 e3 f3 7e 66 ad 7e 67 3b df dd 8a 3e e1 8f f6 a8 f1 5e ab a1 ac 96 70 db c0 cc 4f ef be f5 50 d3 7e 3d fc 4e 99 1a ce f2 6b 5b a8 a5 4f f6 6b e4 8f f8 52 9e 20 b9 d1 1b 4f d2 f5 eb 39 65 42 be 5c 3b fe 69 37 7f 76 ac c3 f0 7f c2 ba 0c 3f 67 f1 1e b4 f6 57 f1 6c f3 36 fc de 5d 54 ea bf e6 26 14 97 f2 1d 9d da 69 5e 39 d6 2f Data Ascii: <6W/?Iu}[[s\|=5[x>;}M};#aFHtjA]"eh$C4h-oMubnVt+6gK(~~f~g;>^pOP~=Nk[OkR O9eB\;i7v?gWl6]T&i^9/
2024-04-25 07:07:39 UTC	13232	IN	Data Raw: fc 2b 5a 69 61 6d ff 00 2d 15 6b f6 03 c3 3f f0 47 cf 8a 97 ff 00 bc f1 27 8a 34 6d 37 fd d6 92 6a fa 03 c3 df f0 46 4f 0a 26 df f8 49 fc 7c 5b fd 9b 6b 55 ff 00 d0 9a 5a c3 eb 91 ee 1c 8c fc 07 fe ca b6 67 e1 6a fa 69 b6 c8 9f 75 77 57 f4 bd a0 ff 00 c1 20 bf 66 9b 3d bf db 1a d6 ad 7e df f5 d6 08 6b d7 74 7f f8 26 27 ec 65 a5 6c 79 34 39 6f 36 ff 00 cf 7b c9 3e 6f fb e7 6d 67 f5 f4 1c 8c fe 53 61 b3 b6 fe ed 6a db 59 c2 fb 7e cf 1e e6 ff 00 65 6b fa ff 00 f0 f7 ec 73 fb 24 78 57 6f f6 7f 81 74 6f f7 a7 8b ed 0d ff 00 91 b7 57 b8 69 5e 00 f8 3f a1 22 c7 a1 e8 3a 6d 9f fd 70 b6 8e 3a c3 eb 84 9f c6 4e 8f f0 eb c7 3a ef fc 80 b4 1b db cf fa e1 6d 24 95 ea fa 3f ec 97 fb 48 6b 6d fe 87 e0 7d 4b e6 fe 29 20 68 ff 00 f4 2a fe c3 ed 9f 44 b6 ff 00 8f 78 e0 89 Data Ascii: +Ziam-k?G'4m7jFO&I\|[kUZgjiuwW f=~kt&'ely49o6{>omgSajY~eks$xWotoWi^?":mp:N:m$?Hkm}K) h*Dx
2024-04-25 07:07:39 UTC	1974	IN	Data Raw: 5e 5c a7 fc 7b c3 bb f1 db 58 29 f6 3d fe 66 df 9f 6f ab 52 25 cf cc d1 dc 46 bf f7 d5 00 49 36 ab 7e 89 fe 8f 0c 5b bf da 7a c7 b9 bc f1 53 a7 99 6d e4 2f fb a5 6b 56 e6 e6 d9 f7 79 91 ab 53 e1 b9 b3 44 69 24 85 56 80 38 c9 7f e1 2a 97 6c 77 0c bf ec fc ea bf fa 0a 53 de c3 c4 97 93 7d d5 64 ff 00 7e bb 94 d4 b4 fd 9e 65 ba aa 37 fb b4 9f da ac a9 fb c5 ff 00 c7 68 2b 99 9c fa 68 3a c3 a7 dd 4f fb ee 97 fe 11 9d 6b fb ab f9 d6 a5 ce bd 2a 42 af 1c 65 7f e0 14 f4 f1 05 c6 17 fd 1e 5f 9b fd da be 42 4c 77 d0 75 b4 db f2 ff 00 e3 d5 34 3e 1e d5 21 6f bc bf f0 23 5a ff 00 da 49 0f ef 2e 3c de bf c5 51 3f 88 53 62 c9 1a 96 a8 03 32 6f 0a dc ca fe 5f f0 7d 76 d2 ff 00 c2 18 ff 00 eb 23 ff 00 be b7 b5 4c fa 92 4b fe b1 a5 a8 7f b4 51 ff 00 d6 79 ab b3 fd aa 00 Data Ascii: ^\{X)=foR%FI6~[zSm/kVySDi$V8lwS}d~e7h+h:OkBe_BLwu4>!o#ZI.<Q?Sb2o_}v#LKQy
2024-04-25 07:07:39 UTC	16384	IN	Data Raw: bd 23 e2 77 c0 df 8a 9f 07 f5 59 b4 7f 88 9a 0d e6 96 d6 ef e5 79 8d 1e e8 19 bf d9 95 7e 46 af 28 d8 7f bd 5d 1a 48 98 62 6a 41 f2 9d 0c 3a 93 25 6d db 6b 15 c4 f9 4d 4a 92 ba 56 33 c3 26 7d 16 0b 89 6a d2 b2 b9 e9 49 aa a3 f4 af 3a d5 9f 7e a5 37 d6 a6 4b c7 e9 59 b7 0f be 66 97 de a3 0d 86 e4 64 f1 06 77 f5 aa 31 8f 61 f6 db fc ea d8 87 f7 97 9f dd ac 7b 5f bf 5a bf 32 df fe f3 d6 bb 0f 93 3b 6f 03 68 e9 e2 0f 8a 1a 2e 87 fc 17 57 f0 41 ff 00 7d 48 8b 5f d7 ed 9f c4 2f 1b 6a ba 0a f8 2f 5c bc 7d 53 49 b7 2f 15 bd 9d cb 6e 8e 38 9b f8 57 6b 2b aa d7 f2 4d f0 29 d6 1f 8f 7e 13 92 e3 ee 26 af 69 bb fe fe 25 7f 53 af e2 0f 0a f8 3e cd ae fc 51 a8 5a d9 44 a4 fc d3 ca b1 d0 5c 0c 7d 6b f6 1e fd 9a be 2b df fd af c4 1e 07 b0 8a 59 7f e5 a5 b5 c5 fc 6d ff 00 Data Ascii: #wYy~F(]HbjA:%mkMJV3&}jI:~7KYfdw1a{_Z2;oh.WA}H_/j/\}SI/n8Wk+M)~&i%S>QZD\}k+Ym

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50231	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:39 UTC	422	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/grain.2c6cfe7dc5dab33d9c07.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	508	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 22140 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:21 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "1ac622908c72eb05313dba1e55b5707d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7b7f9409a41e78466e3ab2772654a73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: N132Amc0DfMkNgLM_1Gw_ZIC4wsfVHBnEzgbSGu4IXBSoTDqSma11Q==
2024-04-25 07:07:40 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 02 03 00 00 00 04 13 66 e6 00 00 00 0c 50 4c 54 45 2d 2d 2d 80 80 80 bf bf bf ee ee ee e1 8d 44 49 00 00 00 04 74 52 4e 53 0a 0a 0a 0a cb 83 02 bc 00 00 56 1b 49 44 41 54 78 da 15 d1 fb 43 92 f7 c2 00 f0 ef c3 4d 50 b4 07 04 04 45 03 05 2f a5 85 a6 a6 cd da f3 e0 03 82 b7 00 c1 5b 5a a0 68 da ac a9 69 b7 55 03 05 2f a5 05 86 a6 a5 a5 a5 ad 5a 6d da 6d b5 77 9d 03 26 66 65 0d 4d cb 9a 35 2b bb ed 6c 7b 75 d5 d6 ce 69 7b 2f 7f c1 e7 87 0f e0 e9 b6 bf 3c fb b0 3c 6c e7 7d 1a 99 7a 2b f7 ed f2 b3 0c fc 79 8d 49 94 1e f3 e7 da da 1d 63 ed d9 7d af 09 0a c1 d9 3d e7 7c 91 56 6a a2 2c 47 1a c6 04 8c 8a c1 19 1e 23 0f b6 12 3e bd d8 86 94 d2 68 89 b3 fc 09 62 05 20 32 da 65 d7 0c 0e 0a 33 bc Data Ascii: PNGIHDR,,fPLTE---DItRNSVIDATxCMPE/[ZhiU/Zmmw&feM5+l{ui{/<<l}z+yIc}=\|Vj,G#>hb 2e3
2024-04-25 07:07:40 UTC	5756	IN	Data Raw: 22 78 ff bc 22 c1 8e ea f0 af 57 4b 65 31 6c 9d 24 86 8a ad 7a 6d 31 64 73 09 8a cd 25 21 de cc 93 6d 43 20 f5 93 b2 45 d9 b6 67 f0 d3 b5 8c fe 90 d2 cd a8 62 a7 0a b4 08 bc ae 78 0c 18 10 01 e0 a8 11 f2 47 22 d7 81 a3 07 d6 a0 52 2f 9d 7a 6c 08 6f f8 c6 34 9d 30 20 48 89 a2 20 c0 58 1e 59 31 56 ae 78 ca 08 5f 20 c1 8b 80 ec e4 4d 5f 1e eb 97 9f ca d6 88 15 00 63 81 87 c4 ee 9b b2 c0 64 6c 3e f4 02 33 17 fb 57 05 d7 e4 dc 14 1e 93 af 27 b7 ac 9b 2c ae 0b 60 b9 06 b8 7b 1b a0 08 fb f0 e2 5b 76 cc 94 25 90 e7 e4 ee cd 79 5c c1 16 08 b4 a0 fa f9 0d 90 63 b8 44 f4 07 20 b3 97 b2 2e 5a 26 39 07 2f a2 5c a6 40 fe 39 34 b7 ad 17 b4 f5 8a a2 6a b6 65 ea e7 58 66 09 a8 d9 d9 80 91 37 7a 8a 06 bb 2c 7b 27 9d b8 c6 a1 69 7e 5d f9 bc 51 56 f1 f2 3c 73 1b 33 10 08 92 Data Ascii: "x"WKe1l$zm1ds%!mC EgbxG"R/zlo40 H XY1Vx_ M_cdl>3W',`{[v%y\cD .Z&9/\@94jeXf7z,{'i~]QV<s3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50234	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	941	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=481af80d-db1d-4cb6-937c-f94d70db2ead&batch_time=1714028858724 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	1094	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 74 22 3a 39 38 33 39 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":1,"page_states":[{"state":"passive","start":983900000}]},"application":{"id":"
2024-04-25 07:07:40 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 481af80d-db1d-4cb6-937c-f94d70db2ead cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:40 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 34 38 31 61 66 38 30 64 2d 64 62 31 64 2d 34 63 62 36 2d 39 33 37 63 2d 66 39 34 64 37 30 64 62 32 65 61 64 22 7d Data Ascii: {"request_id":"481af80d-db1d-4cb6-937c-f94d70db2ead"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50233	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=8d827fc0-3729-4708-b2b9-b6c826e9dec7&batch_time=1714028858725 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 18613 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	16384	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 33 65 65 38 62 33 36 2d 39 34 30 64 2d 34 33 61 63 2d 62 30 31 33 2d 64 65 37 30 39 62 65 66 65 61 35 30 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 30 32 38 38 35 38 37 32 33 2c 22 73 65 72 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 35 2e 39 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0}},"application":{"id":"03ee8b36-940d-43ac-b013-de709befea50"},"date":1714028858723,"service":"desktop-web-renderer","version":"0.5.9","source":"br
2024-04-25 07:07:40 UTC	2229	OUT	Data Raw: 31 32 31 37 38 35 36 31 26 6d 6f 61 74 43 6c 69 65 6e 74 4c 65 76 65 6c 34 3d 35 32 33 34 35 31 39 31 36 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 31 3d 55 53 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 32 3d 31 39 39 30 37 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 3c 53 43 52 49 50 54 20 54 59 50 45 3d 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 27 20 53 52 43 3d 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 72 6a 73 73 2f 73 74 2f 32 30 34 39 36 37 36 2f 37 39 35 36 32 35 30 31 2f 73 6b 65 6c 65 74 6f 6e 2e 6a 73 3f 62 75 6e 64 6c 65 49 64 3d 24 7b 42 55 4e 44 4c 45 5f 49 44 7d 26 62 Data Ascii: 12178561&moatClientLevel4=523451916&moatClientSlicer1=US&moatClientSlicer2=199071' type='text/javascript'></script>","<SCRIPT TYPE='application/javascript' SRC='https://pixel.adsafeprotected.com/rjss/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&b
2024-04-25 07:07:40 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 8d827fc0-3729-4708-b2b9-b6c826e9dec7 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:40 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 38 64 38 32 37 66 63 30 2d 33 37 32 39 2d 34 37 30 38 2d 62 32 62 39 2d 62 36 63 38 32 36 65 39 64 65 63 37 22 7d Data Ascii: {"request_id":"8d827fc0-3729-4708-b2b9-b6c826e9dec7"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50236	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	656	OUT	GET /static/pg-script-poc.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029755840
2024-04-25 07:07:40 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1401 Connection: close Date: Wed, 24 Apr 2024 13:41:08 GMT Last-Modified: Mon, 15 Apr 2024 14:37:45 GMT ETag: "5c45ad78b7cc3b846f5b5e6e5453a0ec" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3aa2edba8b385e59cfbe1930859990be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: pnDzo7RwEzF5131zHcjSXOMA4cqbP3kbKig9zLDDiYZgLklR8I4BwA== Age: 62793
2024-04-25 07:07:40 UTC	1401	IN	Data Raw: 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 74 69 6d 65 73 74 61 6d 70 27 29 20 7c 7c 20 44 61 74 65 2e 6e 6f 77 28 29 2c 0a 20 20 20 20 65 20 3d 0a 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 65 61 6c 2d 69 64 27 29 20 7c 7c 20 27 49 58 37 30 36 30 31 39 39 38 37 30 36 33 31 36 38 31 39 33 27 2c 0a 20 20 20 20 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 62 61 6e 6e 65 72 2d 77 69 64 74 68 27 29 20 7c 7c 20 31 2c 0a 20 Data Ascii: (async function () { const t = document.currentScript?.getAttribute('timestamp') \|\| Date.now(), e = document.currentScript?.getAttribute('deal-id') \|\| 'IX706019987063168193', n = document.currentScript?.getAttribute('banner-width') \|\| 1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50235	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028859..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.8
2024-04-25 07:07:40 UTC	2585	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 35 31 37 61 62 63 39 34 2d 64 32 31 38 2d 34 38 66 36 2d 38 64 34 65 2d 33 62 36 38 64 38 30 32 39 66 36 31 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"517abc94-d218-48f6-8d4e-3b68d8029f61","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:41 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:40 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:40 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:41 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50237	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	2934	OUT	GET /i.gif?e=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&s=4EfobX-aT4mYK-Ukt1kBTNMtYiY HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028859..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.8
2024-04-25 07:07:41 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50242	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	418	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/1.54cf34588a1445a7e768.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 367532 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "919afcc9672a5541843a4796383ff076" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 666d79e4c40246d6a13b80f4b926818a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: _DEbO9Zc9P4Guf6QcUzFCfBwIxoBQaWkuOPgswBloXR-Q3qabgUiyA== Age: 1
2024-04-25 07:07:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c2 00 11 08 06 99 07 a2 03 01 22 00 02 11 01 03 11 01 ff c4 00 38 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 45 0e e7 dd f8 4c 03 57 25 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T"8ELW%
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: a6 36 71 68 63 de aa c6 bf 2f 61 6b 04 38 f7 4c 00 6e 5d ca 3a c3 e5 e9 3c 6b 05 de d0 40 3e 1e 9b ad 4a 13 57 27 9a b9 74 b9 1a 62 9b d1 7c c8 f2 d6 9c 73 93 ad a1 d4 7e 5d 4e d5 9a d3 44 2d cf 65 41 1e 73 66 00 45 85 5a 21 9c 51 cd 34 46 d6 1d 80 e8 76 0a 53 57 50 0b 30 ba 16 23 8a 9a 03 84 c9 5c 2e c9 10 a5 53 50 53 45 60 42 ac aa e4 82 c2 22 c4 b4 d5 e7 2c 9c 6d 61 e0 35 34 45 05 a4 dc 30 4b 08 0f 61 d5 69 c4 9c 4d 9e 67 61 a9 b2 30 e5 a4 a4 15 45 40 62 d3 55 7c e8 c8 30 62 ca af 3a 32 13 eb 45 80 e1 71 61 83 29 92 28 46 59 a8 46 68 f1 1b 33 22 01 5c 18 63 6c e2 c4 6a cf 52 c3 d5 76 2e 97 35 7a 38 6b 4b 1a 3a e5 b8 b0 da ce 85 b9 e8 f4 c7 47 3e 69 ed e9 1b 9b 7b 8e 92 18 13 b9 de 6c 49 ef 1b 46 c1 2f 4e 3d 3e d7 05 77 d5 f3 fd f3 ed 2f cc af b1 7d 1f Data Ascii: 6qhc/ak8Ln]:<k@>JW'tb\|s~]ND-eAsfEZ!Q4FvSWP0#\.SPSE`B",ma54E0KaiMga0E@bU\|0b:2Eqa)(FYFh3"\cljRv.5z8kK:G>i{lIF/N=>w/}
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 42 14 ad c2 1e 55 f4 25 a0 8f 1c dc 9b e8 f5 1c ed 8a f5 9b 62 c4 0a d5 9a c1 1a 57 66 4f 3e f6 62 14 d2 8e 76 09 91 9c c2 70 3e d2 42 1e 77 09 26 d6 09 62 b0 e5 b0 d5 0d 2c d5 aa d5 58 9a 2b 59 c8 d2 3b 69 9a c5 be b5 4e 70 a5 43 24 34 6f 8d 06 02 38 27 38 95 83 69 d2 84 75 c7 2e 6d cb 0f 2e 69 88 62 a1 a4 c8 d0 bd 00 12 b5 5c 04 89 6c a6 53 35 33 ca 4d 5b 35 02 de 7e 6b e6 3e 93 e6 7a cf 6e 2b 94 7c f7 94 e7 7a fe 3b 3e c9 33 36 7e a2 8c 07 8f 65 b4 18 e3 d7 a0 a8 37 6e 1b 10 cd 9c 5c de e5 9e 6b a4 ab 90 f3 7b 5d ef 95 cb 96 fb 3a 9c c4 fa 6b ab 6e 62 39 a3 b2 03 79 fe ed 81 da e4 b9 74 a6 47 d7 fb bf ca ae 35 4b 9d bc f8 f6 36 ec 65 cf b7 42 33 3b 77 15 6b 1a 86 c2 b1 35 2c 7f a5 7c d7 1a f3 a3 f6 ed 73 cb d0 ee 72 57 bb f7 5f 93 7d 2a dd 4f 11 ae 08 Data Ascii: BU%bWfO>bvp>Bw&b,X+Y;iNpC$4o8'8iu.m.ib\lS53M[5~k>zn+\|z;>36~e7n\k{]:knb9ytG5K6eB3;wk5,\|srW_}*O
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 33 a5 aa 60 d4 61 43 32 96 b5 82 31 90 21 90 81 89 65 2e b1 9a 58 d0 a6 ca f8 f0 2b 0d b8 21 8e 7e 05 93 b7 1e 44 38 8d 8e 62 52 19 e8 06 49 35 60 a3 ba 54 0d da 5f 32 9c a9 cf 89 02 e1 d4 24 82 99 8a a5 19 10 ae a3 6f 00 55 ec 68 62 8f 50 d1 82 89 52 34 6a 3e 4f 34 80 6a 91 ab 94 c1 63 da 40 cc 8a a1 83 97 68 e4 5c 04 8d 03 03 45 0f c5 cc 52 15 ee 03 1b 18 9d 8a c5 dc 49 19 dd 5c 7f 12 b3 95 f0 1a 05 6c 38 5c fc c3 2c 4a 80 13 fd 66 98 85 fb 2a 54 64 82 0d 14 60 33 44 85 c6 73 e0 13 10 1f 65 e7 29 36 09 8d 4b 11 1a 42 ed 9c 46 86 37 20 4e 99 ce ca 74 88 61 75 04 16 73 bc 8d aa 0c a6 69 25 74 98 1a 97 b5 20 2e 3b 51 3c 5a a6 bb a6 29 76 7d aa d4 34 44 a1 99 24 47 ca bc 2e 17 07 46 b7 54 a9 cc 9d c5 d1 91 80 2c 59 7b 69 b3 2b 31 60 84 8d 33 9c 8d 03 d2 e1 Data Ascii: 3`aC21!e.X+!~D8bRI5`T_2$oUhbPR4j>O4jc@h\ERI\l8\,Jf*Td`3Dse)6KBF7 Ntausi%t .;Q<Z)v}4D$G.FT,Y{i+1`3
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: f0 69 5d 5c f8 4d a3 d8 95 27 18 60 ba 1d a8 e7 ec 90 c0 82 06 db 02 aa 31 21 ad 98 36 29 dc e7 cc 65 a4 5f 8b 2b ee 33 db 64 fb 67 df e1 44 18 c0 a9 27 24 e2 a4 46 31 02 63 51 83 95 67 41 aa f6 d7 ee b7 90 65 55 06 ea 59 a0 52 e1 cb 90 0a f6 e9 89 59 11 55 cf f4 58 97 4d 13 73 18 5c 04 19 cd 76 b3 f6 70 83 42 d8 1a d6 09 61 86 22 23 f0 66 62 46 66 27 2a 01 50 80 57 c1 96 bc b1 18 23 3e 0e aa 14 e3 e5 81 80 c1 8f c8 15 3e 14 80 1f c3 36 6b ef c5 12 5a 82 a9 18 a2 8a 5b 05 e6 c1 0b 44 b1 af ff 00 38 21 7e c0 0d e0 b1 48 fe 82 05 fa 63 fd 28 2c fe 00 55 45 02 86 ac c4 97 60 18 61 c7 c4 15 31 b6 94 32 14 e4 60 6a 6b 00 64 03 8c 57 d7 d6 71 1d 22 82 b5 80 3e 8f 90 09 75 0a 57 01 03 0a 60 ab f6 a1 4d 3f c0 d0 28 40 cb b1 0e 02 e0 6f 51 f9 6a 66 3b ea 09 19 39 Data Ascii: i]\M'`1!6)e_+3dgD'$F1cQgAeUYRYUXMs\vpBa"#fbFf'*PW#>>6kZ[D8!~Hc(,UE`a12`jkdWq">uW`M?(@oQjf;9
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 8a c5 3a b3 11 5a 83 5b a8 70 b4 c4 06 c5 02 33 8a db 56 15 1a 34 81 85 7a 83 ce a7 0d c1 34 69 d5 5c 89 ba 96 49 1a fa 62 49 05 e9 cf 7e ed 54 2a 00 a2 9a 89 a3 44 fe 47 f3 cd 67 f2 cd 66 b3 59 ac d6 6b 35 9a cd 66 b3 59 ac d6 6b 35 9a cd 66 b3 59 ac d6 6b 35 9a cd 66 b3 59 ac d6 6b 15 8f fd 11 ff 00 a7 9a cd 66 b3 59 ac d6 6b 35 9a 0d 59 a2 d5 9a cd 66 8d 03 5b 9a 0c 45 2d 23 e3 c1 9a 20 e2 97 31 3e 2a e1 06 b9 af a3 5d 03 d4 93 f4 d7 50 da 5c af 45 73 70 75 07 03 0c cb 71 1a 28 d5 5b 54 6c 33 14 cd 2b bb 30 c3 17 fe 22 1c 27 dc bc a0 83 0a b6 dc a9 69 32 b1 72 a5 57 ca 73 0a 30 cf 6f c9 c3 72 d9 19 8c 9c 86 d8 1c 9c e0 8a c6 0e 29 94 13 5a a3 2d 24 8a df 0a 11 14 c8 38 23 c3 08 d7 3e 04 7a 8a 0a c4 d1 89 ce 0b 49 14 a4 2d 04 d4 50 c2 9f 20 8c 52 a0 d4 Data Ascii: :Z[p3V4z4i\IbI~TDGgfYk5fYk5fYk5fYkfYk5Yf[E-# 1>]P\Espuq([Tl3+0"'i2rWs0or)Z-$8#>zI-P R
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: de 60 e5 8d e1 df 20 de b7 f6 2e dc d7 b9 7a f7 2d fd fb ac 57 b9 c8 26 85 c6 46 40 ba 0b f7 ee a3 61 42 e1 05 7b 94 af 74 99 a1 76 a6 9a e5 7e e9 67 47 19 a3 2a 8a 69 81 18 05 b0 69 24 52 a2 a4 2a 0d 7c 54 64 86 53 f4 64 02 bb 89 5b 0a d8 60 51 60 29 9b 34 41 c5 7c a8 e2 81 a0 2a dd b5 98 55 f4 65 d7 2b ae 05 40 ea 30 a7 f0 e1 cf b2 5f dc 71 6d 25 a4 cf 87 30 db 39 47 c7 e2 32 17 82 e5 4b 5b 5c 41 ed 56 9e f6 20 45 3f 21 0a 9f 27 91 b5 3f 69 c8 db 7c 70 b7 b1 11 90 d7 49 9f 22 ee 30 6b f5 08 45 2f 25 11 1e 17 90 55 62 6b 87 bb 91 e6 52 be 99 72 8e f6 8c ac 76 31 b5 2c 5b 85 2f b4 6a 4e 31 96 cb 2a 6c 84 03 11 19 50 ea 73 e0 1f f8 46 46 07 03 2c b8 5d 4c 6f 51 cd 8f 14 db 16 62 ff 00 3a 79 19 c8 91 53 e6 72 f1 30 8e 56 50 43 5c b9 d6 39 24 b7 91 12 bb 56 Data Ascii: ` .z-W&F@aB{tv~gGii$R\|TdSd[`Q`)4A\|Ue+@0_qm%09G2K[\AV E?!'?i\|pI"0kE/%UbkRrv1,[/jN1lPsFF,]LoQb:ySr0VPC\9$V
2024-04-25 07:07:41 UTC	13232	IN	Data Raw: cd 67 99 a6 21 67 e3 2f 25 7f 9c dc 75 d0 4d 63 36 51 5b ae 86 37 d4 09 1e 77 49 75 75 be b9 5b 75 02 03 33 cd 6c 12 bb 6b 6e e5 69 95 a5 55 22 de d6 7b b3 db 8a 3e 11 e0 42 d2 43 c5 dc 4d 02 b5 4b c0 2d bc 4b 96 e3 ed cb 29 9b 8f 9f 8a f2 a2 fe fe ca 14 7e d4 17 64 00 f4 dc ad f3 6a b1 c9 71 ca 48 81 63 1c 6d ec cc db db f4 fd c4 27 cd af 0c b2 fc 18 70 36 68 a1 12 6b 7b 18 f3 1b 5c cb 63 1b 85 41 ca 58 ab b4 4b 2f 3d 0c 48 63 8e fe e6 1e 46 4a 7b 26 89 98 a4 6e 74 39 9a e5 8b 21 45 0c 18 1a 8c 05 95 88 71 26 9e 23 55 98 f8 8d 73 92 36 97 5c 19 4a ea 85 80 89 91 05 65 94 ef 5b 89 5b 51 22 15 8f c2 39 d0 0a 57 c6 42 83 28 35 10 31 ef 93 dc 24 90 ce 76 00 88 bb 7f 20 a9 16 72 c8 02 7d 45 02 3a 79 b6 44 d9 b0 d3 cc 67 65 a7 05 70 c2 4b c5 8e 20 16 76 dd 41 Data Ascii: g!g/%uMc6Q[7wIuu[u3lkniU"{>BCMK-K)~djqHcm'p6hk{\cAXK/=HcFJ{&nt9!Eq&#Us6\Je[[Q"9WB(51$v r}E:yDgepK vA
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 5c 15 14 49 85 b7 5e 16 ef b9 1a e2 1d 99 3c 49 00 3e 43 c7 24 4a 73 85 c0 26 48 cb 2e aa 23 51 f1 0d ba 4c 0a ef 8f 91 05 54 8d 9c 05 7c d5 ba 1b 89 32 b7 6c 88 a9 5b a5 4b 28 32 98 ea e5 7f 6d 48 b7 fb 54 43 6b 70 73 24 96 24 5b 0d e9 b4 ba 8c f7 1c 5b 18 b5 a3 81 95 48 1c ac 58 a6 ce 8d 84 b9 1e 0b 4f 22 39 56 a7 25 c0 a0 0a 49 94 b8 f0 85 a8 05 4c 02 d0 ee 31 52 71 ac e5 71 28 36 51 80 b6 b7 13 ab ee 6e ef da 66 44 5b 56 67 5d 04 4b a4 3d a9 1a de 52 ed b7 6c bc 5a 52 26 22 5e db 49 1e 42 b5 c4 aa 83 6a 99 fd ca 92 f6 d0 cd 1c 6c c6 28 96 46 cd 1e c3 31 ab 55 12 46 f4 b2 b0 3d 95 69 5a 1f b6 b8 dd a9 84 91 b1 2b 6d 28 74 2a 58 ba a6 29 55 62 38 46 01 c9 51 15 b3 12 a5 ef 1d 63 38 8e 66 dc 60 99 70 c3 18 68 98 38 dc ae 45 06 f9 7c 56 65 20 96 69 48 f2 Data Ascii: \I^<I>C$Js&H.#QLT\|2l[K(2mHTCkps$$[[HXO"9V%IL1Rqq(6QnfD[Vg]K=RlZR&"^IBjl(F1UF=iZ+m(t*X)Ub8FQc8f`ph8E\|Ve iH
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: fc 00 cc 92 44 63 c0 9a e7 57 c0 69 bf 63 34 aa 4a 80 ab 0b e9 93 0c 48 5b 26 45 62 2a 16 6e f6 b4 98 60 45 2d 99 0e 0d 77 56 25 d6 a2 74 63 51 76 df e6 65 2c c3 e2 a7 b7 27 cd 24 24 61 44 77 32 39 54 5e 2c 88 d7 3d 31 0d bc 52 42 ad f8 b4 b7 54 f5 10 ca 2f 3c 70 76 26 b8 9b c3 1d b4 4d 5c de af 6e 8c 5d 33 19 0a d9 07 05 80 35 23 01 4c 48 ab 06 3d f4 03 d6 06 79 39 3b 31 5c a5 b5 c4 92 a7 6e 28 2f 23 78 eb 92 bc 84 24 0b 0d bd ec 27 8b bb 8d b6 e4 37 2a 0c 5c a9 f2 4d ad fb 1a f6 d7 80 e1 ad ec ed 7d 91 79 63 86 30 29 f6 ee 30 1d a9 0d 76 5c ba ed 20 54 2a ea af b7 19 09 a7 93 62 69 8f 9a 07 26 85 46 c4 e2 97 25 85 42 98 19 a0 09 34 b8 06 96 60 17 ca ce 15 7c c9 31 64 60 3d 10 f5 17 a7 3a 53 a5 7a 8f a7 79 de b6 e9 cb be 9f ea 0e 4e 56 b0 e3 2c ef ad 5e Data Ascii: DcWic4JH[&Ebn`E-wV%tcQve,'$$aDw29T^,=1RBT/<pv&M\n]35#LH=y9;1\n(/#x$'7\M}yc0)0v\ T*bi&F%B4`\|1d`=:SzyNV,^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50243	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	418	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/3.59da582bcc0c43060327.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 537972 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "5b44d2013a07b79e24a7d614caee6bf2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9dd92bb62a9e5979e6e29d6b9db96954.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 1pv4-ORBQEhpQXaw4LwMI6VLWo0sdCBV5N7Bnb2sZXfownxaDq5Buw== Age: 1
2024-04-25 07:07:40 UTC	16384	IN	Data Raw: ff d8 ff e1 0f fe 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 a2 a0 03 00 04 00 00 00 01 00 00 05 bd a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifMM*V^(ifHH02210100
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 54 1b 40 7e c3 4e 4e 94 fa 28 35 0d 9e d4 51 4f 4e b4 1c e3 d1 2b e5 df db 63 41 f1 3f 88 7f 65 3f 1c 69 7e 0f 9a f1 75 19 74 b9 7c 95 d3 d7 75 cc cd ff 00 3c 17 fe ba fd c6 af a9 2a 44 d8 e8 d1 d2 9e a1 09 f2 c9 48 ff 00 3f 97 f1 f7 8c ad 5c da dc 69 d1 f9 91 9d ad fb ae e3 83 4c ff 00 85 8b e2 cf fa 07 47 ff 00 7e ab fb 68 ff 00 86 25 fd 96 3b f8 33 4e ff 00 be 68 ff 00 86 24 fd 95 ff 00 e8 4c d3 bf ef 9a f2 fe a9 e6 7b ff 00 db 51 ec 7f ff d0 f7 0a 28 a2 bf 48 3f 37 23 f2 e9 db 16 9d 45 00 14 dd 8b 4e a2 80 0a 6e c5 a7 51 47 38 0f d8 68 d8 6a 5a 62 74 a0 08 a8 ab 14 50 04 49 d6 a5 a2 99 c3 8a 00 7d 31 37 d3 e8 4e d4 01 5e ac 51 45 00 37 62 d3 a8 a2 82 39 d0 51 45 14 04 f6 0a 66 c1 4f a2 af 9c c8 28 a2 8a 80 0a 28 a3 67 b5 1c e0 14 51 45 00 14 6c f6 a2 Data Ascii: T@~NN(5QON+cA?e?i~ut\|u<*DH?\iLG~h%;3Nh$L{Q(H?7#ENnQG8hjZbtPI}17N^QE7b9QEfO((gQEl
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 58 a2 80 0a 62 74 a7 d1 40 05 15 62 8a 00 af f3 ec ab 15 1f 97 52 50 01 45 14 50 01 45 14 50 01 45 14 fd 86 b9 c0 65 14 55 8a 00 ab b1 69 d5 2a 74 a7 d0 05 7a b1 45 14 00 51 45 14 00 51 45 58 a0 0a f4 54 bf 26 ca 6e f8 e8 39 c6 54 bb 05 2f 0c 29 d4 1d 04 7f 22 54 75 2e c1 4f a0 02 ab d5 8a 28 02 bd 15 62 8a 00 28 a6 6c 14 fa 00 2a c5 43 b1 aa 4d 8b 40 0e a7 7f 15 36 8a 00 b1 45 14 50 01 52 7f cb 3a 8e 9f b0 d0 00 9d 68 d8 6a 7f 92 8d 8d 40 0d a7 72 d5 35 47 b3 fe 59 d0 00 89 8a 92 91 12 a4 44 dd 41 ce 32 9a 9f 76 a5 d8 69 db 05 00 45 45 58 f2 28 d9 fc 14 00 53 f6 1a 11 06 2a 6d 8f b2 80 2b 54 df c5 f8 54 9b 1a 8d 8d 41 d0 36 9d fc 14 e7 4a 77 cd ed 40 10 d5 8a 29 fb 0d 00 32 93 ee 8f a5 2f 96 f4 fd 86 80 19 4e fe 2a 11 3e 4a 7a 25 06 3c cc 8a 9f b0 d3 bc Data Ascii: Xbt@bRPEPEPEeUitzEQEQEXT&n9T/)"Tu.O(b(lCM@6EPR:hj@r5GYDA2viEEX(Sm+TTA6Jw@)2/N>Jz%<
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: f6 66 ae 62 bb 59 ad bc d8 5a 3a c7 fe c7 ff 00 9e 6d 5a f2 36 10 aa 8e 79 fb 54 75 b8 fa 3c dd 37 2d 43 fd 93 77 51 c8 cd 39 91 93 45 68 35 85 ca 75 53 55 be cc e9 fc 26 a4 a2 0a 2a 4f 2e 8f 2e 80 23 a2 a4 f2 e8 f2 e8 02 3a 2a 4f 2e 8f 2e 80 23 a2 a4 f2 e9 bb 1a 80 1b 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 04 9e 63 53 fc ea 82 8a 00 b3 e7 0a 93 cd 35 4a 8a 0a e6 66 87 9d 4f de 6b 32 8a 8e 44 69 ed 99 ad b9 6a 44 6f 2e b1 f7 35 49 e7 35 4f 20 fd b1 ad e6 35 4d b9 ab 23 cd 7a b3 e6 a2 7b 62 8e 42 bd b1 a3 e7 3d 3f ce ac d4 9a 1f ef 55 9d e3 fb cb 47 21 b7 b6 34 92 f2 a4 f3 4d 66 f0 df c3 4c a8 2b db 1a fb f7 ff 00 76 ad 25 c7 3d eb 0f 78 a7 a4 bd aa 79 11 a4 2b 1b 69 2f 6d cb 57 d2 e5 fc ba e6 fc e6 a7 a4 b5 3e cc da 18 83 a1 4b 97 ff 00 96 95 65 25 Data Ascii: fbYZ:mZ6yTu<7-CwQ9Eh5uSU&O..#:O..#EPEPEPEPcS5JfOk2DijDo.5I5O 5M#z{bB=?UG!4MfL+v%=xy+i/mW>Ke%
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 54 d0 c3 b9 2b 56 6b 6a 2d ad be f5 00 66 bc 34 7d 9c d6 f7 d9 c5 33 ec d4 01 81 f6 51 4e f2 6b 69 ec ea 3f b2 8a 00 c6 fb 35 22 5b 6e ad af b2 8a 77 d9 de 82 79 91 89 f6 6a 3e cd 5b a9 6d be 9f f6 6a 0d 79 ce 7b ca 15 17 92 d5 d1 fd 9b 75 1f 66 f9 a8 32 e6 47 3c 90 d1 e4 56 f7 d8 f7 bd 56 fb 1f cf 47 27 90 73 23 1f ca 34 6c 15 d0 fd 9b 72 ad 42 f6 5d a8 0e 64 60 dc c3 be cf fd d7 ac ad 82 ba d9 ad b1 6d 37 fc 05 bf f6 5f fd 9a b1 3c 9a 89 ec 51 9b e4 ee a8 51 2b 5f 62 d5 7f 27 ef 7d 6b 20 2a 6c 35 a2 ff 00 bd b6 8e 4f f8 0b 7f c0 69 9e 48 ab 96 49 be 19 23 ff 00 81 50 5c c6 5b 25 59 d8 68 86 1d 8f 5a 1b 0d 74 1c 33 d8 cf d8 68 d8 6b 43 61 a3 61 a0 c8 cf f2 85 1b 0d 68 6c 34 6c 34 01 4f c9 a3 c9 ab 9b 0d 3b 60 a0 be 73 37 61 a3 ca 15 a1 b0 d1 b0 d0 41 9f Data Ascii: T+Vkj-f4}3QNki?5"[nwyj>[mjy{uf2G<VVG's#4lrB]d`m7_<QQ+_b'}k *l5OiHI#P\[%YhZt3hkCaahl4l4O;`s7aA
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 24 a0 0e 91 dc 62 a1 0f bf ad 56 4b 94 9b f8 b7 53 b7 2d 00 5a a9 a1 bf b9 b3 7c 5b c8 c9 59 fb 96 8d cb 40 1d a5 b7 8d af 93 f7 77 11 ac b5 73 fe 13 6c 7f ac 87 f5 af 3f dc b5 12 4b 40 1d e3 78 c2 f1 f8 da 89 44 7e 36 74 ff 00 8f 85 5a e1 37 35 36 80 3d 17 fe 13 68 bf e7 89 a6 ff 00 c2 68 9f f3 c7 f5 af 39 de 2a 2a 00 f4 ef f8 4c 2d ba 49 19 ab 90 f8 a7 4d 71 f7 b6 d7 92 d1 40 1e d9 0e ab 63 70 3f 77 32 d4 df 6c 87 76 37 ad 78 7a 3b 25 4b e7 bd 00 7b 66 f3 49 bf e6 af 1c 4b f7 4f f5 72 14 ff 00 81 55 f8 75 bd 49 3f d5 cc 5a 80 3d 43 72 d7 ca 3f b6 96 aa 9a 6f c0 3d 4b fb d2 cb 12 2f fd f5 ba bd c1 3c 4d 72 9f f1 f0 aa d5 f0 97 ed eb e3 f8 65 f0 36 9f e1 b8 f2 ac d3 1b 99 3f dd 55 da b5 8c f9 ac 7a f9 15 1e 7c 4c 4f c4 cf 88 9e 3f f8 1b e2 df 83 f3 59 c7 Data Ascii: $bVKS-Z\|[Y@wsl?K@xD~6tZ756=hh9**L-IMq@cp?w2lv7xz;%K{fIKOrUuI?Z=Cr?o=K/<Mre6?Uz\|LO?Y
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: cc ac ad 1f e2 17 c5 d8 9d be cd ab 3c bf 36 e6 dd b5 b7 57 cd fa 96 8f e1 2f 02 a4 3f f0 90 49 75 b2 7f dd 7d a9 5b e5 dd 5b d6 73 7c 3d b6 b3 b7 d4 35 0b ab db 5b 78 3e ec 8b bb f7 d5 9f 3b 7d 4d 7d 94 3b 23 e9 61 fb 46 fc 48 d2 74 af b4 6a 17 91 41 b2 5d ac d2 22 ad 65 68 ff 00 18 fe 24 43 34 fa bd 9e ad 15 d2 b6 e6 68 eb e7 2d 6f 4d f8 75 e3 b6 ba 92 df c4 1f 62 b7 f9 be cf 6e ca db 56 b0 74 af 82 d7 2b a6 36 a7 67 e2 4b 28 9b 7e d8 e3 f3 7e 66 ad 7e 67 3b df dd 8a 3e e1 8f f6 a8 f1 5e ab a1 ac 96 70 db c0 cc 4f ef be f5 50 d3 7e 3d fc 4e 99 1a ce f2 6b 5b a8 a5 4f f6 6b e4 8f f8 52 9e 20 b9 d1 1b 4f d2 f5 eb 39 65 42 be 5c 3b fe 69 37 7f 76 ac c3 f0 7f c2 ba 0c 3f 67 f1 1e b4 f6 57 f1 6c f3 36 fc de 5d 54 ea bf e6 26 14 97 f2 1d 9d da 69 5e 39 d6 2f Data Ascii: <6W/?Iu}[[s\|=5[x>;}M};#aFHtjA]"eh$C4h-oMubnVt+6gK(~~f~g;>^pOP~=Nk[OkR O9eB\;i7v?gWl6]T&i^9/
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: fc 2b 5a 69 61 6d ff 00 2d 15 6b f6 03 c3 3f f0 47 cf 8a 97 ff 00 bc f1 27 8a 34 6d 37 fd d6 92 6a fa 03 c3 df f0 46 4f 0a 26 df f8 49 fc 7c 5b fd 9b 6b 55 ff 00 d0 9a 5a c3 eb 91 ee 1c 8c fc 07 fe ca b6 67 e1 6a fa 69 b6 c8 9f 75 77 57 f4 bd a0 ff 00 c1 20 bf 66 9b 3d bf db 1a d6 ad 7e df f5 d6 08 6b d7 74 7f f8 26 27 ec 65 a5 6c 79 34 39 6f 36 ff 00 cf 7b c9 3e 6f fb e7 6d 67 f5 f4 1c 8c fe 53 61 b3 b6 fe ed 6a db 59 c2 fb 7e cf 1e e6 ff 00 65 6b fa ff 00 f0 f7 ec 73 fb 24 78 57 6f f6 7f 81 74 6f f7 a7 8b ed 0d ff 00 91 b7 57 b8 69 5e 00 f8 3f a1 22 c7 a1 e8 3a 6d 9f fd 70 b6 8e 3a c3 eb 84 9f c6 4e 8f f0 eb c7 3a ef fc 80 b4 1b db cf fa e1 6d 24 95 ea fa 3f ec 97 fb 48 6b 6d fe 87 e0 7d 4b e6 fe 29 20 68 ff 00 f4 2a fe c3 ed 9f 44 b6 ff 00 8f 78 e0 89 Data Ascii: +Ziam-k?G'4m7jFO&I\|[kUZgjiuwW f=~kt&'ely49o6{>omgSajY~eks$xWotoWi^?":mp:N:m$?Hkm}K) h*Dx
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: ff 00 cf ad d3 c7 ff 00 7c b6 da fe 81 bf 63 6f d8 57 c5 5f 09 7f 68 df 0b fc 48 d4 35 8b 7b ab 5d 3a ea 36 f2 e2 46 59 19 9b e5 af c0 af 12 5c 43 7f e2 7d 62 ef fe 7b df ce df f7 d4 95 13 b5 cb 87 43 98 b8 ff 00 5d 59 b3 22 fd 9a b4 ef bf e3 e7 fe 03 59 f3 6c fb 17 15 00 65 57 49 a5 4c 9f 66 f2 e4 55 f9 4d 73 75 72 d9 f6 23 56 75 69 de 27 a3 95 62 7d 9d 6e 63 b9 b6 bf 85 3e fc 68 df f0 15 ab ff 00 6f b0 76 ff 00 52 9f f7 cd 70 1e 73 d6 c6 95 67 aa 6b 17 2b 67 a5 db cb 75 2b 7f 0c 4b ba bc e9 e1 e2 bd e9 33 ef f2 bc ee bd 69 46 8d 18 f3 3e c9 5d 9d 82 5e 59 e3 fd 4a 7f df 35 3f da 2c bf b8 b5 eb fe 09 fd 95 fe 2e 78 b7 cb b8 b8 86 2d 3a 26 ef 72 ff 00 37 fd f2 bb ab eb 7f 0a fe c1 3a 55 b7 97 27 8a 35 39 af 3f bc b0 2f 96 b5 f3 d5 b3 ac 14 1f 2f 36 be 47 Data Ascii: \|coW_hH5{]:6FY\C}b{C]Y"YleWILfUMsur#Vui'b}nc>hovRpsgk+gu+K3iF>]^YJ5?,.x-:&r7:U'59?//6G
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: eb f2 09 dc 62 a6 fc 92 f4 1f c4 7f 49 9f b3 df c4 bf 01 fc 63 f0 da eb 7e 13 ba 5f 35 55 52 e2 dd 8a ac d0 b7 f7 59 6b 63 e2 47 ec 55 fb 3b fc 5d 86 4f ed 8d 24 e9 37 ec a5 96 fb 45 55 b7 93 73 7f 14 90 6c f2 65 af e7 5f e1 c7 c4 bf 18 7c 2a f1 24 3e 28 f0 5d e3 da cf 11 f9 bf bb 22 ff 00 75 96 bf a1 1f d9 8f f6 c5 f0 af c7 8d 29 74 7b 85 4b 0d 6e 25 fd f5 bb 36 dd df ed 47 fd e5 ae 8f ac 46 a2 d4 cf d8 db e1 3f 3c fe 21 7f c1 2b fe 39 68 f3 49 77 f0 9e 6b 7f 19 5a f2 cb 6f 6d fb 9d 4b fd df b1 c9 f7 9b fd 88 64 92 be 7b f0 c7 c3 1f 88 5a df 8e 74 ff 00 85 17 3a 6d dc 1a b4 52 a6 9f 1d 9d cc 52 47 24 3f 37 cc ad 13 7d cf 9d ab fa 5e d3 7e fa bc 71 fd e5 f9 7f 86 bc 97 f6 ae fd a1 34 7f d9 af e0 e4 df 13 2e 16 09 fc 65 a8 ac ba 67 86 63 9d 16 49 23 99 97 Data Ascii: bIc~_5URYkcGU;]O$7EUsle_\|*$>(]"u)t{Kn%6GF?<!+9hIwkZomKd{Zt:mRRG$?7}^~q4.egcI#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50244	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:40 UTC	418	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/2.35fa86589c24243c6674.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:40 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 694264 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:53 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:40 GMT ETag: "8c006c906057fb2ad82d54007c88e1f8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8fec22e4e0f460412a9f95c3ff89a9b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: sVlSPx5MuhhtuaCfWMZ7Fph_YD_c4yAB5w4n15iU5BL9jnklECynrA== Age: 1
2024-04-25 07:07:40 UTC	16384	IN	Data Raw: ff d8 ff e1 0f fe 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 a2 a0 03 00 04 00 00 00 01 00 00 05 bf a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifMM*V^(ifHH02210100
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 3c 96 de 72 37 da 32 b2 b4 ab b5 77 7d da eb 81 c8 56 7b fd 97 90 db f9 86 2f ba bf 35 76 6f 7e 96 d0 ac 51 29 dd f7 57 fd ad d5 ca a4 3f 69 b9 fb 3f dd 4b 75 a2 f3 4d b9 b9 45 b8 8f 3f ba db f2 ee a5 c9 aa 03 b6 7d 49 ee 66 fb 3f 97 ea db 9a b2 ee 6f 12 db 49 df 23 7f 1f cd f2 d5 2f f4 9f b3 34 7f 2a f5 5a d2 b6 d6 2d b4 e4 5f b4 2a 4b b9 3c a6 8d aa be c9 50 dc c7 bf b6 4b cb cf f7 be ee df f6 aa 9c b6 17 36 cf 6e f6 ea 7c a6 ce ee 7e eb 56 94 30 c5 32 35 e4 6c 59 76 b3 32 aa b5 6f 59 df 69 f0 a7 97 24 65 96 2d aa aa bf 2a b3 56 86 c7 3d f6 6d f7 3b ee 21 55 55 3f c3 f2 d5 3b e8 59 2c e1 8f e5 fb e7 76 df bd 5d 6d ec d0 dc a4 36 f6 6d b1 58 ff 00 e3 ab 55 92 ce cb fb 4a 37 b3 5f 37 ef 6e 5a e7 32 99 89 79 13 a3 33 a2 af ee be 55 ac 4b c9 7c eb 9f f4 b9 Data Ascii: <r72w}V{/5vo~Q)W?i?KuME?}If?oI#/4Z-_K<PK6n\|~V025lYv2oYi$e-*V=m;!UU?;Y,v]m6mXUJ7_7nZ2y3UK\|
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: f9 8c b2 ec 3f 2d 53 d5 5e 6f b1 ad c7 d9 f7 7c ff 00 7b 6f 98 df 35 68 73 7b 33 aa 7f 10 fd be ce 6f 31 7c a9 e2 db 2b 6e fe eb 7c bb 6a e3 ff 00 a1 a4 32 5c 46 ec ad b7 fd d5 dd 58 9a 3d cd cd fa 49 24 92 ac 5b 97 74 9f 2f f7 6b b3 bc d6 e6 8b 4d 68 e3 98 dd 6e f9 63 f3 fe 66 56 ac e6 1e c9 97 d1 37 fd 8e 4f 2d 62 48 97 6b 37 f7 97 77 de a9 75 fd 6d 26 fd e6 d3 17 9b fd da e4 de ee 1b 8f de 6f d8 db 15 7e f3 6d dd 4f 48 74 dd f1 c7 1c 86 55 f9 59 9b fd aa cc cc e8 6c f5 26 b6 d3 5a 3b 85 dd e6 be e5 db fe cd 09 79 30 4f 2e e3 3f bd fe 2a e2 75 5b 89 5e e5 6e 37 2a ec 3f c4 df c2 df c5 4c b6 b9 b9 b1 b9 6d 42 df fd 64 a8 8b fb af f6 6a 74 68 ae 46 74 ee f7 29 7f b2 de 3f 92 2a d5 b3 bf 98 4d fb b5 f9 36 ed 6a e6 2c 35 58 5f 52 5f ed cc a6 df bd 1f cb b7 Data Ascii: ?-S^o\|{o5hs{3o1\|+n\|j2\FX=I$[t/kMhncfV7O-bHk7wum&o~mOHtUYl&Z;y0O.?u[^n7?LmBdjthFt)?*M6j,5X_R_
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 17 78 9b e1 df 89 d7 4b d6 23 78 3c f6 dd 6f 22 ab 49 1b 7f c0 9a bc d7 52 4f ec db 56 7d 42 6f df e7 77 cb b6 bf 6e fc 49 e1 bd 1f 5a b0 b8 d0 fc 61 6b f6 cb 5d bb 59 77 7c df ef 2f f7 2b f3 73 e3 1f ec 9d ad d9 b4 de 20 f8 67 70 fa a5 87 f1 5a b7 fc 7c c7 fd ef f7 ab 9a ac 37 71 3d 5c 1e 26 2d a8 d4 76 b1 f2 1b cb a9 5c c3 2c 96 eb 2f ef 7e 6d ab fc 5f ef 56 ef 83 2d b4 db c7 93 50 d4 26 48 15 51 96 4f 31 5b 6d 70 0c f7 88 92 47 bc c4 d1 2e dd b5 4e cd 1f fe 3e 24 93 67 95 b6 bc af ac f2 b4 7d 22 c1 f3 41 ab d8 fb 0f c2 0f 0e 95 aa f9 91 2a ff 00 a2 ba b6 e8 b7 79 73 47 4c f8 95 a9 26 af 0e a1 79 67 22 f9 52 dc 2e ef 97 fd 5a af f0 aa d7 88 68 3a ac 5a 94 d6 fa 5c 4d 2c 12 a7 9b bb 71 6d db bf ba b5 ea 3a de 9a 9a 6c 3f e8 ec b2 ba ac 4a bf c3 fb cf ba Data Ascii: xK#x<o"IROV}BownIZak]Yw\|/+s gpZ\|7q=\&-v\,/~m_V-P&HQO1[mpG.N>$g}"A*ysGL&yg"R.Zh:Z\M,qm:l?J
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: ce 9b 74 2c b7 15 d7 e9 50 cd 7d 0c 96 f7 6d f7 2a 1d 4b 4a 7f b1 b3 db aa ed fe f3 7f 15 77 e2 69 de 1c d1 38 69 62 12 9f b3 32 b4 19 b6 5c af dd d8 df c2 d5 d4 6e 87 ed 3e 65 bb 2a b6 7e 6f 28 ed dd ba b8 5b 6b 2b cd ea f1 a9 64 6f e2 5a b2 f7 0f 6d 72 d7 12 29 eb 5c d4 65 cb 13 6a d8 6b bf 75 9e 93 aa de 3e e5 f2 f7 ae c3 f7 ab cb 6f 1d fe d6 d7 12 c9 ba b6 2e 2e 61 bf f9 fc cd ad b6 b9 bb 97 69 9f cc 93 ef 2d 6d 8c ad 78 91 96 e1 b9 19 ab a0 de 4d 0c ad 24 4c 51 bf d9 ae fe f3 ec d7 29 1c 71 ae e6 6f 99 9a bc f7 4a 85 a1 b9 59 3f 82 bb 9b 88 5d ed 96 48 db e6 97 ee fc d5 14 6f c8 4e 32 de d7 9a 25 34 f2 5e 16 b7 b4 8f 6b 7f 0d 4d 79 0d 9d b5 9a c9 6c df 37 dd 6a b3 67 6d 0b b5 bf d9 db 64 eb b9 5b f8 95 96 ac eb 09 0a 58 7e f2 43 d7 72 aa ff 00 df 2d Data Ascii: t,P}mKJwi8ib2\n>e~o([k+doZmr)\ejku>o..ai-mxM$LQ)qoJY?]HoN2%4^kMyl7jgmd[X~Cr-
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 3a 0f 0a cd 35 c5 e3 47 71 33 fc bf c4 b5 f4 55 fe 8f a3 f8 93 41 86 e3 ed 4e ab 6e bb 5a 3d bf dd fb ad 5f 3f 78 56 fa 1b 9f 33 cb 90 ee fe 28 f7 7d ea f4 57 d4 af e2 b0 fb 26 8f 75 e5 2b 2e d9 15 97 f8 7f 87 6d 7b 78 3b 7b 33 e6 b3 4b fb 65 cb a5 8e 02 6f 3a cf c9 d2 f5 45 5f 95 77 43 22 d6 15 cd 9d cc 30 c9 f6 86 fb cc db 57 6f de a7 6b 09 7f 0f fc 7c 6d 69 51 b7 2b 2f de aa d7 97 fb 12 18 ee 24 0d e6 ae ef 32 bc a9 f2 dd 9e f5 1b f2 a7 13 87 bb b6 6b 36 f2 e4 fb 8d f3 2a ff 00 76 ba 0f 87 bf 0f 7c 55 f1 43 c6 76 3e 03 f0 5d b9 b9 bf bf 95 62 8e 35 ae 7a f2 09 53 f7 8e d5 d5 f8 03 e2 2f 8b 7e 18 eb 72 78 93 c1 77 5f 62 bc 96 de 5b 6f 39 57 e6 55 99 76 b6 df ee b5 78 f3 8c 39 d7 32 d0 fa 25 2a 9e cf dc 7a 94 3c 49 e1 bb 2f 0d cd a8 69 77 97 07 fb 46 c2 Data Ascii: :5Gq3UANnZ=_?xV3(}W&u+.m{x;{3Keo:E_wC"0Wok\|miQ+/$2k6v\|UCv>]b5zS/~rxw_b[o9WUvx92%z<I/iwF
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 5f f4 5b 28 99 57 fb cd f3 7d ea b8 6c 29 da 2c 66 a3 61 67 61 fe 87 66 a5 9a 24 db f2 ff 00 b5 5c c6 ab a3 ba 68 eb 1e e7 dc 86 3f 99 9b e6 f9 7f bc d5 d3 cd f6 c9 6e 7e d1 b8 7e fd f7 7f 75 a9 fe 26 fb 34 36 df 66 dc ad ce e6 ab 39 f9 0f 04 d6 22 bc 96 f3 ef 6e 46 4f ba cb fc 55 cf 5f 4c 91 44 df 37 75 5f f7 6b b6 d4 9e d9 2f 2e 2f 2d d5 76 aa ed da cb f2 fd da f2 ed 62 fd 2e 5d ad e3 8d 57 6a fd df f6 9a 83 68 6e 56 4f df 5d f9 9c ec ae 9e 24 f2 e6 59 23 8d 7e 4f 9a b1 2c 1f f7 d1 fd a2 65 f9 97 e6 55 5f 95 6b 6e d9 f7 23 0d bf ec fc b4 19 cf 63 4d 21 59 9d bc cd bf de db 59 92 c2 9f 37 fb 54 d7 9a fe 1d df 66 5f f6 6b b3 f0 af 86 de f3 55 8f cb 8f fd 52 b3 7c d4 0b de 3a cb 5f 0a ff 00 c2 3d 61 63 1c 71 99 67 6f de 49 5d 3e 95 e0 36 d6 9e 4b cf 95 7e Data Ascii: _[(W}l),fagaf$\h?n~~u&46f9"nFOU_LD7u_k/./-vb.]WjhnVO]$Y#~O,eU_kn#cM!YY7Tf_kUR\|:_=acqgoI]>6K~
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: cb 35 45 ca f9 9e 52 ff 00 0d 6f 58 68 9a 56 aa f2 6a 9e 17 d2 6e 1b 46 81 93 ed 17 0c db 55 bf ba ad 5b f2 30 39 e7 b8 7b eb 5f b1 db c3 fb fd 9e 5b 48 a7 e5 6d b5 9a f2 f8 7a e7 4d 9a 38 e1 fb 12 da a6 d5 6c ee f3 19 9b f8 ab d4 6c b4 7d 1e e6 69 be 57 82 de 77 66 58 e2 6f bb 1f f7 56 a1 4f 0a db 5e 3b 69 7a 7c 2f f7 f7 2a c4 bf 34 8c bf 76 a4 9e 64 79 45 b5 b5 c6 e8 63 d2 e3 d9 2b 2f f0 ff 00 76 af cd 61 7c f3 2b c9 1b fe f7 f7 4c df ee ff 00 b3 5d cd fd 83 d9 34 37 91 48 55 b3 b5 95 7f bd 5d 55 b5 85 f5 cf 89 2d 6e ed e6 56 96 54 2d b7 fd da 0a e7 91 ca f8 5b 4b bf b3 9a 3b 7d d0 b4 4d ba 46 f9 f7 7c b5 e8 96 11 c3 0d 9f ee e1 76 82 5d db 59 7f bd 5c fa 3e 9b 67 e6 7e ef 74 92 be ef 9b 72 aa d7 55 a6 26 fb 3b ad 53 50 b8 4f 3d 8a fd 9e 38 be 55 8f 75 Data Ascii: 5ERoXhVjnFU[09{_[HmzM8ll}iWwfXoVO^;iz\|/*4vdyEc+/va\|+L]47HU]U-nVT-[K;}MF\|v]Y\>g~trU&;SPO=8Uu
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 65 92 dd 3f 73 54 f4 3d 7b 4d fb 7a de 5d af 91 2a ff 00 12 fd dd df ed 2d 5c b0 51 71 5c d6 f2 39 af 69 3e 54 7d b7 f0 f6 f3 47 f0 1f 86 17 5c d3 ed 7c dd 52 77 f9 99 95 a3 f9 7f d9 ae f3 c7 7f 16 bc 6b af 78 61 b4 bb 79 6e a2 b7 95 76 b4 3f dd db fc 4b 5f 24 68 1f 15 26 97 52 b3 b8 f8 89 75 2d d6 93 e6 fe fa 1b 35 5d ca bf ec d7 7f e2 7f 1f f8 7a e7 54 68 fc 21 35 ea 69 33 ca aa ad 3a aa c9 0d 79 b0 c0 3b 96 ab 3f b4 8f 75 f8 7f f1 95 35 8b 7b ed 2f e2 46 a1 2d 92 a4 0b b6 f2 25 59 99 a0 8f f8 7c af ef 35 7d ff 00 a0 f8 cf e1 bf 83 35 bb 1d 3f 48 f1 07 9b 3c ba 6c 57 3b 99 b6 ee 59 97 76 ed d5 f9 4d af 78 27 c3 37 88 b7 1e 13 ba bb 96 e6 29 7f d2 a3 65 56 66 56 fe ee da f6 6b ff 00 83 3e 30 d6 e1 b3 d6 2e 35 2b 2f b2 e9 76 e7 6a c6 fb 99 63 fb cb b9 5a Data Ascii: e?sT={Mz]*-\Qq\9i>T}G\\|Rwkxaynv?K_$h&Ru-5]zTh!5i3:y;?u5{/F-%Y\|5}5?H<lW;YvMx'7)eVfVk>0.5+/vjcZ
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 6d 75 be 1e d0 5f 5b d1 e4 d7 e4 91 5a 2b 73 f7 65 ab 2b 93 53 9b 86 e7 ed 96 12 5c 59 af c9 b7 e6 ff 00 81 55 9d 33 fd 19 1a 4b 95 2c aa bf 75 6b 56 68 6f 3f d6 5c 2f 9b b9 77 2d 10 c3 bd 16 49 3e f4 b4 07 f8 81 b4 dd 49 fe 7b 88 ca 45 f7 63 fe ee e6 aa d7 3f 6c b0 b3 92 ee d1 4e e4 f9 7e ed 6a 3d ae a5 7e b1 db 47 21 d8 a7 73 2b 55 d4 fb 7a 24 71 ed f3 6d f3 b9 95 a8 1f 21 c3 7d 8e da e9 a3 fb 1c 9b a2 65 56 65 65 db fb cf ee d6 6d e5 b6 b1 15 fa c9 67 32 c5 17 f7 76 d7 66 da 6a 43 32 a5 be d9 65 ff 00 6b e5 55 ab f7 29 6d 17 d8 f4 fb cb 36 46 fb d2 4d 17 f1 7f b2 aa d4 19 c2 07 0d 2f 87 a5 96 d5 6f 23 5d c8 c7 f8 7e 5d cd 58 36 10 de 3c 3f 67 8e 33 14 52 bf 94 db be f7 fb b5 d3 cd 6d 79 2d dd c3 f9 2e 89 e6 95 8e df 3b b7 7f b5 50 be 83 ab be 9b 1c 68 Data Ascii: mu_[Z+se+S\YU3K,ukVho?\/w-I>I{Ec?lN~j=~G!s+Uz$qm!}eVeemg2vfjC2ekU)m6FM/o#]~]X6<?g3Rmy-.;Ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50239	18.64.155.15	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	811	OUT	GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Custom__Video__Image_accordion HTTP/1.1 Host: cdn.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:41 UTC	566	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51078 Connection: close Last-Modified: Thu, 18 Apr 2024 10:51:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:41 GMT Cache-Control: max-age=900 ETag: "cfc33ecafe0a3d20ed59ba16c0be3987" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bf0fe10b98da90ba1dfbd4ac1d026c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: VZXITonEYE0tb1kKROZssWXRxvyEVjlFDbwOZOnpvNbG7SL8ggKObw== Age: 311 Vary: Origin
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 7d 2c 65 28 74 2c 69 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: (()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 2e 5f 65 72 72 6f 72 2c 61 2e 5f 63 6f 6d 70 6c 65 74 65 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 65 72 72 6f 72 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 3a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 74 65 2c 61 7d 72 65 74 75 72 6e 20 74 28 69 2c 65 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 69 66 28 21 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 7c 7c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 73 65 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e Data Ascii: ._error,a._complete=r?function(){try{r()}catch(e){t.error(e)}finally{this.unsubscribe()}}:e.prototype._complete,a}return t(i,e),i.prototype.unsubscribe=function(){var t;if(!this.shouldUnsubscribe\|\|this.shouldUnsubscribe()){var i=this.closed;e.prototype.un
2024-04-25 07:07:41 UTC	2994	IN	Data Raw: 7b 63 6f 6e 73 74 20 65 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 66 72 61 6d 65 28 29 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 6f 70 2e 70 61 67 65 59 4f 66 66 73 65 74 3f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 3f 28 65 2e 79 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 2c 65 2e 78 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 Data Ascii: {const e={x:0,y:0};return this.isIframe()\|\|"number"!=typeof top.pageYOffset?document.body&&(document.body.scrollLeft\|\|document.body.scrollTop)?(e.y=document.body.scrollTop,e.x=document.body.scrollLeft):document.documentElement&&(document.documentElement.s
2024-04-25 07:07:41 UTC	15316	IN	Data Raw: 74 3d 22 22 2c 69 3d 30 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 72 5d 26 26 28 30 3d 3d 3d 69 3f 28 74 2b 3d 72 2b 22 3d 22 2b 79 65 28 65 5b 72 5d 29 2c 69 2b 2b 29 3a 28 74 2b 3d 22 26 22 2b 72 2b 22 3d 22 2b 79 65 28 65 5b 72 5d 29 2c 69 2b 2b 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 29 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 71 75 65 6e 63 65 2b 2b 2c 74 68 69 73 2e 6d 61 6b 65 52 65 71 75 65 73 74 28 69 29 2e 63 61 74 63 68 28 28 65 3d 3e 74 68 69 73 2e 6c 6f 67 67 65 72 2e 64 65 62 75 67 28 60 65 72 72 6f 72 20 6d 61 6b 69 6e 67 20 72 65 71 75 65 73 74 3a 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 29 29 29 2e 74 68 65 6e 28 28 28 29 3d 3e 74 68 69 73 2e 6c 6f 67 67 65 72 Data Ascii: t="",i=0;for(var r in e)"function"!=typeof e[r]&&(0===i?(t+=r+"="+ye(e[r]),i++):(t+="&"+r+"="+ye(e[r]),i++));return t}(t)}`;return this.sequence++,this.makeRequest(i).catch((e=>this.logger.debug(`error making request:${e.message}`))).then((()=>this.logger

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50241	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	618	OUT	GET /rjss/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=${SOURCE_URL_ENC} HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:41 UTC	352	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:41 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 61409 Connection: close pragma: no-cache cache-control: no-cache expires: Wed, 31 Dec 1969 23:59:59 GMT access-control-allow-origin: pixel.adsafeprotected.com access-control-allow-credentials: true vary: accept-encoding
2024-04-25 07:07:41 UTC	16032	IN	Data Raw: 0a 0a 0a 0a 0a 76 61 72 20 5f 5f 49 6e 74 65 67 72 61 6c 41 53 44 69 61 67 6e 6f 73 74 69 63 43 61 6c 6c 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 61 6c 72 65 61 64 79 53 65 6e 74 20 3d 20 7b 7d 3b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 76 61 72 20 67 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 20 3d 20 27 2f 2f 64 69 61 67 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 6a 73 3f 27 3b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 72 72 4d 73 67 20 3d 20 65 Data Ascii: var __IntegralASDiagnosticCall = (function() {try {var alreadySent = {};return function(code, err, config) {try {var gen = function(code, err, config) {var url = '//diag.adsafeprotected.com/js?';try {var errMsg = e
2024-04-25 07:07:41 UTC	10482	IN	Data Raw: 62 22 2c 7d 2c 20 44 65 76 69 63 65 43 61 74 65 67 6f 72 79 3a 7b 43 54 56 3a 22 63 74 76 22 2c 20 44 45 53 4b 54 4f 50 3a 22 64 65 73 6b 74 6f 70 22 2c 20 4d 4f 42 49 4c 45 3a 22 6d 6f 62 69 6c 65 22 2c 20 4f 54 48 45 52 3a 22 6f 74 68 65 72 22 2c 7d 2c 20 49 6e 74 65 72 61 63 74 69 6f 6e 54 79 70 65 3a 7b 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2c 20 49 4e 56 49 54 41 54 49 4f 4e 5f 41 43 43 45 50 54 3a 22 69 6e 76 69 74 61 74 69 6f 6e 41 63 63 65 70 74 22 2c 7d 2c 20 43 72 65 61 74 69 76 65 54 79 70 65 3a 7b 44 45 46 49 4e 45 44 5f 42 59 5f 4a 41 56 41 53 43 52 49 50 54 3a 22 64 65 66 69 6e 65 64 42 79 4a 61 76 61 53 63 72 69 70 74 22 2c 20 48 54 4d 4c 5f 44 49 53 50 4c 41 59 3a 22 68 74 6d 6c 44 69 73 70 6c 61 79 22 2c 20 4e 41 54 49 56 45 5f 44 49 53 Data Ascii: b",}, DeviceCategory:{CTV:"ctv", DESKTOP:"desktop", MOBILE:"mobile", OTHER:"other",}, InteractionType:{CLICK:"click", INVITATION_ACCEPT:"invitationAccept",}, CreativeType:{DEFINED_BY_JAVASCRIPT:"definedByJavaScript", HTML_DISPLAY:"htmlDisplay", NATIVE_DIS
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 24 44 65 74 65 63 74 4f 6d 69 64 2e 4f 4d 49 44 5f 50 52 45 53 45 4e 54 5f 46 52 41 4d 45 5f 4e 41 4d 45 5f 41 50 50 2c 20 62 5b 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 63 6f 6e 73 74 61 6e 74 73 2e 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 57 45 42 5d 20 3d 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 44 65 74 65 63 74 4f 6d 69 64 2e 4f 4d 49 44 5f 50 52 45 53 45 4e 54 5f 46 52 41 4d 45 5f 4e 41 4d 45 5f 57 45 42 2c 20 62 29 5b 61 5d 3b 0a 7d 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 44 65 74 65 63 74 4f 6d 69 64 5f 69 73 49 66 72 61 6d 65 50 72 65 73 65 6e 74 28 61 2c 20 62 29 20 7b 0a 20 20 74 72 79 20 Data Ascii: $DetectOmid.OMID_PRESENT_FRAME_NAME_APP, b[module$exports$omid$common$constants.Environment.WEB] = module$exports$omid$common$DetectOmid.OMID_PRESENT_FRAME_NAME_WEB, b)[a];}};function module$contents$omid$common$DetectOmid_isIframePresent(a, b) { try
2024-04-25 07:07:41 UTC	16384	IN	Data Raw: 73 65 72 76 69 63 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 73 74 61 72 74 56 65 72 69 66 69 63 61 74 69 6f 6e 53 65 72 76 69 63 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 28 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 77 69 6e 64 6f 77 55 74 69 6c 73 5f 72 65 73 6f 6c 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 28 29 29 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 6f 6e 4d 65 73 73 61 67 65 20 3d 20 74 68 69 73 2e 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 5f 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 69 66 20 28 61 20 3d 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 Data Ascii: serviceCommunication_startVerificationServiceCommunication(module$contents$omid$common$windowUtils_resolveGlobalContext())) { this.communication.onMessage = this.handleMessage_.bind(this); } else { if (a = module$contents$omid$verificationClient
2024-04-25 07:07:41 UTC	2127	IN	Data Raw: 61 6c 69 7a 65 72 49 66 41 76 61 69 6c 61 62 6c 65 28 29 3b 0a 0a 09 09 09 09 69 66 20 28 69 6e 69 74 69 61 6c 69 7a 65 72 46 6e 29 20 7b 0a 09 09 09 09 09 69 6e 69 74 69 61 6c 69 7a 65 72 46 6e 28 70 61 72 61 6d 73 2c 20 69 6e 69 74 69 61 6c 69 7a 65 72 53 63 6f 70 65 2c 20 69 6e 69 74 69 61 6c 69 7a 65 72 53 63 6f 70 65 2e 64 6f 63 75 6d 65 6e 74 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 74 69 6d 65 50 61 73 73 65 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 20 2d 20 70 61 72 61 6d 73 2e 62 69 72 74 68 64 61 74 65 3b 0a 09 09 09 09 09 74 69 6d 65 6f 75 74 45 78 63 65 65 64 65 64 20 3d 20 74 69 6d 65 50 61 73 73 65 64 20 3e 20 54 49 4d 45 4f 55 54 5f 4d 53 3b 0a 09 09 09 09 09 73 68 6f 75 6c 64 53 65 6e 64 Data Ascii: alizerIfAvailable();if (initializerFn) {initializerFn(params, initializerScope, initializerScope.document);} else {timePassed = new Date().getTime() - params.birthdate;timeoutExceeded = timePassed > TIMEOUT_MS;shouldSend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50249	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	1259	OUT	GET /openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028855715%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://backgrounds.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:41 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:41 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 879c7f61bb664519-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://backgrounds.wetransfer.net Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LISr96pblE6Z2qgJWcfkg6tU%2B%2Fq2evrniCSg4wEBEzKUH7BI%2Fhzk8IXrzC8eUKlGxWBqcXdnnJW12TcuG%2BT2a38pMNDoYJ4uUAda6XuFNFwv51ogGnUL0Ibr2zEihS32DqRiNhpp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 32 39 61 37 0d 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 35 35 39 34 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 31 30 37 37 35 35 36 2f 38 35 2f 63 6f 6c 30 32 66 63 35 6d 71 6d 64 74 72 30 6c 6c 6f 33 30 2f 65 32 62 32 66 65 37 65 2d 62 37 36 39 2d 34 39 32 30 2d 61 30 35 32 2d 62 34 61 38 31 38 30 65 33 66 33 66 3f 76 65 72 69 66 69 65 44 3d 31 26 75 73 65 72 49 44 3d 26 63 6d 70 72 6f 3d 30 26 64 65 76 69 63 65 54 79 70 65 3d 32 26 65 78 70 69 72 79 54 69 6d 65 3d 31 37 31 34 30 32 39 34 36 31 26 70 72 6f 66 69 6c 65 49 44 73 3d 26 63 72 65 61 74 69 76 65 49 44 3d 32 66 33 35 61 35 33 26 70 75 62 49 44 3d 31 39 34 30 35 32 26 66 6f 72 6d 61 74 3d 62 61 6e 6e 65 72 26 63 68 61 6e 6e 65 Data Ascii: 29a7<img src="https://a5594.casalemedia.com/impression/v2/1077556/85/col02fc5mqmdtr0llo30/e2b2fe7e-b769-4920-a052-b4a8180e3f3f?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029461&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channe
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 47 6e 7a 44 41 42 69 59 50 47 48 45 32 58 5f 48 7a 33 59 69 64 39 56 7a 6e 50 65 57 2d 33 4b 46 74 4a 72 6e 33 35 6a 4d 75 32 33 72 77 46 65 57 46 4d 37 33 5a 6c 37 54 42 79 51 51 6f 5a 6d 34 34 7a 64 48 5a 6d 45 62 76 62 53 2d 76 62 6c 5a 34 43 6c 53 6d 63 6b 36 65 34 69 63 66 45 7a 66 70 63 62 31 73 37 6b 78 73 33 4d 64 53 66 45 49 36 31 78 54 5a 32 47 69 6b 59 2d 65 4c 54 75 4f 70 67 45 30 6e 43 55 6f 37 78 52 36 34 68 51 72 61 33 48 67 5a 67 69 6c 77 61 4d 6d 62 65 6e 31 68 31 44 70 64 59 33 58 61 56 78 66 44 44 42 53 77 43 66 48 51 78 37 61 42 73 4b 65 69 30 62 31 49 31 69 58 66 48 6d 36 30 58 30 64 6c 46 6e 5a 6c 79 5a 72 65 30 46 64 34 6a 45 75 61 51 58 54 34 79 46 6c 72 36 66 44 36 6a 68 56 4a 4a 6c 7a 48 73 57 58 34 51 4a 54 54 56 6a 4c 6e 34 65 Data Ascii: GnzDABiYPGHE2X_Hz3Yid9VznPeW-3KFtJrn35jMu23rwFeWFM73Zl7TByQQoZm44zdHZmEbvbS-vblZ4ClSmck6e4icfEzfpcb1s7kxs3MdSfEI61xTZ2GikY-eLTuOpgE0nCUo7xR64hQra3HgZgilwaMmben1h1DpdY3XaVxfDDBSwCfHQx7aBsKei0b1I1iXfHm60X0dlFnZlyZre0Fd4jEuaQXT4yFlr6fD6jhVJJlzHsWX4QJTTVjLn4e
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 35 75 4f 2d 43 4c 38 45 4e 54 39 33 56 71 44 5f 53 71 59 6e 48 76 31 30 72 62 6c 49 4d 4a 53 4a 62 7a 53 6d 30 53 67 66 2d 30 66 77 50 47 69 4a 58 4a 4b 57 50 79 41 73 6e 78 67 69 72 72 56 38 6b 4b 5a 68 67 41 4b 6a 30 48 4e 6e 6d 77 6c 77 67 76 68 38 70 33 47 6c 71 56 68 31 4b 69 61 66 53 6a 46 52 62 76 43 66 32 47 76 36 59 68 67 70 65 38 62 61 42 36 6c 31 61 34 6a 4f 71 76 64 4f 50 69 70 36 42 52 31 6e 7a 62 63 77 31 74 51 67 49 6a 6c 6a 79 45 57 4d 50 30 66 68 42 66 55 76 54 31 70 78 33 66 62 49 59 77 59 6f 50 4f 5a 46 33 46 36 7a 53 77 77 71 77 2d 4e 46 6e 31 6a 65 31 4c 51 57 55 31 66 74 5a 53 6a 46 34 44 51 5f 64 41 42 68 79 58 4d 56 49 74 4e 4f 64 43 47 53 79 62 39 39 72 55 30 79 30 64 54 5f 4c 4e 30 6e 44 4f 4c 63 37 57 49 64 79 6e 77 72 35 63 49 Data Ascii: 5uO-CL8ENT93VqD_SqYnHv10rblIMJSJbzSm0Sgf-0fwPGiJXJKWPyAsnxgirrV8kKZhgAKj0HNnmwlwgvh8p3GlqVh1KiafSjFRbvCf2Gv6Yhgpe8baB6l1a4jOqvdOPip6BR1nzbcw1tQgIjljyEWMP0fhBfUvT1px3fbIYwYoPOZF3F6zSwwqw-NFn1je1LQWU1ftZSjF4DQ_dABhyXMVItNOdCGSyb99rU0y0dT_LN0nDOLc7WIdynwr5cI
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 2d 63 76 41 62 43 52 41 4d 6d 46 41 52 5a 71 54 67 30 7a 49 71 54 45 68 42 43 7a 4e 4d 34 4b 55 64 65 58 4b 69 6d 4c 37 2d 6f 64 73 79 52 58 42 47 78 56 73 34 31 50 6e 77 31 57 6e 72 74 58 6d 44 6d 46 69 65 67 76 6c 6b 67 72 45 78 74 38 44 71 76 67 68 4d 75 41 49 41 36 59 62 56 57 71 34 4b 6e 31 6f 4b 38 48 35 71 68 5f 37 6c 36 4d 61 71 44 69 66 4d 6b 77 4f 6a 37 4c 57 73 65 42 6d 5f 69 6e 79 62 6d 6e 49 37 67 6b 38 4e 53 44 6f 7a 4b 70 38 74 4a 64 74 42 69 75 41 61 69 58 53 73 53 4a 75 49 42 4a 65 6d 4f 6f 37 38 41 52 35 52 42 63 75 4b 2d 34 65 47 63 57 30 76 6f 43 61 46 6b 39 43 50 75 74 68 51 4f 36 42 71 78 75 52 6f 41 77 63 4f 38 78 59 34 36 71 72 70 78 75 75 62 4e 51 5f 6c 79 51 4d 46 53 4c 4c 4d 78 65 55 75 67 59 74 7a 73 35 50 68 45 5f 6e 6e 74 42 Data Ascii: -cvAbCRAMmFARZqTg0zIqTEhBCzNM4KUdeXKimL7-odsyRXBGxVs41Pnw1WnrtXmDmFiegvlkgrExt8DqvghMuAIA6YbVWq4Kn1oK8H5qh_7l6MaqDifMkwOj7LWseBm_inybmnI7gk8NSDozKp8tJdtBiuAaiXSsSJuIBJemOo78AR5RBcuK-4eGcW0voCaFk9CPuthQO6BqxuRoAwcO8xY46qrpxuubNQ_lyQMFSLLMxeUugYtzs5PhE_nntB
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 31 70 41 59 69 70 6e 58 64 72 53 45 37 6b 6b 54 4a 31 67 67 44 61 67 5a 4c 30 48 78 61 79 68 33 70 74 4a 41 7a 66 49 51 55 54 54 31 58 52 79 4c 68 56 69 6d 52 32 6d 32 68 55 74 77 31 4d 55 31 6a 41 71 44 69 61 6d 39 71 36 70 30 58 54 31 33 75 4c 62 54 4b 72 61 74 66 68 4e 66 62 6b 44 46 53 4e 78 7a 78 6d 54 78 41 65 50 39 70 57 7a 4c 65 6c 74 73 32 36 54 30 49 69 49 56 6b 74 45 2d 78 38 39 79 59 4e 78 53 56 55 73 46 37 34 47 2d 6d 6c 37 50 33 68 35 44 71 68 47 36 56 38 4a 62 33 49 30 6a 48 6f 4b 6f 53 38 46 4b 76 6c 62 4f 68 39 4b 44 4f 49 49 49 46 67 74 6b 6f 2d 53 76 2d 52 33 54 46 6c 6c 6a 72 32 45 6c 38 44 48 7a 36 6b 75 77 46 75 75 33 49 6a 41 61 68 67 64 41 50 7a 33 78 5a 6e 7a 4b 49 46 55 64 71 78 55 26 64 62 6d 5f 64 3d 41 4b 41 6d 66 2d 42 78 63 Data Ascii: 1pAYipnXdrSE7kkTJ1ggDagZL0Hxayh3ptJAzfIQUTT1XRyLhVimR2m2hUtw1MU1jAqDiam9q6p0XT13uLbTKratfhNfbkDFSNxzxmTxAeP9pWzLelts26T0IiIVktE-x89yYNxSVUsF74G-ml7P3h5DqhG6V8Jb3I0jHoKoS8FKvlbOh9KDOIIIFgtko-Sv-R3TFlljr2El8DHz6kuwFuu3IjAahgdAPz3xZnzKIFUdqxU&dbm_d=AKAmf-Bxc
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 63 75 6b 32 69 55 32 47 73 7a 4b 43 76 52 34 5a 77 66 58 50 71 52 58 72 70 36 6b 2d 65 7a 75 65 58 31 36 57 64 4e 54 57 6a 55 52 68 76 63 6d 39 4d 51 41 44 4f 42 50 55 5a 41 4c 65 66 6e 68 44 5f 45 68 4b 4e 62 6a 51 39 45 58 76 58 6d 67 73 49 51 50 76 5a 4c 6b 54 52 34 57 30 57 70 41 66 4b 70 6f 74 65 41 61 4f 65 55 57 70 36 31 57 66 41 54 7a 6a 68 74 57 66 6d 32 39 43 69 72 55 54 34 69 50 57 6a 58 4d 4c 76 48 43 4d 65 56 33 72 48 52 76 36 79 33 66 46 78 63 56 49 34 67 5f 2d 6a 4e 33 64 45 53 77 43 66 6d 62 48 2d 34 58 48 58 4f 58 6f 4c 69 39 66 42 44 54 4e 6f 39 76 6e 45 2d 79 77 4b 5a 67 6a 71 64 6a 54 2d 61 62 51 49 5a 6d 47 6f 7a 51 41 73 41 35 47 6f 5f 7a 7a 4b 52 50 73 79 71 46 69 71 50 48 76 4d 56 30 68 77 70 47 44 30 6f 38 30 36 64 52 70 53 41 6a Data Ascii: cuk2iU2GszKCvR4ZwfXPqRXrp6k-ezueX16WdNTWjURhvcm9MQADOBPUZALefnhD_EhKNbjQ9EXvXmgsIQPvZLkTR4W0WpAfKpoteAaOeUWp61WfATzjhtWfm29CirUT4iPWjXMLvHCMeV3rHRv6y3fFxcVI4g_-jN3dESwCfmbH-4XHXOXoLi9fBDTNo9vnE-ywKZgjqdjT-abQIZmGozQAsA5Go_zzKRPsyqFiqPHvMV0hwpGD0o806dRpSAj
2024-04-25 07:07:41 UTC	1369	IN	Data Raw: 74 34 4b 4a 4f 47 4c 47 63 2d 74 62 47 63 4d 5f 55 58 65 71 7a 6b 4e 41 78 34 54 43 4d 77 73 57 5f 47 31 41 57 53 47 45 4f 73 38 46 61 69 69 5a 7a 53 72 38 52 6b 47 36 33 50 66 6a 52 5f 4c 51 34 34 59 69 75 6b 77 4f 43 69 79 6b 6d 66 54 49 31 78 51 6f 31 64 64 72 72 68 33 66 34 4d 51 44 67 6a 4c 45 76 65 51 53 6d 6a 65 67 49 54 35 56 4f 41 52 52 36 35 2d 57 33 65 42 6a 38 37 78 61 6d 4a 41 66 75 73 76 48 67 4f 38 34 31 49 68 5f 42 6f 2d 72 6d 79 46 32 6b 66 51 59 79 4e 4b 6a 4d 44 48 59 75 66 71 72 70 6c 4e 59 41 35 34 64 38 58 36 68 4a 5a 39 63 5f 43 79 56 50 79 33 44 55 55 6b 7a 38 64 48 5a 61 59 59 64 68 48 56 33 46 67 50 6d 4a 37 39 6b 5a 72 5f 72 4e 6d 32 41 73 72 4e 45 66 43 71 7a 64 76 39 4b 31 79 6f 5f 52 62 48 6c 77 6f 49 4e 6d 72 59 77 37 79 66 Data Ascii: t4KJOGLGc-tbGcM_UXeqzkNAx4TCMwsW_G1AWSGEOs8FaiiZzSr8RkG63PfjR_LQ44YiukwOCiykmfTI1xQo1ddrrh3f4MQDgjLEveQSmjegIT5VOARR65-W3eBj87xamJAfusvHgO841Ih_Bo-rmyF2kfQYyNKjMDHYufqrplNYA54d8X6hJZ9c_CyVPy3DUUkz8dHZaYYdhHV3FgPmJ79kZr_rNm2AsrNEfCqzdv9K1yo_RbHlwoINmrYw7yf
2024-04-25 07:07:41 UTC	1088	IN	Data Raw: 79 48 46 6e 42 39 30 53 53 51 69 54 6c 53 41 26 63 69 64 3d 43 41 51 53 47 77 42 37 46 4c 74 71 4f 35 67 77 49 53 4b 6c 39 61 53 37 34 6f 43 6a 47 71 34 4d 4d 68 6d 4e 4b 5f 6d 44 38 78 67 42 22 20 64 61 74 61 2d 64 76 33 2d 77 69 64 74 68 3d 22 33 30 30 22 20 64 61 74 61 2d 64 76 33 2d 68 65 69 67 68 74 3d 22 32 35 30 22 20 64 61 74 61 2d 64 76 33 2d 72 65 6e 64 65 72 2d 6d 6f 64 65 3d 22 73 63 72 69 70 74 22 20 64 61 74 61 2d 64 76 33 2d 6d 65 74 61 2d 64 61 74 61 3d 22 5b 31 33 2c 37 36 2c 31 33 39 31 38 34 32 33 33 32 36 39 37 30 34 33 31 34 37 30 5d 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 31 31 32 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 34 32 33 22 3e 28 66 75 6e 63 74 69 Data Ascii: yHFnB90SSQiTlSA&cid=CAQSGwB7FLtqO5gwISKl9aS74oCjGq4MMhmNK_mD8xgB" data-dv3-width="300" data-dv3-height="250" data-dv3-render-mode="script" data-dv3-meta-data="[13,76,13918423326970431470]"></script><script data-jc="112" data-jc-version="r20240423">(functi
2024-04-25 07:07:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50248	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	1956	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028859..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.8
2024-04-25 07:07:42 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:41 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50253	13.32.230.81	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	552	OUT	GET /main.19.8.499.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:42 UTC	623	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 223553 Connection: close Date: Thu, 25 Apr 2024 00:09:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 20:33:00 GMT ETag: "fa6de7dcefc3499fe291b30908e6b762" x-amz-server-side-encryption: AES256 x-amz-version-id: e2w5WSmPYdvXSM8eUfmNQvPaZRq8kRwd Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 799fe82fac4f020c59f351e7b18812ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: Bm9ShzsqEuOCXXJdV1CRorqyzH81z0zTeM_zIFb9_3_0Y8eoR9yvCw== Age: 25091
2024-04-25 07:07:42 UTC	15761	IN	Data Raw: 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 3d 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 7c 7c 7b 7d 2c 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 3d 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 7c 7c 7b 7d 2c 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6c 61 73 73 20 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6c 6f 67 73 3d 5b 5d 7d 61 64 64 28 7b 73 74 6f 72 Data Ascii: __IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.499"]=__IASScope.__IntegralASExec["19.8.499"]\|\|{},__IASScope.__IntegralASExec["19.8.499"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({stor
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 29 26 26 72 3b 72 65 74 75 72 6e 20 65 3f 72 3a 69 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 45 6d 70 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 2e 69 74 65 72 61 62 6c 65 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d Data Ascii: )&&r;return e?r:i},y.prototype.isArray=function(){"use strict";return this.iterable instanceof Array},y.prototype.isEmpty=function(e){"use strict";return 0===this.keys(e).length},y.prototype.each=function(e,t){"use strict";var n=this.iterable;if(n.length=
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 65 74 41 67 67 72 65 67 61 74 6f 72 28 29 2e 74 72 69 67 67 65 72 28 48 2e 45 6c 69 67 69 62 6c 65 52 65 6e 64 65 72 29 7d 29 29 7d 3b 76 61 72 20 48 2c 6a 2c 71 2c 59 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 5b 5d 2c 74 3d 5b 5d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 56 65 2e 69 73 57 69 6e 64 6f 77 28 65 29 29 74 3d 22 57 49 4e 44 4f 57 22 3b 65 6c 73 65 20 69 66 28 56 65 2e 69 73 4e 6f 64 65 58 44 6f 6d 61 69 6e 49 66 72 61 6d 65 28 65 29 29 74 3d 22 58 49 46 52 41 4d 45 22 3b 65 6c 73 65 20 74 72 79 7b 74 3d 56 65 2e 67 65 74 4e 6f 64 65 4e 61 6d 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 28 22 6e 65 6e 22 29 7d 72 65 74 75 72 6e 20 74 7d 2c 72 3d 66 75 6e 63 Data Ascii: etAggregator().trigger(H.EligibleRender)}))};var H,j,q,Y,X=function(){"use strict";var e=[],t=[],n=function(e){var t;if(Ve.isWindow(e))t="WINDOW";else if(Ve.isNodeXDomainIframe(e))t="XIFRAME";else try{t=Ve.getNodeName(e)}catch(e){r("nen")}return t},r=func
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 6f 72 28 29 2e 6f 6e 28 48 2e 53 65 6e 64 44 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 6f 3d 3d 3d 52 2e 44 54 5f 43 4f 44 45 53 2e 50 49 4e 47 26 26 61 3d 3d 3d 72 26 26 28 58 65 2e 65 78 65 63 41 74 45 6e 64 4f 66 54 68 72 65 61 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 72 65 71 75 65 73 74 54 6f 70 3a 22 72 65 66 72 65 73 68 41 64 22 2c 61 64 55 6e 69 74 49 64 3a 65 2c 63 61 63 68 65 49 64 3a 74 7d 29 2c 22 2a 22 29 7d 29 29 2c 6e 2e 73 65 6e 64 41 75 74 6f 52 65 66 72 65 73 68 50 72 6f 70 28 72 29 29 7d 29 29 7d 2c 73 65 6e 64 41 75 74 6f 52 65 66 72 65 73 68 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 2e 67 65 74 41 67 67 72 65 67 61 74 6f 72 Data Ascii: or().on(H.SendDt,(function(o,a){o===R.DT_CODES.PING&&a===r&&(Xe.execAtEndOfThread((function(){i.postMessage(JSON.stringify({requestTop:"refreshAd",adUnitId:e,cacheId:t}),"*")})),n.sendAutoRefreshProp(r))}))},sendAutoRefreshProp:function(e){_.getAggregator
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 20 44 2e 69 73 44 65 66 28 74 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 3f 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 28 69 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 26 26 28 72 3d 69 29 3a 44 2e 69 73 44 65 66 28 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 26 26 28 72 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 2c 72 7d 2c 77 68 65 6e 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 4e 65 2e 69 73 44 6f 6d 6c 65 73 73 28 29 29 58 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 29 2c 35 30 29 3b 65 6c 73 65 7b 76 61 72 20 72 2c 69 2c 6f 3d 74 7c 7c 28 4e 65 2e 78 44 6f 6d 61 69 6e 49 66 72 61 6d 65 3f 6e Data Ascii: D.isDef(t.XMLHttpRequest)?"withCredentials"in(i=new XMLHttpRequest)&&(r=i):D.isDef(XDomainRequest)&&(r=new XDomainRequest),r},whenReady:function(e,t){"use strict";if(Ne.isDomless())Xe.setTimeout((function(){e()}),50);else{var r,i,o=t\|\|(Ne.xDomainIframe?n
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 6f 74 73 74 72 61 70 46 65 61 74 75 72 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 5b 65 5d 3d 74 7d 2c 72 65 70 6f 72 74 65 64 42 6f 6f 74 73 74 72 61 70 46 65 61 74 75 72 65 73 3a 69 2c 6f 75 74 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 44 28 72 29 2e 6d 61 70 54 6f 4f 62 6a 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 3d 44 2e 66 72 6f 6d 42 6f 6f 6c 54 6f 4e 75 6d 28 74 5b 6e 5d 29 2c 72 7d 29 29 2c 6e 3d 44 28 69 29 2e 6d 61 70 54 6f 4f 62 6a 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 44 2e 66 72 6f 6d 42 6f 6f 6c Data Ascii: otstrapFeatures:function(e,t){i[e]=t},reportedBootstrapFeatures:i,output:function(){return D(function(){const e=D(r).mapToObj((function(e,n){const r={};return r[e]=D.fromBoolToNum(t[n]),r})),n=D(i).mapToObj((function(e,t){const n={};return n[e]=D.fromBool
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 28 29 7b 69 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 73 74 72 69 6e 67 54 6f 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 3d 58 65 2e 67 65 74 57 69 6e 64 6f 77 28 29 2c 72 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 2e 6c 65 6e 67 74 68 26 26 28 6e 2c 6e 3d 6e 5b 72 5b 74 5d 5d 2c 21 44 2e 69 73 55 6e 64 65 66 28 6e 29 29 3b 74 2b 2b 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 63 6f 6e 74 61 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 21 21 44 2e 69 73 53 74 72 28 65 29 26 26 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (){i.apply(r,arguments)}},stringToProp:function(e){"use strict";var t,n=Xe.getWindow(),r=e.split(".");for(t=0;t<r.length&&(n,n=n[r[t]],!D.isUndef(n));t++);return n},contains:function(e,t){"use strict";return!!D.isStr(e)&&-1!==e.indexOf(t)},trim:function(e
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 52 2e 4e 41 7d 2c 69 73 53 74 61 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 41 64 4e 6f 64 65 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 4d 65 28 7b 73 63 72 58 3a 76 6f 69 64 20 30 2c 73 63 72 59 3a 76 6f 69 64 20 30 2c 77 69 64 74 68 3a 6e 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 2e 68 65 69 67 68 74 7d 29 29 2c 65 7d 2c 67 65 74 4f 62 73 65 72 76 65 64 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 67 65 74 50 69 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 7d 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: nction(){return i!==R.NA},isStarted:function(){return a},getAdNodeDimensions:function(){var e;return n&&(e=Me({scrX:void 0,scrY:void 0,width:n.width,height:n.height})),e},getObservedNode:function(){return r},getPiv:function(){return i}}},Ct=function(){"us
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 75 6d 65 22 3a 63 61 73 65 22 62 75 66 66 65 72 46 69 6e 69 73 68 22 3a 41 3d 22 72 65 73 75 6d 65 41 64 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 6b 69 70 70 65 64 22 3a 41 3d 22 61 64 53 6b 69 70 70 65 64 22 7d 69 66 28 61 3d 61 3e 30 26 26 61 3c 2e 31 3f 2e 31 3a 70 61 72 73 65 49 6e 74 28 31 30 2a 61 29 2f 31 30 2c 73 3d 73 3e 30 26 26 73 3c 2e 31 3f 2e 31 3a 70 61 72 73 65 49 6e 74 28 31 30 2a 73 29 2f 31 30 2c 22 22 21 3d 3d 41 29 7b 76 61 72 20 4e 3d 5f 2e 67 65 74 41 67 67 72 65 67 61 74 6f 72 28 29 2e 72 65 71 75 65 73 74 28 71 2e 53 43 52 45 45 4e 5f 45 56 45 4e 54 53 29 3b 4e 26 26 28 4f 3d 4e 2e 67 65 74 43 75 72 72 65 6e 74 4c 6f 63 28 29 7c 7c 4f 29 2c 69 2e 70 75 73 68 28 7b 74 3a 53 2d 6f 2c 72 74 Data Ascii: break;case"resume":case"bufferFinish":A="resumeAd";break;case"skipped":A="adSkipped"}if(a=a>0&&a<.1?.1:parseInt(10a)/10,s=s>0&&s<.1?.1:parseInt(10s)/10,""!==A){var N=_.getAggregator().request(q.SCREEN_EVENTS);N&&(O=N.getCurrentLoc()\|\|O),i.push({t:S-o,rt
2024-04-25 07:07:42 UTC	16384	IN	Data Raw: 6f 75 6e 64 28 74 2e 68 65 69 67 68 74 29 29 7d 29 29 29 29 3b 76 61 72 20 68 3d 4e 65 2e 69 73 4f 6d 69 64 46 6f 72 57 65 62 28 29 3f 56 65 2e 63 61 6c 63 57 69 6e 44 69 6d 73 28 29 3a 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 2c 45 3d 6e 65 77 20 4d 65 28 65 2e 64 61 74 61 2e 76 69 65 77 70 6f 72 74 7c 7c 68 29 2c 76 3d 6e 65 77 20 4d 65 28 73 3f 74 2e 63 6f 6e 74 61 69 6e 65 72 47 65 6f 6d 65 74 72 79 3a 74 2e 67 65 6f 6d 65 74 72 79 7c 7c 7b 78 3a 30 2c 79 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 29 2c 41 3d 6e 65 77 20 4d 65 28 73 3f 74 2e 6f 6e 53 63 72 65 65 6e 43 6f 6e 74 61 69 6e 65 72 47 65 6f 6d 65 74 72 79 3a 74 2e 6f 6e 53 63 72 65 65 6e 47 65 6f 6d 65 74 72 79 7c 7c 7b 78 3a 30 2c 79 3a 30 2c 77 69 64 74 68 3a Data Ascii: ound(t.height))}))));var h=Ne.isOmidForWeb()?Ve.calcWinDims():{width:0,height:0},E=new Me(e.data.viewport\|\|h),v=new Me(s?t.containerGeometry:t.geometry\|\|{x:0,y:0,width:0,height:0}),A=new Me(s?t.onScreenContainerGeometry:t.onScreenGeometry\|\|{x:0,y:0,width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50250	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	2701	OUT	GET /i.gif?e=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&s=4EfobX-aT4mYK-Ukt1kBTNMtYiY HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028859..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.8
2024-04-25 07:07:42 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50251	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:41 UTC	1086	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:42 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:42 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50255	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:42 UTC	1027	OUT	GET /xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXklqFJkASJ69jFDJs76ppjN_AYALC_l1Ipk-Sb5pBaodZCN2NaHczaoQM3VB9oIXnP7W9Dnn9nhrbmnUNhnb09LbFxOw HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:42 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:42 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 07:07:42 UTC	670	IN	Data Raw: 32 39 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6c 6b 71 64 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6c 6b 71 64 2e 6e 65 74 2f 63 73 3f 70 61 72 74 6e 65 72 49 64 3d 35 39 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 6c 6b 71 64 5f 64 62 6d 25 32 36 67 6f Data Ascii: 297<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26go
2024-04-25 07:07:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50258	209.204.229.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	806	OUT	GET /impression/v2/1077556/85/col02fc5mqmdtr0llo30/e2b2fe7e-b769-4920-a052-b4a8180e3f3f?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029461&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site HTTP/1.1 Host: a5594.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:43 UTC	223	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:43 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-04-25 07:07:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50162	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	731	OUT	GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:43 UTC	1244	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:43 GMT Content-Length: 0 Connection: close Location: /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 CF-Ray: 879c7f6c688c675c-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:43 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=meXdKNS5mbvtyn3hiRiZM9Cy6kvOQfnbeKg5ZM6VvChLxRmnoCHbiNkHZWmPTbzUernHP%2FBJyPcF1MxSvYoxuvc1Js7MsHJgjYxaxULOLzIAiJj802FdSxsA%2Fgp7kCOk3vehZIBiGXBdXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50261	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	2227	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9
2024-04-25 07:07:43 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 36 35 36 63 64 62 39 36 2d 37 38 33 39 2d 34 35 31 61 2d 62 61 31 62 2d 33 39 61 32 33 66 65 61 36 38 35 37 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"656cdb96-7839-451a-ba1b-39a23fea6857","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-25 07:07:43 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:43 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:43 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:43 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50265	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	812	OUT	GET /pixel?google_nid=lkqd_dbm&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:43 UTC	661	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEB1wrK98HpkuD1VvpNth4AE&google_cver=1 Date: Thu, 25 Apr 2024 07:07:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 296 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:43 UTC	296	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6c 6b 71 64 2e 6e 65 74 2f 63 73 3f 70 61 72 74 6e 65 72 49 64 3d 35 39 26 61 6d 70 3b 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 43 41 45 53 45 42 31 77 72 4b 39 38 48 70 6b 75 44 31 56 76 70 4e 74 68 34 41 45 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEB1wrK98HpkuD1VvpNth4AE&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50269	13.32.230.81	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	549	OUT	GET /sca.17.6.2.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:43 UTC	656	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 93606 Connection: close Date: Thu, 25 Apr 2024 00:09:29 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 20 Sep 2022 19:21:34 GMT ETag: "1f3488247c90bb5de253d3d0cb3b7458" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: go8nfBUviNCPCwnrYX1LpMW5hEx3ASGy Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 84c03a78b56dc98c23e4865d19786da4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: qoqWjLPezSQrMLBET89kt0tlQ9TM1r7OVVAO9PqKvfbLWGMETvr0tg== Age: 25094
2024-04-25 07:07:43 UTC	15728	IN	Data Raw: 2f 2a 20 0a 6a 73 6f 6e 32 2e 6a 73 0a 32 30 31 34 2d 30 32 2d 30 34 0a 50 75 62 6c 69 63 20 44 6f 6d 61 69 6e 2e 0a 4e 4f 20 57 41 52 52 41 4e 54 59 20 45 58 50 52 45 53 53 45 44 20 4f 52 20 49 4d 50 4c 49 45 44 2e 20 55 53 45 20 41 54 20 59 4f 55 52 20 4f 57 4e 20 52 49 53 4b 2e 0a 53 65 65 20 68 74 74 70 3a 2f 2f 77 77 77 2e 4a 53 4f 4e 2e 6f 72 67 2f 6a 73 2e 68 74 6d 6c 0a 54 68 69 73 20 63 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 6d 69 6e 69 66 69 65 64 20 62 65 66 6f 72 65 20 64 65 70 6c 6f 79 6d 65 6e 74 2e 0a 53 65 65 20 68 74 74 70 3a 2f 2f 6a 61 76 61 73 63 72 69 70 74 2e 63 72 6f 63 6b 66 6f 72 64 2e 63 6f 6d 2f 6a 73 6d 69 6e 2e 68 74 6d 6c 0a 0a 0a 4a 61 76 61 53 63 72 69 70 74 20 4d 44 35 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 Data Ascii: /* json2.js2014-02-04Public Domain.NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK.See http://www.JSON.org/js.htmlThis code should be minified before deployment.See http://javascript.crockford.com/jsmin.htmlJavaScript MD5https://github.c
2024-04-25 07:07:43 UTC	16384	IN	Data Raw: 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 30 2c 63 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 63 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 31 30 30 30 30 70 78 22 2c 63 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 2c 61 32 33 39 2e 61 33 34 31 2e 61 33 33 34 28 63 2e 61 74 74 61 63 68 45 76 65 6e 74 29 3f 63 2e 6f 6e 6c 6f 61 64 3d 62 3a 63 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 72 28 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 28 61 3d 61 32 33 39 2e 61 38 39 2e 61 32 37 32 28 29 29 Data Ascii: style.border=0,c.style.position="absolute",c.style.top="-10000px",c.style.left="-10000px",a239.a341.a334(c.attachEvent)?c.onload=b:c.attachEvent("onload",b),c.setAttribute("src",r()),document.body.appendChild(c)},t=function(){return a\|\|(a=a239.a89.a272())
2024-04-25 07:07:43 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 4f 75 74 70 75 74 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 4d 49 44 49 4f 75 74 70 75 74 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 4f 75 74 70 75 74 4d 61 70 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 4d 49 44 49 4f 75 74 70 75 74 4d 61 70 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 50 6f 72 74 26 26 61 32 33 39 Data Ascii: unction(){try{return"function"==typeof MIDIOutput&&a239.a341.a66(MIDIOutput)}catch(a){}return!1},function(){try{return"function"==typeof MIDIOutputMap&&a239.a341.a66(MIDIOutputMap)}catch(a){}return!1},function(){try{return"function"==typeof MIDIPort&&a239
2024-04-25 07:07:43 UTC	16384	IN	Data Raw: 72 69 74 79 4c 65 76 65 6c 20 2d 3e 20 5b 5b 4f 77 6e 50 72 6f 70 65 72 74 79 4b 65 79 73 5d 5d 22 2c 22 76 61 72 20 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 20 3d 20 30 3b 22 2c 22 76 61 72 20 70 20 3d 20 6e 65 77 20 50 72 6f 78 79 28 7b 7d 2c 20 7b 20 6f 77 6e 4b 65 79 73 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 29 20 7b 20 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 2b 2b 3b 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 20 7d 7d 29 3b 22 2c 22 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 70 29 3b 22 2c 22 28 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 20 3d 3d 3d 20 31 29 22 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 3b 72 65 74 75 72 6e 20 61 32 33 39 2e 61 33 34 31 2e 61 37 39 28 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e Data Ascii: rityLevel -> [[OwnPropertyKeys]]","var ownKeysCalled = 0;","var p = new Proxy({}, { ownKeys: function(o) { ownKeysCalled++; return Object.keys(o); }});","Object.freeze(p);","(ownKeysCalled === 1)"].join("\n");return a239.a341.a79(a)},function(){try{return
2024-04-25 07:07:43 UTC	16384	IN	Data Raw: 70 3e 22 2c 22 5c 6e 5c 6e 5c 6e 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 32 33 39 2e 61 33 34 31 2e 61 37 38 28 22 61 62 63 3c 70 72 65 3e 31 32 33 5c 6e 34 35 36 5c 6e 5c 6e 5c 6e 20 20 20 20 37 38 39 3c 2f 70 72 65 3e 64 65 66 22 2c 22 20 20 20 20 37 38 39 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 2e 6c 61 62 65 6c 73 26 26 30 3d 3d 3d 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 2e 6c 61 62 65 6c 73 2e 6c 65 6e 67 74 68 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 26 26 22 6f 62 6a 65 63 74 Data Ascii: p>","\n\n\n")},function(){return a239.a341.a78("abc<pre>123\n456\n\n\n 789</pre>def"," 789")},function(){return!!a239.a341.a74()&&"object"==typeof a239.a341.a74().labels&&0===a239.a341.a74().labels.length},function(){return!!a239.a341.a74()&&"object
2024-04-25 07:07:43 UTC	12342	IN	Data Raw: 2e 74 72 69 6d 52 69 67 68 74 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 61 2e 74 72 69 6d 52 69 67 68 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 6c 65 72 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 61 6c 65 72 74 3b 74 72 79 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5c 6e 22 29 26 26 2d 31 21 3d 3d 62 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5c 6e 22 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 74 72 75 Data Ascii: .trimRight&&a239.a341.a66(a.trimRight)},function(){if("undefined"==typeof alert)return!1;var a=function(){},b=alert;try{return-1===a.toString().indexOf("\n")&&-1!==b.toString().indexOf("\n")}catch(a){}return!1},function(){try{return"function"==typeof stru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50268	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	5057	OUT	GET /dbm/ad?dbm_c=AKAmf-AY1pAYipnXdrSE7kkTJ1ggDagZL0Hxayh3ptJAzfIQUTT1XRyLhVimR2m2hUtw1MU1jAqDiam9q6p0XT13uLbTKratfhNfbkDFSNxzxmTxAeP9pWzLelts26T0IiIVktE-x89yYNxSVUsF74G-ml7P3h5DqhG6V8Jb3I0jHoKoS8FKvlbOh9KDOIIIFgtko-Sv-R3TFlljr2El8DHz6kuwFuu3IjAahgdAPz3xZnzKIFUdqxU&dbm_d=AKAmf-BxcV9SiEjr5UNoBkgoUwo0TlishJ7OGSXo7ASOLisIzsr0XK7lzn6A9o5TmY_1zUI6UBYfrDAVs6zuFvm7GnzDABiYPGHE2X_Hz3Yid9VznPeW-3KFtJrn35jMu23rwFeWFM73Zl7TByQQoZm44zdHZmEbvbS-vblZ4ClSmck6e4icfEzfpcb1s7kxs3MdSfEI61xTZ2GikY-eLTuOpgE0nCUo7xR64hQra3HgZgilwaMmben1h1DpdY3XaVxfDDBSwCfHQx7aBsKei0b1I1iXfHm60X0dlFnZlyZre0Fd4jEuaQXT4yFlr6fD6jhVJJlzHsWX4QJTTVjLn4e3Vb2EZv_SdlSfIiaex-BDFAtdfTz4rQdH82QAQokkr5X84rYoG001jZFplm6X1UyfB2sdjda168Bc6FogeTOSf7cDf3uRiJdeZFwhCyVQbKAe3HBZ9Aur-hSkTZcMqQ8xlx37Dr2614x7L_LVe9xMlQk8wsQ383WzgZLt85g2n92ARB1WqndC6Rmm9pNB7Fpdq9PF6TpEjIgq4cavIxW6n8uis7K-oSFr8xqu7wK87P6WtjYijxRkeUaEpO8wb4GjyLyhEehM8g2KuX85E3Ybr9f7vbzKwDXH02fHJDM_a9lrj1Bfi1Q2-kcGIl9m3lyDplc4PpKECrQExcD-3TPe6loy2HWARK8D_lmDjEQ3TlOFqx1_-q4ZTCxBUd_ThBghFwVkYZ3QeYML5vV5IF65rhZoN8wVcB5_sFbYWa3RiQr3tDwj_4cPPQRWojJavpfwB7CFg-1SrFXBiPjX3prukI0_ThXv520sm7Cxr58XLlqyxX-sbYEcFAwryu40BJ6ZycdUf3To_JbNRhm-nnIFSI0FdobSt8uI7xl5ciJkLM0TXmcKh5iScM-P3KqsY4OXDfEg5PnWZTD4IfKmio6UgeudvvWev_FQilBZ-fhyNYtJ91HtvK5aNBhxE56iRK6AXEOz-svUli6oLqP6chLv133dm3lsWYa3HTj1NI_3Nfgk505LupJEX8CNzj-gIC7CnR2K7mlRT2rURmDYmo5pUgE1VS-K-gTtTOluXd2QR2K2zQfJs9qqtlZGGhp6WKPGx8_vdmfAypPcuk2iU2GszKCvR4ZwfXPqRXrp6k-ezueX16WdNTWjURhvcm9MQADOBPUZALefnhD_EhKNbjQ9EXvXmgsIQPvZLkTR4W0WpAfKpoteAaOeUWp61WfATzjhtWfm29CirUT4iPWjXMLvHCMeV3rHRv6y3fFxcVI4g_-jN3dESwCfmbH-4XHXOXoLi9fBDTNo9vnE-ywKZgjqdjT-abQIZmGozQAsA5Go_zzKRPsyqFiqPHvMV0hwpGD0o806dRpSAjzbtnZnqpvKyOsHqne_bLW1R_xFiWkpmipGF4lmKdgvv3dDwQm7h0MKZX1RcCTVAMjM8Eia4L1kx72gm5uO-CL8ENT93VqD_SqYnHv10rblIMJSJbzSm0Sgf-0fwPGiJXJKWPyAsnxgirrV8kKZhgAKj0HNnmwlwgvh8p3GlqVh1KiafSjFRbvCf2Gv6Yhgpe8baB6l1a4jOqvdOPip6BR1nzbcw1tQgIjljyEWMP0fhBfUvT1px3fbIYwYoPOZF3F6zSwwqw-NFn1je1LQWU1ftZSjF4DQ_dABhyXMVItNOdCGSyb99rU0y0dT_LN0nDOLc7WIdynwr5cIkWbAIQtaMPAtnRi07mbptZnqbky6CKWZOr2QgXAaMrjg4rx7w0w0qBzD-yGDctmQ4x_Oh-yMDaObhOrkyGe-gMx0GmDO6ZGpE8K10G1Np-cVXFDuplpfRuhe7xiosbLmItUqWVMOq-2c0OaTWi8xnAP97XaB4o_33n7rl0IMs7YfK0unty2unUsmLQwrgqxqqeh3o3cEjGPbhwErIO1wALa0Jvi4UAOTpAM4AqSxnw-zch2wQyc_3neTtSK8Bl2_SKXQnceWLjkyha3LuvSl3yVXYEYOJOK4EdEgRa-WlEGb32-TgWgPO1-Zw5Ss1SLQXON63XdvUC621jbBL9SmDKVCB4w96Frg1T6gLMS0nYyA41o9WnH4TKELzH4eKPudsaK3Gtt1cg5Euxwp8mGsdJ7Oy8gPhXoSw9Koh04_p5HIGn03By_TeOinh5_5M5QR3ldmT4hV2ci5H8ro3seoPmnuCnvUCSPiEce8RIORzNaeL3YuqTLhpigRUX7F3FFKQOu3-wo2MJlBkf1DskdS6M7154nmvUex6JplsL8o_DRATJZKv45_3tezHEqU5-ORQJ0IJH9HMSWHaL6bdU75BjhDBrCwH1oVG2PQ_BLEW8aAruaPF6EvqmpRimjh-ifAE00DcONJG6z1W_QoSOOyfd4IzqKRo4BXDMjZkCIG6JXcNYSLBfFrZnpc_eLxymfbtyn073dsN86eaIhzq00IaaD35qe0sWIsW9mfLYZAJMaQ32evuasOa7qIhqPfX8-UdyHF7o9sddcLt4KJOGLGc-tbGcM_UXeqzkNAx4TCMwsW_G1AWSGEOs8FaiiZzSr8RkG63PfjR_LQ44YiukwOCiykmfTI1xQo1ddrrh3f4MQDgjLEveQSmjegIT5VOARR65-W3eBj87xamJAfusvHgO841Ih_Bo-rmyF2kfQYyNKjMDHYufqrplNYA54d8X6hJZ9c_CyVPy3DUUkz8dHZaYYdhHV3FgPmJ79kZr_rNm2AsrNEfCqzdv9K1yo_RbHlwoINmrYw7yfei93WfckLRiRJuwhreJO0agOigvHd1tbclyNGO3ybopKeVI2It4zd-69nROAsQiNaAgE5H-bmUGgBsX-cvAbCRAMmFARZqTg0zIqTEhBCzNM4KUdeXKimL7-odsyRXBGxVs41Pnw1WnrtXmDmFiegvlkgrExt8DqvghMuAIA6YbVWq4Kn1oK8H5qh_7l6MaqDifMkwOj7LWseBm_inybmnI7gk8NSDozKp8tJdtBiuAaiXSsSJuIBJemOo78AR5RBcuK-4eGcW0voCaFk9CPuthQO6BqxuRoAwcO8xY46qrpxuubNQ_lyQMFSLLMxeUugYtzs5PhE_nntBCArx_VTRcVbqIiMB-5xmAS61gGLKBdgmOIp2jcv3op9cH2UcsUy3P_GFb1zGcLmXcS00-soDFuGAITuFaSKkJF258UhpV825EdODV7aM_Z7wmWXQOg0dyYE2nw6TTiUoFjXFJZB2tqtWhE4yq2FwrIBfgg4KZyppjQtgnEFRKHv5hErgyyxKRbBdJzefsU7fkAcTDHGDJI38jfd0CjYIlK-8h7AvfTqEnVgcS0ITok67UQaBF1Ui2K06hxZ5SA8d3sOlDefhKFGETH-H29WQjP-_IN2Yn8ftOoB2TbT3CkAxjJwrapsx1_FF9MPsYtRHpLmWmRGPcTVTPtq3sd4syvTudW-I_vl9W0jX2odvlpCXd7AAFNO4DLmm-hLiOpIFLCUdkDHIt3tX1ODdQtE8UoxEnvmFjXd_rGcVE_g_rW_54J0NdQtksD-THT72M6J9rEGShcBV1wUDUZ0TLIGcD9e383HaxDZpUNVN2ynB_gXev-a45L6oogSxjyNXbwsuzpalMhLkNF43rbOBi0UCxnpSZEKVI-2tkm91CCpKkoeE3SUFdybnCCcreSDphWMeU0E3TtUvzy8yCDG59tr2IYCecu09hx4u3mjoSa0dk-M61VQQJJh-e0PUkuM9o7mqG_Te67ezVeQWq88jAehfn5mx-uKNu0EhnwJqVVBRXwQXe1pY3rokkL2qV39YBoKKC1jJbWEu4WOB2pZCjIrFmqm3i4V79V0asBEeJxhiZRiDPk&pr=13%3AZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cid=CAQSGwB7FLtqO5gwISKl9aS74oCjGq4MMhmNK_mD8xgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwetransfer.com&ds=l&xdt=1&iif=1&cor=13918423326970431000&adk=3123349629&idt=938&cac=0&dtd=38 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:43 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ; expires=Tue, 22-Oct-2024 07:07:43 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 07:07:43 UTC	373	IN	Data Raw: 38 30 30 30 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 33 37 35 31 38 39 37 34 35 38 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 50 77 45 71 5a 6f Data Ascii: 8000if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3751897458"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_PwEqZo
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 69 62 75 74 65 28 27 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 27 2c 20 27 72 32 30 32 34 30 34 32 33 27 29 3b 76 61 72 20 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 69 66 20 28 73 73 20 26 26 20 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 20 7b 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6d 2c 20 73 73 29 3b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 Data Ascii: ibute('data-jc-version', 'r20240423');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 63 72 65 61 74 69 76 65 2d 6c 6f 61 64 2d 6c 69 73 74 65 6e 65 72 22 2c 22 22 29 3b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 72 65 61 74 69 76 65 4c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2e 64 65 74 61 69 6c 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 28 62 2c 67 2c 65 29 7d 29 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 20 63 6c 73 6e 28 22 67 63 63 5f 50 77 45 71 5a 6f 4f 5f 4c 39 32 5a 72 72 34 50 72 38 57 71 6f 41 34 22 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 73 65 74 41 74 74 72 69 Data Ascii: creative-load-listener","");b.addEventListener("creativeLoad",function(e){g(e.detail)});h.addEventListener("message",function(e){q(b,g,e)})}};}).call(this); clsn("gcc_PwEqZoO_L92Zrr4Pr8WqoA4");(function() {var m = document.createElement('meta');m.setAttri
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: )();(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 20 6b 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 Data Ascii: var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b))return!0}return!1}}); k("String.prototype.includes",function(a){return a?a:function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototy
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 31 21 3d 62 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 62 2c 30 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 3b 76 61 72 20 69 61 3d 43 28 29 3f 21 31 3a 42 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 42 28 22 4d 53 49 45 22 29 3b 21 42 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 42 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 43 28 29 3f 30 3a 42 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 43 28 29 3f 30 3a 42 28 22 4f 70 65 72 Data Ascii: tring"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,0);for(var c=0;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1};var ia=C()?!1:B("Trident")\|\|B("MSIE");!B("Android")\|\|D();D();B("Safari")&&(D()\|\|(C()?0:B("Coast"))\|\|(C()?0:B("Oper
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 4c 3b 20 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 2c 62 2c 63 29 7b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 4c 29 3b 4c 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b 5d 3b 62 26 26 28 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 64 3d 49 28 61 29 3b 69 66 28 64 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b Data Ascii: function(){});Object.freeze(new function(){});var L; function ra(a,b,c){null==a&&(a=L);L=void 0;if(null==a){var d=96;c?(a=[c],d\|=512):a=[];b&&(d=d&-16760833\|(b&1023)<<14)}else{if(!Array.isArray(a))throw Error("narr");d=I(a);if(d&2048)throw Error("farr");
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 74 3d 61 5b 66 5d 2c 6e 3d 61 5b 66 2b 31 5d 3b 68 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 74 3e 3e 32 5d 3b 74 3d 62 5b 28 74 26 33 29 3c 3c 34 7c 6e 3e 3e 34 5d 3b 6e 3d 62 5b 28 6e 26 31 35 29 3c 3c 32 7c 68 3e 3e 36 5d 3b 68 3d 62 5b 68 26 36 33 5d 3b 63 5b 65 2b 2b 5d 3d 67 2b 74 2b 6e 2b 68 7d 67 3d 30 3b 68 3d 64 3b 73 77 69 74 63 68 28 61 2e 6c 65 6e 67 74 68 2d 66 29 7b 63 61 73 65 20 32 3a 67 3d 61 5b 66 2b 31 5d 2c 68 3d 62 5b 28 67 26 31 35 29 3c 3c 32 5d 7c 7c 64 3b 63 61 73 65 20 31 3a 61 3d 61 5b 66 5d 2c 63 5b 65 5d 3d 62 5b 61 3e 3e 32 5d 2b 62 5b 28 61 26 33 29 Data Ascii: or(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var t=a[f],n=a[f+1];h=a[f+2];g=b[t>>2];t=b[(t&3)<<4\|n>>4];n=b[(n&15)<<2\|h>>6];h=b[h&63];c[e++]=g+t+n+h}g=0;h=d;switch(a.length-f){case 2:g=a[f+1],h=b[(g&15)<<2]\|\|d;case 1:a=a[f],c[e]=b[a>>2]+b[(a&3)
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 29 2c 21 30 29 7d 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 6f 61 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 61 28 74 68 69 73 2c 74 68 69 73 2e 67 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 66 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 76 61 72 20 65 3d 6d 61 28 63 3f 61 2e 67 3a 62 29 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 66 3b 69 66 28 4a 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 67 3d 63 3b 76 61 72 20 68 3d 7b 7d 2c 74 3d 21 31 2c 6e 3b 66 6f 72 28 6e 20 69 6e 20 67 29 7b 76 61 72 20 Data Ascii: ),!0)};O.prototype.A=oa;O.prototype.toString=function(){return xa(this,this.g,!1).toString()}; function xa(a,b,c){var d=fa?void 0:a.constructor.B;var e=ma(c?a.g:b);a=b.length;if(!a)return b;var f;if(J(c=b[a-1])){a:{var g=c;var h={},t=!1,n;for(n in g){var
2024-04-25 07:07:43 UTC	1255	IN	Data Raw: 63 72 65 61 74 65 53 63 72 69 70 74 3a 77 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 77 7d 29 7d 63 61 74 63 68 28 64 29 7b 75 2e 63 6f 6e 73 6f 6c 65 26 26 75 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 64 2e 6d 65 73 73 61 67 65 29 7d 52 3d 62 7d 65 6c 73 65 20 52 3d 62 7d 61 3d 28 62 3d 52 29 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 53 28 61 2c 41 61 29 7d 3b 2f 2a 20 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: createScript:w,createScriptURL:w})}catch(d){u.console&&u.console.error(d.message)}R=b}else R=b}a=(b=R)?b.createScriptURL(a):a;return new S(a,Aa)};/* SPDX-License-Identifier: Apache-2.0 */ function Ca(a){var b,c,d=null==(c=(b=(a.ownerDocument&&a.ownerDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50266	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	839	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:43 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 Date: Thu, 25 Apr 2024 07:07:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:43 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4c 4d 77 54 68 72 32 35 46 67 56 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50267	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	1536	OUT	GET /rfw/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=${SOURCE_URL_ENC}&adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=e&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Flandrover%2F2403%2Faccordion%2F2_d6hcUN%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=d&adsafe_jsinfo=,id:932f3184-a47e-225f-d172-3d75fdc4f6cf,c:aSpdN8,sl:na,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-4gt4c,rg:va,pt:1-5-15,mu:10000,br:c,bru:c,an:n,oam:0,scm:jl1,mtim:1622,mot:0,app:0,maw:0,tdt:s,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:1,renddet:DIV.qs.sn,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,tt:rjss,et:1648,oid:81874c00-02d2-11ef-9bcd-ae275382e095,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:43 UTC	268	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:43 GMT Content-Length: 0 Connection: close server: Apache-Coyote/1.1 p3p: CP="COM NAV INT STA NID OUR IND NOI" pragma: no-cache cache-control: no-cache location: https://static.adsafeprotected.com/skeleton.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50271	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	1033	OUT	GET /openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028855715%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	636	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 879c7f6f6e4d6776-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VB76nv6%2FXp%2BiKH2g6ZYxQc6%2B8ijOExVJb4RJSGi7nTx%2BMZ7NcQQw7gd%2F1YIddIQer6KwH8uHJw6GxyK6fvYVywUT4K4eb%2B%2FuJ%2FwcxKvQXGZ5nmXQvY39NMbGU6sCvfsPN8WHal9E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:44 UTC	733	IN	Data Raw: 32 39 61 36 0d 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 35 35 36 33 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 31 30 37 37 35 35 36 2f 38 35 2f 63 6f 6c 30 32 66 76 38 37 64 33 6f 76 6b 63 66 38 76 34 67 2f 61 62 65 66 63 37 39 38 2d 62 38 64 39 2d 34 63 34 36 2d 38 63 64 35 2d 31 66 66 35 61 37 64 39 30 65 62 31 3f 76 65 72 69 66 69 65 44 3d 31 26 75 73 65 72 49 44 3d 26 63 6d 70 72 6f 3d 30 26 64 65 76 69 63 65 54 79 70 65 3d 32 26 65 78 70 69 72 79 54 69 6d 65 3d 31 37 31 34 30 32 39 34 36 34 26 70 72 6f 66 69 6c 65 49 44 73 3d 26 63 72 65 61 74 69 76 65 49 44 3d 32 66 33 35 61 35 33 26 70 75 62 49 44 3d 31 39 34 30 35 32 26 66 6f 72 6d 61 74 3d 62 61 6e 6e 65 72 26 63 68 61 6e 6e 65 Data Ascii: 29a6<img src="https://a5563.casalemedia.com/impression/v2/1077556/85/col02fv87d3ovkcf8v4g/abefc798-b8d9-4c46-8cd5-1ff5a7d90eb1?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029464&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channe
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 43 50 61 4b 6d 67 45 51 75 37 75 41 77 77 51 59 38 66 4c 78 6a 41 49 77 41 51 26 76 3d 41 50 45 75 63 4e 58 63 71 74 67 57 58 45 76 77 50 6b 72 78 72 53 64 34 41 66 5f 50 56 42 49 54 32 6f 64 36 55 72 64 71 5a 65 2d 6b 65 76 61 36 2d 75 4f 47 6c 31 49 53 59 62 74 79 6a 37 5a 49 51 77 48 46 42 51 43 2d 4e 58 45 59 44 49 79 30 30 64 41 59 76 6b 49 71 70 70 36 73 31 36 58 4b 43 77 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 22 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 75 20 3d 20 27 68 74 74 70 73 3a 2f 2f 67 6f Data Ascii: CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXcqtgWXEvwPkrxrSd4Af_PVBIT2od6UrdqZe-keva6-uOGl1ISYbtyj7ZIQwHFBQC-NXEYDIy00dAYvkIqpp6s16XKCw" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var u = 'https://go
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 58 31 43 5a 50 4c 6a 55 32 64 56 42 45 4b 46 66 5a 54 73 66 55 49 6b 49 6d 41 4b 37 5f 4f 38 55 75 70 58 76 52 48 52 38 74 48 55 65 44 36 59 78 50 75 71 4c 5a 54 59 4f 36 45 52 4b 57 56 61 41 34 39 6e 78 5a 2d 72 4a 58 6d 30 5f 64 67 6e 71 43 51 78 59 37 54 49 2d 43 78 6a 51 4d 72 30 48 70 67 34 65 71 71 57 4b 72 41 7a 4d 69 52 78 7a 68 78 31 30 4e 2d 56 6a 4f 4f 55 65 70 52 74 6f 39 52 41 41 46 59 41 31 6b 39 77 50 30 6f 63 37 51 5a 43 6d 77 42 33 4c 7a 77 71 75 30 52 70 37 30 39 4c 34 62 73 78 79 56 50 43 31 64 66 51 71 57 53 41 66 42 4d 73 4e 57 62 64 34 36 34 4b 4f 63 56 63 4b 66 6c 58 68 64 6b 44 4a 55 31 4d 31 74 44 61 42 56 75 56 66 48 74 58 34 69 52 4e 4a 53 61 66 33 68 76 48 4a 31 2d 76 59 62 50 4a 41 61 77 43 2d 49 69 36 46 68 5f 4b 38 5a 4b 42 Data Ascii: X1CZPLjU2dVBEKFfZTsfUIkImAK7_O8UupXvRHR8tHUeD6YxPuqLZTYO6ERKWVaA49nxZ-rJXm0_dgnqCQxY7TI-CxjQMr0Hpg4eqqWKrAzMiRxzhx10N-VjOOUepRto9RAAFYA1k9wP0oc7QZCmwB3Lzwqu0Rp709L4bsxyVPC1dfQqWSAfBMsNWbd464KOcVcKflXhdkDJU1M1tDaBVuVfHtX4iRNJSaf3hvHJ1-vYbPJAawC-Ii6Fh_K8ZKB
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 4e 30 49 30 72 68 5f 31 75 52 6a 69 70 63 4f 73 61 57 77 45 6e 37 46 47 4b 44 4f 35 73 5a 47 57 36 48 33 56 69 66 46 50 50 5a 57 45 52 6b 71 34 6e 46 78 45 31 38 71 51 69 36 79 58 7a 35 6f 61 56 55 45 35 34 6b 7a 4c 48 63 52 4a 46 59 37 36 54 77 4c 49 55 57 30 64 58 2d 35 61 65 46 68 46 5f 51 64 37 71 6e 72 51 4b 63 4e 51 79 47 6f 55 70 77 72 74 45 5f 47 32 4a 44 5a 63 4d 45 37 59 6d 38 70 4e 51 6d 44 55 72 51 78 73 51 71 75 5a 54 77 4a 51 6b 30 4e 53 36 72 75 31 2d 4b 38 66 70 46 6c 48 48 51 53 77 4e 48 74 52 47 78 70 50 48 57 54 71 47 52 41 63 4d 77 57 76 61 49 70 38 6d 66 41 51 55 44 45 4a 46 70 36 62 63 33 48 32 54 37 56 6d 76 4e 7a 69 45 63 52 41 6e 56 45 49 48 58 4f 69 6c 44 47 6b 30 75 79 78 69 45 2d 44 55 5a 55 30 39 44 54 30 58 43 49 51 4d 42 6a Data Ascii: N0I0rh_1uRjipcOsaWwEn7FGKDO5sZGW6H3VifFPPZWERkq4nFxE18qQi6yXz5oaVUE54kzLHcRJFY76TwLIUW0dX-5aeFhF_Qd7qnrQKcNQyGoUpwrtE_G2JDZcME7Ym8pNQmDUrQxsQquZTwJQk0NS6ru1-K8fpFlHHQSwNHtRGxpPHWTqGRAcMwWvaIp8mfAQUDEJFp6bc3H2T7VmvNziEcRAnVEIHXOilDGk0uyxiE-DUZU09DT0XCIQMBj
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 41 46 77 36 36 65 51 72 66 37 69 5f 4d 4b 4e 42 35 4e 75 4b 39 4b 62 46 34 59 73 77 68 70 5a 69 50 76 6c 57 5a 65 4d 64 73 50 71 5f 31 56 31 73 74 50 52 4c 64 75 4c 6b 71 79 35 6d 77 47 77 59 34 68 48 43 32 64 67 5a 51 69 41 63 4e 79 46 6b 56 52 2d 78 74 36 45 75 4e 54 46 67 5f 4c 52 59 54 42 38 58 2d 6c 70 59 72 6a 4b 33 72 72 42 6b 44 77 74 45 4a 6a 75 76 6c 78 4a 46 51 71 6d 4c 54 45 6b 50 38 67 47 71 55 6e 4a 4f 69 4f 34 65 6a 55 55 47 6d 50 55 6c 67 6c 71 4b 41 6a 6f 55 50 48 4e 78 4b 44 59 62 6e 42 56 63 63 38 68 4e 4e 66 32 39 6a 6a 59 52 53 59 73 4b 68 6f 6f 4b 6f 64 67 64 43 78 36 46 55 59 34 55 72 6d 76 69 35 67 6e 59 37 43 75 75 31 78 46 75 6a 41 6a 78 32 71 59 37 33 34 61 41 67 65 39 6e 73 61 63 47 6d 61 79 41 41 50 39 43 32 76 63 78 6c 6e 6e Data Ascii: AFw66eQrf7i_MKNB5NuK9KbF4YswhpZiPvlWZeMdsPq_1V1stPRLduLkqy5mwGwY4hHC2dgZQiAcNyFkVR-xt6EuNTFg_LRYTB8X-lpYrjK3rrBkDwtEJjuvlxJFQqmLTEkP8gGqUnJOiO4ejUUGmPUlglqKAjoUPHNxKDYbnBVcc8hNNf29jjYRSYsKhooKodgdCx6FUY4Urmvi5gnY7Cuu1xFujAjx2qY734aAge9nsacGmayAAP9C2vcxlnn
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 44 4c 6a 6d 78 73 41 45 6d 7a 4d 36 68 76 43 44 6f 62 57 4b 2d 33 39 6e 5a 61 75 43 53 75 77 48 73 4f 7a 69 67 78 32 39 66 75 46 74 63 68 39 64 4f 47 4f 6e 57 42 39 6a 7a 43 55 70 6d 57 62 58 57 6c 70 65 61 36 62 6a 47 36 6b 45 70 59 39 33 30 7a 45 77 74 4d 43 6b 42 47 52 4f 38 59 4e 55 54 48 74 6d 66 33 65 33 61 71 37 52 57 73 71 51 54 41 42 4f 74 68 6d 5a 31 61 59 36 71 31 56 5a 4a 42 67 74 76 76 50 34 4a 6e 41 64 67 50 56 5a 59 67 4e 30 77 5a 65 46 36 43 62 53 62 37 33 7a 57 38 64 4f 43 45 72 61 76 66 34 79 59 72 71 5a 6e 58 49 79 50 46 76 78 7a 39 52 45 75 36 48 36 48 46 45 38 77 65 79 70 36 56 34 57 72 61 4a 72 62 6c 56 61 45 62 63 46 78 31 37 52 4f 70 32 45 6a 4b 67 78 51 38 79 54 37 47 4c 5a 66 77 37 57 56 5f 54 75 71 77 5a 59 6a 39 69 74 42 6a 4b Data Ascii: DLjmxsAEmzM6hvCDobWK-39nZauCSuwHsOzigx29fuFtch9dOGOnWB9jzCUpmWbXWlpea6bjG6kEpY930zEwtMCkBGRO8YNUTHtmf3e3aq7RWsqQTABOthmZ1aY6q1VZJBgtvvP4JnAdgPVZYgN0wZeF6CbSb73zW8dOCEravf4yYrqZnXIyPFvxz9REu6H6HFE8weyp6V4WraJrblVaEbcFx17ROp2EjKgxQ8yT7GLZfw7WV_TuqwZYj9itBjK
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 33 41 6d 54 77 7a 75 7a 37 70 7a 4d 44 73 46 66 6f 2d 51 4c 48 64 4f 4e 65 6a 70 70 79 72 30 56 47 6b 70 72 4a 51 76 5f 65 56 66 42 72 7a 51 75 49 64 43 78 75 30 71 31 56 73 5f 48 35 4f 34 76 66 5a 64 67 75 37 58 45 57 62 56 4d 70 57 6b 39 73 43 5f 41 43 52 5a 45 74 7a 52 5f 30 49 6b 39 76 53 64 70 54 63 33 66 4a 34 6c 44 64 4b 6a 4f 77 59 72 4f 63 42 75 38 52 42 30 58 35 69 74 65 2d 68 5f 4a 6b 44 51 53 44 61 48 34 6b 55 38 75 52 66 70 66 53 44 6d 46 79 38 77 4a 63 49 35 51 48 57 61 76 65 56 4f 63 79 4b 49 73 76 46 4f 62 31 4f 74 47 2d 6e 36 37 50 6f 4e 63 46 41 54 35 5a 74 6d 35 36 32 39 54 78 55 52 41 39 58 44 62 6a 36 73 46 54 61 63 6b 57 35 6f 35 35 4c 54 62 4d 47 44 37 76 6b 46 41 70 61 31 6b 46 55 61 50 65 58 78 63 6c 47 4d 44 54 30 49 37 31 70 6e Data Ascii: 3AmTwzuz7pzMDsFfo-QLHdONejppyr0VGkprJQv_eVfBrzQuIdCxu0q1Vs_H5O4vfZdgu7XEWbVMpWk9sC_ACRZEtzR_0Ik9vSdpTc3fJ4lDdKjOwYrOcBu8RB0X5ite-h_JkDQSDaH4kU8uRfpfSDmFy8wJcI5QHWaveVOcyKIsvFOb1OtG-n67PoNcFAT5Ztm5629TxURA9XDbj6sFTackW5o55LTbMGD7vkFApa1kFUaPeXxclGMDT0I71pn
2024-04-25 07:07:44 UTC	1369	IN	Data Raw: 59 35 33 73 49 4b 67 74 68 51 79 46 55 66 4b 62 45 6e 48 4f 45 47 69 55 6f 4d 6b 37 6a 55 43 43 56 45 47 32 51 54 6d 35 72 6e 50 6c 49 73 52 31 55 5f 73 62 62 72 49 33 56 33 6c 6d 73 75 67 61 71 45 41 51 49 36 53 35 69 6c 6e 71 39 5a 30 69 6a 66 52 4c 37 4b 45 65 6a 43 73 38 31 47 38 35 57 64 34 73 6c 48 6e 61 4e 77 4e 6a 4b 6a 45 45 5a 68 74 45 6b 6a 37 30 6f 39 43 33 42 30 58 48 4e 6f 4d 31 45 65 36 69 70 68 4b 59 39 72 63 32 79 51 5f 6d 4b 47 43 4f 48 71 78 6a 6d 58 2d 33 68 6d 4c 6f 4e 55 59 70 33 54 6c 58 48 45 71 78 50 45 59 46 6c 7a 50 41 72 55 41 71 75 32 6d 6e 52 46 46 70 72 55 33 79 52 66 6f 38 6f 56 71 6b 64 75 31 76 6f 52 7a 62 7a 74 33 42 61 5f 79 71 53 61 56 58 71 44 55 30 4a 30 38 5a 5a 55 6c 38 64 6c 63 78 75 45 64 78 61 38 50 54 41 74 41 Data Ascii: Y53sIKgthQyFUfKbEnHOEGiUoMk7jUCCVEG2QTm5rnPlIsR1U_sbbrI3V3lmsugaqEAQI6S5ilnq9Z0ijfRL7KEejCs81G85Wd4slHnaNwNjKjEEZhtEkj70o9C3B0XHNoM1Ee6iphKY9rc2yQ_mKGCOHqxjmX-3hmLoNUYp3TlXHEqxPEYFlzPArUAqu2mnRFFprU3yRfo8oVqkdu1voRzbzt3Ba_yqSaVXqDU0J08ZZUl8dlcxuEdxa8PTAtA
2024-04-25 07:07:44 UTC	354	IN	Data Raw: 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 22 73 63 72 69 70 74 22 2c 61 29 29 7b 6c 3d 21 30 3b 62 72 65 61 6b 20 61 7d 7d 6c 3d 21 31 7d 7d 6c 7c 7c 6b 28 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 3f 69 78 5f 75 6d 3d 31 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6a 73 2d 73 65 63 2e 69 6e 64 65 78 77 77 2e 63 6f 6d 25 32 46 68 74 25 32 46 68 74 Data Ascii: ntWindow.document,"script",a)){l=!0;break a}}l=!1}}l\|\|k()};}).call(this);</script></div></div><iframe width="0" height="0" frameborder="0" scrolling="no" src="https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fht
2024-04-25 07:07:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50275	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	795	OUT	GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:44 UTC	1087	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:44 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=ZioBP9HM4ycAADS8ARFPzgAA CF-Ray: 879c7f6ffe6db030-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gcZKtldtwuEEWHfKWDHUEFZu3SEpjDF1keuG5ZUjwgS14K%2FQF4jj6UgR7iCQUYZj1sgZSOLjjBgZo1dtX4P%2FOYdvUw2UPWZVDeLmHzgGMvQdh28Gv3Prl0FTLUITcg70%2BDYgIllHFvyAzg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50274	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	1365	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOy,pingTime:-3,time:1735,type:v,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1735,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B1~0%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt15.va.303net.net
2024-04-25 07:07:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50272	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	1338	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOC,pingTime:-6,time:1739,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1739,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B5~0%5D,as:%5B5~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt05.va.303net.net
2024-04-25 07:07:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50273	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	1884	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOU,pingTime:-2,time:1757,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2875,bdZ:4179,beA:4180,beZ:4184,mfA:5804,cmA:5806,inA:5807,inZ:5812,prA:5812,prZ:5819,si:5829,poA:5830,poZ:5853,cmZ:5853,mfZ:5853,loA:5919,loZ:5926,ltA:5937,ltZ:5937,mdA:4184,mdZ:5113%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1,o:1756,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B1~75%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:3,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:43 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt07.va.303net.net
2024-04-25 07:07:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50280	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	2338	OUT	GET /pricing?trk=NAV_pricing HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _dd_s=rum=0&expire=1714029753051&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:44 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10162 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Thu, 25 Apr 2024 07:07:44 GMT ETag: "27b2-0oUFoFBI2pCHR8ZGAXOYDtzHqy8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vNSuFzVl8QkCq0TKI9YOf0wKNShR5f0Ul0XQIwp-IRr1B22LAWAWJw==
2024-04-25 07:07:44 UTC	10162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50279	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:43 UTC	2530	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 100 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _dd_s=rum=0&expire=1714029753051&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:43 UTC	100	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":16,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-25 07:07:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Thu, 25 Apr 2024 07:07:44 GMT ETag: "28-HfI+TrRevDdkylP6fMXM4RhLFbc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 4682be42fcf0ad8d4088eb312e665eb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IcO__lyUsWqqRdqo6_rYBRkjAmoEtZ0ovcBD_LDVRgRN4-GsqEJt7g==
2024-04-25 07:07:44 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 31 36 7d Data Ascii: {"status":"ok","metric":"INP","time":16}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50283	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=c6e04c90-e371-4194-894c-7b77dbd132f9&batch_time=1714028862359 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1421 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	1421	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 74 22 3a 39 38 33 39 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":2,"page_states":[{"state":"passive","start":983900000}]},"application":{"id":"
2024-04-25 07:07:44 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: c6e04c90-e371-4194-894c-7b77dbd132f9 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:44 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 63 36 65 30 34 63 39 30 2d 65 33 37 31 2d 34 31 39 34 2d 38 39 34 63 2d 37 62 37 37 64 62 64 31 33 32 66 39 22 7d Data Ascii: {"request_id":"c6e04c90-e371-4194-894c-7b77dbd132f9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50286	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	730	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:44 UTC	985	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f71bdfa06ee-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bdw9bJBL867F%2ByZSlgtJZKLzEHzX0FboWgrpMv5muLH8zjYMv1Nkb5HeHEb2HMoMxmktjJhBBWGGJfBg23V8p5aPrvpn46P8BmH%2BDDBdl%2Fopb6J4mjFOk4thXHeS85TddIs%2FmVH8q422Ng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50284	209.204.229.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	620	OUT	GET /impression/v2/1077556/85/col02fc5mqmdtr0llo30/e2b2fe7e-b769-4920-a052-b4a8180e3f3f?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029461&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site HTTP/1.1 Host: a5594.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:44 UTC	223	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:44 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-04-25 07:07:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50282	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	901	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:44 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50285	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	1100	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0.8%2C2450 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:44 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50290	13.32.230.81	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	547	OUT	GET /skeleton.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:44 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17 Connection: close Date: Thu, 25 Apr 2024 00:09:29 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:54:35 GMT ETag: "53fab767ecbd3bf07990b10246befbd4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8402a00938112cd897cbcaf43684fb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: 26auwAwPxeRlDYtao1MRFMXxejfTPqfKMOkFkGS2CWEvVEG65wNAvg== Age: 25096
2024-04-25 07:07:44 UTC	17	IN	Data Raw: 22 61 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b Data Ascii: "ad placeholder";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50281	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	2143	OUT	GET /_next/static/chunks/pages/pricing-43f9c565fe91f700.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028850.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9
2024-04-25 07:07:44 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 530 Connection: close Date: Fri, 19 Apr 2024 14:12:56 GMT Last-Modified: Fri, 19 Apr 2024 13:09:02 GMT ETag: "efc7d0ddd2fa9d9fc1c6637354e0e698" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 31240efd84da865ccb5c6adf215095b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7dXHXn-MGK7uk14i2fqFV30hP__vR6E61WmmT6HtY5CLJdAMg2NsAA== Age: 492889
2024-04-25 07:07:44 UTC	530	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 33 39 5d 2c 7b 31 39 31 36 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 70 72 69 63 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 31 34 36 33 38 29 7d 5d 29 7d 2c 31 34 36 33 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50291	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:44 UTC	827	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=ZioBP9HM4ycAADS8ARFPzgAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:45 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 Date: Thu, 25 Apr 2024 07:07:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:45 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4c 4d 77 54 68 72 32 35 46 67 56 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50293	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	850	OUT	GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:45 UTC	995	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 879c7f782f7f1375-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BD%2BGle5gnoypllQX7Y9lkv8unwXI0%2B%2BFGvhuNK2oghyz%2Fre4MVYIJTc8ZmqnYga7rac6SY0a6mwRhjxBWHrPLnwjoGMCgdd2YXs2fOfqTthN2Xl7vQK%2B1yWvJxcbs0qpKWeENjscnJg18Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:45 UTC	374	IN	Data Raw: 36 61 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 69 6f 42 50 39 48 4d 34 79 63 41 41 44 53 38 41 52 46 50 7a 67 41 41 41 6b 73 41 41 41 41 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 Data Ascii: 6a4<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none"
2024-04-25 07:07:45 UTC	1333	IN	Data Raw: 4d 34 79 63 41 41 44 53 38 41 52 46 50 7a 67 41 41 25 32 36 35 38 37 26 61 6d 70 3b 67 70 64 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 63 61 73 61 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 Data Ascii: M4ycAADS8ARFPzgAA%26587&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt=""
2024-04-25 07:07:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50295	142.250.9.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	2793	OUT	GET /pcs/view?xai=AKAOjsvhKP6ooNzlpreiVR46iFAr_iN_Depo9qWtQcmNDeGbAwkMPxdUsLw1CCnyWI72YyMRtKrdG1UuMP6F5vB65ZlF9W8c4S71OFlcn-PtJBaZdcmyqIOD1ZFOJGDLDwwT2slINbG0sx3naT1qfPbk636nRA-zFv_8I8w0UMHB-vMN8E9lsH-oPzxNTxLBT3gpuvPOLvxH_MK-LrS46ipcaCMk9QnqoztwljKrZ0WEiuICAYFHZroTXZQSFPEE6zS0eyOa7LEout32I9JpMP28FSNncm8P97OuK8I6aOP7RanUz8O7puaBGUw3v37rUfXzmdw7k1wIzthhKLZs9j8933-LHaZIiwLpjkCJC9m4uxkIH14-tmplFqB_C9qEKq3FPO4SW-KoHeQPSeedXeMr8FEBBRxwZ983pvKCOejTMqMIHQahL-WLvvvJCFB26YH5buYPHAapdA1VSh6VhhpnrAUkdodbtwC7Ub9Qf8SQPLtOtPlkUBssq2JJ0c_3aO-LXbb2sZ_XWmSwJwj95-soAtZqkjhxZcddPcDTA_o56EgpUXURPF78_KCvGnxp2VQ6vMHNXsC4lZ89qAsiRFmvEfIQCgxBenUH5d0qq6QXBU2ToNiGLc6gKsN8HYY6I1jEKTLGL6CeGJER33uX2rRgH8dCLNGZXvlH6TtcOePl4FbnB1gJSem60R4KUettD53jj0FQonbMkgJ0DvD5jMWZLWUkRpbmZkAsRQlIc4f1vtjm3E6xrkP4hBAI2NFo0cNetHGjAPWyQ-NvwR8kLeV1uhz90sOAy4U0jXNbPvhT-N8lxJ4QbL0etUBXwblmbxhULrSKJZbtG1QvpNPU7Dd2NY-40-81uAEYW9mVQDSqhwv5l1dvxzXeP7oD86shg7Gf6PQ6x2ThfwaKaSLB8AgJ4Kh_x6BIjOHOFd5oecob5IRr3XOVN-7rwRUZMFGk4crsO5qTBjFJ9FD4lYYhhw8xWH21v3qPtbrVfl2wRX4p1SwFgYYtVkuBcIB19jn_1dIi8fhifwlkJlitSEdIWj6Qy0tS_06K4M11HpCge3k9QPnHmdXSOA7sQQ0qekl22go3npPfLdE1KofvPrTqaCBZ-NXCwkeZeJ7AnYEepLlEBEwsK0P2xKONcCXJMbq3CHIskAWPzqyB0u0bLP2T-qx3mbgEmm9GXhJS1RNn9HB0UKVKxA9IbiDwYoCf4zAsxdtt94Z3Or3NRo9XJc1_cLdfebxveg2tGZOgxUVx4g_mHDUutyQ3hu4u3hegdk63okZOtE07azvoS38n_dehXWTFkb9Ex6JcBP116hpE_Aszyh1Eri2JtyJPaxpkK1gmyhognfxdkt3ynDl5nrCVtBk-x-57gGURSlvhSXifRQtQ9L0w9jou08deezL8FvZCVWugZ6Qz59IME3UNoS8JOOev45zrrDVzioFLeqPXIQrvn0QO9HEuq3QH3aiBwVSRpjs68tKdVrGDoUVVO0AHpg&sai=AMfl-YTfjwUWkOFrpSUCbGGz-BHQAfjtxviiplaqCAVmRfRo8HVKZPbDIsjUL9ha85-BdGagLni8VRizAD2fkp1FAheTi9goSuhT2ZKKszHg9boKAzO8LdWFmyhweGUgHP9kfazSITip6X8fyd3ORb7_fqZk0Prt-L3LNYEXxKYNiDL6DWEto7whPkoNHiZ-7XKUH2w&sig=Cg0ArKJSzK2ZG_e_39sLEAE&uach_m=%5BUACH%5D&pr=13:ZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240423.73652&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source=navigation-source Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:45 UTC	1620	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xa0fcf2ea52d462f70000000000000000","13":"0x7c7e9aa188a2909a0000000000000000","14":"0xce3b54cd10a13bdc0000000000000000","15":"0xd90587466156b7760000000000000000"},"debug_key":"5367951817777198504","debug_reporting":true,"destination":["https://landroverusa.com","https://jaguarusa.com","https://debugconversiondomain1.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13976782"],"21":[],"8":["12949653"]},"priority":"0","source_event_id":"3094278501396320083"} X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 07:07:45 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50294	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	621	OUT	GET /rjss/st/2049676/79562500/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=https://wetransfer.com/ HTTP/1.1 Host: fw.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:45 UTC	349	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:45 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 61490 Connection: close pragma: no-cache cache-control: no-cache expires: Wed, 31 Dec 1969 23:59:59 GMT access-control-allow-origin: fw.adsafeprotected.com access-control-allow-credentials: true vary: accept-encoding
2024-04-25 07:07:45 UTC	16035	IN	Data Raw: 0a 0a 0a 0a 0a 76 61 72 20 5f 5f 49 6e 74 65 67 72 61 6c 41 53 44 69 61 67 6e 6f 73 74 69 63 43 61 6c 6c 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 61 6c 72 65 61 64 79 53 65 6e 74 20 3d 20 7b 7d 3b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 76 61 72 20 67 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 20 3d 20 27 2f 2f 64 69 61 67 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 6a 73 3f 27 3b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 72 72 4d 73 67 20 3d 20 65 Data Ascii: var __IntegralASDiagnosticCall = (function() {try {var alreadySent = {};return function(code, err, config) {try {var gen = function(code, err, config) {var url = '//diag.adsafeprotected.com/js?';try {var errMsg = e
2024-04-25 07:07:45 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 65 64 22 2c 20 46 4f 52 45 47 52 4f 55 4e 44 45 44 3a 22 66 6f 72 65 67 72 6f 75 6e 64 65 64 22 2c 7d 2c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 7b 41 50 50 3a 22 61 70 70 22 2c 20 0a 57 45 42 3a 22 77 65 62 22 2c 7d 2c 20 44 65 76 69 63 65 43 61 74 65 67 6f 72 79 3a 7b 43 54 56 3a 22 63 74 76 22 2c 20 44 45 53 4b 54 4f 50 3a 22 64 65 73 6b 74 6f 70 22 2c 20 4d 4f 42 49 4c 45 3a 22 6d 6f 62 69 6c 65 22 2c 20 4f 54 48 45 52 3a 22 6f 74 68 65 72 22 2c 7d 2c 20 49 6e 74 65 72 61 63 74 69 6f 6e 54 79 70 65 3a 7b 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2c 20 49 4e 56 49 54 41 54 49 4f 4e 5f 41 43 43 45 50 54 3a 22 69 6e 76 69 74 61 74 69 6f 6e 41 63 63 65 70 74 22 2c 7d 2c 20 43 72 65 61 74 69 76 65 54 79 70 65 3a 7b 44 45 46 49 4e Data Ascii: backgrounded", FOREGROUNDED:"foregrounded",}, Environment:{APP:"app", WEB:"web",}, DeviceCategory:{CTV:"ctv", DESKTOP:"desktop", MOBILE:"mobile", OTHER:"other",}, InteractionType:{CLICK:"click", INVITATION_ACCEPT:"invitationAccept",}, CreativeType:{DEFIN
2024-04-25 07:07:45 UTC	19	IN	Data Raw: 65 4d 65 74 68 6f 64 3b 0a 6d 6f 64 75 6c 65 24 65 78 70 Data Ascii: eMethod;module$exp
2024-04-25 07:07:45 UTC	16384	IN	Data Raw: 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 73 65 72 76 69 63 65 4d 65 74 68 6f 64 55 74 69 6c 73 2e 69 73 50 72 65 66 69 78 65 64 53 65 73 73 69 6f 6e 53 65 72 76 69 63 65 4d 65 74 68 6f 64 20 3d 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 73 65 72 76 69 63 65 4d 65 74 68 6f 64 55 74 69 6c 73 5f 69 73 50 72 65 66 69 78 65 64 53 65 73 73 69 6f 6e 53 65 72 76 69 63 65 4d 65 74 68 6f 64 3b 0a 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 73 65 72 76 69 63 65 4d 65 74 68 6f 64 55 74 69 6c 73 2e 69 73 50 72 65 66 69 78 65 64 56 65 72 69 66 69 63 61 74 69 6f 6e 53 65 72 76 69 63 65 4d 65 74 68 6f 64 20 3d 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f Data Ascii: orts$omid$common$serviceMethodUtils.isPrefixedSessionServiceMethod = module$contents$omid$common$serviceMethodUtils_isPrefixedSessionServiceMethod;module$exports$omid$common$serviceMethodUtils.isPrefixedVerificationServiceMethod = module$contents$omid$co
2024-04-25 07:07:45 UTC	12668	IN	Data Raw: 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 61 72 67 73 43 68 65 63 6b 65 72 5f 61 73 73 65 72 74 50 6f 73 69 74 69 76 65 4e 75 6d 62 65 72 28 22 69 6e 74 65 72 76 61 6c 49 64 22 2c 20 61 29 3b 0a 20 20 74 68 69 73 2e 68 61 73 49 6e 74 65 72 76 61 6c 4d 65 74 68 6f 64 73 5f 28 29 20 3f 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 4f 6d 69 64 47 6c 6f 62 61 6c 50 72 6f 76 69 64 65 72 2e 6f 6d 69 64 47 6c 6f 62 61 6c 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 29 20 3a 20 74 68 69 73 2e 73 65 6e Data Ascii: VerificationClient.prototype.clearInterval = function(a) { module$contents$omid$common$argsChecker_assertPositiveNumber("intervalId", a); this.hasIntervalMethods_() ? module$exports$omid$common$OmidGlobalProvider.omidGlobal.clearInterval(a) : this.sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50296	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	711	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:07:45 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:07:45 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50298	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:45 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:45 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 4KCE35P3WC8GM9T2DBJN Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:45 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50299	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:45 UTC	3428	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A43.577%2B02%3A00&epn.hit_timestamp_unix=1714028863577&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028863437-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=12&tfd=1669&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; wt_trk=TRN_TDL_01; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:07:46 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:46 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775955; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 e1c1ac0e343e8b45b0444edeed715c82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: AjxIA8ya1p9Mch3J2Atj8jOVwvOfqv6Je4YDwCMker5y3wC-C2lomg==
2024-04-25 07:07:46 UTC	697	IN	Data Raw: 32 62 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 33 37 34 38 35 33 37 37 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 Data Ascii: 2b2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817
2024-04-25 07:07:46 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 33 37 34 38 35 33 37 37 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2
2024-04-25 07:07:46 UTC	695	IN	Data Raw: 32 62 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 30 33 30 39 38 32 39 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 Data Ascii: 2b0event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u
2024-04-25 07:07:46 UTC	627	IN	Data Raw: 32 36 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 30 33 30 39 38 32 39 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 Data Ascii: 26cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fw
2024-04-25 07:07:46 UTC	1348	IN	Data Raw: 35 33 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 31 35 30 35 37 35 30 36 31 36 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 36 30 36 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 Data Ascii: 53devent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=1505750616&fst=1714028866067&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890
2024-04-25 07:07:46 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 31 33 31 37 39 34 39 36 31 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 36 30 38 34 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1131794961&fst=1714028866084&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:07:46 UTC	359	IN	Data Raw: 31 36 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 75 74 78 44 68 6e 31 67 43 56 31 71 6b 57 69 52 43 55 36 65 51 47 4d 62 49 58 4e 52 53 73 32 34 4e 71 4c 51 4e 7a 39 4d 50 72 6a 48 74 69 68 75 58 4e 49 25 32 46 36 41 49 37 52 79 55 48 37 7a 52 6e 38 4c 57 38 76 33 49 50 67 73 6f 65 69 44 57 54 68 71 7a 25 32 46 6c 66 65 43 48 51 6a 4d 33 33 4a 6b 4a 59 62 73 47 79 43 4d 6d 74 76 71 66 4f 4f 31 25 32 42 6d 77 47 31 79 42 6f 78 59 6c 6e 6f 43 25 32 42 53 31 71 57 54 44 57 38 25 32 46 6a 6f 78 79 6b 61 62 4a 62 39 4b 34 37 75 58 4e 62 65 47 4b 25 32 42 32 34 72 74 35 52 37 7a 55 77 57 Data Ascii: 160event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=utxDhn1gCV1qkWiRCU6eQGMbIXNRSs24NqLQNz9MPrjHtihuXNI%2F6AI7RyUH7zRn8LW8v3IPgsoeiDWThqz%2FlfeCHQjM33JkJYbsGyCMmtvqfOO1%2BmwG1yBoxYlnoC%2BS1qWTDW8%2FjoxykabJb9K47uXNbeGK%2B24rt5R7zUwW
2024-04-25 07:07:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50300	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	2462	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _dd_s=rum=0&expire=1714029762490&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:46 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-25 07:07:46 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:07:46 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; domain=.wetransfer.com; path=/; expires=Sat, 25 Apr 2026 07:07:46 GMT; secure Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-p972l-13623 X-Permitted-Cross-Domain-Policies: none X-Request-Id: df9cc0ac5b3a749e9a4c41321138e7aa X-Runtime: 0.010599 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 9cc8ba00384b3554aebbfb2dec8eda6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZzJBxdXUe3q8lhFJWXhjXTTusS69s81LynS2unQc_t2Js4iej5ghww==
2024-04-25 07:07:46 UTC	643	IN	Data Raw: 32 37 63 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 Data Ascii: 27c{"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd
2024-04-25 07:07:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50301	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	701	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:46 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:46 GMT x-amzn-RequestId: f4e4be0c-0bfb-45b2-8c13-a3016944d4fb Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 b76498b6ac7fd194024e4e5c7f2fb4d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: FHu3PDOOjOivzwkOMWJJ06n3CziRxanjFQFFkaRBWlIDGqjhohiO0g==
2024-04-25 07:07:46 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50304	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1476	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7566507041562856033"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0x4389867689495236","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x2e8ea822c474c815","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x22936330dee76c4e","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x26cd48fe22054401","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7566507041562856033","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7566507041562856033","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7566507041562856033","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7566507041562856033","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50309	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1376	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	1170	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50308	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1479	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2366582520153449718"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2366582520153449718","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2366582520153449718","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2366582520153449718","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2366582520153449718","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50312	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	2383	OUT	GET /_set_cookie?val=utxDhn1gCV1qkWiRCU6eQGMbIXNRSs24NqLQNz9MPrjHtihuXNI%2F6AI7RyUH7zRn8LW8v3IPgsoeiDWThqz%2FlfeCHQjM33JkJYbsGyCMmtvqfOO1%2BmwG1yBoxYlnoC%2BS1qWTDW8%2FjoxykabJb9K47uXNbeGK%2B24rt5R7zUwWd2XOfO5R8YFo3ARAfVJHNI%2B7SWI%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:46 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:46 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 6170668b55788632ecaa35104c215fa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: uhIo8WvK_GTg0TZ_yiplmmxE3u72fATrXcXGpvAzW8-ctW1JosiN2Q==
2024-04-25 07:07:46 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50311	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1436	OUT	GET /pagead/viewthroughconversion/778938880/?random=1131794961&fst=1714028866084&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	1303	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1131794961&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD9Auhd1stGdtdDPqPsSomb3XN2vxAWIkXUM6KxcjY3aUxVGO&random=475300310 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50310	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1374	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	1168	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50313	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	2091	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _dd_s=rum=0&expire=1714029762490&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:47 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:46 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7gsXch5jz4iBfWqpgpOx-EgohKz8CFlRE4V8lSSjSITYdmvKFVR3-A==
2024-04-25 07:07:47 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50303	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: fc8d706f-5a3a-4212-b6cd-833348100cc9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:07:47 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:47 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 27 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50307	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1638	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOU,pingTime:-2,time:1757,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2875,bdZ:4179,beA:4180,beZ:4184,mfA:5804,cmA:5806,inA:5807,inZ:5812,prA:5812,prZ:5819,si:5829,poA:5830,poZ:5853,cmZ:5853,mfZ:5853,loA:5919,loZ:5926,ltA:5937,ltZ:5937,mdA:4184,mdZ:5113%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1,o:1756,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B1~75%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:3,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:46 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt19.va.303net.net
2024-04-25 07:07:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50305	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1092	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOC,pingTime:-6,time:1739,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1739,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B5~0%5D,as:%5B5~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:46 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt28.va.303net.net
2024-04-25 07:07:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50306	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1119	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpdOy,pingTime:-3,time:1735,type:v,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:1735,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B1~0%5D,as:%5B1~1280.907%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:46 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt10.va.303net.net
2024-04-25 07:07:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50318	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	483	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:46 UTC	991	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f823bb88bb5-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2FrgQuAi7pLCyfIrOA%2B421ZVv2JssLGAAl0IJhQstBIpU4O7l4BqNiCP%2BEU%2FwqceUtjFJa2OsyNAkN3B44VqCMsDq4lbMZTxQF7him9n5wowq2%2BQoGT9XEIti0hs1YD7%2BR%2B3VzquOJu7GQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50320	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	956	OUT	GET /pixel?google_nid=index&google_cm&google_hm=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:46 UTC	713	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEBvhO5c60eweFAbRgcle4rM&google_cver=1 Date: Thu, 25 Apr 2024 07:07:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 364 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:46 UTC	364	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d 31 38 34 30 32 33 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50323	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	477	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:07:46 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50322	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	2484	OUT	GET /pcs/view?xai=AKAOjsvhKP6ooNzlpreiVR46iFAr_iN_Depo9qWtQcmNDeGbAwkMPxdUsLw1CCnyWI72YyMRtKrdG1UuMP6F5vB65ZlF9W8c4S71OFlcn-PtJBaZdcmyqIOD1ZFOJGDLDwwT2slINbG0sx3naT1qfPbk636nRA-zFv_8I8w0UMHB-vMN8E9lsH-oPzxNTxLBT3gpuvPOLvxH_MK-LrS46ipcaCMk9QnqoztwljKrZ0WEiuICAYFHZroTXZQSFPEE6zS0eyOa7LEout32I9JpMP28FSNncm8P97OuK8I6aOP7RanUz8O7puaBGUw3v37rUfXzmdw7k1wIzthhKLZs9j8933-LHaZIiwLpjkCJC9m4uxkIH14-tmplFqB_C9qEKq3FPO4SW-KoHeQPSeedXeMr8FEBBRxwZ983pvKCOejTMqMIHQahL-WLvvvJCFB26YH5buYPHAapdA1VSh6VhhpnrAUkdodbtwC7Ub9Qf8SQPLtOtPlkUBssq2JJ0c_3aO-LXbb2sZ_XWmSwJwj95-soAtZqkjhxZcddPcDTA_o56EgpUXURPF78_KCvGnxp2VQ6vMHNXsC4lZ89qAsiRFmvEfIQCgxBenUH5d0qq6QXBU2ToNiGLc6gKsN8HYY6I1jEKTLGL6CeGJER33uX2rRgH8dCLNGZXvlH6TtcOePl4FbnB1gJSem60R4KUettD53jj0FQonbMkgJ0DvD5jMWZLWUkRpbmZkAsRQlIc4f1vtjm3E6xrkP4hBAI2NFo0cNetHGjAPWyQ-NvwR8kLeV1uhz90sOAy4U0jXNbPvhT-N8lxJ4QbL0etUBXwblmbxhULrSKJZbtG1QvpNPU7Dd2NY-40-81uAEYW9mVQDSqhwv5l1dvxzXeP7oD86shg7Gf6PQ6x2ThfwaKaSLB8AgJ4Kh_x6BIjOHOFd5oecob5IRr3XOVN-7rwRUZMFGk4crsO5qTBjFJ9FD4lYYhhw8xWH21v3qPtbrVfl2wRX4p1SwFgYYtVkuBcIB19jn_1dIi8fhifwlkJlitSEdIWj6Qy0tS_06K4M11HpCge3k9QPnHmdXSOA7sQQ0qekl22go3npPfLdE1KofvPrTqaCBZ-NXCwkeZeJ7AnYEepLlEBEwsK0P2xKONcCXJMbq3CHIskAWPzqyB0u0bLP2T-qx3mbgEmm9GXhJS1RNn9HB0UKVKxA9IbiDwYoCf4zAsxdtt94Z3Or3NRo9XJc1_cLdfebxveg2tGZOgxUVx4g_mHDUutyQ3hu4u3hegdk63okZOtE07azvoS38n_dehXWTFkb9Ex6JcBP116hpE_Aszyh1Eri2JtyJPaxpkK1gmyhognfxdkt3ynDl5nrCVtBk-x-57gGURSlvhSXifRQtQ9L0w9jou08deezL8FvZCVWugZ6Qz59IME3UNoS8JOOev45zrrDVzioFLeqPXIQrvn0QO9HEuq3QH3aiBwVSRpjs68tKdVrGDoUVVO0AHpg&sai=AMfl-YTfjwUWkOFrpSUCbGGz-BHQAfjtxviiplaqCAVmRfRo8HVKZPbDIsjUL9ha85-BdGagLni8VRizAD2fkp1FAheTi9goSuhT2ZKKszHg9boKAzO8LdWFmyhweGUgHP9kfazSITip6X8fyd3ORb7_fqZk0Prt-L3LNYEXxKYNiDL6DWEto7whPkoNHiZ-7XKUH2w&sig=Cg0ArKJSzK2ZG_e_39sLEAE&uach_m=%5BUACH%5D&pr=13:ZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240423.73652&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:47 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:46 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50326	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	730	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:47 UTC	983	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f8259f912df-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BMayorEljU9G2qDJMwQSy4z4FQvYyUvil3QKhhIWt6PGffPBjHyf8Ku%2BAptBSUDqzCtnwPM0d8ccJr9IogLgHoOmOVfIHLGhMEtH218EA%2Bpu8a4dK6%2BdtAkThpZb9DQlyxYZrCZP7jrS0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50324	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:47 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 55GFK0EAYKXK2J2R2XRF Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:47 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50302	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	1957	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:46 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:46 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50317	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	915	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=a9a8cc6f-5966-4cee-9756-5d43845ba253&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A39.886Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C2476%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=0.8%2C2450 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:47 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50321	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	919	OUT	GET /track/cmf/casale HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwjKjbvGo8DyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:07:47 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:46 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFIAEoAzILCMqNu8ajwPI8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Fri, 25 Apr 2025 07:07:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:47 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50327	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	3174	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A43.577%2B02%3A00&epn.hit_timestamp_unix=1714028863577&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028863437-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=12&tfd=1669&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:47 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:47 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775954; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8b047a56cedc9f5e8593136caff4a83e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: gHcx_f7Rc5je33v8GSSIaQzZi5Ia55lfOCYq3-sAM7KztCl-C6_1kQ==
2024-04-25 07:07:47 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 36 32 34 35 33 32 38 30 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1624532806;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.171402881
2024-04-25 07:07:47 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 36 32 34 35 33 32 38 30 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1624532806;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%
2024-04-25 07:07:47 UTC	695	IN	Data Raw: 32 62 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 38 33 36 34 36 36 31 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 Data Ascii: 2b0event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=383646619;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u
2024-04-25 07:07:47 UTC	627	IN	Data Raw: 32 36 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 38 33 36 34 36 36 31 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 Data Ascii: 26cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=383646619;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fw
2024-04-25 07:07:47 UTC	1347	IN	Data Raw: 35 33 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 39 39 39 35 38 39 31 36 36 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 37 31 33 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 53cevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=999589166&fst=1714028867135&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z98901
2024-04-25 07:07:47 UTC	688	IN	Data Raw: 32 61 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 39 37 33 33 32 39 34 35 34 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 37 31 34 39 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 2a9event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=973329454&fst=1714028867149&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&ur
2024-04-25 07:07:47 UTC	359	IN	Data Raw: 31 36 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 71 43 50 4f 4f 41 50 4f 76 70 46 6a 4d 33 70 55 69 79 37 4f 41 78 38 67 4e 4f 31 33 79 73 48 38 44 41 72 68 76 4d 46 51 42 71 45 69 30 4c 7a 59 69 72 42 78 68 33 6a 44 73 73 63 36 73 4c 4d 51 65 46 6c 41 37 6c 70 38 7a 74 53 61 55 61 68 58 45 72 69 4e 59 4b 37 57 4e 25 32 46 55 6c 77 39 4d 70 25 32 46 31 25 32 42 6b 76 78 50 51 31 78 59 58 69 35 76 25 32 46 6b 44 4e 54 33 54 58 58 70 69 34 6c 30 4d 46 52 47 73 33 57 54 44 73 41 39 55 53 58 68 79 69 6e 6a 53 56 25 32 46 66 37 56 38 4d 64 69 55 4f 39 47 74 49 77 77 38 66 25 32 42 36 48 Data Ascii: 160event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=qCPOOAPOvpFjM3pUiy7OAx8gNO13ysH8DArhvMFQBqEi0LzYirBxh3jDssc6sLMQeFlA7lp8ztSaUahXEriNYK7WN%2FUlw9Mp%2F1%2BkvxPQ1xYXi5v%2FkDNT3TXXpi4l0MFRGs3WTDsA9USXhyinjSV%2Ff7V8MdiUO9GtIww8f%2B6H
2024-04-25 07:07:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50334	172.64.149.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	633	OUT	GET /ht/htw-pixel.gif?ZioBP9HM4ycAADS8ARFPzgAA%26587 HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	483	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "902a3d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Thu, 25 Apr 2024 11:07:47 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 619 Accept-Ranges: bytes Server: cloudflare CF-RAY: 879c7f8358944505-ATL
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50331	34.96.71.22	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	651	OUT	GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	688	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.casalemedia.com Content-Type: text/html; charset=utf-8 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729840067&external_user_id=83afbb03-ff0d-4d32-b1b6-358821c16544 Set-Cookie: tuuid=83afbb03-ff0d-4d32-b1b6-358821c16544; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1714028867\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Length: 157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	157	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 39 38 34 30 30 36 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 38 33 61 66 62 62 30 33 2d 66 66 30 64 2d 34 64 33 32 2d 62 31 62 36 2d 33 35 38 38 32 31 63 31 36 35 34 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729840067&external_user_id=83afbb03-ff0d-4d32-b1b6-358821c16544">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50333	169.197.150.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:46 UTC	600	OUT	GET /usersync/113 HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_75e092a1c0d1436ca22cc; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 07:07:47 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240425%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 07:07:47 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 25 Apr 2024 07:07:46 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50329	52.46.151.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	768	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:47 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VYAYGWRY9A41ANPJNVMQ Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50332	52.73.25.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	600	OUT	GET /cookie-sync/ie HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	385	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Thu, 25 Apr 2024 07:07:47 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50328	3.237.57.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	691	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZioBP9HM4ycAADS8ARFPzgAA%26587&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	529	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Length: 0 Connection: close Location: /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZioBP9HM4ycAADS8ARFPzgAA%26587&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=85ee1344445a44919f614be81fcc5250 Set-Cookie: lidid=85ee1344-445a-4491-9f61-4be81fcc5250; Max-Age=63072000; Expires=Sat, 25 Apr 2026 07:07:47 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50342	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2008	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeMo,pingTime:-10,time:5445,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028865479%7C%7C8ac481bf0e1a7f304f293d4029761e87%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7Cb900e8bdf8358bf79ea11260a27fe2d2%7C%7Ccf55e76124fefb919c08c040283a13f3%7C%7C8fc692ffc3881ae8ae143b1dbd34cbaa%7C%7Ccf5b7198bc15b786119e4294fa50d240%7C%7C9eec2d5e74e1050bbb6c60514836d874%7C%7C1663701684,im:%7Bimprf:%7Bttecl:6727,ecd:1606,tsecr:2167%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt28.va.303net.net
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50344	64.233.177.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 272 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	272	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6a 61 67 75 61 72 75 73 61 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 61 6e 64 72 6f 76 65 72 75 73 61 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 35 33 36 37 39 35 31 38 31 37 37 37 37 31 39 38 35 30 34 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 33 30 39 34 32 37 38 35 30 31 33 39 36 33 32 30 30 38 33 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://jaguarusa.com","https://landroverusa.com"],"source_debug_key":"5367951817777198504","source_event_id":"3094278501396320083","source_site":"https://wetransfer.com"},"type":"
2024-04-25 07:07:47 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50345	64.233.185.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	608	OUT	GET /simgad/12869299199225834669 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 64800 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 02:00:40 GMT Expires: Fri, 25 Apr 2025 02:00:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 08 Apr 2024 19:00:45 GMT Content-Type: image/jpeg Age: 18427 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	433	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 Data Ascii: -2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 Data Ascii: Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U""
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: FA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 55 71 72 c3 03 12 54 c2 a5 b4 2c 5a 9c 95 dd 98 e6 a9 29 9c d2 85 44 2e 42 44 5c b9 10 94 a8 a4 bf 21 6a aa b9 b0 ca b2 ab 95 cb 2a 8e b8 7c cc 5a 0c 84 f0 32 a8 33 67 52 56 aa 0e 70 e7 ea 0d 53 7c 51 92 ce d4 ed fe 0e da ba bb 1c b0 5e d6 db 46 bb f5 cb 33 04 a2 6b 0b b1 0c 50 68 63 62 92 18 92 57 91 62 c4 30 2a 05 85 8a d5 62 aa de b9 f5 42 c5 95 8c ba 32 a4 e4 c5 75 5c 4c f5 42 aa ca 81 e0 b3 26 a7 9d 39 7a 72 a3 5e d8 f9 8e 20 9b 1c a6 53 05 66 46 2a 39 21 a5 75 df 47 df 82 5b 29 8e 0b 8a 50 63 2b 2b 8b 15 96 12 f4 2e 5d 65 b1 65 2b 28 f6 1c 86 4a 86 28 54 85 39 16 54 aa a9 31 61 e8 0b 23 66 22 95 cf 1a ce 76 ec 74 24 c2 6a d6 78 b0 c5 b4 f0 1c 23 9c c4 96 85 b4 3d 09 68 4b 56 36 c0 e8 b5 be 47 fc 4c 7d 99 a1 d8 0b 28 cd 94 d8 cf a8 64 4a cf f8 ed ed Data Ascii: UqrT,Z)D.BD\!j\|Z23gRVpS\|Q^F3kPhcbWb0bB2u\LB&9zr^ SfF*9!uG[)Pc++.]ee+(J(T9T1a#f"vt$jx#=hKV6GL}(dJ
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: cf e4 7d c2 af 61 2f d4 1e 73 fb ef e1 dc ab 8d fa ae b8 f3 8f af a2 39 fc 88 f6 e0 83 91 a7 66 cd e5 b7 1b 59 dd 35 fa 97 c7 1b 71 b3 f1 be 9c 3f 3c d2 c0 21 07 90 6d b6 a7 d2 86 99 5b 27 5d c5 5e bf 96 79 e6 fd a6 9b e7 fb e5 f0 bd 18 b1 d3 38 d7 d5 b8 ae f2 4d 57 4b 22 d6 f5 0e 98 fb c9 35 56 c8 46 9e 67 49 de 9c ae 3f a3 43 e7 be 69 d5 89 c8 fd 87 79 67 68 3e 80 e8 6f 94 7d 95 a8 5e ad f9 3b 46 7b 37 e7 45 77 cb 7b 75 61 e4 df a0 90 6c de 20 3b 75 88 be 1b b3 1d e0 e7 fd c6 93 fa 1b f2 17 6d 75 c3 ad 48 18 ae 45 14 95 53 09 bb d4 1d 1c c5 6e 7b f3 1e fd c4 3e c7 c3 36 bb c4 3f 56 41 44 8e ec fc c9 bc 56 89 a3 16 c0 56 da 13 6a 72 b7 56 f5 76 aa 41 6e 25 bb ad f4 7e ea 78 9f e9 3e 86 ee bc 6b 80 9e e9 f9 29 06 dd f9 a7 57 fc eb f5 2f a9 fe 25 fa 63 c6 Data Ascii: }a/s9fY5q?<!m[']^y8MWK"5VFgI?Ciygh>o}^;F{7Ew{ual ;umuHESn{>6?VADVVjrVvAn%~x>k)W/%c
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 1a 57 ad c5 af 44 dc 1f c1 f5 b5 e8 1b 1b 9a 26 81 26 a5 3e b8 eb 7e 62 db 5f c9 7d 61 53 96 86 e3 c9 53 cf c9 92 b4 2d f9 25 b0 e4 97 13 11 f9 aa 43 26 5b 8b 43 2e b8 a7 01 06 89 06 8f 6d 58 55 c5 58 1a 17 ab a8 97 a4 26 3a 5b 9a d3 8e aa 5b 68 79 e9 8d 34 ea e5 b6 92 25 02 bf 9e dd dc 7c 34 d8 9a d9 50 93 dc 5b 94 da d4 65 b6 8a 44 a4 ac fc f6 fb 52 41 a2 2f 5d ca ae b4 2d 4f 16 10 e2 d1 1d e5 ac 47 08 52 21 86 98 65 88 e8 7d 86 94 a5 b3 19 54 5a 88 eb 68 6e 28 6d 11 e3 a9 a6 9a 0d 1b a6 ae 09 24 58 94 d7 f4 93 d2 bb 7f 0e b4 db e3 e2 b2 97 7e 04 70 da 58 42 54 31 ec 80 23 31 ee 08 91 89 71 b6 de 6c b3 1c ad 2d 22 ff 00 19 b2 cf c6 6c b2 88 c8 41 31 18 53 76 b5 5e d5 fd 57 ec 34 41 15 30 2c 3c eb 6e a9 df 69 66 04 86 9d 53 aa 6d d5 c6 5b 6e bf 0f db 90 Data Ascii: WD&&>~b_}aSS-%C&[C.mXUX&:[[hy4%\|4P[eDRA/]-OGR!e}TZhn(m$X~pXBT1#1ql-"lA1Sv^W4A0,<nifSm[n
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: aa 07 d8 76 bd a9 02 82 65 8a 48 90 2b b5 ea 43 0b 51 54 74 14 ae 2f 47 71 e1 d3 fb 4b 2a 2e 62 a3 2c 37 8a 29 39 22 98 d0 25 6d ae 47 cb 40 6e 3c 88 83 1d 85 41 43 ed a0 89 b0 40 f9 f8 ea cb c7 c3 64 59 75 b2 d3 84 91 5f a0 36 ab f5 26 d5 7a 1e 9e 95 06 38 95 24 e6 71 d0 98 c8 ed 0d 21 2e 6d 08 5a 97 b3 e3 d2 7f 96 43 09 5e d8 d1 a3 b5 25 2b fe 5c cd 97 b8 34 84 ab 74 6d 34 e6 e4 94 b9 33 7b 79 94 1e 4d 9a 4c 7e 47 c8 aa 99 e4 1c 89 11 f7 b7 5c a6 b6 d6 dc a6 36 14 a8 35 9a 12 28 bf 92 58 62 36 4a 5b 31 d8 95 12 6a 64 36 ba f7 21 53 72 21 59 33 62 a4 a6 72 54 67 3e 4a a4 4a 43 d2 0b a2 bd c4 d7 b8 91 5e e8 b9 50 b7 52 52 92 47 60 15 83 86 f6 2e a7 64 50 a6 e3 c9 82 f4 a2 ca 45 2a 2b 4b 0b 81 05 74 71 58 c3 47 0f 8b ba f0 78 72 0e bf 82 35 fc 77 02 41 d6 Data Ascii: veH+CQTt/GqK.b,7)9"%mG@n<AC@dYu_6&z8$q!.mZC^%+\4tm43{yML~G\65(Xb6J[1jd6!Sr!Y3brTg>JJC^PRRG`.dPE+KtqXGxr5wA
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 1d 5f 3d 0b 2a 71 85 8b 46 ba 57 1d 15 ee c7 ba 4b 0e 12 c4 63 4a 81 01 54 bc 46 3d 54 70 b0 6e 70 91 ec 31 b1 52 44 52 c8 f8 a1 d0 ec 15 ba d7 c1 94 b0 e6 bf 0d e2 ad 63 10 e1 6e 2c 58 2a 65 05 d7 fe 43 4c 2a 7b 51 a3 d2 63 b6 92 59 69 47 d8 6e 92 90 94 c8 59 09 fd 21 45 93 91 56 59 d4 29 be b7 3f 96 25 63 c5 21 68 58 09 15 21 92 f2 08 b1 1d 0a 55 f9 68 04 22 e2 bb ba 77 1a 2b b5 17 29 7d 8a a2 00 35 ef 2e d5 e9 4e 39 70 a1 51 57 70 1c 53 cd 4e 88 fc 17 ae 47 e3 b8 9a 2b 02 94 5a 52 ca 5b a6 a4 7c 74 c9 90 a9 0e 8b da d6 ae 80 f4 ab 75 b0 49 44 b9 6d d2 32 b2 92 1d 9e 97 8f c9 6e df 25 aa 12 d9 14 99 6c a4 fc f4 50 98 8a f9 48 55 7b e9 34 5e 4d 7b 89 35 df 41 66 bb 85 5c 7e 08 06 bb 12 68 b6 08 42 d6 ca e3 e5 64 47 71 e9 5f fd 86 5a a8 c9 74 d2 9d 70 d1 Data Ascii: _=qFWKcJTF=Tpnp1RDRcn,XeCL*{QcYiGnY!EVY)?%c!hX!Uh"w+)}5.N9pQWpSNG+ZR[\|tuIDm2n%lPHU{4^M{5Af\~hBdGq_Ztp
2024-04-25 07:07:47 UTC	1255	IN	Data Raw: 8b 05 51 48 b7 5f c5 ee 2c 4d 25 35 d8 29 4d da 90 91 5d 82 8a 4d 1b 8a 04 5d 29 14 a4 51 09 14 2e 2b d6 bf 5e a2 af 7a b9 bd 5d 24 25 45 0a ee 45 bb 49 25 24 03 dc 90 8e 81 20 80 15 fd 3d 14 3b 41 a2 91 60 2d 46 f6 2b 16 4d 8d 2e e6 bd b5 12 19 72 bb 16 28 2d b4 d1 7e 2d 29 e8 60 fc a8 22 be 6c 01 42 6c 35 57 ca 8a aa 0e 30 aa 45 8d 04 ac 51 40 55 5a d5 d3 f1 fa 75 24 75 00 da 88 a3 d6 bf 50 95 0a b1 a0 95 5e d6 3d 40 0a 06 ac 28 a5 42 80 22 92 28 d8 d7 b7 60 cc 75 3a a7 8b 22 88 0a a5 47 60 a7 e3 46 a2 d3 02 82 1b a2 86 94 4b 11 eb d8 87 61 1a 05 18 d0 0d 2a 14 12 5d c4 c2 42 64 32 86 1c 6f 25 97 60 33 b3 cc 4a a3 67 71 72 56 a4 76 d1 04 d0 a2 2b a5 ad f8 b9 ae d5 58 25 54 94 91 40 1b 8b 52 52 08 f6 cd 04 aa e2 e4 93 d3 b1 22 90 d2 96 a7 1e 49 19 09 a9 Data Ascii: QH_,M%5)M]M])Q.+^z]$%EEI%$ =;A`-F+M.r(-~-)`"lBl5W0EQ@UZu$uP^=@(B"(`u:"G`FKa*]Bd2o%`3JgqrVv+X%T@RR"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50350	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2466	OUT	GET /pagead/viewthroughconversion/614409984/?random=1244903050&fst=1714028866067&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A43.577%2B02%3A00%3Bhit_timestamp_unix%3D1714028863577%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1714028863437-1-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBAUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2ktc4VQQBSqcNKFfFszHRZ1mxBzROv_w0&pscrd=CIrH6uPGyZaErAEiEwin4fqN59yFAxWZJLMAHXIHAqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:47 UTC	2262	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/614409984/?random=1244903050&fst=1714028866067&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A43.577%2B02%3A00%3Bhit_timestamp_unix%3D1714028863577%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1714028863437-1-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBAUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIrH6uPGyZaErAEiEwin4fqN59yFAxWZJLMAHXIHAqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtquj_YTJnfrnQip5XY7zNqVv447p6LGF5wzejnD2P-D2qrtnOy&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC04oksqrb76wblosM8ojfv-cV3161x4cvY&random=2443303816 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50347	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1355	OUT	GET /pagead/1p-user-list/778938880/?random=1131794961&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD9Auhd1stGdtdDPqPsSomb3XN2vxAWIkXUM6KxcjY3aUxVGO&random=475300310 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50346	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028863603 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:47 GMT x-amzn-RequestId: 3092553b-10be-4284-9cd3-88824ac7285e X-Cache: Miss from cloudfront Via: 1.1 59d47415973fdc0751ce88be5c9c1a26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 3O4GxqL4nN9PxbWXNvm_qmXQL7aEbgw374ZdKAY0uUmhz30uuLYUiA==
2024-04-25 07:07:47 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50351	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2087	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _dd_s=rum=0&expire=1714029765337&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:47 UTC	582	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Thu, 25 Apr 2024 07:07:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-47bsx-42308 X-Request-Id: 068e4e6bd08e6f99b68ac45978336617 X-Runtime: 0.002834 X-Cache: Error from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZRkHNvlpwK8oWXZgfzdVTu0aQf9gdUYNXlF9W3uPSe9ylvbuNX7HAg==
2024-04-25 07:07:47 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50348	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1208	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50349	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1206	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50352	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1107	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:47 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2366582520153449718"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2366582520153449718","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2366582520153449718","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2366582520153449718","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2366582520153449718","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50353	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1109	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:47 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7566507041562856033"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0x4389867689495236","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x2e8ea822c474c815","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x22936330dee76c4e","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x26cd48fe22054401","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7566507041562856033","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7566507041562856033","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7566507041562856033","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7566507041562856033","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50355	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2150	OUT	GET /_set_cookie?val=utxDhn1gCV1qkWiRCU6eQGMbIXNRSs24NqLQNz9MPrjHtihuXNI%2F6AI7RyUH7zRn8LW8v3IPgsoeiDWThqz%2FlfeCHQjM33JkJYbsGyCMmtvqfOO1%2BmwG1yBoxYlnoC%2BS1qWTDW8%2FjoxykabJb9K47uXNbeGK%2B24rt5R7zUwWd2XOfO5R8YFo3ARAfVJHNI%2B7SWI%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19bu8.k.2.m; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing
2024-04-25 07:07:47 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:47 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 0b00705d5489207e9b2ca43397d52bfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: i6xPxxRO2eu1M_xLBpgq1sAvEaVw0shJdN4TsB2YX7b7Y4gSflGAsg==
2024-04-25 07:07:47 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50357	64.233.185.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:47 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50356	142.251.15.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:47 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50358	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	762	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEBvhO5c60eweFAbRgcle4rM&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:47 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f86dcfc1f9d-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:47 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:47 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3puZN2JhAfDcvN9JpboqNbcTRxuMS1ev4O1ZWjIsP%2BfGufJ8hmJikvZh7XnnAQgTz2WiEVvUr%2BV0cq4hgW75NEyvEukdnIvT4D0uyR3J%2FMGxxDAHXUfbbcrD2t88zw%2FOXA2rmSE%2BXgVoRg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50359	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	483	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESELMwThr25FgVW40rRNKtuFo&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:47 UTC	989	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f86ecb68bb8-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:47 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:47 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iB9YmkR%2B0xW7SAwJ8ZwitCYuefIv0HRH2M50uPYnOiVB2aKBiUlEEdK3OjBPr8TOeBCU9yy0lX%2BW5vSbihkzPluwcDz6%2BHKix%2BlM4msRKg7fLgeWNNVASGF70%2F%2Ft2XXeAmRJjZMIVFes9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50354	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Thu, 25 Apr 2024 07:07:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50361	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2531	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 130 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _dd_s=rum=0&expire=1714029765862&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19qam.k.3.n
2024-04-25 07:07:47 UTC	130	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 33 38 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":2380.399999999994,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-25 07:07:47 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Thu, 25 Apr 2024 07:07:47 GMT ETag: "37-SZKlGf25b5Uezlt+kHuhF1suoGA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5oivlFczhPId7ES3f76BUl5ZmGW5IE_WcL7bdXZ3NpD2gly1_Rd4jQ==
2024-04-25 07:07:47 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 32 33 38 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"FCP","time":2380.399999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50363	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiVTA3Mjl5TnltSFFaVmx2eGJzbjBoZCIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5996 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-662a011a-48f7e17d299da0f31f67788b X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:47 GMT Age: 42 X-Served-By: cache-pdk-kpdk1780053-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714028868.744558,VS0,VE1 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:47 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-25 07:07:47 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-25 07:07:47 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-25 07:07:47 UTC	1378	IN	Data Raw: 22 7d 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 73 6b 69 70 2d 6d 65 6d 62 65 72 73 68 69 70 73 2d 74 61 62 6c 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 30 33 2d 61 73 73 6f 63 69 61 74 65 2d 74 72 61 6e 73 66 65 72 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 Data Ascii: "},"value":"control"},"skip-memberships-table":{"key":"on","value":"on"},"transfer-details-03-associate-transfer":{"key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"exper
2024-04-25 07:07:47 UTC	484	IN	Data Raw: 61 70 6f 6c 6c 6f 2d 74 72 61 6e 73 66 65 72 6c 69 73 74 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 Data Ascii: apollo-transferlist":{"key":"on","metadata":{"experimentKey":"exp-1"},"value":"on"},"workspace-settings":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50364	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	745	OUT	GET /crum?cm_dsp_id=18&expiration=1729840067&external_user_id=83afbb03-ff0d-4d32-b1b6-358821c16544 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:47 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f87ce327b92-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:47 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:47 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZZm8zJHNzNihMyREpKV%2FOL1YXv672WYPSlUtN2q3pY1nta6qQLKDivZufidhAPf2CQaQMDTYeuuL1pB1rjiz9zf%2B0MSKgsT26FMwZR5j%2F2uHnxnWDpUELn9lP%2BWJms%2FbdUCaZHuI5apgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50365	3.237.57.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	803	OUT	GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZioBP9HM4ycAADS8ARFPzgAA%26587&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=85ee1344445a44919f614be81fcc5250 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=85ee1344-445a-4491-9f61-4be81fcc5250
2024-04-25 07:07:47 UTC	618	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Length: 0 Connection: close Location: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=85ee1344-445a-4491-9f61-4be81fcc5250 Set-Cookie: _li_ss=CggKBgiiARDiFw; Max-Age=2592000; Expires=Sat, 25 May 2024 07:07:47 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=85ee1344-445a-4491-9f61-4be81fcc5250; Max-Age=63072000; Expires=Sat, 25 Apr 2026 07:07:47 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50366	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	524	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:47 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: W51QWG72XYYJ9TY8RW51 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50372	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2387	OUT	GET /pagead/1p-conversion/614409984/?random=1244903050&fst=1714028866067&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A43.577%2B02%3A00%3Bhit_timestamp_unix%3D1714028863577%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1714028863437-1-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBAUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIrH6uPGyZaErAEiEwin4fqN59yFAxWZJLMAHXIHAqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtquj_YTJnfrnQip5XY7zNqVv447p6LGF5wzejnD2P-D2qrtnOy&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC04oksqrb76wblosM8ojfv-cV3161x4cvY&random=2443303816 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50371	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	2060	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeVO,pingTime:-2.1,time:6029,type:a,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D,%7Bvs:o,r:f,t:2335%7D,%7Bvs:i,r:,t:5404%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1206,o:4825,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B579~75%5D,as:%5B579~1280.907%5D%7D%7D,%7Bsl:o,t:2335,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:1,reas:f,bkn:%7Bpiv:%5B3069~75%5D,as:%5B3069~1280.907%5D%7D%7D,%7Bsl:i,t:5404,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B630~75%5D,as:%5B630~1280.907%5D%7D%7D%5D,slEventCount:5,em:true,fr:false,e:,tt:rjss,dtt:542,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.352a73fb-dc2b-63bc-a842-a419586c3a8b.36_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true,sis:5422%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.va.303net.net
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50373	104.18.38.76	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	389	OUT	GET /ht/htw-pixel.gif?ZioBP9HM4ycAADS8ARFPzgAA%26587 HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	483	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "902a3d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Thu, 25 Apr 2024 11:07:47 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 619 Accept-Ranges: bytes Server: cloudflare CF-RAY: 879c7f889e5e7bba-ATL
2024-04-25 07:07:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50362	15.197.193.217	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	675	OUT	GET /track/cmf/casale HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFIAEoAzILCMqNu8ajwPI8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-25 07:07:47 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:47 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFIAIoAzILCMqNu8ajwPI8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Fri, 25 Apr 2025 07:07:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:47 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50367	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:07:48 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Thu, 25 Apr 2024 07:07:48 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 10 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50360	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:47 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 36 36 39 36 61 37 66 36 32 38 64 62 32 62 35 62 36 35 34 34 37 30 32 38 63 39 63 61 31 33 61 37 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 36 35 38 37 38 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=6696a7f628db2b5b65447028c9ca13a7&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028865878%2C%22event_id%22%3A3%2C%22session_id%22%3A1714028821782%2C%22
2024-04-25 07:07:48 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0144-20f97c7137ce6dc643abb2ce Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:48 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50375	142.250.9.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	3030	OUT	GET /pcs/view?xai=AKAOjsvhKP6ooNzlpreiVR46iFAr_iN_Depo9qWtQcmNDeGbAwkMPxdUsLw1CCnyWI72YyMRtKrdG1UuMP6F5vB65ZlF9W8c4S71OFlcn-PtJBaZdcmyqIOD1ZFOJGDLDwwT2slINbG0sx3naT1qfPbk636nRA-zFv_8I8w0UMHB-vMN8E9lsH-oPzxNTxLBT3gpuvPOLvxH_MK-LrS46ipcaCMk9QnqoztwljKrZ0WEiuICAYFHZroTXZQSFPEE6zS0eyOa7LEout32I9JpMP28FSNncm8P97OuK8I6aOP7RanUz8O7puaBGUw3v37rUfXzmdw7k1wIzthhKLZs9j8933-LHaZIiwLpjkCJC9m4uxkIH14-tmplFqB_C9qEKq3FPO4SW-KoHeQPSeedXeMr8FEBBRxwZ983pvKCOejTMqMIHQahL-WLvvvJCFB26YH5buYPHAapdA1VSh6VhhpnrAUkdodbtwC7Ub9Qf8SQPLtOtPlkUBssq2JJ0c_3aO-LXbb2sZ_XWmSwJwj95-soAtZqkjhxZcddPcDTA_o56EgpUXURPF78_KCvGnxp2VQ6vMHNXsC4lZ89qAsiRFmvEfIQCgxBenUH5d0qq6QXBU2ToNiGLc6gKsN8HYY6I1jEKTLGL6CeGJER33uX2rRgH8dCLNGZXvlH6TtcOePl4FbnB1gJSem60R4KUettD53jj0FQonbMkgJ0DvD5jMWZLWUkRpbmZkAsRQlIc4f1vtjm3E6xrkP4hBAI2NFo0cNetHGjAPWyQ-NvwR8kLeV1uhz90sOAy4U0jXNbPvhT-N8lxJ4QbL0etUBXwblmbxhULrSKJZbtG1QvpNPU7Dd2NY-40-81uAEYW9mVQDSqhwv5l1dvxzXeP7oD86shg7Gf6PQ6x2ThfwaKaSLB8AgJ4Kh_x6BIjOHOFd5oecob5IRr3XOVN-7rwRUZMFGk4crsO5qTBjFJ9FD4lYYhhw8xWH21v3qPtbrVfl2wRX4p1SwFgYYtVkuBcIB19jn_1dIi8fhifwlkJlitSEdIWj6Qy0tS_06K4M11HpCge3k9QPnHmdXSOA7sQQ0qekl22go3npPfLdE1KofvPrTqaCBZ-NXCwkeZeJ7AnYEepLlEBEwsK0P2xKONcCXJMbq3CHIskAWPzqyB0u0bLP2T-qx3mbgEmm9GXhJS1RNn9HB0UKVKxA9IbiDwYoCf4zAsxdtt94Z3Or3NRo9XJc1_cLdfebxveg2tGZOgxUVx4g_mHDUutyQ3hu4u3hegdk63okZOtE07azvoS38n_dehXWTFkb9Ex6JcBP116hpE_Aszyh1Eri2JtyJPaxpkK1gmyhognfxdkt3ynDl5nrCVtBk-x-57gGURSlvhSXifRQtQ9L0w9jou08deezL8FvZCVWugZ6Qz59IME3UNoS8JOOev45zrrDVzioFLeqPXIQrvn0QO9HEuq3QH3aiBwVSRpjs68tKdVrGDoUVVO0AHpg&sai=AMfl-YTfjwUWkOFrpSUCbGGz-BHQAfjtxviiplaqCAVmRfRo8HVKZPbDIsjUL9ha85-BdGagLni8VRizAD2fkp1FAheTi9goSuhT2ZKKszHg9boKAzO8LdWFmyhweGUgHP9kfazSITip6X8fyd3ORb7_fqZk0Prt-L3LNYEXxKYNiDL6DWEto7whPkoNHiZ-7XKUH2w&sig=Cg0ArKJSzK2ZG_e_39sLEAE&uach_m=%5BUACH%5D&pr=13:ZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3373&vt=11&dtpt=3371&dett=2&cstd=0&cisv=r20240423.73652&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source=navigation-source Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:48 UTC	1518	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xa0fcf2ea52d462f70000000000000000","13":"0x7c7e9aa188a2909a0000000000000000","14":"0xce3b54cd10a13bdc0000000000000000","15":"0xd90587466156b7760000000000000000"},"debug_key":"12831388124248360207","debug_reporting":true,"destination":["https://landroverusa.com","https://jaguarusa.com","https://debugconversiondomain1.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13976782"],"21":[],"8":["12949653"]},"priority":"0","source_event_id":"6779778972065672276"} X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 07:07:48 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50376	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	1637	OUT	GET /rfw/st/2049676/79562500/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=https://wetransfer.com/&adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=c&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Flandrover%2F2403%2Faccordion%2F2_d6hcUN%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=bed&adsafe_jsinfo=,id:352a73fb-dc2b-63bc-a842-a419586c3a8b,c:aSpeVi,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-8tpg9,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,mu:10000,br:c,bru:c,an:n,oam:0,scm:jl1,mtim:558,mot:0,app:0,maw:0,tdt:s,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:0,renddet:IMG.us,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,tt:rjss,et:565,oid:840d5aa2-02d2-11ef-888a-1e39e299772f,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1 Host: fw.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	268	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Length: 0 Connection: close server: Apache-Coyote/1.1 p3p: CP="COM NAV INT STA NID OUR IND NOI" pragma: no-cache cache-control: no-cache location: https://static.adsafeprotected.com/skeleton.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50379	169.197.150.8	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:47 UTC	442	OUT	GET /usersync/113 HTTP/1.1 Host: match.deepintent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_75e092a1c0d1436ca22cc; CDIPARTNERS=%7B%221%22%3A%2220240425%22%7D
2024-04-25 07:07:48 UTC	665	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_75e092a1c0d1436ca22cc set-cookie: CDIUSER=di_75e092a1c0d1436ca22cc; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 07:07:48 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240425%22%2C%22113%22%3A%2220240425%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 07:07:48 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 25 Apr 2024 07:07:47 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50381	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2142	OUT	GET /_next/static/css/3471d3babf255274.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19qqo.p.3.s
2024-04-25 07:07:48 UTC	577	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31554 Connection: close Date: Thu, 18 Apr 2024 17:26:14 GMT Last-Modified: Thu, 18 Apr 2024 16:49:53 GMT ETag: "a5e9e0bd25747c28af2c8919506692ff" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8Df3c8JemfNGh5vUaw3JtyxxQRK-hntHhadAQ0RfgQehTbfC515ShA== Age: 567694
2024-04-25 07:07:48 UTC	16384	IN	Data Raw: 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 34 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 Data Ascii: .panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48
2024-04-25 07:07:48 UTC	15170	IN	Data Raw: 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 2e 74 61 62 6c 65 2d 64 61 74 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 25 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 70 61 74 68 7b 73 74 72 6f 6b 65 3a 23 33 37 34 31 64 39 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 67 72 65 79 2d 69 63 6f 6e 20 70 61 74 68 7b 73 74 Data Ascii: able__section table tbody tr td:nth-child(2) .table-data{margin-right:10%}.PricingFeatureTable__section table tbody tr td:nth-child(2) path{stroke:#3741d9}.PricingFeatureTable__section table tbody tr td:nth-child(2) .PricingFeatureTable__grey-icon path{st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50380	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2138	OUT	GET /_next/static/chunks/pricing.7575d8b9ff1b3b50.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028861..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.9; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19qqo.p.3.s
2024-04-25 07:07:48 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 46090 Connection: close Date: Mon, 22 Apr 2024 17:32:45 GMT Last-Modified: Mon, 22 Apr 2024 16:51:33 GMT ETag: "6d2b1124d8d986d756b08f0472fafe16" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bKfuA6_0YaLHPaMRs1qwNb0EsIRWyIQObMbCeTmqDkt8UJzzpt6y2A== Age: 221704
2024-04-25 07:07:48 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 31 37 5d 2c 7b 35 36 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 72 2c 7b 45 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 65 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 78 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google
2024-04-25 07:07:48 UTC	16384	IN	Data Raw: 73 2e 66 65 61 74 75 72 65 5f 31 22 29 2c 74 6f 6f 6c 74 69 70 3a 6d 2e 5a 2e 74 28 22 22 2e 63 6f 6e 63 61 74 28 70 65 2c 22 2e 74 6f 6f 6c 74 69 70 5f 37 22 29 29 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c 75 6d 6e 22 7d 2c 22 43 6c 6f 73 65 49 63 6f 6e 22 2c 22 43 68 65 63 6b 6d 61 72 6b 49 63 6f 6e 22 2c 22 43 68 65 63 6b 6d 61 72 6b 49 63 6f 6e 22 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 66 65 61 74 75 72 65 5f 74 61 62 6c 65 2e 62 72 61 6e 64 69 6e 67 2e 66 65 61 74 75 72 65 73 2e 66 65 61 74 75 72 65 5f 32 22 29 2c 74 6f 6f 6c 74 69 70 3a 6d 2e 5a 2e 74 28 22 22 2e 63 6f 6e 63 61 74 28 70 65 2c 22 2e 74 6f 6f 6c 74 69 70 5f 38 22 29 29 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c Data Ascii: s.feature_1"),tooltip:m.Z.t("".concat(pe,".tooltip_7")),type:"FirstColumn"},"CloseIcon","CheckmarkIcon","CheckmarkIcon"],[{label:m.Z.t("page.pricing_panel.feature_table.branding.features.feature_2"),tooltip:m.Z.t("".concat(pe,".tooltip_8")),type:"FirstCol
2024-04-25 07:07:48 UTC	13322	IN	Data Raw: 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 68 32 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 47 65 28 29 2e 54 65 72 6d 53 65 6c 65 63 74 6f 72 5f 5f 74 69 74 6c 65 2c 63 68 69 6c 64 72 65 6e 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 70 6c 61 6e 73 2e 74 69 74 6c 65 22 29 7d 29 2c 28 30 2c 61 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6f 28 29 28 47 65 28 29 2e 54 65 72 6d 53 65 6c 65 63 74 6f 72 5f 5f 72 61 64 69 6f 47 72 6f 75 70 2c 47 65 28 29 5b 22 54 65 72 6d 53 65 6c 65 63 74 6f 72 5f 5f 70 72 69 63 69 6e 67 2d 70 61 67 65 2d 72 65 76 65 72 73 65 2d 72 61 64 69 6f 2d 62 75 74 74 6f 6e 73 22 5d 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 57 65 2c 7b 69 64 3a 22 Data Ascii: ren:[(0,a.jsx)("h2",{className:Ge().TermSelector__title,children:m.Z.t("page.pricing_panel.plans.title")}),(0,a.jsxs)("div",{className:o()(Ge().TermSelector__radioGroup,Ge()["TermSelector__pricing-page-reverse-radio-buttons"]),children:[(0,a.jsx)(We,{id:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50377	54.158.106.27	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	356	OUT	GET /cookie-sync/ie HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	385	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Thu, 25 Apr 2024 07:07:48 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50382	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1174	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVV,pingTime:-3,time:604,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:605,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B46~0%5D,as:%5B46~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt11.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50387	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	859	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866542&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=112, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50388	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	969	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866542&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:48 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:48 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:48 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50385	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:48 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2WM7Q7AKMQRRC882J0HA Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50390	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1121	OUT	GET /pagead/1p-user-list/778938880/?random=1131794961&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD9Auhd1stGdtdDPqPsSomb3XN2vxAWIkXUM6KxcjY3aUxVGO&random=475300310 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50391	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	972	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=303098299;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50392	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	974	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=374853779;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50389	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1762	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeMo,pingTime:-10,time:5445,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028865479%7C%7C8ac481bf0e1a7f304f293d4029761e87%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7Cb900e8bdf8358bf79ea11260a27fe2d2%7C%7Ccf55e76124fefb919c08c040283a13f3%7C%7C8fc692ffc3881ae8ae143b1dbd34cbaa%7C%7Ccf5b7198bc15b786119e4294fa50d240%7C%7C9eec2d5e74e1050bbb6c60514836d874%7C%7C1663701684,im:%7Bimprf:%7Bttecl:6727,ecd:1606,tsecr:2167%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50396	3.161.136.118	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	698	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=85ee1344-445a-4491-9f61-4be81fcc5250 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	1189	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 965 Connection: close Date: Thu, 25 Apr 2024 07:07:48 GMT Location: https://p.rfihub.com/cm?pub=39342&in=1&userid=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028868.423623&forward=https%3A//i.liadm.com/s/56409%3Fbidder_id%3D200442%26bidder_uuid%3D56c8a119-fb2e-40a6-a39d-fe9224591ce0%253A1714028868.423623%26pid%3D500040%26it%3D1%26iv%3D56c8a119-fb2e-40a6-a39d-fe9224591ce0%253A1714028868.423623%26_%3D1714028868.4256136&cb=1714028868.4256678 Set-Cookie: zync-uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623; Domain=rezync.com; Expires=Tue, 20 May 2025 07:07:48 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiNTZjOGExMTktZmIyZS00MGE2LWEzOWQtZmU5MjI0NTkxY2UwOjE3MTQwMjg4NjguNDIzNjIzIn0.ZioBRA.RsfepiZ0hLlSTF16WS2p2jQ0xyA; Expires=Tue, 20 May 2025 07:07:48 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 bd8c7f0951e70bd86f786490a15e7a7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: UTUDieAkNgckg6ifWRnCf1vKZ5YZTGFzL3AOYxdPstUzS3C9wbZYCw==
2024-04-25 07:07:48 UTC	965	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 2e 72 66 69 68 75 62 2e 63 6f 6d 2f 63 6d 3f 70 75 62 3d 33 39 33 34 32 26 61 6d 70 3b 69 6e 3d 31 26 61 6d 70 3b 75 73 65 72 69 64 3d 35 36 63 38 61 31 31 39 2d 66 62 32 65 2d 34 30 61 36 2d 61 33 39 64 2d 66 65 39 32 32 34 35 39 31 63 65 30 25 33 41 31 37 31 34 30 32 38 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://p.rfihub.com/cm?pub=39342&in=1&userid=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50397	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	955	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866615&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-39-833348100cc9&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=112, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50398	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1065	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866615&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-39-833348100cc9&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:48 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:48 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:48 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50399	151.101.194.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-662a0144-7929b0f624651ffd3271cd85 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:48 GMT X-Served-By: cache-pdk-kfty2130036-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028868.454623,VS0,VE75 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:07:48 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50400	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2093	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _dd_s=rum=0&expire=1714029765990&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19quj.u.3.11; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028866.0.0.988032707
2024-04-25 07:07:48 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:48 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QBM_gmeSZ7G39Ppi50dxWOe58c8tVfY9I4EvZeW3qLbVgncc6JwEVQ==
2024-04-25 07:07:48 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50401	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	501	OUT	GET /crum?cm_dsp_id=18&expiration=1729840067&external_user_id=83afbb03-ff0d-4d32-b1b6-358821c16544 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:48 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f8c288e672e-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:48 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:48 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uRETlpDezagKCaVw%2BzM9qW3%2F1GQql%2BlRv3OY1GSUMNCpqv0Fr8AUJlK7UfcIqUMmCvURwqbEf5BtEZjCLbyJm7HAODVcXjGPc%2FiOVjfnmwOK4SHwStb%2F5QepLLE8LKFGaNy5SpyVcVNDlg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50404	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2080	OUT	GET /pagead/1p-conversion/614409984/?random=1244903050&fst=1714028866067&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A43.577%2B02%3A00%3Bhit_timestamp_unix%3D1714028863577%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1714028863437-1-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAiIBAUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIrH6uPGyZaErAEiEwin4fqN59yFAxWZJLMAHXIHAqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtquj_YTJnfrnQip5XY7zNqVv447p6LGF5wzejnD2P-D2qrtnOy&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC04oksqrb76wblosM8ojfv-cV3161x4cvY&random=2443303816 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50403	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1814	OUT	GET /dt?advEntityId=2049676&asId=932f3184-a47e-225f-d172-3d75fdc4f6cf&tv=%7Bc:aSpeVO,pingTime:-2.1,time:6029,type:a,clog:%5B%7Bpiv:-1,vs:n,r:,w:1280,h:907,t:1646%7D,%7Bpiv:0,vs:o,r:l,t:1733%7D,%7Bpiv:80,vs:i,r:,t:1756%7D,%7Bvs:o,r:f,t:2335%7D,%7Bvs:i,r:,t:5404%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:1206,o:4825,n:1733,pp:0,pm:0%7D,slEvents:%5B%7Bsl:n,t:1646,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:0,reas:,bkn:%7Bpiv:%5B106~1,0~0%5D,as:%5B106~1280.907%5D%7D%7D,%7Bsl:o,t:1733,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:0,reas:l,bkn:%7Bpiv:%5B22~0%5D,as:%5B22~1280.907%5D%7D%7D,%7Bsl:i,t:1756,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B579~75%5D,as:%5B579~1280.907%5D%7D%7D,%7Bsl:o,t:2335,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:1,reas:f,bkn:%7Bpiv:%5B3069~75%5D,as:%5B3069~1280.907%5D%7D%7D,%7Bsl:i,t:5404,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:80,obst:0,th:0,reas:,bkn:%7Bpiv:%5B630~75%5D,as:%5B630~1280.907%5D%7D%7D%5D,slEventCount:5,em:true,fr:false,e:,tt:rjss,dtt:542,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.352a73fb-dc2b-63bc-a842-a419586c3a8b.36_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:1649,sinceFw:106,readyFired:true,sis:5422%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt27.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50384	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2230	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1990 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19qs7.t.3.10; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.10
2024-04-25 07:07:48 UTC	1990	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6f 43 49 41 50 39 6f 43 49 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-25 07:07:48 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:48 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:48 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50405	64.233.177.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	362	OUT	GET /simgad/12869299199225834669 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 64800 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 05:59:12 GMT Expires: Fri, 25 Apr 2025 05:59:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 08 Apr 2024 19:00:45 GMT Content-Type: image/jpeg Age: 4116 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	434	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 Data Ascii: 2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af Data Ascii: Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U""
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: FA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 71 72 c3 03 12 54 c2 a5 b4 2c 5a 9c 95 dd 98 e6 a9 29 9c d2 85 44 2e 42 44 5c b9 10 94 a8 a4 bf 21 6a aa b9 b0 ca b2 ab 95 cb 2a 8e b8 7c cc 5a 0c 84 f0 32 a8 33 67 52 56 aa 0e 70 e7 ea 0d 53 7c 51 92 ce d4 ed fe 0e da ba bb 1c b0 5e d6 db 46 bb f5 cb 33 04 a2 6b 0b b1 0c 50 68 63 62 92 18 92 57 91 62 c4 30 2a 05 85 8a d5 62 aa de b9 f5 42 c5 95 8c ba 32 a4 e4 c5 75 5c 4c f5 42 aa ca 81 e0 b3 26 a7 9d 39 7a 72 a3 5e d8 f9 8e 20 9b 1c a6 53 05 66 46 2a 39 21 a5 75 df 47 df 82 5b 29 8e 0b 8a 50 63 2b 2b 8b 15 96 12 f4 2e 5d 65 b1 65 2b 28 f6 1c 86 4a 86 28 54 85 39 16 54 aa a9 31 61 e8 0b 23 66 22 95 cf 1a ce 76 ec 74 24 c2 6a d6 78 b0 c5 b4 f0 1c 23 9c c4 96 85 b4 3d 09 68 4b 56 36 c0 e8 b5 be 47 fc 4c 7d 99 a1 d8 0b 28 cd 94 d8 cf a8 64 4a cf f8 ed ed 39 Data Ascii: qrT,Z)D.BD\!j\|Z23gRVpS\|Q^F3kPhcbWb0bB2u\LB&9zr^ SfF*9!uG[)Pc++.]ee+(J(T9T1a#f"vt$jx#=hKV6GL}(dJ9
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: e4 7d c2 af 61 2f d4 1e 73 fb ef e1 dc ab 8d fa ae b8 f3 8f af a2 39 fc 88 f6 e0 83 91 a7 66 cd e5 b7 1b 59 dd 35 fa 97 c7 1b 71 b3 f1 be 9c 3f 3c d2 c0 21 07 90 6d b6 a7 d2 86 99 5b 27 5d c5 5e bf 96 79 e6 fd a6 9b e7 fb e5 f0 bd 18 b1 d3 38 d7 d5 b8 ae f2 4d 57 4b 22 d6 f5 0e 98 fb c9 35 56 c8 46 9e 67 49 de 9c ae 3f a3 43 e7 be 69 d5 89 c8 fd 87 79 67 68 3e 80 e8 6f 94 7d 95 a8 5e ad f9 3b 46 7b 37 e7 45 77 cb 7b 75 61 e4 df a0 90 6c de 20 3b 75 88 be 1b b3 1d e0 e7 fd c6 93 fa 1b f2 17 6d 75 c3 ad 48 18 ae 45 14 95 53 09 bb d4 1d 1c c5 6e 7b f3 1e fd c4 3e c7 c3 36 bb c4 3f 56 41 44 8e ec fc c9 bc 56 89 a3 16 c0 56 da 13 6a 72 b7 56 f5 76 aa 41 6e 25 bb ad f4 7e ea 78 9f e9 3e 86 ee bc 6b 80 9e e9 f9 29 06 dd f9 a7 57 fc eb f5 2f a9 fe 25 fa 63 c6 6f Data Ascii: }a/s9fY5q?<!m[']^y8MWK"5VFgI?Ciygh>o}^;F{7Ew{ual ;umuHESn{>6?VADVVjrVvAn%~x>k)W/%co
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 57 ad c5 af 44 dc 1f c1 f5 b5 e8 1b 1b 9a 26 81 26 a5 3e b8 eb 7e 62 db 5f c9 7d 61 53 96 86 e3 c9 53 cf c9 92 b4 2d f9 25 b0 e4 97 13 11 f9 aa 43 26 5b 8b 43 2e b8 a7 01 06 89 06 8f 6d 58 55 c5 58 1a 17 ab a8 97 a4 26 3a 5b 9a d3 8e aa 5b 68 79 e9 8d 34 ea e5 b6 92 25 02 bf 9e dd dc 7c 34 d8 9a d9 50 93 dc 5b 94 da d4 65 b6 8a 44 a4 ac fc f6 fb 52 41 a2 2f 5d ca ae b4 2d 4f 16 10 e2 d1 1d e5 ac 47 08 52 21 86 98 65 88 e8 7d 86 94 a5 b3 19 54 5a 88 eb 68 6e 28 6d 11 e3 a9 a6 9a 0d 1b a6 ae 09 24 58 94 d7 f4 93 d2 bb 7f 0e b4 db e3 e2 b2 97 7e 04 70 da 58 42 54 31 ec 80 23 31 ee 08 91 89 71 b6 de 6c b3 1c ad 2d 22 ff 00 19 b2 cf c6 6c b2 88 c8 41 31 18 53 76 b5 5e d5 fd 57 ec 34 41 15 30 2c 3c eb 6e a9 df 69 66 04 86 9d 53 aa 6d d5 c6 5b 6e bf 0f db 90 5a Data Ascii: WD&&>~b_}aSS-%C&[C.mXUX&:[[hy4%\|4P[eDRA/]-OGR!e}TZhn(m$X~pXBT1#1ql-"lA1Sv^W4A0,<nifSm[nZ
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 07 d8 76 bd a9 02 82 65 8a 48 90 2b b5 ea 43 0b 51 54 74 14 ae 2f 47 71 e1 d3 fb 4b 2a 2e 62 a3 2c 37 8a 29 39 22 98 d0 25 6d ae 47 cb 40 6e 3c 88 83 1d 85 41 43 ed a0 89 b0 40 f9 f8 ea cb c7 c3 64 59 75 b2 d3 84 91 5f a0 36 ab f5 26 d5 7a 1e 9e 95 06 38 95 24 e6 71 d0 98 c8 ed 0d 21 2e 6d 08 5a 97 b3 e3 d2 7f 96 43 09 5e d8 d1 a3 b5 25 2b fe 5c cd 97 b8 34 84 ab 74 6d 34 e6 e4 94 b9 33 7b 79 94 1e 4d 9a 4c 7e 47 c8 aa 99 e4 1c 89 11 f7 b7 5c a6 b6 d6 dc a6 36 14 a8 35 9a 12 28 bf 92 58 62 36 4a 5b 31 d8 95 12 6a 64 36 ba f7 21 53 72 21 59 33 62 a4 a6 72 54 67 3e 4a a4 4a 43 d2 0b a2 bd c4 d7 b8 91 5e e8 b9 50 b7 52 52 92 47 60 15 83 86 f6 2e a7 64 50 a6 e3 c9 82 f4 a2 ca 45 2a 2b 4b 0b 81 05 74 71 58 c3 47 0f 8b ba f0 78 72 0e bf 82 35 fc 77 02 41 d6 30 Data Ascii: veH+CQTt/GqK.b,7)9"%mG@n<AC@dYu_6&z8$q!.mZC^%+\4tm43{yML~G\65(Xb6J[1jd6!Sr!Y3brTg>JJC^PRRG`.dPE+KtqXGxr5wA0
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 5f 3d 0b 2a 71 85 8b 46 ba 57 1d 15 ee c7 ba 4b 0e 12 c4 63 4a 81 01 54 bc 46 3d 54 70 b0 6e 70 91 ec 31 b1 52 44 52 c8 f8 a1 d0 ec 15 ba d7 c1 94 b0 e6 bf 0d e2 ad 63 10 e1 6e 2c 58 2a 65 05 d7 fe 43 4c 2a 7b 51 a3 d2 63 b6 92 59 69 47 d8 6e 92 90 94 c8 59 09 fd 21 45 93 91 56 59 d4 29 be b7 3f 96 25 63 c5 21 68 58 09 15 21 92 f2 08 b1 1d 0a 55 f9 68 04 22 e2 bb ba 77 1a 2b b5 17 29 7d 8a a2 00 35 ef 2e d5 e9 4e 39 70 a1 51 57 70 1c 53 cd 4e 88 fc 17 ae 47 e3 b8 9a 2b 02 94 5a 52 ca 5b a6 a4 7c 74 c9 90 a9 0e 8b da d6 ae 80 f4 ab 75 b0 49 44 b9 6d d2 32 b2 92 1d 9e 97 8f c9 6e df 25 aa 12 d9 14 99 6c a4 fc f4 50 98 8a f9 48 55 7b e9 34 5e 4d 7b 89 35 df 41 66 bb 85 5c 7e 08 06 bb 12 68 b6 08 42 d6 ca e3 e5 64 47 71 e9 5f fd 86 5a a8 c9 74 d2 9d 70 d1 b7 Data Ascii: _=qFWKcJTF=Tpnp1RDRcn,XeCL*{QcYiGnY!EVY)?%c!hX!Uh"w+)}5.N9pQWpSNG+ZR[\|tuIDm2n%lPHU{4^M{5Af\~hBdGq_Ztp
2024-04-25 07:07:48 UTC	1255	IN	Data Raw: 05 51 48 b7 5f c5 ee 2c 4d 25 35 d8 29 4d da 90 91 5d 82 8a 4d 1b 8a 04 5d 29 14 a4 51 09 14 2e 2b d6 bf 5e a2 af 7a b9 bd 5d 24 25 45 0a ee 45 bb 49 25 24 03 dc 90 8e 81 20 80 15 fd 3d 14 3b 41 a2 91 60 2d 46 f6 2b 16 4d 8d 2e e6 bd b5 12 19 72 bb 16 28 2d b4 d1 7e 2d 29 e8 60 fc a8 22 be 6c 01 42 6c 35 57 ca 8a aa 0e 30 aa 45 8d 04 ac 51 40 55 5a d5 d3 f1 fa 75 24 75 00 da 88 a3 d6 bf 50 95 0a b1 a0 95 5e d6 3d 40 0a 06 ac 28 a5 42 80 22 92 28 d8 d7 b7 60 cc 75 3a a7 8b 22 88 0a a5 47 60 a7 e3 46 a2 d3 02 82 1b a2 86 94 4b 11 eb d8 87 61 1a 05 18 d0 0d 2a 14 12 5d c4 c2 42 64 32 86 1c 6f 25 97 60 33 b3 cc 4a a3 67 71 72 56 a4 76 d1 04 d0 a2 2b a5 ad f8 b9 ae d5 58 25 54 94 91 40 1b 8b 52 52 08 f6 cd 04 aa e2 e4 93 d3 b1 22 90 d2 96 a7 1e 49 19 09 a9 8a Data Ascii: QH_,M%5)M]M])Q.+^z]$%EEI%$ =;A`-F+M.r(-~-)`"lBl5W0EQ@UZu$uP^=@(B"(`u:"G`FKa*]Bd2o%`3JgqrVv+X%T@RR"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50386	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2190	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028863.0.0.988032707; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19quj.u.3.11
2024-04-25 07:07:48 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-e4041402-9213-4e8c-8a10-c16b4380a189","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:07:49 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:48 GMT ETag: W/"3c40-4LCWRe6dMmK+yk4oOenqdFEGlfE" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15424 Connection: Close
2024-04-25 07:07:49 UTC	15424	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 34 38 31 35 38 34 37 34 35 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 30 34 31 33 31 32 36 38 2c 22 66 6c 69 67 68 74 49 64 22 3a 31 36 37 38 31 30 33 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 35 31 32 31 31 31 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 37 39 34 39 36 35 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 35 36 31 33 31 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 33 4f 54 51 35 4e 6a 55 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 54 55 78 4d 6a 45 78 4d 53 77 69 Data Ascii: {"creatives":[{"adId":481584745,"creativeId":304131268,"flightId":16781037,"campaignId":1512111,"advertiserId":794965,"priorityId":156131,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo3OTQ5NjUsImF0Ijo5NTksImJ0IjowLCJjbSI6MTUxMjExMSwi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50406	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	518	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEBvhO5c60eweFAbRgcle4rM&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:48 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f8ccba4b0a0-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:48 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:48 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYu8YFERmY8W3oJnHXna6O6XgRox5w4Res5%2BbCRtTxnt4bNa9sDpIOycMWN%2F6m%2FLDAtGPZFRMDVHbLnVt3TAqTH%2FxhcJ%2BP11lkWrUK8VGFKhJDjFh6ezNe0wbXMIDsg4hflLtglIln1s9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50410	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2721	OUT	GET /pcs/view?xai=AKAOjsvhKP6ooNzlpreiVR46iFAr_iN_Depo9qWtQcmNDeGbAwkMPxdUsLw1CCnyWI72YyMRtKrdG1UuMP6F5vB65ZlF9W8c4S71OFlcn-PtJBaZdcmyqIOD1ZFOJGDLDwwT2slINbG0sx3naT1qfPbk636nRA-zFv_8I8w0UMHB-vMN8E9lsH-oPzxNTxLBT3gpuvPOLvxH_MK-LrS46ipcaCMk9QnqoztwljKrZ0WEiuICAYFHZroTXZQSFPEE6zS0eyOa7LEout32I9JpMP28FSNncm8P97OuK8I6aOP7RanUz8O7puaBGUw3v37rUfXzmdw7k1wIzthhKLZs9j8933-LHaZIiwLpjkCJC9m4uxkIH14-tmplFqB_C9qEKq3FPO4SW-KoHeQPSeedXeMr8FEBBRxwZ983pvKCOejTMqMIHQahL-WLvvvJCFB26YH5buYPHAapdA1VSh6VhhpnrAUkdodbtwC7Ub9Qf8SQPLtOtPlkUBssq2JJ0c_3aO-LXbb2sZ_XWmSwJwj95-soAtZqkjhxZcddPcDTA_o56EgpUXURPF78_KCvGnxp2VQ6vMHNXsC4lZ89qAsiRFmvEfIQCgxBenUH5d0qq6QXBU2ToNiGLc6gKsN8HYY6I1jEKTLGL6CeGJER33uX2rRgH8dCLNGZXvlH6TtcOePl4FbnB1gJSem60R4KUettD53jj0FQonbMkgJ0DvD5jMWZLWUkRpbmZkAsRQlIc4f1vtjm3E6xrkP4hBAI2NFo0cNetHGjAPWyQ-NvwR8kLeV1uhz90sOAy4U0jXNbPvhT-N8lxJ4QbL0etUBXwblmbxhULrSKJZbtG1QvpNPU7Dd2NY-40-81uAEYW9mVQDSqhwv5l1dvxzXeP7oD86shg7Gf6PQ6x2ThfwaKaSLB8AgJ4Kh_x6BIjOHOFd5oecob5IRr3XOVN-7rwRUZMFGk4crsO5qTBjFJ9FD4lYYhhw8xWH21v3qPtbrVfl2wRX4p1SwFgYYtVkuBcIB19jn_1dIi8fhifwlkJlitSEdIWj6Qy0tS_06K4M11HpCge3k9QPnHmdXSOA7sQQ0qekl22go3npPfLdE1KofvPrTqaCBZ-NXCwkeZeJ7AnYEepLlEBEwsK0P2xKONcCXJMbq3CHIskAWPzqyB0u0bLP2T-qx3mbgEmm9GXhJS1RNn9HB0UKVKxA9IbiDwYoCf4zAsxdtt94Z3Or3NRo9XJc1_cLdfebxveg2tGZOgxUVx4g_mHDUutyQ3hu4u3hegdk63okZOtE07azvoS38n_dehXWTFkb9Ex6JcBP116hpE_Aszyh1Eri2JtyJPaxpkK1gmyhognfxdkt3ynDl5nrCVtBk-x-57gGURSlvhSXifRQtQ9L0w9jou08deezL8FvZCVWugZ6Qz59IME3UNoS8JOOev45zrrDVzioFLeqPXIQrvn0QO9HEuq3QH3aiBwVSRpjs68tKdVrGDoUVVO0AHpg&sai=AMfl-YTfjwUWkOFrpSUCbGGz-BHQAfjtxviiplaqCAVmRfRo8HVKZPbDIsjUL9ha85-BdGagLni8VRizAD2fkp1FAheTi9goSuhT2ZKKszHg9boKAzO8LdWFmyhweGUgHP9kfazSITip6X8fyd3ORb7_fqZk0Prt-L3LNYEXxKYNiDL6DWEto7whPkoNHiZ-7XKUH2w&sig=Cg0ArKJSzK2ZG_e_39sLEAE&uach_m=%5BUACH%5D&pr=13:ZioBPQAAAAAZR_TbUjTiRC-yHFnB90SSQiTlSA&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3373&vt=11&dtpt=3371&dett=2&cstd=0&cisv=r20240423.73652&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:48 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50411	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1207	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVX,pingTime:-6,time:606,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:606,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B47~0%5D,as:%5B47~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt41.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50412	64.233.185.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 273 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	273	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6a 61 67 75 61 72 75 73 61 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 61 6e 64 72 6f 76 65 72 75 73 61 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 38 33 31 33 38 38 31 32 34 32 34 38 33 36 30 32 30 37 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 36 37 37 39 37 37 38 39 37 32 30 36 35 36 37 32 32 37 36 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://jaguarusa.com","https://landroverusa.com"],"source_debug_key":"12831388124248360207","source_event_id":"6779778972065672276","source_site":"https://wetransfer.com"},"type":
2024-04-25 07:07:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50415	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	464	OUT	GET /crum?cm_dsp_id=176&external_user_id=di_75e092a1c0d1436ca22cc HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:48 UTC	975	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7f8e29677b93-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:48 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:48 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iuC9R6uF7dVx%2BvIUeDXxis6%2BXAcioMYew8F4qn2bSj%2BogLFiNTvChlWogaiy0gDjrhJEchdVd7K7WsXFOM%2FsUyHFExaun2oDDQduUbE3U9twmBaxkejbMdHzQtZxfsYPGrlTem%2FU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50419	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	625	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866542&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50416	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1618	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeW5,pingTime:-2,time:614,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2379,bdZ:3860,beA:4971,beZ:4973,mfA:5529,cmA:5529,inA:5529,inZ:5531,prA:5531,prZ:5534,si:5536,poA:5548,poZ:5563,cmZ:5563,mfZ:5563,loA:5576,loZ:5579,ltA:5584,ltZ:5584,mdA:4973,mdZ:4973%7D%7D,sca:%7Bdfp:%7Bdf:2,sz:300.250,dom:img%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:614,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B55~0%5D,as:%5B55~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:121.932f3184-a47e-225f-d172-3d75fdc4f6cf.16_2049676-79562501%7C1211,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:566,sinceFw:36,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt10.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50417	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	928	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVV,pingTime:-3,time:604,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:605,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B46~0%5D,as:%5B46~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt10.va.303net.net
2024-04-25 07:07:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50420	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2478	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028866.0.0.988032707; _dd_s=rum=0&expire=1714029765990&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13
2024-04-25 07:07:48 UTC	784	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:07:48 GMT ETag: W/"53a3b2fed7fd6b8c3ac1dff6da05a8ef" Set-Cookie: amp_874b77=U0729yNymHQZVlvxbsn0hd..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-klm97-27587 X-Request-Id: 499b025e7acc67ddf39ef43bbfbe1267 X-Runtime: 0.019139 X-Cache: Miss from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HtFjNry4bLEfLnjLg6PEvNo4IExbloPDUT_laz_eEOOfCNzaACTZXQ==
2024-04-25 07:07:48 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50421	44.195.207.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50414	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0144-35bebe755be36f87143a4389 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:49 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50423	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	870	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1947097447.1714028864&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	863	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1947097447.1714028864&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50426	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-57-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50427	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2534	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _ga=GA1.1.224122617.1714028817; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028866.0.0.988032707; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _dd_s=rum=0&expire=1714029765990&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:48 UTC	118	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 36 31 37 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":617.7999999999884,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-25 07:07:49 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:07:48 GMT ETag: "38-/lusd3BN2Lm/OYmZzt8SzSsK4fM" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 7c221513394b3b02bda5f198eb4ca6d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PbO8P_ly_rtaRJYRrHOqX2jHG96ny5BwGx06QI0cjgaqLltiyOc6Vg==
2024-04-25 07:07:49 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 36 31 37 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"TTFB","time":617.7999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50425	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1038	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-57-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:49 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:49 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:49 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50429	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	3479	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A46.606%2B02%3A00&epn.hit_timestamp_unix=1714028866606&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1714028863437-39-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-39-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=2667&tfd=4913&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707
2024-04-25 07:07:49 UTC	816	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:49 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 ea828ecc044b6833e71615dc026b943c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: PxOq-2mRICftA3PfKbTBQXcfOWYUQosc9h3R7JL2LoLlkPJYPWAmPg==
2024-04-25 07:07:49 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50430	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	3481	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A47.178%2B02%3A00&epn.hit_timestamp_unix=1714028867178&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028863437-80-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=566&tfd=4914&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707
2024-04-25 07:07:49 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:49 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775952; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 06fc7fa5474b206c6a26701f2a88cc28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 4OOiybaFHDm5OW4eUeijVmGYKj-fN3zGwebZ6OXgBATmzYm7RPXOFw==
2024-04-25 07:07:49 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 38 30 33 34 35 36 36 34 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.171402881
2024-04-25 07:07:49 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 38 30 33 34 35 36 36 34 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%
2024-04-25 07:07:49 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 32 39 33 36 36 39 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;
2024-04-25 07:07:49 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 32 39 33 36 36 39 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2F
2024-04-25 07:07:49 UTC	1362	IN	Data Raw: 35 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 31 38 34 38 32 34 31 35 37 37 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 39 30 39 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 Data Ascii: 54bevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=1848241577&fst=1714028869092&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890
2024-04-25 07:07:49 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 30 35 33 31 35 33 36 36 36 26 66 73 74 3d 31 37 31 34 30 32 38 38 36 39 31 31 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2053153666&fst=1714028869110&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:07:49 UTC	298	IN	Data Raw: 31 32 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 32 41 6a 6e 58 51 33 5a 68 4a 6b 71 52 73 78 46 39 4c 36 49 45 25 32 42 6d 6c 31 76 35 25 32 42 33 30 43 7a 6a 58 46 4c 4c 56 71 35 6a 78 6d 76 4f 66 7a 4a 66 37 31 33 33 44 70 69 52 6e 48 25 32 46 4e 6e 6a 36 46 59 4f 6b 6f 78 55 74 62 5a 76 57 78 73 41 75 61 62 47 76 63 44 67 73 67 75 41 45 6a 32 71 70 50 35 38 77 42 43 61 41 4b 79 44 71 5a 34 6d 44 61 69 33 54 4d 52 73 62 25 32 42 63 6a 67 64 70 4b 79 41 74 76 43 55 6d 25 32 46 66 58 77 34 6e 72 44 4b 74 4c 6c 63 6e 79 7a 48 63 33 37 78 54 78 4e 63 39 69 49 25 32 46 48 4b 61 54 73 Data Ascii: 123event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=2AjnXQ3ZhJkqRsxF9L6IE%2Bml1v5%2B30CzjXFLLVq5jxmvOfzJf7133DpiRnH%2FNnj6FYOkoxUtbZvWxsAuabGvcDgsguAEj2qpP58wBCaAKyDqZ4mDai3TMRsb%2BcjgdpKyAtvCUm%2FfXw4nrDKtLlcnyzHc37xTxNc9iI%2FHKaTs
2024-04-25 07:07:49 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50432	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867177&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-80-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50428	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028867182 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:49 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: ER3PY7TZHWWXBC99GDGY Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:49 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50433	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1033	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867177&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-80-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:49 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:49 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:49 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50434	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	909	OUT	GET /rp.gif?ts=1714028867208&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:49 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50435	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	909	OUT	GET /rp.gif?ts=1714028867209&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:49 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50440	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028867236&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:49 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1287484909505689 Date: Thu, 25 Apr 2024 07:07:49 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:49 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50439	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028867237&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:49 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 7695198863420126 Date: Thu, 25 Apr 2024 07:07:49 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:49 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50441	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1618	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028867239 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:49 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:49 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1350255531912854 Date: Thu, 25 Apr 2024 07:07:49 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50413	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:48 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 31 64 35 61 38 36 36 64 34 38 32 63 62 34 31 33 63 64 38 65 39 66 34 32 39 64 31 65 37 36 66 30 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 36 36 33 38 37 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 Data Ascii: checksum=1d5a866d482cb413cd8e9f429d1e76f0&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028866387%2C%22event_id%22%3A21%2C%22session_id%22%3A1714028821782%2C%2
2024-04-25 07:07:49 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0144-3af5ced553de5f5423f5098b Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:49 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50444	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	662	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866542&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:49 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:49 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50446	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	721	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866615&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-39-833348100cc9&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50447	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	758	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028866615&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-39-833348100cc9&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:49 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:49 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.5	50422	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	1104	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFIAIoAzILCMqNu8ajwPI8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-25 07:07:49 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:48 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiEta3YpMDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:49 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50445	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 1DZG0JMMMZ0GG997D3Q2 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50448	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:48 UTC	2005	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpffh,pingTime:-10,time:1804,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028867271%7C%7Cf4080a98b11ee8844b0c7559b3207dba%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7Ca9e3cfbc40b6393edea9717e6461f5c7%7C%7C22c79cc47da40618e961095ff2eed1c4%7C%7Cf886e04793a587c0529b805c4913184f%7C%7C4f3dc33d6a4a34fd0f794ca8e80971b2%7C%7C38ca69c1b9e60d8b1e6d089bd86fb577%7C%7C1663701684,im:%7Bimprf:%7Bttecl:3941,ecd:746,tsecr:26%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt39.va.303net.net
2024-04-25 07:07:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50449	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	961	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeVX,pingTime:-6,time:606,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:606,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B47~0%5D,as:%5B47~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWersn+11%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:566%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt18.va.303net.net
2024-04-25 07:07:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50438	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867226 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50437	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867227 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50452	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1372	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpeW5,pingTime:-2,time:614,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:2379,bdZ:3860,beA:4971,beZ:4973,mfA:5529,cmA:5529,inA:5529,inZ:5531,prA:5531,prZ:5534,si:5536,poA:5548,poZ:5563,cmZ:5563,mfZ:5563,loA:5576,loZ:5579,ltA:5584,ltZ:5584,mdA:4973,mdZ:4973%7D%7D,sca:%7Bdfp:%7Bdf:2,sz:300.250,dom:img%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:565%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:614,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:565,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B55~0%5D,as:%5B55~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeq2L+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111%7C12112%7C1212,idMap:121.932f3184-a47e-225f-d172-3d75fdc4f6cf.16_2049676-79562501%7C1211,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:566,sinceFw:36,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt08.va.303net.net
2024-04-25 07:07:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50453	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	2534	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029767535&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:49 UTC	117	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 34 32 35 37 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":4257.399999999994,"tags":{"rating":"poor","page_group":"/pricing","country":"US"}}
2024-04-25 07:07:49 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Thu, 25 Apr 2024 07:07:49 GMT ETag: "37-f96FYjiin37AfI+suyI7DzInmwk" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Gt3tBiUPlVY1CgVw5ZwRYV_RNywQyX3nBb7msIgH5d5DI_fIiUa1WQ==
2024-04-25 07:07:49 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 34 32 35 37 2e 33 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"LCP","time":4257.399999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50454	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	981	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1947097447.1714028864&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50455	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	2244	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s1h.13.3.16
2024-04-25 07:07:49 UTC	605	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 11 Mar 2024 08:37:50 GMT Last-Modified: Fri, 08 Mar 2024 22:51:09 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 31240efd84da865ccb5c6adf215095b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nAA8LgELDSObhPVcNVfg02bi6mE0X4DNcKl0LX9Q4rL6dZEbP3dn6A== Age: 3882600
2024-04-25 07:07:49 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50456	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028867237&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:49 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 4822631555909007 Date: Thu, 25 Apr 2024 07:07:49 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:49 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50451	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:49 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:49 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50450	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19red.10.3.13; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:49 UTC	3458	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 31 33 37 30 62 62 30 37 2d 65 36 31 62 2d 34 38 37 31 2d 61 39 37 65 2d 35 33 31 34 36 34 39 32 33 30 31 34 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/?trk=NAV_pricing","eid":"1370bb07-e61b-4871-a97e-531464923014","tv":"js-3.23.0","tna":"co","aid
2024-04-25 07:07:49 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:49 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:49 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50461	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	709	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028867182 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:49 GMT x-amzn-RequestId: ac7c5990-c90f-44ce-b55c-01f0e19156c2 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 666d79e4c40246d6a13b80f4b926818a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: eg34iLqTvoZ53x5djx4IfdT3drUqtabpzmeYvp33a-XI8cU2FREfzQ==
2024-04-25 07:07:49 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50460	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	637	OUT	GET /_next/static/media/ActiefGrotesque-Bold.10832e10.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27440 Connection: close Date: Thu, 11 Apr 2024 10:55:33 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 11 Apr 2024 09:49:21 GMT ETag: "a618eb8ddd7af554656002bcfdecfe86" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 b98d9359af9bfef991c5b64e71032a66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: j9aCV8DPu3UcQIjO9kuJ5kMslL1p6jPHVITWc1mPA7qyJHvvY_k6vw== Age: 1195937
2024-04-25 07:07:49 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b 30 00 12 00 00 00 01 15 64 00 00 6a c4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 1c 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9d 34 81 f5 52 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 85 33 1b 23 fc 57 d0 db f6 48 d0 9d 00 95 68 6d eb 77 87 91 08 dd 0e 50 42 ba 1f 1c 19 c8 e3 00 a2 fb 3d 65 ff ff ff 9f 99 54 64 cc 34 9b 69 cb 00 1c c2 40 bd b7 82 e4 10 53 08 99 93 22 85 a9 cd 88 14 16 ac 6e db 06 37 93 c2 ac 0e a7 f1 34 2e bb 96 37 aa 8a 9d b7 69 87 4c 0b bc 8e 73 98 0d 0b 11 2e 67 5e ef e4 cb 75 74 33 ee 29 e9 2d 36 89 ea 2d b7 ba 77 0f c8 34 c8 25 e9 86 36 21 d0 d1 73 97 fd a8 6e 43 18 1f 32 17 99 d9 40 94 65 85 03 7a 90 2f 2e 31 Data Ascii: wOF2k0dj?FFTM4p`nrW4R&6$H \~3#WHhmwPB=eTd4i@S"n74.7iLs.g^ut3)-6-w4%6!snC2@ez/.1
2024-04-25 07:07:49 UTC	11808	IN	Data Raw: f2 3f 55 f0 42 c0 44 2e fd 7f 99 63 37 ea 27 0f fe 24 35 c0 a4 7e 49 23 4d 02 a4 25 76 1b b9 48 bb 0f 30 5c 8c e5 b8 05 ae 82 3d c4 72 64 c3 db db da 88 d9 36 93 db 67 31 aa 08 c3 07 df da c5 d2 f8 0b fd 11 8f 29 0f 90 99 6a b3 34 2a 39 76 8e 4a 7b 1d 94 94 10 31 00 0a 21 e3 0e 93 05 a3 4d 35 ab 6f 65 b0 22 38 ed 69 b2 d9 68 d3 d0 82 b3 4f 72 e5 ff 6a e0 56 c0 44 2c 7e f9 43 65 a7 bd c0 b5 a7 b9 b8 7f 7d 27 19 a4 5e 26 f5 6b 01 59 a5 d0 1a e0 31 ed 3a 6e b1 ce 50 c4 d5 b4 34 d4 c0 aa 07 31 c7 de d0 90 29 cd c7 0e c2 63 fb b4 3b 11 b1 c1 a3 39 fa 4c 25 2b 3c 0e 6a eb 5e db ad 0e 33 de e4 44 37 d8 bd a2 dd 66 94 75 4d a0 38 95 f7 ef 2b d4 fb 95 9b 0b be 3b 94 b1 9a b8 2e a6 3c ba fa 87 d5 a5 e0 8e 42 76 c7 ef cd d1 5b 37 c9 69 c1 93 5a cd 16 05 2d 78 46 b7 Data Ascii: ?UBD.c7'$5~I#M%vH0\=rd6g1)j4*9vJ{1!M5oe"8ihOrjVD,~Ce}'^&kY1:nP41)c;9L%+<j^3D7fuM8+;.<Bv[7iZ-xF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50458	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	639	OUT	GET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28644 Connection: close Date: Thu, 04 Jan 2024 07:16:46 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 04 Jan 2024 00:37:23 GMT ETag: "fbe81375a88b68a2a2d7ffc63e6a0d8d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UAfNgeoMUhfzOLOyzWJGVFRwZ-C8T_4AnehgPLGvwYwutK_WYEXVQQ== Age: 9676264
2024-04-25 07:07:49 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f e4 00 12 00 00 00 01 16 3c 00 00 6f 79 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 3a 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 54 81 f7 5f 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 84 4a 1b e5 fc 37 64 6e 4e 78 27 28 a8 9d 80 aa c8 ea f6 62 69 c0 1d 86 8d 03 06 f3 3e 65 64 20 8f 03 28 f5 ff 95 fd ff ff 27 26 13 39 2c 77 b5 4b d2 16 0a e3 7f 9b 89 c9 04 2e 73 90 4b 11 90 e9 b5 39 b4 ae 98 13 9a a8 50 26 ba cc 6b b0 d5 fa bc a5 75 6f 30 76 c8 40 87 d5 0f 38 21 62 5b 57 bb 54 2b ce 20 22 78 c3 10 de e5 83 6a c2 99 af d8 41 a9 d3 4e 8c c7 c4 ce 9d f5 7d f2 c3 fe 4a 9b 89 c9 f4 2a ff 5b 9a 3a 64 b0 4d c5 9f 74 3a 44 87 42 d0 f1 d3 76 Data Ascii: wOF2o<oy?FFTM4:p`nrWT_&6$H \~J7dnNx'(bi>ed ('&9,wK.sK9P&kuo0v@8!b[WT+ "xjAN}J*[:dMt:DBv
2024-04-25 07:07:49 UTC	13012	IN	Data Raw: db aa 38 a2 f3 f4 78 2b 00 22 35 2b 2b 54 de a2 c7 b9 d8 84 15 ef eb d2 fa 01 08 8c dc fe fc ba 97 9b 82 3b 38 7c 1c b5 63 8f 37 bb a4 9c d0 6a 9e 40 03 f6 69 13 fc 25 0f 75 a8 cc b9 12 5f 8a b4 fe ca b7 7c 09 1c 9f fb ca 10 c6 a7 57 9b c2 b5 76 3c e0 eb 74 40 85 5e dc 0a 06 0f 23 ff f2 13 3a e6 f5 2a 84 eb 0f 3c 7d 0d 87 dd 96 a6 de ad 1e a7 4e 7f f8 d3 52 f3 52 1b 2c e0 9c 40 18 9d 56 5b 12 18 d6 3a 18 2b 26 b8 77 69 b6 0f 90 c7 15 2b a0 fb 2a fa 13 91 61 c7 41 ee b4 d8 2c 97 15 de ba aa 9a 01 83 c1 a0 81 dc d7 77 6a 98 14 7d e7 25 7e 97 52 f9 b8 63 75 8d c1 65 70 d5 76 ae 86 fd 60 eb 5c 53 6b 70 1b dc 35 1d 6b 60 87 ae 55 64 54 40 ee 3f 60 db b1 18 3b db 65 b4 1a 54 1a 93 d1 00 7f b2 19 33 be 2e 42 29 a3 19 0b 31 98 ae 4c 41 5e de 7d 2c e8 ab 79 28 fe Data Ascii: 8x+"5++T;8\|c7j@i%u_\|Wv<t@^#:<}NRR,@V[:+&wi+aA,wj}%~Rcuepv`\Skp5k`UdT@?`;eT3.B)1LA^},y(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50459	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	636	OUT	GET /_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 30776 Connection: close Date: Mon, 12 Feb 2024 08:51:51 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Feb 2024 08:28:20 GMT ETag: "3e43992e4e2c4420a860c2dced8cc368" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 a39699152176bddffd29fe58063d838a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d8APUoi9X6zyL_E_gpFYDL9dZ9aSyiRLdmRIjBOurEzDHNxNnZZcRA== Age: 6300959
2024-04-25 07:07:49 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 78 38 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 67 f0 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 68 0c 00 00 0b 72 00 00 33 76 05 d1 ac b7 47 53 55 42 00 00 73 80 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 59 00 00 00 60 87 fb 63 ae 63 6d 61 70 00 00 05 ec 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 90 00 00 01 74 00 00 0b f2 4f c3 2d 95 66 70 67 6d 00 00 07 c4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 67 e4 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 20 00 00 53 85 00 00 90 94 30 39 ec 9c 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 8c 43 9a 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFx8<GDEFgo]GPOShr3vGSUBs8-jQOS/2Y`ccmap;<cvt tO-fpgm06gaspgglyf S09head66Chhea
2024-04-25 07:07:49 UTC	15143	IN	Data Raw: ce 67 e9 45 55 56 82 c8 44 3f 52 98 cf 92 a6 86 85 4f df af ed 01 95 5b 8f 55 55 ce b6 9b 5c b3 44 6e 6f 8d b5 e2 53 e8 4d da 4c 91 12 87 66 18 b4 05 eb ca d5 1a 0e 15 32 2d 70 8b 02 f7 d3 06 2e dd 09 b8 ee 0b e0 96 af 86 79 97 28 b0 9f 02 25 22 77 f0 79 c7 68 1b ba 9b c8 64 18 d4 ef 2e 33 66 59 35 ab dd a6 98 88 4d a1 65 d8 cb 10 54 80 92 d0 46 3d e8 0f 1e da 7d e4 c8 ee 87 e0 47 7c c5 51 f6 d3 d1 23 ec 47 84 24 fa e4 af d0 27 9b 10 8b ad 95 a9 05 0c 67 33 e5 98 29 9f 98 89 46 14 27 0a 9b 6c 01 39 3f e3 b0 db e8 a9 ff 4e ff 59 16 1b a4 3f 79 d9 23 c4 25 b1 11 b1 70 11 1e ac d0 6c 41 b1 a8 1d fe d0 db 7b fa 98 a8 f8 aa 6d 03 9b 06 87 46 a9 ae 78 d7 d0 95 85 d1 4d 5f 29 4f 5d bd 3f bf be a3 ff ea fd f1 4b fb 8e ce b3 13 9d df d1 79 59 df 3b ae 65 bf 0c 05 Data Ascii: gEUVD?RO[UU\DnoSMLf2-p.y(%"wyhd.3fY5MeTF=}G\|Q#G$'g3)F'l9?NY?y#%plA{mFxM_)O]?KyY;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50457	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	635	OUT	GET /_next/static/media/GT-Super-WT-Regular.20d77fe0.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43796 Connection: close Date: Thu, 07 Mar 2024 09:31:46 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 06 Mar 2024 22:56:15 GMT ETag: "5321545e6fd1cec2eb1ee4b745f450a1" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ut-4LjrqbRGrwLCEJfUY2nMJDlX2e0BBTp7EjuKVXHaoFQ2gVSXmNA== Age: 4224964
2024-04-25 07:07:49 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 ab 14 00 12 00 00 00 01 74 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 ab 0c 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8a 00 00 00 b8 18 df 1f 89 47 50 4f 53 00 00 02 20 00 00 16 21 00 00 36 ac ea 09 31 e8 47 53 55 42 00 00 18 44 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1e 00 00 00 00 4e 00 00 00 60 68 79 81 ab 63 6d 61 70 00 00 1e 50 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a3 8c 00 00 00 29 00 00 00 34 0b ae 02 e0 66 70 67 6d 00 00 a3 b8 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a3 84 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 68 00 00 73 d1 00 01 00 2a fd a7 0a f0 68 65 61 64 00 00 95 3c 00 00 00 Data Ascii: wOFFtDSIGGDEFGPOS !61GSUBD^_OS/2N`hycmapPh=jccvt )4fpgm6gaspglyf!hs*head<
2024-04-25 07:07:49 UTC	16384	IN	Data Raw: 81 91 29 cb 64 2a 82 c8 ed 79 43 69 43 65 93 5f 0f b5 14 30 6c 10 64 77 c1 25 39 4a ef b0 b7 f5 58 c3 88 c3 30 63 0b 23 5a ad d6 42 6b 5e 30 d6 76 08 23 62 93 12 87 6e e0 69 f5 ff 9a 88 3c 11 69 fb ff 3e 11 81 18 ea 00 e4 76 9e 87 35 61 11 ae ee 85 32 e2 f6 89 1c d2 97 4f 94 f5 9d 12 c3 db 27 4c d7 ed 13 45 40 fc 19 47 ba 35 30 95 cf 75 31 d4 68 46 c5 96 5b d5 32 4b 73 88 54 6b 0a 67 35 5d 6f c9 58 12 95 8b 40 b4 2e b7 e2 f8 1f b9 ea 55 cd 83 55 72 7b ae 3f bf f9 ca 2b af 7c e5 26 fa 74 9a 4c 2d 95 eb 97 5f be ff f0 e1 29 42 a6 0e 1f de ff b0 ab eb a7 95 fa e7 b7 6f 7f cc 63 6e 6f 23 d6 ff db 15 2f 3b 71 e2 65 57 fc 72 ff 85 b9 62 a2 ff 91 b3 ee d7 ff c7 c3 bd fe 07 d3 b5 43 4f 44 af 79 f3 2b 5e f1 66 18 ea c4 9e 21 7d 66 1e d6 e0 f5 b6 8b cc 3b e5 c3 cc Data Ascii: )d*yCiCe_0ldw%9JX0c#ZBk^0v#bni<i>v5a2O'LE@G50u1hF[2KsTkg5]oX@.UUr{?+\|&tL-_)Bocno#/;qeWrbCODy+^f!}f;
2024-04-25 07:07:49 UTC	11028	IN	Data Raw: 6a 3b d8 a7 08 fb 35 84 80 08 94 76 ed 75 57 9b 2b bc 83 fa 0b 4c 8c 57 87 07 fa bb bb da db 5c 71 99 6a 49 8b b6 99 38 ba 48 30 79 d7 93 4e e4 02 05 c9 3b 54 41 d5 40 c0 b6 d9 96 de 83 17 c9 ac 5f d9 d2 bb 38 31 55 e1 d5 94 98 2d be d2 c5 92 8c e4 72 5b 39 61 55 ba ee a6 32 ad 0c c3 2c 72 bb 0d 41 d7 9d 15 38 ca 7e 11 75 d3 06 91 08 44 b8 53 8f 3a 23 02 ea e0 b8 49 e2 c7 f1 1d ec 13 c9 7e 2d a5 0e 92 f9 e1 a1 5e fa 84 85 5c 9d 97 12 66 6d 6b 33 a1 b3 3e 75 bc 17 d3 e3 2d aa 38 5a 4b 93 b9 96 81 3d 1b 4a 4c 32 fd 87 2d bd 5b 25 84 2a a2 9a 13 c3 5f 56 e4 15 c9 65 96 64 0a f0 b8 6c 61 86 63 57 f5 c0 91 ea 55 49 44 c9 80 3a 2c 97 d2 7a 8d 41 2f cc a6 50 9a 06 0d 9d 65 1a 60 ce 81 2c 50 f8 b8 6c 3f d6 13 81 1a 0a 75 74 0a ea f4 c7 4d 48 2b 18 96 e9 87 81 6d Data Ascii: j;5vuW+LW\qjI8H0yN;TA@_81U-r[9aU2,rA8~uDS:#I~-^\fmk3>u-8ZK=JL2-[%*_VedlacWUID:,zA/Pe`,Pl?utMH+m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50465	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1482	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9933458064097952483"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0x4389867689495236","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x2e8ea822c474c815","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x22936330dee76c4e","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x26cd48fe22054401","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9933458064097952483","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"9933458064097952483","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"9933458064097952483","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"9933458064097952483","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:49 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50463	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1377	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	1171	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50464	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1475	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13784299293109445252"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13784299293109445252","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13784299293109445252","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13784299293109445252","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13784299293109445252","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:49 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50462	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1375	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	1169	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50467	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1436	OUT	GET /pagead/viewthroughconversion/778938880/?random=2053153666&fst=1714028869110&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:49 UTC	1304	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=2053153666&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqaNCFGJtcAyiUhPtgux0TUrXcEFFJSJ5JNkxt8guVPt0ZEcZz&random=2495825286 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50471	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028867905&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:49 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:49 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZWazI5M2VNL0xiVTNGM0Uxa0pMOEJCek1MdUJwZC9ScGdnUU1COEhMSkphaGgrcDFXSUlsVldHdmJyeEN3b1lPRjcvNVU4aDl6TDRjR3FsSkQvSzFVSHF3Q1VvelZvK3c4SHBKL1ZDTXBncz0ma2xvUnUvUUtiK3dBRlQ5OEhrN3VwYlEzaW04PQ=="; Expires=Fri, 25 Apr 2025 07:07:49 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5025019507748661 Date: Thu, 25 Apr 2024 07:07:49 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50470	104.26.1.90	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	753	OUT	GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __bm2_69fedb94-2da9-4476-8471-3e50cc4d4c3c=3%7C2%7C240425070748%7C0%7C%7C%7Cb6c16f0b45ad4f239eab5427c0ff96cc_2_7%7C- If-Modified-Since: Thu, 25 Apr 2024 06:07:47 GMT
2024-04-25 07:07:50 UTC	702	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:49 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: EXPIRED Last-Modified: Thu, 25 Apr 2024 06:07:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uyROIiwNQYhZiRYYJs6%2B0YYszxUrHE%2BkSNyJeFtGsFWlPA5sqYCPZ2D38Ybxtq6jhUTwdQtYo9zT82V59HorPcIHwDaCqLmQoeQP4I7QruMi1Z9GfPccMwgcv4%2FjrpBPjbAPwHH4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c7f941837139a-ATL
2024-04-25 07:07:50 UTC	667	IN	Data Raw: 31 32 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 72 61 6e 64 6d 65 74 72 69 63 73 2c 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e Data Ascii: 12de"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 65 2c 6f 28 29 7d 29 3b 65 6c 73 65 20 69 66 28 21 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 7b 68 61 73 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 69 73 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 7d 2c 6f 28 29 7d 7d 29 29 3a 6f 28 29 7d 2c 6c 2e 72 65 67 69 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function(){return!0}},o()}})):o()},l.register=function(
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 6d 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 32 33 29 29 28 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 63 6f 6e 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 68 61 6e 64 6c 65 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 3a 20 22 2b 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 74 79 70 65 29 7d 65 2e 63 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 61 28 74 2c 6e 29 3a 73 28 21 31 2c 74 2c 6e 29 7d 29 7d 65 6c 73 65 20 61 28 74 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 5f 62 72 61 6e 64 6d 65 74 72 69 63 73 5f 63 6f 6e 73 65 6e 74 29 73 28 21 30 2c 65 2c 74 29 3b 65 6c 73 65 7b 76 61 Data Ascii: m":e=new(l.getModule(23))(t.consentMode.conf);break;default:throw new Error("Cannot handle consent type: "+t.consentMode.type)}e.check(function(e){e?a(t,n):s(!1,t,n)})}else a(t,n)},a=function(e,t){if(void 0===window._brandmetrics_consent)s(!0,e,t);else{va
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 2e 62 6f 64 79 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 2c 73 3d 74 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 73 5b 61 5d 3b 69 7c 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 63 29 7d 76 61 72 20 64 3d 6f 26 26 6f 2e 73 65 61 72 63 68 26 26 2d 31 21 3d 3d 6f 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 62 6d 5f 64 22 29 2c 75 3d 72 26 26 30 3c 72 2e 6c 65 6e 67 74 68 3f 72 3a 5b 6f 2e 68 72 65 66 5d 2c 6c 3d 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 2c 70 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 70 2e 68 72 65 66 3d 6c 3b 76 61 72 20 66 3d 70 2e 68 6f 73 74 2c 77 3d 22 3f 73 69 64 3d 22 2b 65 2e 73 69 74 65 49 64 2b 22 26 74 6f 70 6c 6f 63 3d 22 Data Ascii: cestorOrigins;if(n.body){for(var i=0,a=0,s=t;a<s.length;a++){var c=s[a];i\|=Math.pow(2,c)}var d=o&&o.search&&-1!==o.search.indexOf("bm_d"),u=r&&0<r.length?r:[o.href],l=u[u.length-1],p=n.createElement("a");p.href=l;var f=p.host,w="?sid="+e.siteId+"&toploc="
2024-04-25 07:07:50 UTC	64	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 54 79 70 65 3a 20 30 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a Data Ascii: scriptType: 0, });
2024-04-25 07:07:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50472	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	2390	OUT	GET /_set_cookie?val=2AjnXQ3ZhJkqRsxF9L6IE%2Bml1v5%2B30CzjXFLLVq5jxmvOfzJf7133DpiRnH%2FNnj6FYOkoxUtbZvWxsAuabGvcDgsguAEj2qpP58wBCaAKyDqZ4mDai3TMRsb%2BcjgdpKyAtvCUm%2FfXw4nrDKtLlcnyzHc37xTxNc9iI%2FHKaTsC%2FVrGLJ0d%2FdwMt%2Bpw9zEC9ur9mc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17
2024-04-25 07:07:49 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:49 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 527a731e9bbbfd3b9c3a4fec3926b8c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 4P40xDdNXBwfBiQCr16v2p4YrlNoqmKY5noBLGzLayLZX1HNnezooQ==
2024-04-25 07:07:49 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50473	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	898	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714527233754 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029765719
2024-04-25 07:07:49 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 13b997816399b1e7b7a613f5d44b712a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: FE5_slh88z3EN_qBl6b_1xAXw2ISCSP1-iXJNuwuqTSouHiXedms_g== Age: 74845
2024-04-25 07:07:49 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50468	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	2191	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028867.0.0.988032707; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028851199\|3\|1\|bat.bing.com/p/insights/c/a; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17
2024-04-25 07:07:49 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-23868141-bd48-45de-a476-ac29f1c40d92","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:07:50 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:50 GMT ETag: W/"4475-QdnTFvHyElttAbTvjDuCD8yw5ro" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17525 Connection: Close
2024-04-25 07:07:50 UTC	16001	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 30 31 33 39 35 37 31 33 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 32 35 34 33 35 31 31 38 2c 22 66 6c 69 67 68 74 49 64 22 3a 34 39 30 34 30 38 34 34 38 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 34 38 39 38 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 34 31 34 30 30 36 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 45 30 4d 44 41 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 30 Data Ascii: {"creatives":[{"adId":501395713,"creativeId":325435118,"flightId":490408448,"campaignId":288248980,"advertiserId":2414006,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyNDE0MDA2LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODI0
2024-04-25 07:07:50 UTC	1524	IN	Data Raw: 39 30 34 30 38 34 34 38 26 63 70 5f 63 72 65 61 74 69 76 65 49 64 3d 35 30 31 33 39 35 37 31 33 26 63 74 3d 55 53 26 61 3d 31 39 39 30 37 31 26 63 75 73 74 6f 6d 4d 6f 64 65 6c 3d 77 65 74 72 61 6e 73 66 65 72 26 6c 70 5f 66 6f 72 6d 61 74 3d 70 72 65 6d 69 75 6d 26 63 70 5f 63 72 65 61 74 69 76 65 54 79 70 65 3d 42 61 73 65 5f 5f 56 69 64 65 6f 5f 5f 49 6e 74 72 6f 5f 76 69 64 65 6f 27 3e 3c 2f 73 63 72 69 70 74 3e 22 5d 2c 22 69 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 69 2e 67 69 66 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 45 30 4d 44 41 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 Data Ascii: 90408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video'></script>"],"impressionTrackers":["https://donny.wetransfer.com/i.gif?e=eyJ2IjoiMS4xMSIsImF2IjoyNDE0MDA2LCJhdCI6OTU5LCJidCI6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50478	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028868178&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETjJGMGNQTHU4Y204VUpsU1Y1Wk9Mb3NUTWVoOXIyWVBGbHk3QjV4SThBWi9MbmJxSzRSbFB6RDJXaFJ1dElmMU1ibHIzY3A2c2VpSjMzeTZLdkJjTVp6MVB6M1RLWGwwUENOMmY4bDY1VT0mR1g0TEdWY3RKOVhCc25SNVBnY24vZHRlZlR3PQ=="
2024-04-25 07:07:50 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:50 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="; Expires=Fri, 25 Apr 2025 07:07:50 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 8692691804770641 Date: Thu, 25 Apr 2024 07:07:50 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:50 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50469	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:49 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 6495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:49 UTC	6495	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 38 34 65 35 33 62 61 39 35 66 66 39 30 66 63 61 61 32 35 32 31 31 66 36 35 61 37 63 36 31 31 36 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 36 37 30 32 30 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 Data Ascii: checksum=84e53ba95ff90fcaa25211f65a7c6116&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028867020%2C%22event_id%22%3A31%2C%22session_id%22%3A1714028821782%2C%2
2024-04-25 07:07:50 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0146-1bf9c2ba76da0fc144d34a8a Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:50 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50479	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	1124	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiEta3YpMDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:07:50 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:50 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:07:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiEvf_ipMDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:07:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:07:50 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50476	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867226 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:50 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 31 32 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"12","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-25 07:07:50 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:50 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:50 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:50 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50477	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867227 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:50 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 31 32 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"12","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-25 07:07:50 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:50 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:07:50 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:50 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50481	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	1356	OUT	GET /pagead/1p-user-list/778938880/?random=2053153666&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqaNCFGJtcAyiUhPtgux0TUrXcEFFJSJ5JNkxt8guVPt0ZEcZz&random=2495825286 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50480	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	2430	OUT	GET /pagead/viewthroughconversion/614409984/?random=982947201&fst=1714028869092&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A47.178%2B02%3A00%3Bhit_timestamp_unix%3D1714028867178%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1714028863437-80-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0Is9pvJ_u8UZj7QhkMCoziRdcoI-UFHCc&pscrd=COfmouCmntbJugEiEwjUlKaP59yFAxVC1JQJHeciC-kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:50 UTC	2244	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/614409984/?random=982947201&fst=1714028869092&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A47.178%2B02%3A00%3Bhit_timestamp_unix%3D1714028867178%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1714028863437-80-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=COfmouCmntbJugEiEwjUlKaP59yFAxVC1JQJHeciC-kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqYRsGdWE_y5tun3d5CFqo740rV3bleZ6Y0RDiebHlfC9T9dzc&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0eU2ucdthXls2Wxdr9kV8Gp4l96iFWhTQ&random=1578064393 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50484	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	1209	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50485	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	1207	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50483	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	956	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028868631&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=4&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-110-833348100cc9&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50482	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	1066	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028868631&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=4&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-110-833348100cc9&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:50 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:50 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:07:50 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:07:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50487	104.26.1.90	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	790	OUT	GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __bm2_69fedb94-2da9-4476-8471-3e50cc4d4c3c=3%7C2%7C240425070748%7C0%7C%7C%7Cb6c16f0b45ad4f239eab5427c0ff96cc_2_7%7C- If-Modified-Since: Thu, 25 Apr 2024 06:07:41 GMT
2024-04-25 07:07:50 UTC	706	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:50 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: EXPIRED Last-Modified: Thu, 25 Apr 2024 06:07:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5UEnZLK0USjmA8Wlr8ZeYOTPZKS%2BSj89%2F7DNlM0ketC5cuENmGJLMkJJC4%2BwmI5hlNAhRqffgr%2FxyK7bBNo8iaIorbKhmYBBx28Mkk7OZ3fRv5ocU2ZrfKsdBRTyo2RJQj%2Fx5HLY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c7f990a39137f-ATL
2024-04-25 07:07:50 UTC	663	IN	Data Raw: 37 63 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 66 2c 75 2c 79 2c 77 2c 61 2c 63 2c 62 3d 21 31 2c 72 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 66 3d 65 2c 61 3d 6f 2c 77 3d 72 2c 6d 3d 74 2c 75 3d 69 29 79 3d 75 2e 73 74 6f 72 61 67 65 3b 65 6c 73 65 20 69 66 28 22 6c 73 22 3d 3d 3d 65 2e 73 74 6f 72 61 67 65 29 74 72 79 7b 79 3d 6e 65 77 28 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 35 29 29 28 66 2c 6d 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 79 3d 76 6f 69 64 20 30 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7cde"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function()
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 72 29 7d 2c 75 3d 7b 6d 69 64 3a 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6d 69 64 2c 62 69 64 3a 6f 2e 62 69 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 61 75 74 6f 52 65 6e 64 65 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 75 74 6f 52 65 6e 64 65 72 7c 7c 6f 2e 61 75 74 6f 52 65 6e 64 65 72 2c 66 6f 72 63 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 66 6f 72 63 65 26 26 6f 2e 66 6f 72 63 65 2c 69 73 54 65 73 74 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 69 73 54 65 73 74 26 26 6f 2e 69 73 54 65 73 74 2c 64 74 4e 61 6d 65 3a 6f 2e 64 74 4e 61 6d 65 7d 2c 65 3d 21 31 2c 74 3d 5b 5d 3b 69 66 28 22 6e 6f 6e 65 22 21 3d 3d 66 2e 73 74 6f 72 61 67 65 26 26 79 29 7b 76 61 72 20 Data Ascii: &&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dtName},e=!1,t=[];if("none"!==f.storage&&y){var
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 20 30 3d 3d 3d 65 2e 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 29 3b 69 66 28 61 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 28 65 29 3b 72 65 74 75 72 6e 20 72 5b 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 5d 3d 74 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 61 6e 64 6d 65 74 72 69 63 73 3a 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 72 65 61 74 69 6e 67 20 73 75 72 76 65 79 73 2e 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 6e 61 6d 65 7c 7c 76 6f 69 64 20 30 Data Ascii: 0===e.displayOption)throw new Error("");if(a){var t=a.create(e);return r[e.measurementId]=t}throw new Error("brandmetrics: This configuration does not support creating surveys.")},e.prototype.addMetadata=function(e){if(void 0===e\|\|void 0===e.name\|\|void 0
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 73 74 6f 70 28 29 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2e 73 74 6f 70 28 29 7d 2c 65 7d 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 72 65 67 69 73 74 65 72 28 7b 69 64 3a 30 2c 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 69 2c 61 2c 6e 29 7b 76 61 72 20 73 3d 6e 65 77 20 76 28 65 2c 74 2c 72 2c 6f 2c 69 29 2c 64 3d 7b 62 6d 3a 73 2c 63 6f 6c 6c 65 63 74 69 6f 6e 3a 75 2c 6f 70 74 69 6f 6e 73 3a 65 2c 75 74 69 6c 73 3a 74 2c 63 6c 69 65 6e 74 3a 72 2c 73 74 6f 72 61 67 65 3a 79 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 73 29 2c 6d 2e 65 6d 69 74 28 22 72 65 61 64 79 22 2c 7b 61 70 69 Data Ascii: e.stop=function(){void 0!==u&&u.stop(),void 0!==m&&m.stop()},e}();window.brandmetrics.register({id:0,ctor:function(e,t,r,o,i,a,n){var s=new v(e,t,r,o,i),d={bm:s,collection:u,options:e,utils:t,client:r,storage:y,callback:function(){n(s),m.emit("ready",{api
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 72 63 65 3d 65 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6e 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 74 68 69 73 2e 6f 6e 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 72 2c 74 68 69 73 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 31 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 7d 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6f 7c 7c 21 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 32 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 7d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 Data Ascii: rce=e.source,this.element=n,this.measurements=i,this.onPropertyChange=r,this.type){case 0:this.threshold=1e3,this.props={inview:o\|\|!1},this.active=o\|\|!1;break;case 1:this.threshold=2e3,this.props={inview:o\|\|!1,playing:!1};break;default:throw new Error("br
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 29 2c 76 6f 69 64 20 30 21 3d 3d 66 26 26 28 6c 3d 30 3d 3d 3d 28 64 3d 66 29 2e 73 74 61 74 65 3f 31 32 3a 31 33 2c 64 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 70 6f 73 74 45 76 65 6e 74 28 6c 2c 65 2e 69 64 2c 76 6f 69 64 20 30 2c 7b 70 69 64 3a 64 2e 69 64 7d 29 7d 29 2c 78 28 30 2c 64 29 2c 30 3d 3d 3d 28 65 2e 69 6e 76 69 65 77 48 61 6e 64 6c 69 6e 67 7c 7c 30 29 29 29 69 66 28 66 2e 65 6c 65 6d 65 6e 74 26 26 67 29 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 6f 62 73 65 72 76 65 28 66 2e 65 6c 65 6d 65 6e 74 29 3b 65 6c 73 65 20 69 66 28 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 79 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e Data Ascii: ),void 0!==f&&(l=0===(d=f).state?12:13,d.measurements.forEach(function(e){w.postEvent(l,e.id,void 0,{pid:d.id})}),x(0,d),0===(e.inviewHandling\|\|0)))if(f.element&&g)null==g\|\|g.observe(f.element);else if("always"!==(null===(o=y.inview)\|\|void 0===o?void 0:o.
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 28 74 29 7b 69 2e 65 6c 65 6d 65 6e 74 26 26 28 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 75 6e 4f 62 73 65 72 76 65 28 69 2e 65 6c 65 6d 65 6e 74 29 29 3b 76 61 72 20 65 3d 45 2e 69 6e 64 65 78 4f 66 28 69 29 3b 2d 31 21 3d 3d 65 26 26 28 45 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 78 28 30 2c 69 29 29 7d 7d 29 2c 69 26 26 66 28 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 45 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 31 3d 3d 3d 74 2e 73 74 61 74 65 26 26 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 70 75 73 68 28 7b 6d 69 64 3a 65 2e 69 64 2c 75 69 64 3a 74 2e 69 64 2c 73 74 61 72 74 3a 74 2e 73 74 61 72 74 2c 6c 61 73 74 3a 74 2e 6c 61 74 65 73 74 Data Ascii: (t){i.element&&(null==g\|\|g.unObserve(i.element));var e=E.indexOf(i);-1!==e&&(E.splice(e,1),x(0,i))}}),i&&f()},f=function(){var i=[];E.forEach(function(t){1===t.state&&t.measurements.forEach(function(e){i.push({mid:e.id,uid:t.id,start:t.start,last:t.latest
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 65 33 3c 72 2e 61 67 65 28 29 29 26 26 53 28 5b 72 5d 2c 21 30 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 73 77 69 74 63 68 28 74 2e 73 6f 75 72 63 65 29 7b 63 61 73 65 22 61 70 6e 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 70 74 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 62 6a 22 3a 69 3d 5b 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 74 76 22 3a 63 61 73 65 22 61 70 69 22 3a 63 61 73 65 22 73 6c 6f 74 22 3a 69 3d 5b 22 6b 65 79 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 64 22 3a 69 3d 5b 22 70 69 64 22 5d 3b 62 72 65 61 Data Ascii: e3<r.age())&&S([r],!0)},P=function(t,e){var i;if(void 0===e)switch(t.source){case"apn":i=["creativeId"];break;case"gpt":i=["creativeId","lineItemId"];break;case"pbj":i=["dealId"];break;case"ntv":case"api":case"slot":i=["key"];break;case"id":i=["pid"];brea
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 2c 72 2c 6e 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 2c 6b 3d 6e 2c 79 3d 65 2c 77 3d 74 2c 73 3d 72 2c 62 3d 69 3b 76 61 72 20 61 3d 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 32 37 29 3b 61 26 26 28 63 3d 6e 65 77 20 61 29 2c 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 26 26 28 67 3d 54 28 7b 63 6f 6c 6c 65 63 74 69 6f 6e 3a 74 68 69 73 2c 63 61 6c 6c 62 61 63 6b 3a 4d 2c 75 74 69 6c 73 3a 69 7d 29 29 2c 62 2e 6f 6e 28 7b 65 76 65 6e 74 3a 22 70 61 67 65 73 74 61 74 75 73 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 28 65 29 7d 7d 29 7d 72 65 74 75 72 Data Ascii: ,r,n){var o;this.storage=n,k=n,y=e,w=t,s=r,b=i;var a=brandmetrics.getModule(27);a&&(c=new a),"always"!==(null===(o=e.inview)\|\|void 0===o?void 0:o.type)&&(g=T({collection:this,callback:M,utils:i})),b.on({event:"pagestatus",handler:function(e){C(e)}})}retur
2024-04-25 07:07:50 UTC	1369	IN	Data Raw: 75 70 64 61 74 65 50 72 6f 70 65 72 74 69 65 73 28 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 45 78 70 6f 73 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 61 28 65 29 29 2c 74 7c 7c 28 74 3d 41 28 68 28 65 29 29 29 2c 74 26 26 53 28 5b 74 5d 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 73 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 74 5d 3b 72 2e 67 65 74 54 79 70 65 28 29 3d 3d 3d 65 2e 74 79 70 65 26 26 72 2e 74 72 69 67 67 65 72 28 65 2e 64 61 74 61 29 7d 7d 2c 65 7d 28 29 3b 77 69 6e 64 Data Ascii: updateProperties(t)},e.prototype.endExposure=function(e){var t;"string"==typeof e&&(t=a(e)),t\|\|(t=A(h(e))),t&&S([t],!0)},e.prototype.triggerListener=function(e){for(var t=0,i=s;t<i.length;t++){var r=i[t];r.getType()===e.type&&r.trigger(e.data)}},e}();wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50489	142.251.15.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:50 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:50 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50488	142.250.9.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:50 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:07:50 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:50 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.5	50490	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	918	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715020673250 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029765719
2024-04-25 07:07:51 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e8d74960ca5d3f00a4ef81d4d406cc44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: aviyi_vN89cUyMmgBLqpdDm8hATTLUHwL8flhlq6oTudWGcxOMk_Bw== Age: 74847
2024-04-25 07:07:51 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.5	50491	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:50 UTC	934	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714527233754 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029765719 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-25 07:07:51 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Apr 2024 07:07:50 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "56b11dee72df8e44c1e72bfd66e237ab" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 672219a79c747e96501b7ae4734b91c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: f4H8I-3ri-NIgj7M5craafC6GiRaHY8c9hClBrsiPQ8Pqf9CKBeQ-w== Age: 58760

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.5	50492	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	2351	OUT	GET /pagead/1p-conversion/614409984/?random=982947201&fst=1714028869092&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A47.178%2B02%3A00%3Bhit_timestamp_unix%3D1714028867178%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1714028863437-80-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=COfmouCmntbJugEiEwjUlKaP59yFAxVC1JQJHeciC-kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqYRsGdWE_y5tun3d5CFqo740rV3bleZ6Y0RDiebHlfC9T9dzc&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0eU2ucdthXls2Wxdr9kV8Gp4l96iFWhTQ&random=1578064393 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:51 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.5	50495	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	934	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715020673250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029769631
2024-04-25 07:07:51 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Apr 2024 07:07:51 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "56b11dee72df8e44c1e72bfd66e237ab" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 6f561463939d6e30f7f05f56434aab9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: YccV8lbA9VZ0ivfMIz6VinzFMTlL4XHWao0GoxV1wSa4I6-UyRZJAQ== Age: 58761

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.5	50496	3.161.136.118	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	1167	OUT	GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=1974054397981808794&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D56c8a119-fb2e-40a6-a39d-fe9224591ce0%253A1714028868.423623%26pid%3D500040%26it%3D1%26iv%3D56c8a119-fb2e-40a6-a39d-fe9224591ce0%253A1714028868.423623%26_%3D1714028868.4256136 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiNTZjOGExMTktZmIyZS00MGE2LWEzOWQtZmU5MjI0NTkxY2UwOjE3MTQwMjg4NjguNDIzNjIzIn0.ZioBRA.RsfepiZ0hLlSTF16WS2p2jQ0xyA
2024-04-25 07:07:51 UTC	1067	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 647 Connection: close Date: Thu, 25 Apr 2024 07:07:51 GMT Location: https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028868.423623&pid=500040&it=1&iv=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028868.423623&_=1714028868.4256136 Set-Cookie: zync-uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623; Domain=rezync.com; Expires=Tue, 20 May 2025 07:07:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=.eJwNylEOgyAMANC79FsWCgVaLmMY1oRsukX0Z8a7z8-XvBPGr25LWXXdIe_boQPUd7vVIZ_Q22_RF2RASWQDeUnCyJaTEFwDdO29fdaxTfcJsXJBFDM_nRqyJZriZTKzinMUBKvajAnJOubID3I-Og_XH5OHJXs.ZioBRw.b835FY_BnbBGacGCo8l3WZDIemc; Expires=Tue, 20 May 2025 07:07:51 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 81dbe3b168a4906b9d2a81f1efc12c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: 1is08kT0guSK7WCEIH_ngmCGiGVJT7_HrKnDiWCKZWyTyFsiOdeDAg==
2024-04-25 07:07:51 UTC	647	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 35 36 34 30 39 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 35 36 63 38 61 31 31 39 2d 66 62 32 65 2d 34 30 61 36 2d 61 33 39 64 2d 66 65 39 32 32 34 35 39 31 63 65 30 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.5	50497	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	821	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:51 UTC	523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2878 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT Last-Modified: Mon, 04 Dec 2023 15:02:16 GMT ETag: "d933e71c9b455e50be41e0c02ad72eec" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 aff20911eaac3f22b90f4012f7ae5d7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: Xwy4mYF_iPj4bJsm3Tz7TCpIP5ep5EKak9xftDHzVfOBrfciDIj4cw==
2024-04-25 07:07:51 UTC	2878	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 57 61 6c 6c 70 61 70 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.5	50498	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	816	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2874 Connection: close Date: Thu, 25 Apr 2024 07:07:53 GMT Last-Modified: Thu, 15 Feb 2024 11:01:51 GMT ETag: "6dc803641e593e617e0ea42c5820f6c8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5a439504ade3c1726d22c85807033e14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: JVXCS88Z0eTiPvRW-fl_bPFzAcrRw_7NZOQvLZ2fKojErLoL4CFmGA==
2024-04-25 07:07:52 UTC	2874	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.5	50499	3.237.57.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:51 UTC	844	OUT	GET /s/56409?bidder_id=200442&bidder_uuid=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028868.423623&pid=500040&it=1&iv=56c8a119-fb2e-40a6-a39d-fe9224591ce0%3A1714028868.423623&_=1714028868.4256136 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgiiARDiFw; lidid=85ee1344-445a-4491-9f61-4be81fcc5250
2024-04-25 07:07:52 UTC	601	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Length: 0 Connection: close Location: https://pippio.com/api/sync?it=1&pid=500040&_=1714028868.4256136&iv=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623 Set-Cookie: _li_ss=CggKBgiiARDiFw; Max-Age=2592000; Expires=Sat, 25 May 2024 07:07:52 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=85ee1344-445a-4491-9f61-4be81fcc5250; Max-Age=63072000; Expires=Sat, 25 Apr 2026 07:07:52 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.5	50502	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-57-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.5	50506	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867128&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-57-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:52 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.5	50505	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867177&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-80-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.5	50509	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	675	OUT	GET /rp.gif?ts=1714028867209&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:52 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.5	50510	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2094	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029767535&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:52 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 9cc8ba00384b3554aebbfb2dec8eda6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xQwTBznz21b9Li7sWunhqAGM_mY6DHjZUIYRdOszgAvFASyNug66rQ==
2024-04-25 07:07:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.5	50501	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	633	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-042394a46f36ef579 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-25 07:07:52 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.5	50512	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028867236&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1125685583525586 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.5	50504	108.156.152.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	422	OUT	GET /v1alpha/publicKeys HTTP/1.1 Host: publickeyservice.aws.privacysandboxservices.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	402	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 614 Connection: close Date: Thu, 25 Apr 2024 02:00:53 GMT Cache-Control: max-age=604800 Apigw-Requestid: WwnlYgc6oAMEJ-A= X-Cache: Hit from cloudfront Via: 1.1 1d00ba7ffc8db277f53e86898830f418.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: TusG3lNQ1h0R-DBHGp_65RhwYnqtTCIIVfQhNEvVxomyHsABfVHenw== Age: 18419
2024-04-25 07:07:52 UTC	614	IN	Data Raw: 7b 0a 20 20 22 6b 65 79 73 22 3a 20 5b 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 32 34 64 31 33 34 65 39 2d 31 66 65 64 2d 34 63 31 31 2d 39 62 32 34 2d 39 36 62 36 37 64 66 39 37 37 39 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 71 64 77 64 70 34 6e 53 77 62 51 4c 37 63 34 77 72 5a 51 2f 4c 55 44 4d 37 58 4f 5a 39 5a 4c 50 39 62 61 35 63 4c 39 78 35 44 41 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 32 36 63 37 36 63 61 34 2d 62 36 31 63 2d 34 39 30 63 2d 62 31 61 37 2d 65 36 37 66 65 33 37 61 61 62 62 65 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 58 63 65 2b 78 46 66 52 63 54 37 33 55 71 46 79 43 69 30 51 4a 6f 38 77 6f 47 4c 5a 46 70 70 6d 59 31 4c 6c 78 68 65 59 32 6c 38 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a Data Ascii: { "keys": [{ "id": "24d134e9-1fed-4c11-9b24-96b67df97790", "key": "qdwdp4nSwbQL7c4wrZQ/LUDM7XOZ9ZLP9ba5cL9x5DA\u003d" }, { "id": "26c76ca4-b61c-490c-b1a7-e67fe37aabbe", "key": "Xce+xFfRcT73UqFyCi0QJo8woGLZFppmY1LlxheY2l8\u003d" }, {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.5	50503	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2169	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=U0729yNymHQZVlvxbsn0hd..........; amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029767535&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:52 UTC	796	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: W/"53a3b2fed7fd6b8c3ac1dff6da05a8ef" Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-db7v6-230 X-Request-Id: 7206d68e848369592ec87f14889e23ea X-Runtime: 0.018612 X-Cache: Miss from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C4TEnIXeHGhc8TJ3xyBPup2LMqHNJpDhnTTCiuJ9zzwEPOQ5WOKtAw==
2024-04-25 07:07:52 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.5	50511	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028867177&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-80-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:52 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.5	50508	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	675	OUT	GET /rp.gif?ts=1714028867208&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:07:52 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.5	50517	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	3206	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A46.606%2B02%3A00&epn.hit_timestamp_unix=1714028866606&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1714028863437-39-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-39-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=2667&tfd=4913&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	715	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:52 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6503a4af08a1126fe0f20f95c7ca4d6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: Mr7DM3dUS2aYayEoqKDTKcEP9iIDsxxQsmt6r4MdFuUtsuMwpH63iA==
2024-04-25 07:07:52 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
601	192.168.2.5	50514	151.101.64.84	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028867237&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9372092914903191 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.5	50519	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	3203	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1714028816&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A47.178%2B02%3A00&epn.hit_timestamp_unix=1714028867178&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1714028863437-80-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=566&tfd=4914&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:52 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775949; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 ea828ecc044b6833e71615dc026b943c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: OxlQOStbF5mNGY_R76uPCfSu4MFrlxNLU5yoVUB9oFop8eGvNDVDcg==
2024-04-25 07:07:52 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 32 31 36 36 38 30 30 39 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1216680095;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.171402881
2024-04-25 07:07:52 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 32 31 36 36 38 30 30 39 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1216680095;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%
2024-04-25 07:07:52 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 32 31 32 33 34 38 38 39 38 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=2123488988;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;
2024-04-25 07:07:52 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 32 31 32 33 34 38 38 39 38 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=2123488988;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2F
2024-04-25 07:07:52 UTC	1362	IN	Data Raw: 35 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 31 34 37 39 30 32 32 31 37 34 26 66 73 74 3d 31 37 31 34 30 32 38 38 37 32 32 37 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 Data Ascii: 54bevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=1479022174&fst=1714028872276&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890
2024-04-25 07:07:52 UTC	688	IN	Data Raw: 32 61 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 38 30 35 35 33 30 31 35 37 26 66 73 74 3d 31 37 31 34 30 32 38 38 37 32 32 39 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 2a9event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=805530157&fst=1714028872293&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&ur
2024-04-25 07:07:52 UTC	290	IN	Data Raw: 31 31 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 37 56 30 6c 71 69 55 31 70 44 79 32 50 53 74 30 30 6b 41 35 58 78 47 6a 25 32 42 68 5a 6c 54 4d 78 58 72 50 30 38 57 58 72 7a 74 33 4f 73 46 68 72 67 58 37 75 44 62 37 48 4f 52 71 44 50 4c 75 62 58 65 4d 37 75 68 36 4f 75 6b 62 25 32 46 71 43 47 55 7a 77 78 71 34 53 55 73 6e 65 50 7a 4d 4c 6b 75 4a 67 39 33 6b 72 50 55 64 25 32 42 4c 25 32 46 48 57 76 79 68 66 6b 4e 73 4c 68 64 5a 72 36 4f 69 6d 5a 42 30 38 46 46 42 75 4e 75 37 77 69 45 44 36 7a 64 42 25 32 46 62 34 78 4a 31 39 44 74 65 70 58 68 6b 37 41 36 45 68 4d 57 34 5a 35 50 55 Data Ascii: 11bevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=7V0lqiU1pDy2PSt00kA5XxGj%2BhZlTMxXrP08WXrzt3OsFhrgX7uDb7HORqDPLubXeM7uh6Oukb%2FqCGUzwxq4SUsnePzMLkuJg93krPUd%2BL%2FHWvyhfkNsLhdZr6OimZB08FFBuNu7wiED6zdB%2Fb4xJ19DtepXhk7A6EhMW4Z5PU
2024-04-25 07:07:52 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:07:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.5	50513	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1416	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028867239 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1397432349447457 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.5	50522	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028867182 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT x-amzn-RequestId: d3d412d4-e838-4334-bdf2-c40a3ddba6eb X-Cache: Miss from cloudfront Via: 1.1 7b7f9409a41e78466e3ab2772654a73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: b0aPVXWn-6L9b462dVUmWDjIVWSOBPNiLZW--Fmu1HLtE1RUNq4eFA==
2024-04-25 07:07:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.5	50521	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1970	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	605	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 11 Mar 2024 08:37:50 GMT Last-Modified: Fri, 08 Mar 2024 22:51:09 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6uo7RFOiZ8-3lGlXn_lFO-cNmfa9uZG1sU3xQ45CF-OjBborOeQirA== Age: 3882603
2024-04-25 07:07:52 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.5	50515	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1714028867182 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:07:52 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HAJJCYEDKAQ7H2RC56N7 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:07:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:07:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:07:52 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.5	50518	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1759	OUT	GET /dt?advEntityId=2049676&asId=352a73fb-dc2b-63bc-a842-a419586c3a8b&tv=%7Bc:aSpffh,pingTime:-10,time:1804,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028867271%7C%7Cf4080a98b11ee8844b0c7559b3207dba%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7Ca9e3cfbc40b6393edea9717e6461f5c7%7C%7C22c79cc47da40618e961095ff2eed1c4%7C%7Cf886e04793a587c0529b805c4913184f%7C%7C4f3dc33d6a4a34fd0f794ca8e80971b2%7C%7C38ca69c1b9e60d8b1e6d089bd86fb577%7C%7C1663701684,im:%7Bimprf:%7Bttecl:3941,ecd:746,tsecr:26%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt41.va.303net.net
2024-04-25 07:07:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.5	50525	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1110	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:52 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9933458064097952483"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0x4389867689495236","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x2e8ea822c474c815","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x22936330dee76c4e","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x26cd48fe22054401","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9933458064097952483","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"9933458064097952483","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"9933458064097952483","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"9933458064097952483","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:52 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.5	50526	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1108	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:52 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13784299293109445252"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13784299293109445252","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13784299293109445252","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13784299293109445252","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13784299293109445252","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:52 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.5	50523	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028867905&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY4RzhaQm9VWjFzZFBQVHQ5UU4rTFJRcXhxL1YwajJCenB3SjZPWEIwbVZORmFFVUNUOUJZRiswaUFmaGFHWkpqMWdHVFFwM1FqOXhLTHFVM0RhczZ2OVREZzJBUFB6NnUrbEtVRVNoMVgzZz0mTDkzMVNSZGZjakZqQnVuNHJsaXQ0dmlNaGlRPQ=="; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8771979484988767 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.5	50527	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2157	OUT	GET /_set_cookie?val=2AjnXQ3ZhJkqRsxF9L6IE%2Bml1v5%2B30CzjXFLLVq5jxmvOfzJf7133DpiRnH%2FNnj6FYOkoxUtbZvWxsAuabGvcDgsguAEj2qpP58wBCaAKyDqZ4mDai3TMRsb%2BcjgdpKyAtvCUm%2FfXw4nrDKtLlcnyzHc37xTxNc9iI%2FHKaTsC%2FVrGLJ0d%2FdwMt%2Bpw9zEC9ur9mc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 7954d3bf29b6126cefea7c70d6d6b5ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: NQ2j4T0Iy9Tlwgovqno2mKdFR_XVSoyZ49nSFUZpSi25ohxdkFqQUw==
2024-04-25 07:07:52 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.5	50532	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	759	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028868631&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=4&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-110-833348100cc9&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:07:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:07:52 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.5	50531	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1122	OUT	GET /pagead/1p-user-list/778938880/?random=2053153666&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqaNCFGJtcAyiUhPtgux0TUrXcEFFJSJ5JNkxt8guVPt0ZEcZz&random=2495825286 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.5	50534	31.13.65.36	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	722	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1714028868631&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=4&o=4126&fbp=fb.1.1714028820410.1151239194&ler=empty&cdl=API_unavailable&it=1714028866527&coo=false&eid=1714028863437-110-833348100cc9&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:07:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.5	50535	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	973	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1429366944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.5	50528	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028868178&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1524912586668688 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.5	50536	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	975	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1803456649;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.5	50516	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0148-61cb8d680cc0fe036544afb0 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:52 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.5	50537	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	746	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/bundle.42c7ef449bf19536f366.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 142733 Connection: close Last-Modified: Mon, 04 Dec 2023 15:02:13 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:53 GMT ETag: "0393361091135b8f1e1e6d026ff6114e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8bbe7c07d8e2840e2ed8c589e1566126.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: U9ichNBpHZLbbneEjlh-CYA2kPMGcwn0HYAj1yO-_XN8YwQkrH7oUQ==
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 34 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 2c 76 61 72 69 61 6e 74 73 3a 5b 22 6f 6e 65 22 2c 22 74 77 6f 22 5d 7d 7d 2c 34 36 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 33 37 33 29 2c 41 3d 6e 28 36 39 32 37 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 72 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 61 28 41 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 37 31 30 36 3a 66 Data Ascii: !function(){var e,t,n={418:function(e){e.exports={platform:"desktop",deployPathOverride:!1,variants:["one","two"]}},4627:function(e,t,n){var r=n(7373),A=n(6927),a=TypeError;e.exports=function(e){if(r(e))return e;throw a(A(e)+" is not a function")}},7106:f
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 2c 6e 3d 72 28 63 2c 65 2c 74 29 2c 21 41 28 6e 29 7c 7c 61 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6c 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 69 28 65 2c 74 29 7d 7d 2c 38 31 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 39 32 36 29 2c 41 3d 6e 28 38 38 39 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 41 28 74 29 3f 74 3a 74 2b 22 22 7d 7d 2c 37 38 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 Data Ascii: ,n=r(c,e,t),!A(n)\|\|a(n))return n;throw l("Can't convert object to primitive value")}return void 0===t&&(t="number"),i(e,t)}},8113:function(e,t,n){var r=n(3926),A=n(8898);e.exports=function(e){var t=r(e,"string");return A(t)?t:t+""}},7853:function(e,t,n){v
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 75 6c 74 22 2c 22 64 65 66 65 72 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 66 6f 72 6d 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 68 69 64 64 65 6e 22 2c 22 69 6e 65 72 74 22 2c 22 69 73 6d 61 70 22 2c 22 69 74 65 6d 73 63 6f 70 65 22 2c 22 6c 6f 6f 70 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 6e 6f 6d 6f 64 75 6c 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6f 70 65 6e 22 2c 22 70 6c 61 79 73 69 6e 6c 69 6e 65 22 2c 22 72 65 61 64 6f 6e 6c 79 22 2c 22 72 65 71 75 69 72 65 64 22 2c 22 72 65 76 65 72 73 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 28 52 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 Data Ascii: ult","defer","disabled","formnovalidate","hidden","inert","ismap","itemscope","loop","multiple","muted","nomodule","novalidate","open","playsinline","readonly","required","reversed","selected"]),"function"==typeof HTMLElement&&(R=class extends HTMLElement
2024-04-25 07:07:52 UTC	14808	IN	Data Raw: 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 6a 34 4b 50 48 4a 6c 59 33 51 67 65 44 30 69 4d 43 34 32 4d 6a 59 35 4e 54 4d 69 49 48 6b 39 49 6a 41 75 4f 44 63 33 4d 44 63 31 49 69 42 33 61 57 52 30 61 44 30 69 4e 44 55 75 4e 54 41 34 4d 53 49 67 61 47 56 70 5a 32 68 30 50 53 49 30 4e 53 34 31 4d 44 67 78 49 69 42 79 65 44 30 69 4d 6a 49 75 4e 7a 55 30 49 69 42 6d 61 57 78 73 50 53 49 6a 4d 55 55 78 52 54 46 46 49 69 42 6d 61 57 78 73 4c 57 39 77 59 57 4e 70 64 48 6b 39 49 6a 41 75 4e 69 49 76 50 67 6f 38 5a 79 42 6a 62 47 6c 77 4c 58 42 68 64 47 67 39 49 6e 56 79 62 43 67 6a 59 32 78 70 63 44 42 66 4d 6a 63 77 4d 6c 38 79 4f 44 67 79 4d 53 6b 69 50 67 6f 38 63 Data Ascii: IgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHJlY3QgeD0iMC42MjY5NTMiIHk9IjAuODc3MDc1IiB3aWR0aD0iNDUuNTA4MSIgaGVpZ2h0PSI0NS41MDgxIiByeD0iMjIuNzU0IiBmaWxsPSIjMUUxRTFFIiBmaWxsLW9wYWNpdHk9IjAuNiIvPgo8ZyBjbGlwLXBhdGg9InVybCgjY2xpcDBfMjcwMl8yODgyMSkiPgo8c
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 35 30 70 78 29 7b 2e 74 65 78 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 76 65 6c 74 65 2d 31 6b 6d 6c 31 7a 65 20 62 75 74 74 6f 6e 2e 73 76 65 6c 74 65 2d 31 6b 6d 6c 31 7a 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 36 20 2a 20 76 61 72 28 2d 2d 73 63 61 6c 65 29 29 7d 7d 2e 70 6f 72 74 61 6c 73 2e 73 76 65 6c 74 65 2d 31 6b 6d 6c 31 7a 65 2e 73 76 65 6c 74 65 2d 31 6b 6d 6c 31 7a 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 34 38 20 2a 20 76 61 72 28 2d 2d 73 63 61 6c 65 29 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 36 31 30 20 2a 20 76 61 72 28 2d 2d 73 63 61 6c 65 29 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e Data Ascii: @media(max-width: 1050px){.text-container.svelte-1kml1ze button.svelte-1kml1ze{line-height:20px;font-size:calc(16 * var(--scale))}}.portals.svelte-1kml1ze.svelte-1kml1ze{width:calc(548 * var(--scale));height:calc(610 * var(--scale));position:absolute;z-in
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 33 78 42 38 41 51 43 34 6e 59 4a 77 59 68 36 4c 61 59 34 65 68 4c 34 77 2b 59 4d 35 61 51 69 2b 41 41 44 63 4b 54 45 37 31 55 4b 73 79 6d 72 6f 57 34 49 43 73 4a 31 6d 5a 41 41 41 67 4d 76 4b 34 4a 70 35 4a 66 54 46 6f 54 58 67 34 41 38 45 41 47 42 68 4a 65 59 6c 6a 5a 63 4b 65 57 6c 6c 41 46 62 74 31 39 44 30 44 41 42 41 6b 45 46 67 70 54 57 6b 42 6b 7a 74 46 77 43 41 55 4b 6b 35 48 4e 49 58 37 41 33 41 66 2f 4d 50 36 54 35 44 37 52 63 41 67 48 41 61 6b 50 58 48 36 6f 57 71 76 41 46 34 38 77 5a 72 4f 77 4d 41 45 43 74 4e 71 2b 4f 6e 4e 77 43 6e 41 77 49 77 41 41 43 78 6b 74 51 63 71 48 71 4e 4e 77 41 50 45 72 4e 73 41 41 42 41 6e 4b 77 5a 75 6d 6f 30 74 4c 38 47 6e 4a 70 39 42 67 41 41 78 42 75 59 6e 66 35 66 41 77 43 41 35 67 30 4a 77 41 41 41 64 41 34 Data Ascii: 3xB8AQC4nYJwYh6LaY4ehL4w+YM5aQi+AADcKTE71UKsymroW4ICsJ1mZAAAgMvK4Jp5JfTFoTXg4A8EAGBhJeYljZcKeWllAFbt19D0DABAkEFgpTWkBkztFwCAUKk5HNIX7A3Af/MP6T5D7RcAgHAakPXH6oWqvAF48wZrOwMAECtNq+OnNwCnAwIwAACxktQcqHqNNwAPErNsAABAnKwZumo0tL8GnJp9BgAAxBuYnf5fAwCA5g0JwAAAdA4
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 32 67 4e 75 54 48 6d 5a 75 2f 4a 4e 74 6b 4c 61 49 32 6a 5a 61 56 68 46 62 49 6b 30 55 62 68 51 49 79 56 51 78 44 53 45 6b 4f 6b 78 64 71 31 68 43 45 4b 65 39 68 67 4f 35 63 31 74 34 78 39 43 2f 46 71 44 55 6a 6d 67 41 39 6a 43 66 5a 69 69 4e 69 44 49 59 73 39 54 36 64 2f 2f 55 7a 5a 7a 7a 7a 54 56 64 33 56 4c 30 2f 33 4d 2f 33 39 53 43 4f 2f 7a 4d 7a 7a 30 6b 39 56 2f 65 76 6c 58 39 57 52 61 63 6a 42 78 58 68 2b 4d 44 51 48 7a 63 44 38 56 66 4c 50 66 53 59 32 39 35 67 6f 2b 51 49 41 6f 4b 4f 69 79 46 78 4f 34 74 57 58 73 54 45 58 68 73 59 73 6e 54 73 5a 4c 5a 6d 47 52 4b 5a 6d 68 78 66 6a 6f 38 6d 44 50 68 30 72 36 41 49 41 4d 4e 75 57 6f 34 45 35 73 54 49 30 76 30 75 43 38 62 4b 70 55 57 30 42 4f 42 6e 78 37 68 73 59 38 32 62 79 31 33 6b 44 41 4d 44 47 Data Ascii: 2gNuTHmZu/JNtkLaI2jZaVhFbIk0UbhQIyVQxDSEkOkxdq1hCEKe9hgO5c1t4x9C/FqDUjmgA9jCfZiiNiDIYs9T6d//UzZzzzTVd3VL0/3M/39SCO/zMzz0k9V/evlX9WRacjBxXh+MDQHzcD8VfLPfSY295go+QIAoKOiyFxO4tWXsTEXhsYsnTsZLZmGRKZmhxfjo8mDPh0r6AIAMNuWo4E5sTI0v0uC8bKpUW0BOBnx7hsY82by13kDAMDG
2024-04-25 07:07:52 UTC	16384	IN	Data Raw: 39 6d 51 73 4c 54 4f 64 56 4f 77 36 41 75 4b 64 52 36 71 45 69 53 47 46 73 65 74 75 68 2f 4c 65 37 2b 38 4c 31 7a 48 55 6b 35 44 33 33 6a 2f 78 37 4c 6e 61 76 38 6a 37 76 74 68 76 49 48 32 6e 51 66 66 2f 65 41 37 37 71 62 33 7a 33 68 5a 47 57 38 6b 74 5a 38 71 49 30 72 6e 4d 4c 37 66 76 76 31 59 76 74 56 75 7a 69 68 74 51 2b 64 7a 63 6d 6d 59 61 65 39 58 36 48 35 76 71 39 36 77 74 4d 39 50 72 39 57 4a 6b 36 2f 73 78 34 39 54 39 33 54 4b 2f 61 6a 37 33 50 56 67 30 76 59 31 71 6d 4c 62 6d 38 63 65 64 5a 39 50 61 2f 78 59 78 2b 76 4d 4f 6e 78 6c 55 4c 32 5a 66 33 68 33 30 4b 67 4d 6c 6b 6d 62 30 38 75 67 37 39 36 73 71 71 2b 36 4b 6d 75 7a 6b 4a 2f 31 72 32 79 4a 6f 47 75 53 62 6b 72 62 59 36 49 47 70 2b 73 46 5a 6e 64 47 4c 67 7a 62 31 72 5a 6b 6d 74 74 72 Data Ascii: 9mQsLTOdVOw6AuKdR6qEiSGFsetuh/Le7+8L1zHUk5D33j/x7Lnav8j7vthvIH2nQff/eA77qb3z3hZGW8ktZ8qI0rnML7fvv1YvtVuzihtQ+dzcmmYae9X6H5vq96wtM9Pr9WJk6/sx49T93TK/aj73PVg0vY1qmLbm8cedZ9Pa/xYx+vMOnxlUL2Zf3h30KgMlkmb08ug796sqq+6KmuzkJ/1r2yJoGuSbkrbY6IGp+sFZndGLgzb1rZkmttr
2024-04-25 07:07:52 UTC	13237	IN	Data Raw: 36 48 54 61 55 62 76 6e 35 76 51 70 58 2b 72 65 33 61 57 67 36 2b 34 72 54 2f 7a 65 68 33 30 75 65 69 67 39 62 66 50 5a 49 64 6e 75 44 46 43 64 63 4d 65 50 74 42 75 67 56 75 63 72 68 74 70 6a 34 59 2b 4b 35 63 75 35 5a 48 44 42 39 59 61 47 32 2f 58 6a 4f 59 48 66 31 6a 63 77 69 2b 37 55 31 52 5a 6f 51 31 42 52 50 66 39 78 58 2b 35 63 62 75 63 47 4f 30 36 54 6b 2f 68 4b 6e 47 71 57 4e 37 32 71 4b 48 33 44 64 31 7a 50 65 64 74 39 59 53 67 48 62 30 4d 77 4d 6f 73 32 69 79 2f 36 48 53 63 37 4a 69 78 5a 67 75 33 39 4c 6a 42 6c 51 56 76 45 48 62 42 76 39 72 72 35 64 66 55 33 58 69 59 37 36 51 59 74 79 39 74 46 36 34 48 5a 6b 61 4c 62 33 6c 53 61 48 32 6f 56 4c 31 2f 73 30 54 48 4b 43 34 39 6b 66 39 5a 71 65 44 74 36 72 4d 4b 70 55 76 30 4c 4c 66 5a 37 65 6b 6d Data Ascii: 6HTaUbvn5vQpX+re3aWg6+4rT/zeh30ueig9bfPZIdnuDFCdcMePtBugVucrhtpj4Y+K5cu5ZHDB9YaG2/XjOYHf1jcwi+7U1RZoQ1BRPf9xX+5cbucGO06Tk/hKnGqWN72qKH3Dd1zPedt9YSgHb0MwMos2iy/6HSc7JixZgu39LjBlQVvEHbBv9rr5dfU3XiY76QYty9tF64HZkaLb3lSaH2oVL1/s0THKC49kf9ZqeDt6rMKpUv0LLfZ7ekm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.5	50538	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=f75c8493-7d13-40f9-9d81-91a96ee33039&batch_time=1714028870578 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	1096	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 74 22 3a 31 30 32 35 33 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":1,"page_states":[{"state":"passive","start":1025300000}]},"application":{"id":
2024-04-25 07:07:52 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: f75c8493-7d13-40f9-9d81-91a96ee33039 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:52 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 66 37 35 63 38 34 39 33 2d 37 64 31 33 2d 34 30 66 39 2d 39 64 38 31 2d 39 31 61 39 36 65 65 33 33 30 33 39 22 7d Data Ascii: {"request_id":"f75c8493-7d13-40f9-9d81-91a96ee33039"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.5	50520	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1936	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-25 07:07:52 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.5	50541	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2534	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029770582&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:52 UTC	102	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":16,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-25 07:07:52 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: "28-HfI+TrRevDdkylP6fMXM4RhLFbc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1b0fae92623728841ddc8494230b1c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bcIQAZIGIQQ5riPzpdqVwOg0Ny8tz_KC7gkk7Kms1FFcTOe5kV2XtQ==
2024-04-25 07:07:52 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 31 36 7d Data Ascii: {"status":"ok","metric":"INP","time":16}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.5	50543	107.178.254.65	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	681	OUT	GET /api/sync?it=1&pid=500040&_=1714028868.4256136&iv=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:52 UTC	795	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=Flxyl5Uv1BU-R7lM; Path=/; Domain=pippio.com; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Secure; SameSite=None Set-Cookie: didts=1714028872; Path=/; Domain=pippio.com; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 07:07:52 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 07:07:52 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.5	50542	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2534	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029770582&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:52 UTC	120	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 34 34 38 30 30 30 37 30 34 39 36 36 31 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.008644800070496615,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-25 07:07:52 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: "3a-B3C2yJMxmuKsTpXZ97zwurRTrc8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 ad663ff6398ba4f8e7f1c844ed264cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nu4m0ouTdiAqei5V-oCbkcH5gK-_Esv0hnR3yTHElGO6KmFixPpJvw==
2024-04-25 07:07:52 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 34 34 38 30 30 30 37 30 34 39 36 36 31 35 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.008644800070496615}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.5	50524	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:52 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:52 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.5	50529	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867226 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:52 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:52 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.5	50530	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028867227 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:07:52 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:52 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:07:52 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.5	50544	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028867237&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY0R0JYZ1lob2ZCWHJMS3NGWnUzU2Zjc3ZBL1JoRysxdzlYUWgweDJ0V1lXYzMzWVVnKzNvekpXdHkvNGpZMHpMWDJ2aDFZYUlnelJmTjd1WGwvRXhvVjQ3ck5yUHhhOUtBbXhUYkNHbXkyMD0mK3N5N0xjVVlGS04wOFJ1L0dFUGwzNkJlMmhRPQ=="
2024-04-25 07:07:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1583351378106702 Date: Thu, 25 Apr 2024 07:07:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:07:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.5	50546	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	736	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/bundle.4507bb975b4fb0667dff.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 217740 Connection: close Date: Thu, 25 Apr 2024 07:07:54 GMT Last-Modified: Thu, 15 Feb 2024 11:01:51 GMT ETag: "ef2d82dd3b036301486a6404bb563eea" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 538cf444f0c6dac6454a3baf06f65b9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: t9UkvglLb9BfmbcACXpKvFGcyfRBKrPZanowOXNUA5y2F7emO97LXQ==
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 34 35 30 37 62 62 39 37 35 62 34 66 62 30 36 36 37 64 66 66 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 37 32 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 63 69 72 63 6c 65 46 69 6c 6c 65 64 2f 69 6e 64 65 78 2e 6a 73 22 3a 38 36 39 36 2c 22 2e 2f 63 69 72 63 6c 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 36 35 39 36 2c 22 2e 2f 64 65 66 61 75 6c 74 2f 69 6e 64 65 78 2e 6a 73 22 3a 37 34 32 38 2c 22 2e 2f 73 71 75 61 72 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 33 31 32 7d 3b Data Ascii: /! For license information please see bundle.4507bb975b4fb0667dff.js.LICENSE.txt /!function(){var t,e,n={7296:function(t,e,n){var r={"./circleFilled/index.js":8696,"./circleStroke/index.js":6596,"./default/index.js":7428,"./squareStroke/index.js":312};
2024-04-25 07:07:53 UTC	621	IN	Data Raw: 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 37 2e 36 35 35 32 38 20 37 2e 39 33 33 35 32 43 38 2e 30 34 35 38 31 20 37 2e 35 34 32 39 39 20 38 2e 36 37 38 39 37 20 37 2e 35 34 32 39 39 20 39 2e 30 36 39 35 20 37 2e 39 33 33 35 32 4c 31 31 2e 38 33 32 32 20 31 30 2e 36 39 36 32 4c 31 34 2e 35 39 34 38 20 37 2e 39 33 33 35 32 43 31 34 2e 39 38 35 33 20 37 2e 35 34 32 39 39 20 31 35 2e 36 31 38 35 20 37 2e 35 34 32 39 39 20 31 36 2e 30 30 39 20 37 2e 39 33 33 35 32 43 31 36 2e 33 39 39 36 20 38 2e 33 32 34 30 34 20 31 36 2e 33 39 39 36 20 38 2e 39 35 37 32 31 20 31 36 2e 30 30 39 20 39 2e 33 34 37 37 33 4c 31 33 2e 32 34 36 34 20 31 32 2e 31 31 30 34 4c 31 36 2e 32 31 31 33 20 31 35 2e Data Ascii: rule="evenodd" clip-rule="evenodd" d="M7.65528 7.93352C8.04581 7.54299 8.67897 7.54299 9.0695 7.93352L11.8322 10.6962L14.5948 7.93352C14.9853 7.54299 15.6185 7.54299 16.009 7.93352C16.3996 8.32404 16.3996 8.95721 16.009 9.34773L13.2464 12.1104L16.2113 15.
2024-04-25 07:07:53 UTC	12792	IN	Data Raw: 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 5c 6e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 32 22 20 63 79 3d 22 31 32 22 20 72 3d 22 31 31 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 46 39 46 39 46 39 22 2f 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 30 38 36 34 33 20 31 34 2e 31 31 36 33 43 36 2e 30 38 36 34 33 20 31 34 2e 34 31 35 35 20 36 2e 33 32 38 39 38 20 31 34 2e 36 35 38 20 36 2e 36 32 38 31 38 20 31 34 2e 36 35 38 48 31 30 2e 37 38 31 33 4c 31 33 2e 38 38 32 38 20 31 37 2e 34 30 34 38 43 31 34 2e 30 Data Ascii: 0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">\n<circle cx="12" cy="12" r="11.5" stroke="#F9F9F9"/>\n <path fill-rule="evenodd" clip-rule="evenodd" d="M6.08643 14.1163C6.08643 14.4155 6.32898 14.658 6.62818 14.658H10.7813L13.8828 17.4048C14.0
2024-04-25 07:07:53 UTC	6396	IN	Data Raw: 20 34 2e 31 31 39 38 34 20 32 2e 36 36 33 36 38 20 34 2e 34 32 37 30 34 43 32 2e 36 36 33 36 38 20 34 2e 37 34 33 38 34 20 32 2e 36 38 37 36 38 20 35 2e 30 34 36 32 34 20 32 2e 37 33 35 36 38 20 35 2e 33 33 34 32 34 43 32 2e 37 38 33 36 38 20 35 2e 36 32 32 32 34 20 32 2e 38 36 35 32 38 20 35 2e 38 37 36 36 34 20 32 2e 39 38 30 34 38 20 36 2e 30 39 37 34 34 43 33 2e 30 39 35 36 38 20 36 2e 33 31 38 32 34 20 33 2e 32 35 34 30 38 20 36 2e 34 39 35 38 34 20 33 2e 34 35 35 36 38 20 36 2e 36 33 30 32 34 43 33 2e 36 35 37 32 38 20 36 2e 37 35 35 30 34 20 33 2e 39 31 31 36 38 20 36 2e 38 31 37 34 34 20 34 2e 32 31 38 38 38 20 36 2e 38 31 37 34 34 43 34 2e 36 32 32 30 38 20 36 2e 38 31 37 34 34 20 34 2e 39 33 34 30 38 20 36 2e 37 30 32 32 34 20 35 2e 31 35 34 38 Data Ascii: 4.11984 2.66368 4.42704C2.66368 4.74384 2.68768 5.04624 2.73568 5.33424C2.78368 5.62224 2.86528 5.87664 2.98048 6.09744C3.09568 6.31824 3.25408 6.49584 3.45568 6.63024C3.65728 6.75504 3.91168 6.81744 4.21888 6.81744C4.62208 6.81744 4.93408 6.70224 5.1548
2024-04-25 07:07:53 UTC	12792	IN	Data Raw: 5c 6e 5c 6e 27 2c 63 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 39 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 5c 6e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 2e 30 38 36 34 32 35 38 20 38 2e 31 31 36 32 35 43 30 2e 30 38 36 34 32 35 38 20 38 2e 34 31 35 34 35 20 30 2e 33 32 38 39 37 37 20 38 2e 36 35 38 30 31 20 30 2e 36 32 38 31 38 20 38 2e 36 35 38 30 31 48 34 2e 37 38 31 32 37 4c 37 2e 38 38 32 37 39 20 31 31 2e 34 30 34 38 43 38 2e 30 34 32 33 36 20 Data Ascii: \n\n',c='<svg width="9" height="12" viewBox="0 0 9 12" fill="none" xmlns="http://www.w3.org/2000/svg">\n<path fill-rule="evenodd" clip-rule="evenodd" d="M0.0864258 8.11625C0.0864258 8.41545 0.328977 8.65801 0.62818 8.65801H4.78127L7.88279 11.4048C8.04236
2024-04-25 07:07:53 UTC	2836	IN	Data Raw: 74 2e 65 78 70 6f 72 74 73 3d 21 31 7d 2c 31 36 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 31 37 36 29 2c 69 3d 6e 28 33 39 36 29 2c 6f 3d 6e 28 35 30 36 38 29 2c 73 3d 6e 28 38 31 36 30 29 2c 61 3d 4f 62 6a 65 63 74 3b 74 2e 65 78 70 6f 72 74 73 3d 73 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 22 53 79 6d 62 6f 6c 22 29 3b 72 65 74 75 72 6e 20 69 28 65 29 26 26 6f 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 28 74 29 29 7d 7d 2c 38 39 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d Data Ascii: t.exports=!1},1684:function(t,e,n){"use strict";var r=n(5176),i=n(396),o=n(5068),s=n(8160),a=Object;t.exports=s?function(t){return"symbol"==typeof t}:function(t){var e=r("Symbol");return i(e)&&o(e.prototype,a(t))}},8940:function(t,e,n){"use strict";var r=
2024-04-25 07:07:53 UTC	8949	IN	Data Raw: 65 72 61 74 6f 72 3a 63 28 74 29 2c 6e 65 78 74 3a 6c 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 5b 31 5d 2c 74 5b 30 5d 29 7d 29 29 3a 75 28 74 2c 65 29 7d 7d 2c 38 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 4d 61 74 68 2e 63 65 69 6c 2c 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 4d 61 74 68 2e 74 72 75 6e 63 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 2b 74 3b 72 65 74 75 72 6e 28 72 3e 30 3f 6e 3a 65 29 28 72 29 7d 7d 2c 33 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 3d 6e 28 34 33 36 38 29 2c 6f 3d 6e 28 37 34 34 29 2c 73 3d 6e 28 37 33 32 34 Data Ascii: erator:c(t),next:l},(function(t){return e(t[1],t[0])})):u(t,e)}},8616:function(t){"use strict";var e=Math.ceil,n=Math.floor;t.exports=Math.trunc\|\|function(t){var r=+t;return(r>0?n:e)(r)}},3104:function(t,e,n){"use strict";var r,i=n(4368),o=n(744),s=n(7324
2024-04-25 07:07:53 UTC	8949	IN	Data Raw: 3d 6e 28 33 39 36 29 2c 6f 3d 72 2e 57 65 61 6b 4d 61 70 3b 74 2e 65 78 70 6f 72 74 73 3d 69 28 6f 29 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 53 74 72 69 6e 67 28 6f 29 29 7d 2c 32 33 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 31 38 34 29 2c 69 3d 57 65 61 6b 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 57 65 61 6b 4d 61 70 3a 57 65 61 6b 4d 61 70 2c 73 65 74 3a 72 28 69 2e 73 65 74 29 2c 67 65 74 3a 72 28 69 2e 67 65 74 29 2c 68 61 73 3a 72 28 69 2e 68 61 73 29 2c 72 65 6d 6f 76 65 3a 72 28 69 2e 64 65 6c 65 74 65 29 7d 7d 2c 35 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: =n(396),o=r.WeakMap;t.exports=i(o)&&/native code/.test(String(o))},2344:function(t,e,n){"use strict";var r=n(1184),i=WeakMap.prototype;t.exports={WeakMap:WeakMap,set:r(i.set),get:r(i.get),has:r(i.has),remove:r(i.delete)}},5324:function(t,e,n){"use strict"
2024-04-25 07:07:53 UTC	6396	IN	Data Raw: 3d 65 2e 64 69 72 74 79 29 72 65 74 75 72 6e 20 69 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 2c 6e 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 64 69 72 74 79 2e 6c 65 6e 67 74 68 2c 69 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 74 5b 72 5d 3d 65 2e 64 69 72 74 79 5b 72 5d 7c 69 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 20 65 2e 64 69 72 74 79 7c 69 7d 72 65 74 75 72 6e 20 65 2e 64 69 72 74 79 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 29 7b 69 66 28 69 29 7b 63 6f 6e 73 74 20 73 3d 68 28 65 2c 6e 2c 72 2c 6f 29 3b 74 2e 70 28 73 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 69 66 28 74 2e 63 74 78 2e 6c 65 Data Ascii: =e.dirty)return i;if("object"==typeof i){const t=[],n=Math.max(e.dirty.length,i.length);for(let r=0;r<n;r+=1)t[r]=e.dirty[r]\|i[r];return t}return e.dirty\|i}return e.dirty}function v(t,e,n,r,i,o){if(i){const s=h(e,n,r,o);t.p(s,i)}}function m(t){if(t.ctx.le
2024-04-25 07:07:53 UTC	6396	IN	Data Raw: 6f 6e 73 74 20 64 3d 74 2e 24 24 3d 7b 66 72 61 67 6d 65 6e 74 3a 6e 75 6c 6c 2c 63 74 78 3a 5b 5d 2c 70 72 6f 70 73 3a 75 2c 75 70 64 61 74 65 3a 72 2c 6e 6f 74 5f 65 71 75 61 6c 3a 61 2c 62 6f 75 6e 64 3a 6f 28 29 2c 6f 6e 5f 6d 6f 75 6e 74 3a 5b 5d 2c 6f 6e 5f 64 65 73 74 72 6f 79 3a 5b 5d 2c 6f 6e 5f 64 69 73 63 6f 6e 6e 65 63 74 3a 5b 5d 2c 62 65 66 6f 72 65 5f 75 70 64 61 74 65 3a 5b 5d 2c 61 66 74 65 72 5f 75 70 64 61 74 65 3a 5b 5d 2c 63 6f 6e 74 65 78 74 3a 6e 65 77 20 4d 61 70 28 65 2e 63 6f 6e 74 65 78 74 7c 7c 28 66 3f 66 2e 24 24 2e 63 6f 6e 74 65 78 74 3a 5b 5d 29 29 2c 63 61 6c 6c 62 61 63 6b 73 3a 6f 28 29 2c 64 69 72 74 79 3a 6c 2c 73 6b 69 70 5f 62 6f 75 6e 64 3a 21 31 2c 72 6f 6f 74 3a 65 2e 74 61 72 67 65 74 7c 7c 66 2e 24 24 2e 72 6f Data Ascii: onst d=t.$$={fragment:null,ctx:[],props:u,update:r,not_equal:a,bound:o(),on_mount:[],on_destroy:[],on_disconnect:[],before_update:[],after_update:[],context:new Map(e.context\|\|(f?f.$$.context:[])),callbacks:o(),dirty:l,skip_bound:!1,root:e.target\|\|f.$$.ro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.5	50545	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	2094	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029767535&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:52 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:52 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SVQjkqAVl4WHHjDPAdqckkcaDqq7iQ-tr_mYRUbX_spge7nV_b8ahw==
2024-04-25 07:07:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.5	50547	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:52 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:07:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0149-6286fd4e290ee7c6198f99e5 Strict-Transport-Security: max-age=15768000
2024-04-25 07:07:53 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.5	50551	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	1936	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:53 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:53 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-25 07:07:53 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.5	50552	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	941	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=674d9cf0-a375-4e64-878a-416ec9f60e3e&batch_time=1714028871547 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1090 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	1090	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 31 36 34 30 34 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":1,"page_states":[{"state":"hidden","start":1640400000}]},"application":{"id":"
2024-04-25 07:07:53 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 674d9cf0-a375-4e64-878a-416ec9f60e3e cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:53 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 36 37 34 64 39 63 66 30 2d 61 33 37 35 2d 34 65 36 34 2d 38 37 38 61 2d 34 31 36 65 63 39 66 36 30 65 33 65 22 7d Data Ascii: {"request_id":"674d9cf0-a375-4e64-878a-416ec9f60e3e"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.5	50554	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	811	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/favourited.1e40a57f0213acfb55b7.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1581902 Connection: close Last-Modified: Mon, 04 Dec 2023 15:02:13 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:54 GMT ETag: "9ac36d587b4b3dc54693e4d97c4c76c8" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ac876676fb21384353e1db9584b0c1de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: LxiydyGynMQvO2Ox3T3tSx6sBZ7h4JH8mabL3AirCEXvdVOzHa4vJg==
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 73 00 00 07 1b 08 06 00 00 00 62 f6 44 1c 00 00 00 09 70 48 59 73 00 00 21 38 00 00 21 38 01 45 96 31 60 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 18 22 e3 49 44 41 54 78 01 ec fd 59 90 65 e7 75 e7 8b ad 3d 9f 31 87 ca cc aa 2c a0 00 14 01 8e 80 d8 24 35 5c 81 57 ba 2d ea 5e 9b bc ea 6b 5b b4 0d 9a 0f 76 84 68 22 d8 8f 16 10 54 f8 c9 41 8a f2 83 ef 83 18 84 1d fd d0 11 0a 42 ea 17 87 69 51 56 7b 8a 0e f2 de db 92 ba 9b 02 a9 91 22 09 80 33 86 aa 42 0d 59 39 9e 79 4f df 5d 6b 7d df de 67 67 56 55 66 01 a8 2a 64 55 fd 7f e4 c1 99 f7 f8 ed 9d a7 d6 6f af b5 3c 3a a6 2c 31 ad 56 eb c3 c6 98 0f f3 d3 b3 7c ff 88 dc cb 5b fc 78 c9 f3 bc 25 02 00 00 00 00 00 Data Ascii: PNGIHDRsbDpHYs!8!8E1`sRGBgAMAa"IDATxYeu=1,$5\W-^k[vh"TABiQV{"3BY9yO]k}ggVUf*dUo<:,1V\|[x%
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: a8 b7 b6 ca 62 6e 85 86 83 21 6d 6f 8d 68 32 4c 69 63 73 48 97 c2 82 56 bd 90 16 db 3e f5 5a 11 cb 3e 3e 36 79 ac 95 fc ab 62 81 ff b3 23 3b 96 97 7f 85 25 dd 65 3e 37 67 a3 19 1f d3 1d fa c6 85 0b f4 fe 87 3e 48 ff 8f bf fd 3b 9a b0 94 dc e3 fd f9 83 cb 5b 7c 0c b3 b0 ed f2 b1 3c e3 f1 9b 5b 67 ef c5 72 ee e7 e3 81 65 6e e1 ce 53 52 3a 4e 36 50 56 b2 fc e4 f7 c4 a9 f3 41 28 57 05 90 37 e1 f5 d6 92 6c 4e 82 49 16 a5 67 c7 af 4c 4f fa 08 b5 f7 86 b4 d9 ef d0 cf 97 1f a6 8f b2 ac 0a 46 7c 3c 8f 42 95 5f 53 3e 87 84 93 43 fe 16 1a ba be d0 a3 c6 fe bc 85 d9 97 d7 72 bd d2 63 d5 f2 94 f3 93 fa 3e 31 b5 2f 2f 8a 6e c4 e1 eb 65 6e 42 e8 1c f2 1b e1 66 45 59 03 e9 9f 83 ec 1c 00 00 00 00 80 37 47 53 b4 7c f4 a3 1f d5 4c 96 5b c1 e3 8f 3f 5e 3f 7e f9 e5 97 e9 4e Data Ascii: bn!moh2LicsHV>Z>>6yb#;%e>7g>H;[\|<[grenSR:N6PVA(W7lNIgLOF\|<B_S>Crc>1//nenBfEY7GS\|L[?^?~N
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: e1 65 e7 03 90 c6 fc fd 5d 11 48 3c c6 25 7b b2 48 12 ed ef 64 6c 8b ac 63 8a 3b 87 1e 0a 72 8b 00 00 00 00 00 00 00 00 80 7b 19 c8 1c 70 db 31 5e 15 84 aa 82 f3 36 1b c4 38 99 43 de 3c 7a b6 2f 94 eb 7b 36 d3 c4 d8 2b bb ad 1c 90 b8 74 6e 7b 4a 64 b9 2d 79 e6 f9 75 80 be ba 22 5e 4b 9a 71 00 50 82 a0 3b a3 19 cb 9c 52 83 82 b1 94 f4 e1 20 de 8c 83 d1 79 e6 69 83 f8 56 b7 47 69 2a 41 bf 29 3d b0 b2 4a c3 e1 90 03 d5 f6 0a 78 e9 cb 23 01 67 cf 35 56 2f 44 3e 70 90 7a 56 da 60 7f db 48 f0 9f c5 90 61 91 13 19 1a c4 05 6d 99 36 07 41 79 dd d2 90 4e 46 63 6a 73 50 32 09 a4 97 0b 4f 47 ca 74 49 d3 ef d8 96 5d f3 5c 16 4b e9 44 47 2a 52 c7 95 35 2a bb 85 96 d9 0a 42 db 57 42 1b ca 4b c0 57 44 8c 94 5a 6a 94 76 aa 64 8e e7 32 73 7c 7f 9e 7d d1 94 1e f5 b6 f5 3c Data Ascii: e]H<%{Hdlc;r{p1^68C<z/{6+tn{Jd-yu"^KqP;R yiVGiA)=Jx#g5V/D>pzV`Ham6AyNFcjsP2OGtI]\KDGR5*BWBKWDZjvd2s\|}<
2024-04-25 07:07:53 UTC	14808	IN	Data Raw: b6 fd d0 d4 67 6a ea ef d4 bb 6a 7e 6d e6 34 eb b7 f8 f6 17 fa d5 42 23 02 1a 5e 27 9d 26 95 ed 2b 42 57 4d a5 66 61 8e 6f e1 1e fb 90 a9 ea d2 94 40 26 51 10 4c 90 3b 07 a4 99 af 0a 59 6c 0a 00 5f 80 88 4d 25 d7 78 cc 93 42 12 c0 9c f3 6c 29 2b 10 9c 0c 73 c6 ef ec 49 80 35 5e 32 35 19 1b 81 8e 3a 7a 74 24 3f 7c 70 2c 6f 1f ee cb f1 a0 23 bd 96 2f f1 70 20 7b e3 03 5d 6f 73 80 5e ee 7d 7b fd be b4 d1 e9 1b d6 e8 c2 f7 3e ce 1d a1 fd c3 76 57 e7 d5 72 be 32 8e 34 bf 2d f3 75 81 bd 21 92 51 27 90 36 f6 89 a2 d5 52 88 37 bb be 92 61 6f 5f 33 e7 65 00 a4 82 75 36 9f cd f4 da 74 ae f1 48 69 ae ae 9e 9a 35 65 08 4f 69 0a 53 f8 cc 7a 4b 74 26 1a 60 cb 75 cf b4 7a 29 d6 01 f7 c3 ba 6e 19 b7 4e 3b 06 f0 aa d5 3d f9 06 63 8e 32 53 02 22 2d 0b 54 55 ea c2 eb 61 0f Data Ascii: gjj~m4B#^'&+BWMfao@&QL;Yl_M%xBl)+sI5^25:zt$?\|p,o#/p {]os^}{>vWr24-u!Q'6R7ao_3eu6tHi5eOiSzKt&`uz)nN;=c2S"-TUa
2024-04-25 07:07:53 UTC	558	IN	Data Raw: 80 85 f6 35 c4 fd c2 57 c7 85 9e 33 2b 54 7c 5e 6f 32 69 e1 f5 ac f5 d3 3a 1a e8 6b 0b a3 ff 03 f0 c4 5a d8 7d 31 9d cb d5 e5 b5 bc b3 75 52 59 98 d3 40 82 c6 99 50 c9 b6 66 8e 01 3a 36 0d 1a c6 4d 93 25 41 90 0d 99 0b aa 36 30 21 42 3f 46 b8 ce f4 f5 42 36 cb a5 14 10 b0 99 96 8d 07 aa ad 83 a4 66 31 73 ba 7d be e0 e4 da 3a 5b 9a 69 e4 d5 3a 57 22 ba 96 00 6e 08 00 13 f4 d7 e2 fa 5a 06 8b a5 c4 74 2b e1 41 b7 11 85 79 cf 42 01 7d 04 6f 2e 90 ce fa 31 19 a0 56 e6 e3 b9 9d 08 ac 6f 20 51 15 c9 c9 32 95 a3 ee a5 cc 21 d6 ff e4 bd 77 e5 fe dd 63 8c d5 5a d2 22 c3 78 f6 00 c5 da 5b e7 80 71 0f 78 b7 66 a1 b9 96 ca a4 a5 ab 4c 8a b5 aa c8 d4 65 54 14 29 44 7f cc 23 eb 96 a9 ad 23 4a 29 48 03 4c d0 97 af 93 96 3c d9 f8 f2 1c 30 32 eb 8a 6c 7a 5d 75 64 78 39 eb Data Ascii: 5W3+T\|^o2i:kZ}1uRY@Pf:6M%A60!B?FB6f1s}:[i:W"nZt+AyB}o.1Vo Q2!wcZ"x[qxfLeT)D##J)HL<02lz]udx9
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: c4 0e 36 91 5c 2c 16 f2 ea 6a 26 9d 41 26 ff fc e3 97 f2 e0 2d 5f 66 00 3c af 00 72 e8 1a ac 58 e8 86 e7 67 d3 fc c6 cd 17 d8 75 61 6e 06 e0 df 0d ba d0 08 c2 0f f7 c7 d2 47 db cf b1 ef ce d7 1b 29 63 5f c1 af 87 f1 53 07 5d 93 b2 53 ac 2b d3 37 6e bb da bf 81 38 c6 02 58 5a 88 63 dd 5d 2e 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 df d3 70 30 e7 8f 1a df 24 14 7d db f4 2e f5 1f f4 ab 6f 1f f5 1b 9b ee 29 ac 29 a1 9b e5 06 0e f8 ac cf e0 4b 27 ac e4 3e 34 c1 e1 c2 97 33 16 66 67 61 6c 8a d1 10 c3 83 b4 d0 74 51 8c 2c a8 a5 5b 05 5a c7 61 85 d7 78 78 84 eb 5c 3a 05 eb c2 b0 6e 4c 57 d3 eb 68 fd 0e d6 4a d0 3a 2d a2 e2 68 09 85 31 a9 23 e9 16 2d 59 fb 85 8a 77 1d 7c 49 20 b4 6e a2 4a eb c0 78 b7 a0 d1 cd 57 06 cd 0e 21 c4 df f3 ab 6b f9 e8 e5 39 04 Data Ascii: 6\,j&A&-_f<rXguanG)c_S]S+7n8XZc].\p.\pp0$}.o))K'>43fgaltQ,[Zaxx\:nLWhJ:-h1#-Yw\|I nJxW!k9
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: 58 88 45 a0 e9 d3 4a 00 96 25 20 a0 0f 78 e2 77 7b b2 c1 fa 09 71 fe f6 de be a6 9c 4c 30 9f 39 8e 3d ba f7 70 12 ce f9 a0 dd 53 e1 21 2d 4d 6d b2 00 f3 a0 c6 de 1b d1 85 97 57 b2 04 a8 f4 07 3d 93 f2 11 cf c9 f2 8d a6 fa 6b 8d c7 0a 25 09 6c 3c 42 ef 6e 5b d7 27 eb e1 f8 56 7c d1 f4 77 4c 95 88 f5 19 d1 b5 03 b0 54 72 ee 72 f5 62 de f6 7a 5d 75 99 71 fd 70 32 28 90 b3 db 32 45 99 82 29 32 03 b3 47 87 0a a0 7c 2d 21 a6 76 3e 9d 1e 8d 30 e3 69 1f b0 e7 7c cf b3 b0 1e 7d cb b5 d1 06 7c 8b e8 dc ab a5 07 00 fb a3 71 4f fe e1 78 4f fe 02 ed 7f 14 e7 72 af d7 c6 36 36 90 cb 79 22 b1 15 5d 98 fe 32 a5 d0 c2 a5 e1 57 ea e8 2a 2b d6 58 ca b1 76 38 22 d1 ce 1f ab af 8e ed df b1 af fd 7d 23 07 d9 f1 b6 6e 35 ef db a9 2f d2 74 87 bc 01 38 d9 fb 17 de f8 f2 ed c5 35 Data Ascii: XEJ% xw{qL09=pS!-MmW=k%l<Bn['V\|wLTrrbz]uqp2(2E)2G\|-!v>0i\|}\|qOxOr66y"]2W*+Xv8"}#n5/t85
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: c5 04 c7 65 42 39 50 c6 02 2b c9 98 68 e6 75 93 05 a3 fd 52 7c 03 66 b1 d7 10 ef 87 1f d4 2a 7b 50 f1 67 61 6f 1a 24 cc 01 88 a8 1a d8 a0 23 2e 00 29 1f c9 dd 12 c1 5e 0f 81 5d 84 c4 f4 2a 8d 65 0e f0 a6 dd ea c9 e8 de bb b2 9a 5d 48 be 8c 71 1e 95 9c 02 cc 79 7a 9c c8 11 b6 6b 75 2a 13 97 e0 5c 34 e1 5b 52 fe c1 48 3a a9 f4 01 13 d9 95 65 63 68 33 74 2d 83 d3 b9 c3 c0 8c c9 5a b2 a8 32 44 8b 94 86 e3 7c 62 7f 12 0d cc 34 62 bb 0e 2e ea bc 30 0c 1b 6d ea 2e b8 f7 be ca 3e f9 5e ad 41 a1 32 71 4a 03 34 70 be e4 da 77 a6 94 38 06 58 83 24 7b 9a 14 da ef 87 bf 23 1e b6 c6 a7 26 d8 cf 25 9b c4 5a 70 61 23 65 b5 f1 de 9d 2d 27 5e c1 17 8c 35 70 21 79 74 3e 95 cb e9 42 ee 8c 10 00 e3 7a b3 ca c8 fd 69 27 98 4a a9 10 d7 01 c6 86 31 c2 75 e2 78 2a 1b 61 7e ed 68 Data Ascii: eB9P+huR\|f{Pgao$#.)^]e]Hqyzku\4[RH:ech3t-Z2D\|b4b.0m.>^A2qJ4pw8X${#&%Zpa#e-'^5p!yt>Bzi'J1uxa~h
2024-04-25 07:07:53 UTC	3028	IN	Data Raw: b8 f6 3e 2b 13 f1 b7 f3 cb 99 ce dd 03 24 9f d9 96 84 4c 20 06 bf 04 eb 3a 6d 80 3a 5d 00 6b ad 48 e6 18 ef 5b b7 6e a9 a4 d7 74 3a d5 7b 33 18 f4 f5 df 05 c6 6d 89 79 11 e2 5e b1 2f 8b 67 99 63 3c 26 59 44 13 00 90 1f 5f 8c 65 df 89 e5 bd fd 91 dc 1c 84 d2 d5 73 c3 5c cf 4b 05 35 58 dc e8 94 be 4a d0 55 4e a9 e7 4e a0 8a 7d 7a 08 ea d4 b6 8a 8c 3d 8d fa 98 43 9d c0 93 44 59 10 2c 4b 2c 70 9c 52 01 94 10 c9 ff 50 83 61 d3 df 47 55 bd 29 19 b6 4c 0c 93 01 7f 67 4f 2a ad a8 c4 df 03 05 36 32 95 dc 60 d0 4c 6d aa aa 36 d2 77 ca 86 d2 e0 d6 54 31 52 46 82 41 ab 5b 9a df a9 06 ba 63 02 72 f7 4a 2b db ca 2c ba 8e 95 6d 33 6b 92 73 9c c0 12 99 79 94 d4 aa 71 9d 66 8e d8 07 85 57 d9 a0 d7 b9 ae b8 c4 c7 0f 0f 8f b0 fe a6 58 0f 9f c8 ce ce 0e d6 c6 50 03 fd d9 6c Data Ascii: >+$L :m:]kH[nt:{3my^/gc<&YD_es\K5XJUNN}z=CDY,K,pRPaGU)LgO*62`Lm6wT1RFA[crJ+,m3ksyqfWXPl
2024-04-25 07:07:53 UTC	16384	IN	Data Raw: 2b 70 bc c2 ec ef 99 5e 35 2e 81 52 cc 97 92 2a 7c 9c cb 64 7b 61 9d b7 f0 0e 48 30 e7 3f c7 18 fd 12 60 f4 cf 2e cf 25 c6 bb 60 81 9c c6 25 e6 ec 29 8e bb c2 78 10 dc a5 8e bd 4a 9b 60 de 3b 95 61 af 89 f6 2e aa 4c 46 89 eb 5c 29 a1 3e 80 55 57 da 55 26 41 be d2 4a de da 69 a0 9c c6 1a 6b ac b1 df 55 fb aa 35 f1 ce ab 24 22 9f 93 9e 7c 19 fb d0 79 ed e7 5f fe fb 97 ca 3a d5 9e fa 5d 3e de 79 ff e5 29 de ab 75 06 9f 36 52 5f 9b a6 7e 87 3d d6 e6 ab b2 c5 48 91 6f e2 2b 2d fa d2 7e a3 81 32 93 73 fc e7 ba 99 fa c9 dd 5e 5b 56 f1 ca f4 51 84 3f f2 93 c3 07 f0 ed 1c c4 44 bb b2 7f e3 a6 f4 8e ee c3 e9 ec e3 f8 95 f8 b5 39 f7 4a e5 91 c5 48 92 d5 85 95 b0 32 3d f8 6a 00 4c ae 53 99 b2 bd da f4 a2 21 1b c5 91 ca b2 66 af 7b 95 d0 cf 64 4c 42 74 44 7b 4f ba 9e Data Ascii: +p^5.R*\|d{aH0?`.%`%)xJ`;a.LF\)>UWU&AJikU5$"\|y_:]>y)u6R_~=Ho+-~2s^[VQ?D9JH2=jLS!f{dLBtD{O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.5	50553	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	808	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/Tooltip.36a8ac01d72f6916d536.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8466 Connection: close Last-Modified: Mon, 04 Dec 2023 15:02:12 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:54 GMT ETag: "d178e8892b1bdb15f35913fdf57bd493" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e3098dac6011d7b876f33fc65717302a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: aTyTaZp6DoR3uniU6DjMnratuUw2xeHx-Ug6itPswbuWDCBeIwh6rA==
2024-04-25 07:07:53 UTC	8466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7d 00 00 00 c6 08 06 00 00 00 a7 e1 36 52 00 00 00 09 70 48 59 73 00 00 21 38 00 00 21 38 01 45 96 31 60 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 a7 49 44 41 54 78 01 ed dd 4b ac 1c d5 9d c7 f1 53 7d 21 0a 66 63 11 bc 72 24 3b 12 2c 8c 04 21 0a 8f 9d ed ec 20 9b f8 c1 2c 02 0a 93 28 64 72 91 86 c1 09 12 9a 59 30 60 65 91 28 12 19 93 2c b0 14 a4 10 50 66 16 83 1f d9 8c bd e3 5e ef 70 58 f0 90 ec 05 96 e6 5a c2 2b 9b c4 59 c4 a0 d8 b7 2b f5 eb be c7 6e b7 bb ea fc eb 54 55 77 75 d7 f7 23 5d 2e b6 fb f6 ad ae aa 73 ce bf ce e3 7f 12 57 83 3d cb e9 f6 9e 73 bb 53 e7 1e ec 25 6e 57 9a ba cd d9 5f 6f 77 00 00 00 28 6b 2d c9 be fa ce 7d 98 26 6e c5 a5 Data Ascii: PNGIHDR}6RpHYs!8!8E1`sRGBgAMAa IDATxKS}!fcr$;,! ,(drY0`e(,Pf^pXZ+Y+nTUwu#].sW=sS%nW_ow(k-}&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.5	50557	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	2062	OUT	GET /pagead/1p-conversion/614409984/?random=982947201&fst=1714028869092&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3D23868141-bd48-45de-a476-ac29f1c40d92%3Bsnowplow_session_id%3D9%3Bhit_timestamp_local%3D2024-04-25T09%3A07%3A47.178%2B02%3A00%3Bhit_timestamp_unix%3D1714028867178%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1714028863437-80-833348100cc9%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-80-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&auid=2028829226.1714028821&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=185.152.66.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=COfmouCmntbJugEiEwjUlKaP59yFAxVC1JQJHeciC-kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqYRsGdWE_y5tun3d5CFqo740rV3bleZ6Y0RDiebHlfC9T9dzc&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0eU2ucdthXls2Wxdr9kV8Gp4l96iFWhTQ&random=1578064393 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.5	50555	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	2902	OUT	GET /i.gif?e=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&s=LtrK64oRGXe1amJ-XtQ0Fc33sXo HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028867..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.12; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:07:54 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.5	50564	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	802	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/ActiefGrotesque_W_Rg.63479c54248fa038db83.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:54 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 25564 Connection: close Date: Thu, 25 Apr 2024 07:07:55 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 04 Dec 2023 15:02:11 GMT ETag: "36a1d73bfbadc61bbff427b079548a67" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b0d9885fa66f307673d2636510f36b60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: HyppjuLLiBVGOfzyILRGVsBMII4TYS-KFv8pZyQDfFY6Uys4jxJlqA==
2024-04-25 07:07:54 UTC	8949	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 63 dc 00 11 00 00 00 00 f9 28 00 00 63 78 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 1c 1b e7 12 1c 92 38 06 60 00 85 2e 08 97 72 09 8d 57 11 0c 0a 82 a5 5c 81 fd 3b 01 36 02 24 03 90 62 0b 88 3a 00 04 20 05 85 68 07 20 0c 84 3b 1b a2 df 27 70 9b 2a 2b 89 1f e4 66 15 22 cf fd 4b 60 19 89 d0 ed 50 a2 b0 fd a7 0b c6 b1 49 60 e3 30 60 e3 de 9f fd ff ff 59 49 43 8e bc a4 24 77 55 ea f1 b6 2d c4 6c a7 30 a1 1c 4e 81 a1 87 c1 51 99 d0 ab 0b 12 14 9b c2 e2 83 ef ed 07 d5 82 93 9f f0 a9 11 69 c5 67 bf a0 ba a8 b4 a1 24 2a bb 75 a7 c2 4e 7b cc 89 f7 fa 12 1e dc 8f 18 df de b6 b5 f7 c5 ce ef 03 46 35 0f 31 89 de 69 f6 88 d5 fe 3a 43 3f b8 d1 5f ad ea 65 33 4c 8a d6 02 73 d4 4a f6 48 35 5e 6a 9e 68 a1 6c Data Ascii: wOF2c(cx8`.rW\;6$b: h ;'p+f"K`PI`0`YIC$wU-l0NQig$uN{F51i:C?_e3LsJH5^jhl
2024-04-25 07:07:54 UTC	8370	IN	Data Raw: f6 b3 15 e4 c9 75 d5 31 09 60 63 02 60 cb a9 70 a4 68 52 83 dc 53 0c 09 20 ff 3a d1 cd eb 48 1d f6 68 81 1c 56 6c 05 38 16 4b 09 ce d4 6c 08 68 b0 ba 1d e6 df 70 09 35 5b 61 c0 7e d7 46 a5 70 b8 03 de 36 4b 18 8f 89 cc 41 a0 c8 46 e5 01 aa 93 6d e7 fe 69 3b ed d4 32 16 12 49 34 71 94 39 dd 07 b7 32 96 c8 4a 11 f1 a8 64 d1 ef bb 63 af 25 5a dd 31 16 65 b6 7d 5a 57 75 78 ab b5 34 06 39 89 0b 59 e5 f7 51 e6 8b 10 33 ff b5 45 99 f6 ad 89 94 cb 03 86 f2 93 aa 12 34 35 6b 94 e2 4a d3 45 cc fe b4 05 9a ba 31 63 05 1b 02 7a 03 5e a4 58 28 ee b1 c0 58 78 31 5e 84 4c 80 aa 4b 22 65 62 ff b7 dd 7d 93 f6 aa 29 7e b5 55 7b af 88 85 ca 21 ef 68 f4 81 d9 e4 d0 21 6d 86 3c 5c a1 98 38 71 81 65 fb 84 1f b8 3b 9c 30 d4 19 25 dd 21 8b 1a 71 dd d4 12 d6 f8 eb d2 01 85 41 ce Data Ascii: u1`c`phRS :HhVl8Klhp5[a~Fp6KAFmi;2I4q92Jdc%Z1e}ZWux49YQ3E45kJE1cz^X(Xx1^LK"eb})~U{!h!m<\8qe;0%!qA
2024-04-25 07:07:54 UTC	8245	IN	Data Raw: 9c 6c 94 24 4a 29 f8 16 96 cf 0b d2 99 7d 33 ad 3e a7 43 be 81 e3 6d 7e ea 6c f9 02 3c 98 7e 81 c7 78 d5 44 c0 24 b5 a5 08 32 81 32 40 cb 69 05 ad 84 2a ed 4a 44 19 5b 7a e8 ca a5 78 b7 a9 d4 6c 6e eb 8b 8a b7 22 34 07 1b 6e 09 95 61 c3 f1 9b 56 ec c7 e7 34 dc 17 df 05 bb 90 1d 4b 68 13 f2 85 34 b0 a6 14 a1 cc 2a bd 20 76 7b 1b 72 c6 a8 0c 28 bd 90 5b b0 86 b2 63 29 58 8a 6c 14 2e 04 47 7e 6e 55 d9 86 4b 42 e5 50 c6 1c c9 e2 52 b5 be d8 5e 47 39 43 da eb 91 13 76 09 72 96 a4 78 0b b4 1a 4a 16 a1 63 20 29 47 42 93 ae 94 71 57 8e a4 d6 f5 1b 49 05 a0 70 0b 34 db c9 68 1f 50 16 69 9e 7d da 92 66 36 7b b2 7a 9c c3 4a 41 9c 09 35 9c 7b 35 dc 3f d6 f0 fe 55 c3 ff 8f 23 f8 ab 5d 11 d6 88 7e 57 23 de 4e 97 ff 34 10 5c 8c cd da 5f a2 bf 37 40 2f a2 29 50 8a 4a cb Data Ascii: l$J)}3>Cm~l<~xD$22@iJD[zxln"4naV4Kh4 v{r([c)Xl.G~nUKBPR^G9CvrxJc )GBqWIp4hPi}f6{zJA5{5?U#]~W#N4\_7@/)PJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.5	50563	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	799	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/GT-Super-WT-Super.755cfa9556fcd80148ce.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:54 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 35076 Connection: close Date: Thu, 25 Apr 2024 07:07:55 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 04 Dec 2023 15:02:12 GMT ETag: "fe06ebe49ea06f5e4fd556b2e296d68c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 760062f89ae33fe37b1936a4c8ee9a74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: b8aojy98e2SfgMaeOuYWCYz1_CYUVcQDnwHxZsHZXocHCX6hnw1E7g==
2024-04-25 07:07:54 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 04 00 11 00 00 00 01 76 74 00 00 88 9f 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 38 1b e9 24 1c 9c 5e 06 60 00 88 68 08 34 09 9c 15 11 08 0a 84 88 0c 83 c9 51 01 36 02 24 03 8e 18 0b 87 1c 00 04 20 05 86 36 07 96 62 0c 81 27 5b 74 52 71 85 5c f7 9b 2e 15 e8 cd aa ce 2f e6 19 ff f5 2b c6 c6 d0 ea a1 76 52 1d 7d 34 f6 6c bc 84 dd e2 3d d0 1d 4a 78 2b 49 51 b3 ff ff ff cf 3f 1a 63 ac db 60 c7 21 a8 99 96 55 d6 f7 65 62 ee 5e 84 51 ac 16 1b 54 40 56 9b 17 50 6d 43 60 74 35 15 90 c6 62 3e 85 2c 14 31 9b 58 54 b1 53 d0 45 ce aa d3 a2 f4 33 3d ad 67 b2 0d 17 87 01 0a 5c 89 32 f4 6c 0d 76 91 fd c6 1c ce c3 9d 54 f2 80 4a 04 22 4a d8 e1 29 3c 0e c9 5e 8b 39 b8 b0 bb c2 71 b1 c2 64 c5 5b fa 9b 6f Data Ascii: wOF2vt8$^`h4Q6$ 6b'[tRq\./+vR}4l=Jx+IQ?c`!Ueb^QT@VPmC`t5b>,1XTSE3=g\2lvTJ"J)<^9qd[o
2024-04-25 07:07:54 UTC	1112	IN	Data Raw: 64 82 55 cf 2d 2f e9 d7 dc 49 09 69 d9 fe 4a 92 26 0c 62 42 0e 76 e9 48 bf f2 60 13 2a 45 55 89 f4 2c 21 ad 34 ec 2c 5a 36 12 66 40 27 4f e0 0a a6 e9 20 90 bc 19 41 ae 0d ed e2 25 06 fe f4 fe 0f cf 79 90 c3 49 dd 02 c6 a6 91 92 35 2d 47 59 be 17 80 6f 01 1f a5 9c 9f 9c e5 00 b0 c6 37 ca 48 a2 03 ce 00 d2 d3 e9 de 88 ba 60 91 c2 7d 2f 34 5c e3 6e 35 4c bd 31 54 6a 29 ac 34 ab ea 23 6d 26 cf a0 6a ed 73 86 21 1d a6 1e 76 d5 73 58 06 57 20 f5 51 15 12 9b 66 6a ef 4f 22 9d 92 5e 4e 75 1c e9 d4 e4 b3 68 4a e2 93 52 23 91 26 36 6b b8 ca f2 e2 00 c4 99 5e 67 17 c2 ae c3 20 b7 7e 29 cc c5 10 ff 26 12 85 f2 4a 9c ac b5 d9 57 79 56 4e fc 37 ea 53 ac f1 ac 33 cb e6 13 b1 bf c2 8d 2f b2 42 13 ea c3 ce 85 8b f4 5e 66 55 46 f0 22 eb 1a e4 4b 4b 54 c0 80 a1 28 bf 0d 54 Data Ascii: dU-/IiJ&bBvH`*EU,!4,Z6f@'O A%yI5-GYo7H`}/4\n5L1Tj)4#m&js!vsXW QfjO"^NuhJR#&6k^g ~)&JWyVN7S3/B^fUF"KKT(T
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 36 b3 8c 73 9f 4a c8 68 5b ad 43 c2 4f 23 a1 0f 0f af dd 19 12 67 b3 41 99 e7 24 5b 65 3b 07 e1 d4 05 84 f4 c7 f9 b5 85 f9 45 39 2f f7 bd 7f 8e 2f 65 39 8b 0f 02 df de d7 a4 4f 5c 1e 51 a8 71 eb 42 e3 0f c2 89 df 8c 23 13 e6 2c e1 e2 ec 2d 7c f6 01 b0 d4 b0 f4 dd 63 a5 9c a3 1b 8e f3 86 82 45 e2 72 e1 a1 39 6e 3e 4f c1 ee 4b 51 69 b1 17 62 4a 4b d4 c7 cb d7 c2 21 27 a0 e0 53 ef ab 15 48 42 24 89 28 54 04 73 c5 5c 17 76 ed 58 19 9a e2 08 cd 8b ee f8 12 d7 53 0f 4b f0 5a 20 72 f8 e5 19 f3 6f 67 2f 3b e3 53 4a 40 fd 07 ad 8f 02 0e 7a 96 87 97 a0 0c 26 8c 5d 30 ce 54 1d 22 77 96 c0 38 f2 d6 5c 49 9a ea 42 6a 59 53 90 2d 87 9c 64 be 12 ea 06 ba 3b 0c 29 3c 06 de fb 7a 73 ac ad 9b 0e a6 3f 07 3c ff 3d 71 47 aa 04 56 d7 9f af a7 e0 d7 ff c3 15 fb ff cd 4f 05 2c Data Ascii: 6sJh[CO#gA$[e;E9//e9O\QqB#,-\|cEr9n>OKQibJK!'SHB$(Ts\vXSKZ rog/;SJ@z&]0T"w8\IBjYS-d;)<zs?<=qGVO,
2024-04-25 07:07:54 UTC	1855	IN	Data Raw: e7 8f 4a 20 fa 1a ad ae 1f a4 d2 db fd cb cc 13 11 d4 28 da f1 d3 4c 98 7d b7 b9 0c 8f 72 72 68 46 b6 31 4e f8 59 0c 8d c1 9c 43 d9 ee 6c df 1d da 95 04 1a 9c 2f db 67 03 fb 27 c5 f6 d9 4e 0a bc 68 92 9e 2d 37 b7 93 ae 4f 8a eb ad 39 a6 a2 76 2d ba 43 67 1b ee fb 9a d9 84 de 9a 53 a9 14 9a 8f ec 91 af 6a be 8e cc d4 71 8a a9 00 b7 97 16 e0 dd 6a 6e f5 f0 6c 3d 71 75 ec da d9 cd 9f 40 d1 ff b8 b4 af f6 c8 f6 1a de a7 cc e2 f1 5e ad dc 96 c5 44 26 f2 00 d7 54 76 53 62 d7 ba 0b fa 37 e0 7f 80 9b bf 4a ea f9 42 d0 2d 81 cf 70 89 5a 3e 23 88 66 54 04 c8 19 d9 21 05 32 46 3e c8 1b 89 28 63 8f 69 c3 a8 48 9e 04 b8 83 c9 83 57 86 66 c1 89 8f e7 74 f9 3f 69 0f b6 dc d6 bf 64 5d ff 37 73 2b ed 8a 9d 7d e2 45 04 82 be 67 15 81 f5 18 84 8b a5 aa 80 0f 9e ca 0c 85 00 Data Ascii: J (L}rrhF1NYCl/g'Nh-7O9v-CgSjqjnl=qu@^D&TvSb7JB-pZ>#fT!2F>(ciHWft?id]7s+}Eg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.5	50565	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	802	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/ActiefGrotesque_W_Md.23817d3ab6c377c0a652.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:54 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 26436 Connection: close Date: Thu, 25 Apr 2024 07:07:55 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 04 Dec 2023 15:02:11 GMT ETag: "fb6ee6d06c40ef384895f47aa20f7ef0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8fec22e4e0f460412a9f95c3ff89a9b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: pbM8SMYt-IDYPbu6xa7GXZ5Afiu5iq2lu-yBl0yZ7L60TC9xTVfLuQ==
2024-04-25 07:07:54 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 67 44 00 11 00 00 00 00 f8 c8 00 00 66 e3 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 1c 1b e7 14 1c 92 38 06 60 00 85 2e 08 97 72 09 8d 57 11 0c 0a 82 a4 6c 81 fb 6c 01 36 02 24 03 90 62 0b 88 3a 00 04 20 05 85 68 07 20 0c 84 4a 1b e4 de 07 64 4e 8c 0e 2a bf de ac f4 9b 93 e7 a3 bf 5e 01 bb 15 de ed 10 ba 3f de 83 28 82 8d 03 c4 d8 96 9c b2 ff ff ef c9 c9 18 05 d8 c1 9c 56 f5 3d 1c 76 90 32 39 54 9e 16 d5 2e ac 89 c6 9e 25 9a 12 4a 6c 24 b1 48 f1 62 eb f3 ca 68 8e 8f 3e 1b 37 36 95 38 c9 23 8f f0 01 af 7e c4 a6 0a f6 cb 4b 4f cb d6 3e b0 91 3f 0e 5f 45 4f a1 50 0f 15 2e e1 91 a9 17 f5 d0 57 d8 fd 92 4b c5 c3 d5 91 d3 ea 4d 84 85 fb e4 13 9f b9 7d dc 67 51 e4 69 fd aa 85 5b ec 23 5a f9 5c 3f 92 Data Ascii: wOF2gDf8`.rWll6$b: h JdN*^?(V=v29T.%Jl$Hbh>768#~KO>?_EOP.WKM}gQi[#Z\?
2024-04-25 07:07:54 UTC	265	IN	Data Raw: 4d 4b 9a 01 cf 4a 9f e7 25 69 d8 5e bb f7 4c 21 7e 41 d4 fc 37 85 32 9d 4a 4e a0 b2 8f a9 11 7f fc 6b d8 c2 64 a7 f7 3a a6 b7 2a 1e de fd 65 0a 63 b4 e8 35 0b 41 fd a2 1f 73 49 eb 99 64 10 1d 76 24 30 19 9f 02 89 3e b2 80 30 ac e3 32 d9 03 82 4e 69 14 51 47 96 0f 51 f8 5f 15 40 54 94 81 aa f6 12 8d 42 32 9a dd 89 29 53 6e 60 ea cf 59 b8 4a 9e 4d b1 0e 53 05 1b 68 c6 f7 31 4b 8a b1 55 4c b6 00 b4 b6 48 23 a3 4d 07 4e 53 9f 23 d0 1f e1 5a d6 f6 e1 31 60 79 0d b3 44 ab ce c3 7f f6 e9 a7 7d 0c a9 4d 61 75 95 a8 8b a8 51 ca 99 ef 61 47 4a 27 e3 71 3c 3a 65 9c 41 01 11 c2 72 15 96 b5 9b e8 f8 82 a0 57 18 c5 f8 dc c8 16 96 e0 2c 3b 45 4b d2 63 fc 5f 1f a2 68 8d 22 2b fb 5e c5 39 51 9b 80 d6 80 c3 11 4a 1c e3 27 d7 28 6d fc 6b 03 de 2e 4b c1 db a1 1c 39 3c de 1a Data Ascii: MKJ%i^L!~A72JNkd:*ec5AsIdv$0>02NiQGQ_@TB2)Sn`YJMSh1KULH#MNS#Z1`yD}MauQaGJ'q<:eArW,;EKc_h"+^9QJ'(mk.K9<
2024-04-25 07:07:54 UTC	1329	IN	Data Raw: 9a 1d 14 2e 65 f5 5e b4 96 77 6c 64 02 4d fe aa 21 01 06 3c 92 b2 e0 bd 7c 5a 5f a2 a6 5c 88 64 cd 4f 3e 07 9c 3e ed 3a f8 93 c8 fb ce 13 86 d2 61 05 4a 9c af dc 61 0c ba 97 89 9a aa 65 23 66 b3 6c b8 a9 76 79 91 cb b9 5c d4 52 a3 18 29 01 2f 9d 3e 8d 00 dc 69 49 2b 35 e9 d7 db 54 72 30 33 dd d9 60 f0 f1 ec 44 a9 9e 3a c3 ed c1 7f a8 6c 6f 54 95 0a ed e4 31 a2 35 27 87 e0 13 ab 7d 99 12 be 9d fe 0d 28 0e a4 01 a0 54 84 fa d5 52 0c 77 c5 2f 35 b0 6d e7 49 99 12 11 a5 58 2d cd 63 18 b2 5e 10 45 2a 3d 33 3a 31 d9 5d 95 57 d5 3d 09 7f 22 bc ac b5 a5 87 06 bf e1 7d 2f 5a 0a a9 4d b3 60 3d f5 2f 98 a4 97 5d 6c 47 68 6b d9 93 93 f2 ae b7 57 d0 56 eb d0 38 15 87 cd e1 12 70 88 9f 4c a7 72 18 6e c1 ad 5c 59 89 db e3 30 fb e5 d8 d9 cf 16 af 5d b2 28 71 36 56 6e f6 Data Ascii: .e^wldM!<\|Z_\dO>>:aJae#flvy\R)/>iI+5Tr03`D:loT15'}(TRw/5mIX-c^E*=3:1]W="}/ZM`=/]lGhkWV8pLrn\Y0](q6Vn
2024-04-25 07:07:54 UTC	9117	IN	Data Raw: 48 e0 57 0e 70 2d fb 62 32 6e a0 ec ee 0e 80 ad 8b 33 c1 56 3e d6 31 ce 64 ea 1b 5f a2 7b 7b 93 14 a4 59 75 f1 52 1a da f3 d1 58 49 12 f1 ea bc d0 fd f2 d6 8b 1d 42 8d 4e 1d ec a5 6b 7f b9 33 21 ba 65 27 56 c6 c6 3c 40 71 2c f9 1f 76 0d 74 09 ee e0 ae 5d c8 9c 92 75 20 fb 84 a5 9e d4 2d 22 4f 53 95 8f cc 2c 86 38 2f 7a 0f 72 fd 80 e9 66 1a 98 3a 31 2b bf 40 0a 8b f3 86 b3 a1 f4 b0 9e fc c8 0f b8 7a 26 97 2e 3c 5e 7a 37 c0 6e f5 dc c1 ea 3e ae 79 1b 16 48 ac de ff 58 3d 67 5a dd 3b c3 52 f9 0d d7 ed 61 4a cc 7e ce 5e 64 9d e9 9e 11 44 96 e8 cf ac cf 46 c0 75 ef b9 fb 0f eb a8 c7 04 a6 e8 be 3d 9a b7 61 41 7f ab 77 2b ab e7 8e 56 f7 f1 b0 44 01 a5 d7 da 54 69 5c d9 15 a2 b8 43 1b d9 46 b5 71 ed 0c c2 26 43 38 24 91 01 36 32 a4 4c f8 00 3a 6b 11 00 1b f2 af Data Ascii: HWp-b2n3V>1d_{{YuRXIBNk3!e'V<@q,vt]u -"OS,8/zrf:1+@z&.<^z7n>yHX=gZ;RaJ~^dDFu=aAw+VDTi\CFq&C8$62L:k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.5	50556	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3485 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028872..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.13
2024-04-25 07:07:53 UTC	3485	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 38 32 30 66 34 37 37 65 2d 63 34 31 35 2d 34 65 35 38 2d 62 63 66 61 2d 32 35 62 33 63 31 62 62 36 61 39 63 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"820f477e-c415-4e58-bcfa-25b3c1bb6a9c","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:54 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:53 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:53 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:54 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.5	50562	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:54 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Thu, 25 Apr 2024 07:07:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.5	50566	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:53 UTC	946	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=32240537-c035-43c5-9fa9-a34460ddfd72&batch_time=1714028872064 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 16326 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:53 UTC	16326	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 33 65 65 38 62 33 36 2d 39 34 30 64 2d 34 33 61 63 2d 62 30 31 33 2d 64 65 37 30 39 62 65 66 65 61 35 30 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 30 32 38 38 37 31 35 34 37 2c 22 73 65 72 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 35 2e 39 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0}},"application":{"id":"03ee8b36-940d-43ac-b013-de709befea50"},"date":1714028871547,"service":"desktop-web-renderer","version":"0.5.9","source":"br
2024-04-25 07:07:54 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 32240537-c035-43c5-9fa9-a34460ddfd72 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:54 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 33 32 32 34 30 35 33 37 2d 63 30 33 35 2d 34 33 63 35 2d 39 66 61 39 2d 61 33 34 34 36 30 64 64 66 64 37 32 22 7d Data Ascii: {"request_id":"32240537-c035-43c5-9fa9-a34460ddfd72"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.5	50567	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:54 UTC	753	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-25 07:07:54 UTC	573	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 1112240 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 06:58:46 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding Content-Range: bytes 0-1112239/1112240 X-Cache: Hit from cloudfront Via: 1.1 59d47415973fdc0751ce88be5c9c1a26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: mGvWfDg_m5iHZ8iJb6pSo0gNhSs49uMGGfkV7Qb5THPyEXheeseL9A== Age: 595
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 10 e8 15 6d 64 61 74 21 00 03 40 68 1c 21 00 03 40 68 1c 21 00 03 40 68 1c 00 00 02 72 06 05 ff ff 6e dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 31 30 30 20 65 64 30 66 37 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 Data Ascii: ftypmp42mp42iso2avc1mp41freemdat!@h!@h!@hrnEH, #x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3
2024-04-25 07:07:54 UTC	11033	IN	Data Raw: 5b f2 16 84 4d d9 6e 10 ca 7d 32 31 47 ba 13 36 0c 41 f2 ca c0 47 c6 85 2f 2e fd 57 4f c4 bb 38 a9 b7 71 45 53 ec d7 60 fc 79 a2 c7 7b 8f 81 d7 35 62 53 45 68 af e0 f0 49 80 af d6 6c 7a df 3c 9f 47 98 4b 92 dd 71 fa f1 c4 cf d6 80 10 59 c6 ac 04 e1 d9 bc a9 8d 16 cb a0 0d 99 87 31 80 63 5b a6 e1 48 53 37 56 30 90 7f a7 7e 9d db cd 80 26 67 93 27 0e ec c5 b0 78 59 a5 69 60 ac ac 7c b1 cc f2 df 8d 77 12 d5 1d 9f bb 45 17 2f 3b bd 6b 00 4e 72 af 28 58 21 f6 76 97 d7 65 f1 cf bd fe 38 4d ea 08 59 38 21 82 84 56 17 b9 fa e7 5a 8d 8d 6d c7 78 18 84 14 9e de 7e 60 48 ea 2e 3e 91 c8 d1 6e 57 3c 8c e9 37 40 72 bb 80 e6 41 ba b0 60 1f 78 b0 00 28 9e 33 8d 19 89 99 f0 81 76 b9 d7 97 f2 6a bd 84 37 b3 fc ab 09 66 56 18 11 5c 8c 0a 50 78 66 b8 7d 13 f3 b5 c8 1a 06 57 Data Ascii: [Mn}21G6AG/.WO8qES`y{5bSEhIlz<GKqY1c[HS7V0~&g'xYi`\|wE/;kNr(X!ve8MY8!VZmx~`H.>nW<7@rA`x(3vj7fV\Pxf}W
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 6f fd 60 a7 f4 92 8e 90 96 50 9f e1 3c 46 47 b3 2a 3d bd a5 e0 9a 7e 0e 5f 36 6b b1 6a 28 ff 53 68 10 1c af 59 df 79 79 53 19 f4 3c 50 63 7b 00 7c 89 67 ef e9 40 92 ff 2b 3e 04 ab cc d1 91 a1 2e b6 ab c7 39 9f 36 f2 1e 2b bd c9 a1 78 88 df bf 84 8d 16 ab ab 70 f8 1c 07 1f 45 9c 0d e8 38 21 2f 88 68 14 96 76 db af 41 29 72 c3 db fd 4b 63 5c 44 7f fd 18 96 6c 66 b1 f2 50 5a 1e 4f e4 b7 48 87 e5 d6 44 c5 17 be e5 1a c9 c6 d1 9b 2a 93 37 75 66 9a b0 c5 34 7e 5a b5 58 06 d3 8f d5 31 09 77 01 54 f7 95 d9 40 81 0d df b7 91 88 7a 3d 41 f7 ae ee a0 3b 30 5d c1 f6 3f b3 4c 26 fd 98 b3 d4 9e 6f 65 ff 5f 00 ef 81 d2 83 ee 29 3d f2 09 61 ae df 71 65 79 8b 26 c5 70 d5 b8 4d 0e 0a e1 6b d9 95 8a 4e 15 31 60 6f f8 8f 44 fe 63 65 96 0d b6 af f6 62 05 36 e8 5e bf 19 84 a5 Data Ascii: o`P<FG=~_6kj(ShYyyS<Pc{\|g@+>.96+xpE8!/hvA)rKc\DlfPZOHD7uf4~ZX1wT@z=A;0]?L&oe_)=aqey&pMkN1`oDceb6^
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: b0 88 92 96 dd 1c b3 bb 74 86 32 6e df 53 e5 41 19 2a 3e 3a cb 33 83 4e 15 7f f4 67 6b ff fb fc 85 28 27 da c5 85 67 3d 9b ec 29 b4 e6 3d a8 13 b5 f3 30 d8 d3 08 e4 f1 5f 7f 42 86 7d ad d4 9a 5a 11 ee 1d fb 3c 01 b2 a5 77 cd 0b d4 15 93 52 12 0f 8f 1f 90 38 43 6e dd cb 13 5f c2 07 ae 56 8c 0a bf cd 81 c6 99 28 e8 d5 fe 2b ee fa de 49 f9 da 78 58 9b f1 7c 1a 40 9e e5 fc 13 5d c7 69 c6 bb 3c 87 8f aa 15 a4 a3 71 92 99 da df f9 e8 2f 6f 2a a3 1c 5c 95 35 b0 7b 21 4b b8 00 72 70 02 70 4c 88 2c 3c 30 a3 4a c2 c8 24 c0 60 3c 03 fc 2d 4a f7 a3 8e 15 bb a5 a6 ce 64 53 23 30 29 0e 4f e0 33 a3 ef 9b ef b9 f2 ea 34 cb 95 df 81 0a 3d 20 7f 2c 85 12 a0 08 eb 21 60 cb 4e c1 2f b9 a9 ad d3 fb a2 8c 24 59 a5 51 a2 f8 dc 20 8f 63 0c cb cb 47 a4 69 f2 52 8b 9b 0f ab b2 38 Data Ascii: t2nSA>:3Ngk('g=)=0_B}Z<wR8Cn_V(+IxX\|@]i<q/o\5{!KrppL,<0J$`<-JdS#0)O34= ,!`N/$YQ cGiR8
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: d6 58 c6 a1 07 59 b2 96 c3 31 7b d2 08 98 66 55 fc e9 39 f0 03 a1 85 9e 1b 1a 9f ac 47 dc 27 5c f2 03 7f 07 a1 b1 6e bb 5a 73 e8 0c 52 06 c0 d5 b8 35 bb 21 72 f5 ce c9 12 55 53 be 02 1c af a3 93 9c 44 1a da a2 a6 54 fb 60 86 da 4c 58 f5 6f 3d 43 e1 ad 40 eb bc b3 cd 07 ec eb d9 1b c0 b2 f1 b4 92 63 71 75 b3 63 f3 dc 2a 10 ae 54 e0 7a 55 0d a3 22 71 95 95 e3 ee db ed aa 2c c5 24 b7 48 b4 2a de 93 a6 c8 6b d5 0f a0 6d 4d 25 de bb 2b 50 bb 40 20 6d 39 ba 69 f9 11 9a b1 ed 16 d5 ee a1 8e c9 4a f7 a2 fe c9 af 0b 40 92 7c 1f e6 0e 53 67 14 2f 0b f3 25 25 62 da ca 64 ac 50 fc a7 f7 27 a8 00 a5 81 c9 f6 43 ca 43 c7 03 1d 97 c3 e2 3b dd 45 ee d8 f6 3d d0 a5 71 08 b4 b8 18 f3 e8 eb 64 e1 ef e1 cb bd a9 6f 6a 8e 82 4e e2 54 af 3e 45 f8 63 c8 82 e3 19 bd 75 9b a5 3f Data Ascii: XY1{fU9G'\nZsR5!rUSDT`LXo=C@cqucTzU"q,$HkmM%+P@ m9iJ@\|Sg/%%bdP'CC;E=qdojNT>Ecu?
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: f3 f5 5a 37 04 15 9d 85 c9 6d 54 98 7e 97 f4 25 40 44 77 4b a9 eb 96 ce 07 78 84 04 4c 04 3e 17 67 5e f8 fc 5d 42 44 ae e9 08 4f 54 b4 bc 86 b8 a5 ad 43 77 f3 33 6a 15 b6 67 60 13 b4 61 14 87 2e 4b ba c9 d2 29 48 75 cd eb 90 c0 f4 bb 87 ca 17 20 41 69 1a c7 4b 94 ca 4a 06 00 7f 88 51 7e c2 fc 05 6d 56 64 eb c1 52 ce 22 97 ac 6f 93 a6 dc be a7 00 9f 88 f3 b2 e5 48 18 c2 ec ac c3 d2 ea e8 bd 4c 79 42 d3 a3 23 97 67 ff 12 7e a1 28 f5 c7 02 06 76 41 39 fa 15 85 48 fe d1 a8 de 8a 44 ff 43 bf cd 31 86 3d 30 60 03 58 30 61 97 0a 03 e1 52 e8 af e1 71 b6 80 40 78 5b 0a f6 79 3a 15 66 4c 91 37 4f cc 1e ed 99 81 ac 68 c9 bc fe b4 04 9f dd 19 13 07 d1 0e bf 3e fe 61 da b4 b0 e0 09 29 7a a9 d9 40 88 7d d5 b1 64 d7 61 36 4b 65 2f d8 6f 0f e1 52 41 17 24 da d1 19 23 d5 Data Ascii: Z7mT~%@DwKxL>g^]BDOTCw3jg`a.K)Hu AiKJQ~mVdR"oHLyB#g~(vA9HDC1=0`X0aRq@x[y:fL7Oh>a)z@}da6Ke/oRA$#
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 44 7e d4 21 4e ef 5c eb b7 9f b3 9b 20 d1 1d dd 56 a0 86 00 6b 81 3a c6 37 06 27 75 af 4e 62 e3 0b 86 0e 23 58 cf 62 3a 9d c3 99 9c ee 2e 38 04 aa d4 26 ac e0 8c 2e e9 8e df c5 92 cd 5b 53 63 0f 9e d9 e4 b3 fe a9 08 e5 07 d1 fa dc 0e 9c cf d6 e4 6f 4c 3e b4 6c 58 52 1d f9 8c 79 b5 93 de b2 3b 31 11 68 25 ec 3c 5b 57 c6 e6 03 ed aa 12 04 28 cc 8a 89 54 cb 1d 6d bb a8 dd 06 94 05 44 6b 75 2a 29 55 04 5d 77 21 d2 12 40 06 2e aa ba 35 e1 4f a4 1e 81 b9 c3 05 a3 92 2c 8d da f0 85 73 8e de f0 ae d0 3c 8a e3 df 63 0d 63 dc d7 a2 23 a3 c0 64 e9 9e a8 5a 8a 13 9c c8 03 fd af d7 d1 fb c8 c3 94 6a a4 a8 6e 49 92 59 f0 4f db 88 80 38 17 b1 2f b3 5f f4 96 a7 16 4f 2b af d7 a9 d2 2d b0 06 af b8 fe 9a 0e 60 cc f0 3f 0e 17 d6 0c 54 3e b1 43 36 10 90 25 b8 ef 73 1d 19 d4 Data Ascii: D~!N\ Vk:7'uNb#Xb:.8&.[ScoL>lXRy;1h%<[W(TmDku*)U]w!@.5O,s<cc#dZjnIYO8/_O+-`?T>C6%s
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 6a e5 79 8e a2 3e 9c 1f 74 3e ef fb 9b 8f 4f f0 40 10 ea ef 3c 1f 1c be 09 70 12 9e ef ce 86 6c da 37 e6 07 c3 a7 a0 3f bc 92 92 48 94 83 e3 9a 5a ba 31 c9 41 dc 52 46 e0 8e 7f c5 0d a2 b1 95 a5 c1 95 f7 25 d4 a9 23 d1 14 58 3d 33 bf fa dc 0b e3 7a 7d ed 34 9d d0 03 1d 49 55 82 ba 14 34 85 c2 54 2b e2 5b 6e bb c8 fe 7f ea 59 7d da ed de 49 02 a5 13 3e c0 8d ae 4b 83 fc 57 40 3d 1d 87 9a 11 41 5b 79 25 70 ce 01 b1 5f 9e fb b8 94 96 c6 d3 bd d8 1f 47 62 b5 7f ee 00 3c 90 f2 bf ea e0 13 56 1e f1 74 6a 32 cd 4e 10 75 1f c3 78 59 80 a9 e1 dd 40 df 7a 4d 80 73 6a 9b 6e 98 35 c0 70 90 87 28 d0 73 da 87 dc 3a e2 46 75 bc b3 09 7c 9a 11 6e f4 02 98 20 17 1a 36 03 e5 cf da 43 f7 9d 38 c4 50 c3 48 92 24 f9 6a 8c 94 cc 5e f3 77 5a b6 cf 87 65 d3 bc 54 54 0e 79 78 1c Data Ascii: jy>t>O@<pl7?HZ1ARF%#X=3z}4IU4T+[nY}I>KW@=A[y%p_Gb<Vtj2NuxY@zMsjn5p(s:Fu\|n 6C8PH$j^wZeTTyx
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 8a e6 db b4 fa 65 86 f8 68 2f 77 ff a1 74 03 62 c8 77 48 1c 05 24 08 79 a0 18 e7 23 2a 23 b4 45 42 ef ba 6e c0 23 5b 5a fc 06 5b 4c c1 7f 91 60 aa 5a 41 a0 87 34 83 d6 1d d6 34 3f d0 0f b1 80 a7 ee d0 a2 0c ae b4 af 06 e7 ae d9 cf 7d cc 20 c0 7b 2a e8 47 d8 e3 3a a5 68 0f 72 f9 eb 0c 8b 24 f0 f3 02 6d 16 74 3a 82 83 72 a6 0d 78 ac ce 24 9a 85 2c 15 68 b3 74 38 d3 86 d4 fd e1 13 2d 6e e9 4a ee b5 39 a8 3d 64 c4 e9 0f 4e 44 8a ff f4 f1 b4 81 c5 42 2b 71 53 99 af 76 4a 90 08 96 6d c9 60 24 83 44 79 ee ee 74 3d d7 d5 6f 2f 98 c8 8e f2 78 cb 19 1e 2d d9 08 a1 06 cb 63 e7 db 29 1f 70 5b 6e 64 f0 55 e4 89 79 23 e2 4a 76 55 2a 8a 40 e1 a0 2a 5b a0 ca 85 10 ea 63 68 e8 f7 49 2d ab ea ff 8d 5d 6b 22 c1 6a 17 9e 94 9c d6 5b 74 0b 77 16 97 97 ec 7d 47 c7 74 3a 7d ec Data Ascii: eh/wtbwH$y##EBn#[Z[L`ZA44?} {G:hr$mt:rx$,ht8-nJ9=dNDB+qSvJm`$Dyt=o/x-c)p[ndUy#JvU@[chI-]k"j[tw}Gt:}
2024-04-25 07:07:54 UTC	16384	IN	Data Raw: 6c ec 13 1b a7 29 31 8c 61 bb 5a 7d 98 67 ea d8 cb 48 10 b2 40 a6 18 cf 26 19 0e f4 4c 76 35 02 80 f7 fd a0 fc 65 33 48 78 3d 36 bb 24 5f 8b ee a1 6f 00 97 36 aa 16 1c 1b ff 4f 45 22 92 8d b8 40 67 3e 4a 63 63 d0 60 e2 0e 04 ec d9 b6 5b 3b 19 07 04 02 55 7f 4a f4 52 d8 bf 42 44 03 e2 da 02 9d c1 d1 de 89 aa 8a a3 17 ff d7 bd 36 82 39 ad b4 16 17 40 ab bf 30 db af 9e 0e 79 0c 0f a6 62 30 3e e9 e1 f3 40 b4 4e 2b 88 d9 04 75 aa 1e 7e de 48 ab d2 db 9c b6 46 55 40 17 06 45 96 b7 36 cc 32 b2 87 6a 08 82 67 d0 74 db 5a 47 91 50 46 a9 80 03 20 0a b0 ad 86 8e cf f1 a0 6c d2 12 e4 1c 31 3c c4 9e 88 f1 33 5a c0 5d 62 21 f4 6a 92 76 78 70 66 ad 0e c6 f8 43 f2 46 a5 ba b9 f6 69 63 9a 91 b3 4f 4b b0 11 b1 73 79 ee 88 e6 94 36 6a 81 72 d1 16 12 43 5e c4 05 e6 8e 1a b6 Data Ascii: l)1aZ}gH@&Lv5e3Hx=6$_o6OE"@g>Jcc`[;UJRBD69@0yb0>@N+u~HFU@E62jgtZGPF l1<3Z]b!jvxpfCFicOKsy6jrC^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.5	50568	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:54 UTC	2191	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028872..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.13
2024-04-25 07:07:54 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 65 34 30 34 31 34 30 32 2d 39 32 31 33 2d 34 65 38 63 2d 38 61 31 30 2d 63 31 36 62 34 33 38 30 61 31 38 39 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 32 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-e4041402-9213-4e8c-8a10-c16b4380a189","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":2,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:07:55 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:55 GMT ETag: W/"4529-cMXPxRZWi61KfrMCGYoJW+VXOQk" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17705 Connection: Close
2024-04-25 07:07:55 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 33 34 35 31 39 31 36 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 38 31 38 30 32 38 35 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 32 31 37 38 35 36 31 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 39 38 39 37 36 30 37 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 38 34 36 30 36 33 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4f 44 51 32 4d 44 59 7a 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 4d 77 4f 54 67 35 Data Ascii: {"creatives":[{"adId":523451916,"creativeId":348180285,"flightId":512178561,"campaignId":309897607,"advertiserId":2846063,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyODQ2MDYzLCJhdCI6OTU5LCJidCI6MCwiY20iOjMwOTg5
2024-04-25 07:07:55 UTC	13956	IN	Data Raw: 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4f 44 51 32 4d 44 59 7a 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 4d 77 4f 54 67 35 4e 7a 59 77 4e 79 77 69 59 33 51 69 4f 69 49 69 4c 43 4a 6a 61 43 49 36 4d 7a 51 35 4d 44 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d 30 4f 44 45 34 4d 44 49 34 4e 53 77 69 5a 47 6b 69 4f 69 4a 68 4e 47 49 34 4e 6a 41 35 59 7a 5a 69 5a 6a 63 30 4d 7a 51 30 4f 44 52 6d 59 54 41 35 59 54 5a 6b 4e 54 4d 34 5a 54 55 79 59 53 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 4a 68 4e 6d 46 6b 4f 54 55 31 4e 44 63 30 4e 44 52 6b 59 57 46 68 59 6a 46 6b 4e 32 59 77 59 7a 63 78 4d 7a 46 6d 4e 54 45 79 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a Data Ascii: iMS4xMSIsImF2IjoyODQ2MDYzLCJhdCI6OTU5LCJidCI6MCwiY20iOjMwOTg5NzYwNywiY3QiOiIiLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0ODE4MDI4NSwiZGkiOiJhNGI4NjA5YzZiZjc0MzQ0ODRmYTA5YTZkNTM4ZTUyYSIsImRqIjowLCJpaSI6IjJhNmFkOTU1NDc0NDRkYWFhYjFkN2YwYzcxMzFmNTEyIiwiZG0iOjMsImZjIj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.5	50569	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	812	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=1081344-1112239 If-Range: "c15169e9b85a213995deb6b3112712cb"
2024-04-25 07:07:55 UTC	555	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 30896 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 25 Apr 2024 06:58:46 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aff20911eaac3f22b90f4012f7ae5d7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 1yN43_P5qiIMmCkpt0Q_-FVTb3poYKch6cNuNgDFmWbGN5HujvldPg== Age: 596 Content-Range: bytes 1081344-1112239/1112240
2024-04-25 07:07:55 UTC	15829	IN	Data Raw: 39 33 d9 c0 0a 57 a9 78 59 96 16 e1 ca 50 cc ed 14 2a e9 13 8a b0 2d 00 94 e1 d0 a2 71 3e bd fb 58 42 52 77 ae 23 24 8a 97 b1 78 23 25 3c 71 b4 61 92 ba f6 3f bc 14 61 35 a7 7e 91 47 d7 91 82 48 b6 56 f9 aa 02 a2 d0 f7 42 3b 5d 9c 8d 9c af 11 7a 97 b5 11 6d f0 b4 e9 e2 c8 4b 25 e0 20 29 63 ab bc 2c 48 c4 0c f1 1a d5 93 bb 02 8c 06 d1 06 3e 98 5e da 19 d6 22 99 9b 33 88 e3 98 73 2f 9e b0 73 c9 53 f1 b3 31 c1 11 89 99 d5 1d fa e9 0b e1 92 7e c1 ec 97 9b 47 07 75 7f 2a ce 50 f8 e1 52 ab 3d 2c ff ed 04 52 16 f4 5f d5 cc 7e 77 8d a7 c4 f4 9e f8 1b f9 35 c3 7a 99 9c 96 e9 9e 14 57 a0 69 d2 52 88 51 24 c6 7b 36 30 e4 78 64 43 2c 51 c8 f8 ba 3e b9 de 2d 29 e7 6c 0c 0f 7d 5e 31 4d e1 37 fb cc 4f 18 3c 4d 0e d0 8c 8d 2f d8 5e de 0f 14 f8 aa af 8a e2 4f e6 06 0e d1 Data Ascii: 93WxYP-q>XBRw#$x#%<qa?a5~GHVB;]zmK% )c,H>^"3s/sS1~GuPR=,R_~w5zWiRQ${60xdC,Q>-)l}^1M7O<M/^O
2024-04-25 07:07:55 UTC	15067	IN	Data Raw: 65 77 5a d9 2a fb 44 b0 29 17 ce 7b 6b 38 29 12 30 94 50 25 4c cb 2e 91 c1 6a 12 45 a8 cb 13 dd 3b 2d ed f9 ef 74 d8 6f 96 61 0d 90 53 36 e0 2e cd 6f 9e 8a 4b f5 d5 13 38 02 82 52 d1 2d 07 2a ed e2 a7 c4 53 9e 81 a7 3c 30 fe 38 e5 87 14 63 3b 71 eb 3a 01 6a fe a5 c4 39 ae d1 03 1a 0e bb 76 43 e9 b0 05 01 31 50 db 9b a5 91 48 c5 6a f2 81 a2 6b 2e 29 57 c3 70 68 61 49 65 49 50 9b ed ba eb 94 ef 08 f0 3b 64 da 54 f1 b7 4a 2e ba 0c 0f 8c 3a ec 6a b1 84 74 19 09 06 49 bc 68 74 12 bb bd 34 4e 85 b1 41 46 90 e6 f6 f5 91 bb 5d d6 79 32 e3 28 64 5c ad a9 0c 8e 76 71 35 bc ea da f8 b3 08 f8 32 f8 cc 5f 4b f4 97 32 ea a0 12 0e c4 43 51 e8 88 dd 5b 98 c1 96 b9 e3 00 af 48 c5 e6 06 4f 93 97 9a 17 8d f7 84 c4 c0 cd 18 0e 2d b9 e5 bf 9b 22 40 65 a2 39 83 5c 02 70 78 c3 Data Ascii: ewZD){k8)0P%L.jE;-toaS6.oK8R-S<08c;q:j9vC1PHjk.)WphaIeIP;dTJ.:jtIht4NAF]y2(d\vq52_K2CQ[HO-"@e9\px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.5	50570	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	2094	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028872..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.13; _dd_s=rum=0&expire=1714029772186&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:55 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:55 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 89c9a046c7c8ea74876b5a826130e4ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: flblH1Ty1wz98U1-i6VA1fD2EBROmov6b630oLAfKJJXCchZeopUmw==
2024-04-25 07:07:55 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.5	50572	107.178.254.65	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	503	OUT	GET /api/sync?it=1&pid=500040&_=1714028868.4256136&iv=56c8a119-fb2e-40a6-a39d-fe9224591ce0:1714028868.423623 HTTP/1.1 Host: pippio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=Flxyl5Uv1BU-R7lM; didts=1714028872; nnls=; pxrc=CAA=
2024-04-25 07:07:55 UTC	445	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CAA=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 07:07:55 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 07:07:55 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.5	50573	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=bc3ec09d-f1e7-4ccb-9eb2-e8a04e82be87&batch_time=1714028873660 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:55 UTC	1658	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 74 22 3a 31 30 32 35 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":2,"page_states":[{"state":"passive","start":1025300000},{"state":"hidden","sta
2024-04-25 07:07:55 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: bc3ec09d-f1e7-4ccb-9eb2-e8a04e82be87 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:55 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:55 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 62 63 33 65 63 30 39 64 2d 66 31 65 37 2d 34 63 63 62 2d 39 65 62 32 2d 65 38 61 30 34 65 38 32 62 65 38 37 22 7d Data Ascii: {"request_id":"bc3ec09d-f1e7-4ccb-9eb2-e8a04e82be87"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.5	50575	13.226.100.21	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	3464	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A48.620%2B02%3A00&epn.hit_timestamp_unix=1714028868620&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1714028863437-110-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-110-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=1444&tfd=11441&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028872..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.13
2024-04-25 07:07:55 UTC	808	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:55 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6bd5ca7e040fe8f272f923f5af2b843e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: gGIOgSZXGgvG6uPo1UnUhIqZFXAs-0av-Ckfx8dU_9NNvorYl3mTtA==
2024-04-25 07:07:55 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.5	50577	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	811	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=134595-1081343 If-Range: "c15169e9b85a213995deb6b3112712cb"
2024-04-25 07:07:55 UTC	555	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 946749 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 25 Apr 2024 06:58:46 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aff20911eaac3f22b90f4012f7ae5d7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: kRt_tKbMQmugdxz2EhU0HOWu_oVSMdQm3kD1_CTGQGyf1iQJkAZKtw== Age: 596 Content-Range: bytes 134595-1081343/1112240
2024-04-25 07:07:55 UTC	15829	IN	Data Raw: 91 5a cc 68 f7 1f bf d0 75 ba c9 5e d2 a3 30 e9 68 73 2f 49 66 6a 90 c3 9e 6a 03 0e 6c f7 0b e4 e1 10 37 6e 4c bc 75 12 3f fa b3 8b bc 06 0c 3c ae 1f f8 63 40 fe 7e 25 bd 90 b0 59 b7 8d 26 7c 1e 12 36 78 6c c5 bc 20 aa 86 40 5d 78 c1 af 5a 0c a1 f7 e9 e1 b9 7a d1 58 12 30 0e 40 86 94 bc fe c2 9a 90 57 75 27 83 c4 01 12 07 f5 7b 2a 96 ab e3 6e d7 48 f2 38 86 1b f3 66 2a 55 b3 e9 a6 1d 64 75 1d bf 7f 9c 53 50 bd 04 28 d2 3f 11 a9 55 92 68 32 01 3c 13 60 99 c7 b4 e4 46 38 b2 37 3c e4 9a b7 59 a9 fd 56 89 66 07 b7 b3 e2 a7 44 5b 25 9c e1 4a fc d0 fb d5 ad fd 5f 04 59 c5 55 14 7b d8 ed 2d a6 1e 24 6b e2 b7 8e b2 9e e7 46 52 82 50 c1 c9 be 7f 78 fe e2 fc 71 d1 d6 34 fb aa ac 82 53 40 5a 73 bc cd bd 48 21 ee e8 1d 3e 93 bb 65 0b 38 57 e5 4c 83 40 21 46 45 c0 2f Data Ascii: Zhu^0hs/Ifjjl7nLu?<c@~%Y&\|6xl @]xZzX0@Wu'{nH8fUduSP(?Uh2<`F87<YVfD[%J_YU{-$kFRPxq4S@ZsH!>e8WL@!FE/
2024-04-25 07:07:55 UTC	16384	IN	Data Raw: 71 58 c1 ea 12 80 c5 a1 d9 67 98 44 a1 38 f5 cb 5d 02 6f 44 02 db ce 8d 56 da e8 a4 1f c7 6c 0d 93 4a 71 1b a8 81 36 af 12 69 d2 2f 06 12 38 e9 d6 21 d8 85 fd b1 4e b0 28 fa 15 2e 4b 72 9a 49 a9 0b 46 2f 99 c0 13 99 0f 5b fc 21 ce 77 6b b1 79 f3 0e 25 f9 c7 78 aa 4f 1a a4 64 ce af 1e 70 92 bd 84 8b 2f 45 9b 01 82 7c 32 82 b7 b6 54 69 b2 31 59 dd 0b 1e c2 94 04 ec 01 8e ad 2c d6 31 b9 10 0d 48 f6 c9 48 5f d3 3b c1 e1 65 5b 51 f3 c4 bc 9d db 26 ee 8f 81 aa e2 5e d1 b0 9b e5 cb bb 02 7e cd 5d 5c 18 f2 13 06 55 82 c0 ca 69 0a 4e 18 91 8a 9a e0 a8 33 47 00 34 1e 69 a7 9e f4 b2 2d f6 56 c3 8e 12 13 d0 1e b1 6d 95 5b 52 41 6f 26 a6 b5 92 6d e6 13 58 e1 0a 53 4b 8f 9d 78 84 e9 fe 09 da 07 e6 c3 9b c4 7d 69 1c d0 c3 36 3d 40 d5 e1 ce 7e 32 77 2b ae 99 7d ee 9c 0a Data Ascii: qXgD8]oDVlJq6i/8!N(.KrIF/[!wky%xOdp/E\|2Ti1Y,1HH_;e[Q&^~]\UiN3G4i-Vm[RAo&mXSKx}i6=@~2w+}
2024-04-25 07:07:55 UTC	16384	IN	Data Raw: 29 0c 94 b1 17 06 a3 31 56 76 4f c2 91 45 85 82 49 d6 29 e3 c2 e6 4d 26 19 63 46 ab e2 5c 73 aa 11 cf fa 91 ef 74 fd b6 b9 58 96 97 74 3e d4 99 ed 4d 36 bf c2 9a d2 d1 94 d4 7a b3 06 91 6d 81 8d b2 58 32 05 5f 1d 83 3b 20 5b 7b f9 a5 96 66 72 53 5a c1 98 a2 b8 e1 19 82 50 b7 52 06 be a3 0e 3e a5 77 d0 d8 71 3c 25 bb 28 0b 34 cd 88 8f 4b 33 c4 3d e2 dc e6 75 78 df 67 2a c0 17 b9 c0 33 a5 e2 23 a8 39 00 41 f5 e3 58 54 2d 53 bf c7 76 6f d9 37 bc e0 d9 f4 10 53 65 8d d1 1d 23 7a 3b 78 58 fe 60 0d 65 8f c0 e9 a5 82 9c ce 60 b2 f8 4f 9b f0 14 9e b7 ea b7 1a 2f a7 e6 2e c1 13 6c 5f c5 18 f0 9d d8 80 25 c7 b0 d4 b0 30 bb 29 94 0d 95 a4 89 9e 79 ff ca 8a 02 33 34 fa 25 e6 94 3f 5d c9 79 5d f8 23 01 dc 80 23 37 20 65 6e 33 d6 2f bc 2f 6b 58 9e 9c dc 5e 33 8d e4 34 Data Ascii: )1VvOEI)M&cF\stXt>M6zmX2_; [{frSZPR>wq<%(4K3=uxg*3#9AXT-Svo7Se#z;xX`e`O/.l_%0)y34%?]y]##7 en3//kX^34
2024-04-25 07:07:55 UTC	16384	IN	Data Raw: 97 fb 26 8f c5 54 d6 2e a5 f3 14 be 9e 46 67 84 cc 80 ce 94 af bd df 50 df e8 12 c5 e3 34 65 75 7c 77 2a c3 24 1a 22 4e 90 a9 87 dc 86 b1 f1 79 67 b7 75 b2 61 0a a0 b9 95 9c 3d 51 bb 99 78 d6 2e 5f 24 67 e3 63 3b 85 80 9a ca 12 27 c2 b3 d3 71 5b 78 4b d9 e0 d5 e7 7a e0 03 c0 ba ce dc 6a 4d 4f 5d e3 2a 5c e1 19 44 21 de 50 ba b3 9a e9 32 04 c5 55 d8 da 33 c4 07 1c ea 7b 67 5f 94 d4 26 13 fb 63 27 22 0e d4 2b 8c 08 0a b2 4c ab 18 d6 cf bb b5 b4 e2 4f 0d de f8 ba 6e bd b8 6c 94 c5 e5 a0 29 e7 40 e6 63 54 17 ff 32 ec 85 ce 7d 8b 05 5b 84 bb 08 21 d5 5a c0 e8 f7 5e 10 24 ae e5 23 3e e6 92 c9 5e 92 e7 5f 14 7d 79 6a 2b 66 5e 86 d3 23 38 08 78 d0 4b 76 cd 62 9e 93 8b 85 6d 3b 11 7e fb 1e a3 e2 55 b0 39 c9 68 fe 84 48 12 6e 24 cf ea f9 a5 4a 68 9f d3 cd 79 6d 78 Data Ascii: &T.FgP4eu\|w$"Nygua=Qx._$gc;'q[xKzjMO]\D!P2U3{g_&c'"+LOnl)@cT2}[!Z^$#>^_}yj+f^#8xKvbm;~U9hHn$Jhymx
2024-04-25 07:07:55 UTC	16384	IN	Data Raw: 51 1e 96 87 b3 cc 3d d4 e9 17 a7 25 15 e6 a5 45 75 29 f1 8e 34 1c 27 d7 80 df cc c8 0a 92 9e 80 c3 b1 6b a4 fd e1 34 43 8b 35 af fe c2 75 9e 81 57 4c e2 1c 70 fa 14 83 c7 86 76 0e a5 90 2c 15 58 4c 37 d1 8e c1 77 f1 df 14 81 d4 cf b8 0a 95 39 ec 0e b4 e2 56 62 5a 54 51 9e 25 3f 17 51 bb 33 0b dd a5 a2 bf ca c0 99 2f d6 ee 1c 7d 1b 14 6f 76 7a b1 6d 5c b7 69 e9 a0 20 38 fd dd 99 77 ad 4f 06 77 37 6a aa 0b ff 8c 78 a8 e7 50 fd d5 e1 f8 8e b9 5a c7 d8 7a 99 51 29 48 9c 3f 66 97 ee 32 c4 44 8f 99 c1 11 85 9e 99 fe cd 50 ff a7 56 b3 a5 39 f5 28 7d 3f 12 bf d6 a0 5c f3 50 44 0b ae 51 38 85 4e 4b 55 ef 45 6c f9 5a 4f 30 64 d9 55 12 5c 0d 73 5d 3f cd 6e 5a 95 cf 10 61 37 10 fb e7 99 ec 95 ac ea 1e f7 6c 70 eb 6d 48 cd af ae 05 07 e4 d6 10 1e e7 32 12 5b 6e 4b 97 Data Ascii: Q=%Eu)4'k4C5uWLpv,XL7w9VbZTQ%?Q3/}ovzm\i 8wOw7jxPZzQ)H?f2DPV9(}?\PDQ8NKUElZO0dU\s]?nZa7lpmH2[nK
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: af 99 c1 b9 1f 6b b5 55 d6 05 dd 1e 27 89 12 60 3f b8 df 32 8a 05 d7 2d 05 0c 41 85 84 be c7 75 5d 9c 91 91 dd 2f 52 86 6c a7 e0 bd fe 2d d6 6a 6e c4 04 73 38 b8 ab 7c 4a 3e ad ca 8d 90 32 45 56 83 0f ae f8 9d f1 d0 c4 bd e8 6d 6d f7 10 49 7a 7c 16 08 a4 85 4f b9 9f 69 f4 49 09 a5 70 98 73 16 e5 81 ec 9a be 60 1f 85 36 f7 39 26 05 f7 58 d7 97 df b5 71 c5 89 8d f5 84 ba c5 14 7a db 7c 86 0c e5 d1 9d 0f 12 f1 c7 e7 f6 22 0a af d9 39 5a 39 1d ff 6e 66 6d 4a da 2e 5f ab 98 d7 40 1d b1 b1 00 50 d7 f9 a0 58 d1 57 e4 61 40 94 1e f6 90 b4 04 53 7d be ec 21 f0 38 3e 18 68 c2 b2 42 17 e6 0e 21 43 41 ad 3e 16 b3 14 c0 31 ab 70 e7 37 a4 1d 8e d3 3b 5d 3f d9 65 3a 93 32 74 f5 db 16 12 bb 0f a7 62 f7 9f a3 e8 5a ec 70 61 0f 9e 78 56 ee 4c 54 9e cf 91 7c 2a fc e7 75 80 Data Ascii: kU'`?2-Au]/Rl-jns8\|J>2EVmmIz\|OiIps`69&Xqz\|"9Z9nfmJ._@PXWa@S}!8>hB!CA>1p7;]?e:2tbZpaxVLT\|*u
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 5e a4 44 00 5b 21 00 c8 e1 4c cf ee 22 bb 93 71 b9 6e 85 18 89 84 eb 58 ac 32 f2 d7 9a 4d b1 39 79 55 b2 87 ab 00 52 b0 3b 43 5e 01 8a 3f 05 b5 c2 1a e9 86 be 84 06 50 c7 b3 75 ec 2e 66 25 a4 d3 d7 c4 4c e8 b5 ef 1a 76 7d da db a4 11 09 f1 20 81 d3 cf 93 8a 3a 6c aa 48 fa ff fa 61 c7 82 07 2d 4c 50 76 ab 1d f9 5f cb 67 0d a0 8f 7d 39 05 83 8e 5c 67 e9 1e be fc 8e 5e a8 f0 73 18 f1 57 01 ef 20 48 f2 06 fb e1 82 b4 54 be 96 b6 9c 38 2c df 0a c7 2f c1 50 2b 24 93 a7 97 da 5d bf a1 15 23 6f ed 51 7b fd 04 25 b7 34 49 68 a6 a8 58 41 18 0d ba 36 e0 de ab 5b ec 2e 1c 5e 5b 66 6c 9d f9 85 6f 80 fa f6 0f 73 ed 75 cf ba 65 7b 0f d1 c8 ae bc 6d 03 08 16 d3 b1 de 08 fb 98 c8 74 77 f5 cb 12 f3 dd ac f5 4d 9c e9 e6 8c 71 14 9f f9 3c 14 44 87 90 d6 80 f9 af e5 36 f7 9b Data Ascii: ^D[!L"qnX2M9yUR;C^?Pu.f%Lv} :lHa-LPv_g}9\g^sW HT8,/P+$]#oQ{%4IhXA6[.^[flosue{mtwMq<D6
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 06 cb a8 3e ff d0 d1 57 60 c9 31 e4 61 b2 a4 78 5c a0 f0 bb c3 3c d4 33 a1 0d 99 0a 76 8c c6 09 3a 63 93 83 9b e8 2d 6a 93 1c c8 86 d2 4a 8e 5a af 69 c5 b3 77 ec 38 77 37 8f 5f 93 82 be 92 f7 bb ef bc b1 85 66 f5 b3 1f 7b f1 49 f4 00 0c 17 3e 70 a7 1b 65 d6 67 b7 3f 4b 46 2e d5 24 07 b3 34 8b b9 2e 7b 61 f3 ae dc c7 4e 1b 23 5d 3b 0d b6 84 e8 a3 82 84 5a 34 5b b8 8e 28 e2 39 05 78 2a 91 e6 e9 ca 51 fb 49 9b 85 55 ab 14 92 b6 16 19 2a aa ee d5 2f 94 80 e5 84 5b 0e d8 95 5e c4 77 ca 6f 3d f8 ee ce c1 6c c8 db 8d 07 cf 51 04 a4 24 96 0a a2 c2 f3 6a f8 cf e4 ea 12 f1 68 1a 39 7e 16 ea db ac 90 53 2b 96 a9 cb d4 11 61 65 84 fd 1d 64 72 e7 a2 dc c7 92 0a 93 88 ee 87 b0 c5 54 d0 b9 cd b1 62 4d 9e 67 f8 55 b8 a8 8b b4 c1 21 72 52 49 e2 69 70 1d 56 d8 e0 6c e6 03 Data Ascii: >W`1ax\<3v:c-jJZiw8w7_f{I>peg?KF.$4.{aN#];Z4[(9xQIU/[^wo=lQ$jh9~S+aedrTbMgU!rRIipVl
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: f6 fb 3b a1 f2 14 e7 40 1b 32 7e a9 99 82 4e d4 bd 69 ee de 4a 22 b0 6c 2f f2 a3 20 74 03 0d bd 2a 9d 9c 3b c7 c4 b9 05 06 c1 7a 9d 44 5d 1b d5 a4 32 71 69 9b 44 6b 21 fd 50 63 74 da a6 6e 82 00 75 3d 3f 2c de c1 72 07 e5 94 5c 85 01 09 6b d5 03 f2 cf 31 a3 34 0a 54 8b c0 ed 58 ec 39 18 85 06 0b e4 d6 92 8b 03 f9 b0 50 11 3b 4e c3 7d 51 14 f7 75 db 75 ec d5 6c 2d a1 78 2c 9a 60 48 97 98 72 d6 46 42 8b 0c 87 c6 9e 33 3c 6c 2d 0e 8b a4 65 6b 0e 3c d1 33 a0 6a 38 e1 2b dd ef db b6 ad 46 c2 72 31 58 8a 78 fd 5b cf aa 61 ff 0a b4 23 f9 6a 26 df 3a 7d d6 02 59 4c d6 4c 4b be 04 49 65 8c 8e 96 36 75 d5 7d 5c 58 3c a7 eb 46 36 92 a2 e8 0c 2b 34 6b ca 3b 98 d6 e9 41 2d 51 90 a8 e0 4c d1 a2 34 58 6b 84 eb de b6 97 0f 36 af 59 3e 4a a5 9a bf 0c b2 e3 09 08 d7 9b 7b Data Ascii: ;@2~NiJ"l/ t*;zD]2qiDk!Pctnu=?,r\k14TX9P;N}Quul-x,`HrFB3<l-ek<3j8+Fr1Xx[a#j&:}YLLKIe6u}\X<F6+4k;A-QL4Xk6Y>J{
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 9e 8e d1 ab 8e 4e 9a 91 f0 42 51 ad 8e 64 54 1e a7 a4 8e ac 5a 9e 80 93 a0 fa b6 ba 3e 90 3e 65 83 d3 a7 1e 0d 1a 2d a2 63 21 72 33 2a 26 25 aa 2c 55 65 70 05 08 9d be e4 c2 eb 13 db 98 40 56 3a 8b 26 e0 db 8b f3 04 43 f9 9f 1d f3 b4 40 d3 f3 57 b0 56 53 1e 22 4e e1 94 a2 b1 5e ff 23 d3 16 96 c1 f0 89 c9 48 88 ee 13 e5 00 85 64 29 97 25 86 fd fc aa 65 cd 8d 15 48 4b ce 22 7e 64 dd 43 fc fb 3a 25 8c 5c 22 63 77 41 a4 67 79 21 73 c7 b7 c4 a7 ab c6 30 61 2f 94 95 f8 b3 6e e7 20 19 b5 a3 94 13 59 6c ec d3 34 01 dd db d8 e0 a1 1f bf c0 71 51 ed 17 e1 aa 1e 6e 9d da 50 08 08 ae 6d 89 5c 7e 63 1a 05 79 a0 55 2e 9f 0f f2 81 23 b9 37 59 88 c8 19 ca 67 2f d7 c5 ae 92 02 c4 d1 2a aa 1d 1d 16 b2 4f 04 5b f0 65 31 b3 87 39 b9 07 34 db 29 8c 3b 8d b5 5d f9 65 49 6d 3a Data Ascii: NBQdTZ>>e-c!r3&%,Uep@V:&C@WVS"N^#Hd)%eHK"~dC:%\"cwAgy!s0a/n Yl4qQnPm\~cyU.#7Yg/O[e194);]eIm:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.5	50576	18.160.78.5	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	2094	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028872..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.13; _dd_s=rum=0&expire=1714029772186&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:56 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:07:55 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 e9832200ff971aca96b461ffc18b3368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vPf6yrwtQjfyo4jrJp8XdvagM9gJuIAJxvEt5fB39xtaJUfiq1nveg==
2024-04-25 07:07:56 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.5	50579	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=105739ad-a66d-4f9a-92ed-090053a26125&batch_time=1714028874189 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 18433 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:55 UTC	16384	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 33 65 65 38 62 33 36 2d 39 34 30 64 2d 34 33 61 63 2d 62 30 31 33 2d 64 65 37 30 39 62 65 66 65 61 35 30 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 30 32 38 38 37 34 31 38 39 2c 22 73 65 72 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 35 2e 39 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0}},"application":{"id":"03ee8b36-940d-43ac-b013-de709befea50"},"date":1714028874189,"service":"desktop-web-renderer","version":"0.5.9","source":"br
2024-04-25 07:07:55 UTC	2049	OUT	Data Raw: 34 34 38 26 6d 6f 61 74 43 6c 69 65 6e 74 4c 65 76 65 6c 34 3d 35 30 31 33 39 35 37 31 33 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 31 3d 55 53 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 32 3d 31 39 39 30 37 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 6f 6c 6c 65 63 74 6f 72 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 62 2e 6a 73 3f 70 69 78 65 6c 3d 64 32 36 37 62 32 66 37 65 65 32 64 34 37 30 63 61 62 62 34 38 36 39 37 63 64 36 35 64 30 34 31 27 3e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 Data Ascii: 448&moatClientLevel4=501395713&moatClientSlicer1=US&moatClientSlicer2=199071' type='text/javascript'></script>","<script src='https://collector.brandmetrics.com/scripts/b.js?pixel=d267b2f7ee2d470cabb48697cd65d041'></script>","<script type='text/javascript
2024-04-25 07:07:56 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 105739ad-a66d-4f9a-92ed-090053a26125 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:55 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:56 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 31 30 35 37 33 39 61 64 2d 61 36 36 64 2d 34 66 39 61 2d 39 32 65 64 2d 30 39 30 30 35 33 61 32 36 31 32 35 22 7d Data Ascii: {"request_id":"105739ad-a66d-4f9a-92ed-090053a26125"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.5	50582	18.64.155.15	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	805	OUT	GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video HTTP/1.1 Host: cdn.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:56 UTC	566	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51078 Connection: close Last-Modified: Thu, 18 Apr 2024 10:51:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:41 GMT Cache-Control: max-age=900 ETag: "cfc33ecafe0a3d20ed59ba16c0be3987" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 322cca685728d321948b8b82048f35f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: LPZA9oVPqrJ3xnM7PvWBwkBkh2LSBJhpdozdh3zg2T3wEmNBKZqn6g== Age: 326 Vary: Origin
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 7d 2c 65 28 74 2c 69 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: (()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 2e 5f 65 72 72 6f 72 2c 61 2e 5f 63 6f 6d 70 6c 65 74 65 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 65 72 72 6f 72 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 3a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 74 65 2c 61 7d 72 65 74 75 72 6e 20 74 28 69 2c 65 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 69 66 28 21 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 7c 7c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 73 65 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e Data Ascii: ._error,a._complete=r?function(){try{r()}catch(e){t.error(e)}finally{this.unsubscribe()}}:e.prototype._complete,a}return t(i,e),i.prototype.unsubscribe=function(){var t;if(!this.shouldUnsubscribe\|\|this.shouldUnsubscribe()){var i=this.closed;e.prototype.un
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 7b 63 6f 6e 73 74 20 65 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 66 72 61 6d 65 28 29 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 6f 70 2e 70 61 67 65 59 4f 66 66 73 65 74 3f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 3f 28 65 2e 79 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 2c 65 2e 78 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 Data Ascii: {const e={x:0,y:0};return this.isIframe()\|\|"number"!=typeof top.pageYOffset?document.body&&(document.body.scrollLeft\|\|document.body.scrollTop)?(e.y=document.body.scrollTop,e.x=document.body.scrollLeft):document.documentElement&&(document.documentElement.s
2024-04-25 07:07:56 UTC	1926	IN	Data Raw: 65 69 67 68 74 28 29 7d 67 65 74 41 64 45 78 70 61 6e 64 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 45 78 70 61 6e 64 65 64 28 29 7d 67 65 74 41 64 53 6b 69 70 70 61 62 6c 65 53 74 61 74 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 53 6b 69 70 70 61 62 6c 65 53 74 61 74 65 28 29 7d 67 65 74 41 64 52 65 6d 61 69 6e 69 6e 67 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 52 65 6d 61 69 6e 69 6e 67 54 69 6d 65 28 29 7d 67 65 74 41 64 44 75 72 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 44 75 72 61 74 69 6f 6e 28 29 7d 67 65 74 41 64 56 6f 6c 75 6d 65 28 29 Data Ascii: eight()}getAdExpanded(){return this.creative.getAdExpanded()}getAdSkippableState(){return this.creative.getAdSkippableState()}getAdRemainingTime(){return this.creative.getAdRemainingTime()}getAdDuration(){return this.creative.getAdDuration()}getAdVolume()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.5	50584	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:55 UTC	1068	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1714028870147;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:56 UTC	951	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=COT_r5Ln3IUDFdEvigMdAtgP8g;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1714028870147;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.5	50583	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	2938	OUT	GET /i.gif?e=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&s=AEtTo_l1ZDXK-z5sTMTTDtyGkqc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028874..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.14
2024-04-25 07:07:56 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.5	50587	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	898	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064504930 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029773781
2024-04-25 07:07:56 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5af3299ca59d24ce8e5b33412f754ade.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: QTmHb0t94AQUPzf2VU8TSDHO6R1P33HoxOw3NHnfLx7Ysa0d1v4QBQ== Age: 74852
2024-04-25 07:07:56 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.5	50589	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	432	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/Tooltip.36a8ac01d72f6916d536.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:56 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8466 Connection: close Last-Modified: Mon, 04 Dec 2023 15:02:12 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:54 GMT ETag: "d178e8892b1bdb15f35913fdf57bd493" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 be19c47e504fffea4cece5471967bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: e9zWXjFRubx_To9IzmXXLT92yH3nC8CPia4_UyN-tbY2dc6uiRI-_w== Age: 3
2024-04-25 07:07:56 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7d 00 00 00 c6 08 06 00 00 00 a7 e1 36 52 00 00 00 09 70 48 59 73 00 00 21 38 00 00 21 38 01 45 96 31 60 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 a7 49 44 41 54 78 01 ed dd 4b ac 1c d5 9d c7 f1 53 7d 21 0a 66 63 11 bc 72 24 3b 12 2c 8c 04 21 0a 8f 9d ed ec 20 9b f8 c1 2c 02 0a 93 28 64 72 91 86 c1 09 12 9a 59 30 60 65 91 28 12 19 93 2c b0 14 a4 10 50 66 16 83 1f d9 8c bd e3 5e ef 70 58 f0 90 ec 05 96 e6 5a c2 2b 9b c4 59 c4 a0 d8 b7 2b f5 eb be c7 6e b7 bb ea fc eb 54 55 77 75 d7 f7 23 5d 2e b6 fb f6 ad ae aa 73 ce bf ce e3 7f 12 57 83 3d cb e9 f6 9e 73 bb 53 e7 1e ec 25 6e 57 9a ba cd d9 5f 6f 77 00 00 00 28 6b 2d c9 be fa ce 7d 98 26 6e c5 a5 Data Ascii: PNGIHDR}6RpHYs!8!8E1`sRGBgAMAa IDATxKS}!fcr$;,! ,(drY0`e(,Pf^pXZ+Y+nTUwu#].sW=sS%nW_ow(k-}&n
2024-04-25 07:07:56 UTC	2070	IN	Data Raw: 73 08 4f c7 af fc 98 65 7b ee 14 60 bc fa c6 ed d1 d7 64 9a 41 42 ac aa 65 5d f7 6c 5d 0f 77 17 ff 62 db 2d 66 96 74 2d b5 d7 ee 70 61 55 fd d7 55 ef 19 5b 76 fd fd 16 db 5b ae f2 a1 21 fa 3a 1f d6 b1 38 58 c8 e1 6c b9 f9 9a 98 74 6c 9d 60 ff f0 fd 69 56 39 b9 28 aa cc b5 45 96 35 8f 94 e8 98 aa 0e f3 14 19 f6 4c f4 dc 4b cf 5d 33 1f 93 7a 78 de c9 8e c9 d2 3b 3a 6b 6a 7c 75 9c 9a 23 aa 15 d8 65 e7 db a8 d2 3e b9 d2 1b f4 cc d5 39 4c 6f bd df ea bc ee fe 5a eb fe 53 72 d9 98 b9 72 75 dc 8f 5a 60 70 fe c2 6d 83 e3 b0 a4 cf 91 a6 ae 43 53 62 cb 7a 5d 3d 4b de fe 60 aa 9d 5e e5 24 ef 75 f1 f7 a7 d2 63 95 39 6f 79 f4 d9 94 c6 e9 d4 e9 a4 d2 3d a3 eb a1 87 5b dd ab 65 8e 4b 9f a5 a9 40 16 8b 21 d9 b7 9c 32 03 74 0e 29 05 48 51 e3 a5 ca 67 7c 08 54 8d ee 43 0f Data Ascii: sOe{`dABe]l]wb-ft-paUU[v[!:8Xltl`iV9(E5LK]3zx;:kj\|u#e>9LoZSrruZ`pmCSbz]=K`^$uc9oy=[eK@!2t)HQg\|TC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.5	50594	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	435	OUT	GET /creator/wetransfer/2211-refresh/static-2/1_GQft9D/favourited.1e40a57f0213acfb55b7.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:56 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1581902 Connection: close Last-Modified: Mon, 04 Dec 2023 15:02:13 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 07:07:54 GMT ETag: "9ac36d587b4b3dc54693e4d97c4c76c8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9b26879979e6603c426ea24fcf38661c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 00P21iRteYFJ4K-Sl8XHCmfAxe51PiYer98kv-W_9_WN-Icv7T3onA== Age: 3
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 73 00 00 07 1b 08 06 00 00 00 62 f6 44 1c 00 00 00 09 70 48 59 73 00 00 21 38 00 00 21 38 01 45 96 31 60 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 18 22 e3 49 44 41 54 78 01 ec fd 59 90 65 e7 75 e7 8b ad 3d 9f 31 87 ca cc aa 2c a0 00 14 01 8e 80 d8 24 35 5c 81 57 ba 2d ea 5e 9b bc ea 6b 5b b4 0d 9a 0f 76 84 68 22 d8 8f 16 10 54 f8 c9 41 8a f2 83 ef 83 18 84 1d fd d0 11 0a 42 ea 17 87 69 51 56 7b 8a 0e f2 de db 92 ba 9b 02 a9 91 22 09 80 33 86 aa 42 0d 59 39 9e 79 4f df 5d 6b 7d df de 67 67 56 55 66 01 a8 2a 64 55 fd 7f e4 c1 99 f7 f8 ed 9d a7 d6 6f af b5 3c 3a a6 2c 31 ad 56 eb c3 c6 98 0f f3 d3 b3 7c ff 88 dc cb 5b fc 78 c9 f3 bc 25 02 00 00 00 00 00 Data Ascii: PNGIHDRsbDpHYs!8!8E1`sRGBgAMAa"IDATxYeu=1,$5\W-^k[vh"TABiQV{"3BY9yO]k}ggVUf*dUo<:,1V\|[x%
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: a8 b7 b6 ca 62 6e 85 86 83 21 6d 6f 8d 68 32 4c 69 63 73 48 97 c2 82 56 bd 90 16 db 3e f5 5a 11 cb 3e 3e 36 79 ac 95 fc ab 62 81 ff b3 23 3b 96 97 7f 85 25 dd 65 3e 37 67 a3 19 1f d3 1d fa c6 85 0b f4 fe 87 3e 48 ff 8f bf fd 3b 9a b0 94 dc e3 fd f9 83 cb 5b 7c 0c b3 b0 ed f2 b1 3c e3 f1 9b 5b 67 ef c5 72 ee e7 e3 81 65 6e e1 ce 53 52 3a 4e 36 50 56 b2 fc e4 f7 c4 a9 f3 41 28 57 05 90 37 e1 f5 d6 92 6c 4e 82 49 16 a5 67 c7 af 4c 4f fa 08 b5 f7 86 b4 d9 ef d0 cf 97 1f a6 8f b2 ac 0a 46 7c 3c 8f 42 95 5f 53 3e 87 84 93 43 fe 16 1a ba be d0 a3 c6 fe bc 85 d9 97 d7 72 bd d2 63 d5 f2 94 f3 93 fa 3e 31 b5 2f 2f 8a 6e c4 e1 eb 65 6e 42 e8 1c f2 1b e1 66 45 59 03 e9 9f 83 ec 1c 00 00 00 00 80 37 47 53 b4 7c f4 a3 1f d5 4c 96 5b c1 e3 8f 3f 5e 3f 7e f9 e5 97 e9 4e Data Ascii: bn!moh2LicsHV>Z>>6yb#;%e>7g>H;[\|<[grenSR:N6PVA(W7lNIgLOF\|<B_S>Crc>1//nenBfEY7GS\|L[?^?~N
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: e1 65 e7 03 90 c6 fc fd 5d 11 48 3c c6 25 7b b2 48 12 ed ef 64 6c 8b ac 63 8a 3b 87 1e 0a 72 8b 00 00 00 00 00 00 00 00 80 7b 19 c8 1c 70 db 31 5e 15 84 aa 82 f3 36 1b c4 38 99 43 de 3c 7a b6 2f 94 eb 7b 36 d3 c4 d8 2b bb ad 1c 90 b8 74 6e 7b 4a 64 b9 2d 79 e6 f9 75 80 be ba 22 5e 4b 9a 71 00 50 82 a0 3b a3 19 cb 9c 52 83 82 b1 94 f4 e1 20 de 8c 83 d1 79 e6 69 83 f8 56 b7 47 69 2a 41 bf 29 3d b0 b2 4a c3 e1 90 03 d5 f6 0a 78 e9 cb 23 01 67 cf 35 56 2f 44 3e 70 90 7a 56 da 60 7f db 48 f0 9f c5 90 61 91 13 19 1a c4 05 6d 99 36 07 41 79 dd d2 90 4e 46 63 6a 73 50 32 09 a4 97 0b 4f 47 ca 74 49 d3 ef d8 96 5d f3 5c 16 4b e9 44 47 2a 52 c7 95 35 2a bb 85 96 d9 0a 42 db 57 42 1b ca 4b c0 57 44 8c 94 5a 6a 94 76 aa 64 8e e7 32 73 7c 7f 9e 7d d1 94 1e f5 b6 f5 3c Data Ascii: e]H<%{Hdlc;r{p1^68C<z/{6+tn{Jd-yu"^KqP;R yiVGiA)=Jx#g5V/D>pzV`Ham6AyNFcjsP2OGtI]\KDGR5*BWBKWDZjvd2s\|}<
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: b6 fd d0 d4 67 6a ea ef d4 bb 6a 7e 6d e6 34 eb b7 f8 f6 17 fa d5 42 23 02 1a 5e 27 9d 26 95 ed 2b 42 57 4d a5 66 61 8e 6f e1 1e fb 90 a9 ea d2 94 40 26 51 10 4c 90 3b 07 a4 99 af 0a 59 6c 0a 00 5f 80 88 4d 25 d7 78 cc 93 42 12 c0 9c f3 6c 29 2b 10 9c 0c 73 c6 ef ec 49 80 35 5e 32 35 19 1b 81 8e 3a 7a 74 24 3f 7c 70 2c 6f 1f ee cb f1 a0 23 bd 96 2f f1 70 20 7b e3 03 5d 6f 73 80 5e ee 7d 7b fd be b4 d1 e9 1b d6 e8 c2 f7 3e ce 1d a1 fd c3 76 57 e7 d5 72 be 32 8e 34 bf 2d f3 75 81 bd 21 92 51 27 90 36 f6 89 a2 d5 52 88 37 bb be 92 61 6f 5f 33 e7 65 00 a4 82 75 36 9f cd f4 da 74 ae f1 48 69 ae ae 9e 9a 35 65 08 4f 69 0a 53 f8 cc 7a 4b 74 26 1a 60 cb 75 cf b4 7a 29 d6 01 f7 c3 ba 6e 19 b7 4e 3b 06 f0 aa d5 3d f9 06 63 8e 32 53 02 22 2d 0b 54 55 ea c2 eb 61 0f Data Ascii: gjj~m4B#^'&+BWMfao@&QL;Yl_M%xBl)+sI5^25:zt$?\|p,o#/p {]os^}{>vWr24-u!Q'6R7ao_3eu6tHi5eOiSzKt&`uz)nN;=c2S"-TUa
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 54 fa d8 b7 7e fa de 0f e5 f2 d3 d7 32 5b 6c d4 55 34 1a 0f 64 36 99 29 08 24 60 62 9b 3a a1 49 1d 77 35 9f e3 6b 28 dd 83 43 59 60 ef ab 70 fe 70 6f a4 f3 82 7b b7 84 58 3b 00 38 ef 1e 1d 02 42 0f e5 19 f6 bb 57 13 c0 ea bd 03 75 26 7e f0 e4 4c ee 3c 78 24 af 2f 17 f2 c9 f3 d7 72 f7 ad b7 e5 0a fb ce 8b b3 b9 f4 13 5f 2e b1 66 d6 17 d8 41 01 70 0a 80 4c 09 6d 0d ad 98 bb 31 d6 3f d7 94 c2 dd 52 27 0c 1d 53 b5 3a 2e 45 c1 12 e7 f7 f5 7c 25 73 00 ba 04 fd 92 7b 81 ee 97 dc cf 09 11 39 47 08 ba 02 df ec ee 35 5d 9c 64 8f ea 24 db 48 ab 8c 00 33 07 7a ac fd f5 54 4e 92 99 44 5e 72 03 fd bf f6 4f 5d fd 3b fc 29 7d d3 33 de fc 37 fe 8d e7 fe 96 71 1b cb fe 9e af f5 be e9 d8 df d0 2b f5 57 da f3 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 bf 67 38 98 e3 Data Ascii: T~2[lU4d6)$`b:Iw5k(CY`ppo{X;8BWu&~L<x$/r_.fApLm1?R'S:.E\|%s{9G5]d$H3zTND^rO];)}37q+W\p.\pg8
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: c1 78 b1 86 0b 45 55 f4 af 8f e1 a4 3b 84 ce 99 c0 c7 d8 44 5d fd e0 d8 0a f9 bc 35 3e b8 05 72 8e 0f 31 a7 a7 0b f9 b3 87 27 50 9b 69 4b ca 8d 90 cc 3b f5 fc d8 a4 31 e3 5d 6e e8 bd c8 3a 52 cc 87 05 73 be 9a 55 5f f0 01 0b 52 b2 ec 41 84 fe e4 c5 53 79 e0 9d e0 03 10 7e 03 31 3b f5 9e 4b 48 27 95 df c1 87 a9 a5 7e 90 63 8a ac 0a a0 a3 58 25 b2 c1 87 a9 b5 d6 b9 01 fd 5a af 00 f1 d0 ee ee 40 a6 93 44 3e fc f4 b5 ac 56 b9 0c 20 f0 c7 98 a7 2d 42 94 3a 94 f9 02 42 30 44 f5 4e a7 a7 f3 2d 53 38 34 07 c4 99 49 b2 c6 39 01 84 72 88 c2 05 c6 21 43 a3 13 bc 26 c6 3c 9e e3 43 19 7a 16 10 51 e4 34 ab 64 5a 86 e8 4f 5f 36 00 3c af ae 00 97 f0 81 71 08 50 37 23 04 c2 07 b4 02 d7 df c1 dc 60 fa bb 2c 22 48 c3 3c f2 4d 45 1b 7c 3a d4 b4 6f 14 fc 73 ad cf 22 da 4f 29 Data Ascii: xEU;D]5>r1'PiK;1]n:RsU_RASy~1;KH'~cX%Z@D>V -B:B0DN-S84I9r!C&<CzQ4dZO_6<qP7#`,"H<ME\|:os"O)
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 8a 7a 03 e8 54 c6 91 16 5b 31 2d 86 2e bf a1 bf 9b cf 3d db e0 d3 fc ca 54 d4 bb ee 96 03 5d 59 71 2d e7 25 c7 b5 2c 8d 10 81 c8 9a 09 4f 4c f9 10 09 ce 29 19 27 ed 40 16 ab a5 ec 76 7b ea 68 67 08 66 3a bd 9e 8c c7 63 dd be 07 47 7a 05 07 7a 30 1c 8a 57 38 48 f6 e1 dc 77 46 b2 42 e2 8f bd 74 3a f8 7d cc 9e 1c ec 35 43 99 35 26 5e 29 c9 c5 3e 22 51 4b d9 2d eb f5 12 49 d6 50 03 18 02 3f 4c 7e d3 42 80 48 3c c1 7c 35 d7 ca b2 fd 9d 1d b9 81 20 e8 c9 d9 53 b9 b8 3c 13 87 ac 11 04 49 3e 3e 9b c4 85 26 f0 1d 0f bf c3 b9 b2 32 9d 89 d9 e3 cb 73 71 90 34 5f c3 f1 7f f4 e8 4b 4d 96 f6 87 23 61 57 f9 d3 8b b1 a4 7e 2e b3 54 33 aa da f4 54 d3 ce b5 09 44 b4 f3 0a 13 d2 9e 69 26 5f d6 06 cc b8 ea ab 41 00 cb 35 bd 42 28 df 46 29 2e 7e af c9 59 06 31 ca ca 61 32 9d Data Ascii: zT[1-.=T]Yq-%,OL)'@v{hgf:cGzz0W8HwFBt:}5C5&^)>"QK-IP?L~BH<\|5 S<I>>&2sq4_KM#aW~.T3TDi&_A5B(F).~Y1a2
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 3c 90 83 9d 3d b9 44 c2 34 8d 13 fc ad 03 1c a2 2f cb c7 4f e5 1c 89 df 8b bd 4a da 07 48 f4 fb 3d 24 e4 d9 f8 3c b0 15 f9 99 06 0a da c3 c7 4a 6c 11 30 60 e2 da f4 88 b8 4e f0 16 f8 8f 6c 10 7e 2e ea b4 95 e5 e4 6a 03 58 57 ee dc b8 2d 7f 16 1e c8 ea d1 5a 7e 75 7c 2e ab 78 a1 0d 49 db bd 81 a4 38 06 59 06 ad e1 48 2b ff 5d 24 b9 4f 9e 3e 95 f1 f4 52 46 a3 1d 1d 77 5e 1f fb 8c dc bf 75 5b c6 97 97 52 ac 29 07 57 cb 09 00 9f b4 9d 28 eb 20 0c fb da 77 a3 8a 70 7c 80 0c a7 53 00 31 47 3d 39 00 90 e2 3d fe 58 da e3 a7 40 97 70 3e ad ae 78 18 07 df c9 45 05 93 2a 5c 5b e1 a9 96 35 fb 84 28 38 05 60 81 60 5e 4e 80 81 f3 82 f2 69 40 53 86 88 4e 67 08 98 d6 29 92 d7 0c 48 c9 a4 98 27 02 6c 4f 96 65 5b 7e 11 f9 f2 f9 4a e4 cc 69 23 99 de 32 37 12 d7 ea 62 c7 2d Data Ascii: <=D4/OJH=$<Jl0`Nl~.jXW-Z~u\|.xI8YH+]$O>RFw^u[R)W( wp\|S1G=9=X@p>xE*\[5(8``^Ni@SNg)H'lOe[~Ji#27b-
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: e8 e1 f8 ec 57 74 76 31 96 0f 1e dc 91 3f 6e e3 f8 4f 67 f2 e8 8b a9 26 bb b5 87 0d 02 29 9f c8 47 80 80 b5 37 32 d2 78 38 87 1a 00 12 65 a2 1c 3b 87 9c 5e 04 80 40 4c 43 56 6c 5b e7 08 27 3d 47 81 19 32 a6 3a 01 00 b5 de 40 fa 23 7c 0d db 32 04 58 94 2c 96 48 b8 9f eb b5 45 ad 96 ce b9 15 9b d0 fb be 26 fb 23 80 00 04 2a c8 a0 20 f8 c5 80 8e 80 0e ff 6d 23 29 df 66 8f 16 fc 5d 07 00 f7 2c 40 22 9d 01 6c 92 99 20 98 c0 19 a5 e8 64 53 c5 a7 c1 38 ce 5b 4f da d5 44 f3 69 5c c8 a7 cb 5c ee 60 49 74 11 5c 76 00 34 84 c4 3f b5 8f 6d a6 20 60 89 e4 f4 ac 70 e5 51 ea ca 67 85 2f 73 4a 61 60 6c 7d 44 c1 55 62 aa 1d 09 70 52 3a cb 21 db 85 5f 65 ad 2c 37 82 aa 97 00 25 f7 77 0f e5 c6 fd 7b f2 e4 ec 44 16 97 c7 b8 ae 95 8c ba 3b 16 74 71 35 49 80 c9 a2 eb 87 bd 9e Data Ascii: Wtv1?nOg&)G72x8e;^@LCVl['=G2:@#\|2X,HE&#* m#)f],@"l dS8[ODi\\`It\v4?m `pQg/sJa`l}DUbpR:!_e,7%w{D;tq5I
2024-04-25 07:07:56 UTC	16384	IN	Data Raw: 09 41 6a ca 36 71 8c 08 ce 16 2a 8d 56 81 a9 95 f3 64 48 01 47 a5 91 12 80 de 3e 6b 5a 28 97 66 ab 13 47 49 25 92 12 8e 6d a4 90 34 2a ad 30 a9 fe f4 55 29 eb 44 d2 ca 73 2d cd 26 60 66 95 ef 3a 2a 7b 94 59 c6 39 61 74 bd 05 c7 c4 b3 41 94 95 86 38 ea b4 3a 2a d5 36 9a 8c 41 6c 85 2a 47 16 82 3c 99 c1 39 61 36 0b e7 84 85 e5 99 59 c0 ec 81 06 65 9e 54 36 ac b8 d8 77 82 e7 94 6b 28 4d 9d 18 92 38 fc 4c 1a 2d 14 bc e6 71 e8 08 c5 20 87 78 9d 21 33 43 30 37 d3 0c e4 12 01 76 c7 38 52 8b a6 0f e7 73 5a 89 69 a0 ff 94 e2 62 d1 56 4e b4 ef 48 ab d1 96 08 44 17 df 6f 81 7c 20 60 3d 07 89 c3 eb 6c 70 9d 51 fc 8b 52 5d cc 1c 28 cf 9d 00 17 73 4e 29 28 66 6e 59 15 68 50 2c d7 f2 b2 de 87 6d 69 ad 0f dd 51 15 47 60 64 ce 0a 13 75 5f 54 a0 b5 6d 5f d8 0f 52 8d c5 52 Data Ascii: Aj6qVdHG>kZ(fGI%m40U)Ds-&`f:{Y9atA8:6Al*G<9a6YeT6wk(M8L-q x!3C07v8RsZibVNHDo\| `=lpQR](sN)(fnYhP,miQG`du_Tm_RR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.5	50580	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028874..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.14
2024-04-25 07:07:56 UTC	3321	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 63 33 38 38 31 37 36 33 2d 34 31 62 34 2d 34 38 31 30 2d 61 33 63 30 2d 64 31 65 37 35 63 39 39 30 34 63 33 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"c3881763-41b4-4810-a3c0-d1e75c9904c3","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:56 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:56 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:56 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.5	50593	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	2669	OUT	GET /i.gif?e=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&s=LtrK64oRGXe1amJ-XtQ0Fc33sXo HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028874..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.14
2024-04-25 07:07:56 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.5	50595	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	1102	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=COT_r5Ln3IUDFdEvigMdAtgP8g;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1714028870147;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:56 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.5	50590	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028874..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.14
2024-04-25 07:07:56 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:56 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.5	50598	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	934	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064504930 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029774625 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-25 07:07:56 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Apr 2024 07:07:56 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "56b11dee72df8e44c1e72bfd66e237ab" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 a053f63fa2d6a43d54aa5a145dad38a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: dLJkZyOXGP35eBjLZVT2Byixks6Kc_LuG0KTerjMm6BRx1Py9YW5CA== Age: 58766

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.5	50597	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:56 UTC	1080	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ad94c286-781a-4282-9695-1a593ae05d04&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A54.843Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:57 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:57 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.5	50603	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	941	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=abe66c95-71d4-432d-b34e-d813fd239149&batch_time=1714028875498 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1088 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:57 UTC	1088	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 39 35 39 30 30 30 30 30 30 7d 5d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":1,"page_states":[{"state":"hidden","start":959000000}]},"application":{"id":"0
2024-04-25 07:07:57 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: abe66c95-71d4-432d-b34e-d813fd239149 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:57 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 61 62 65 36 36 63 39 35 2d 37 31 64 34 2d 34 33 32 64 2d 62 33 34 65 2d 64 38 31 33 66 64 32 33 39 31 34 39 22 7d Data Ascii: {"request_id":"abe66c95-71d4-432d-b34e-d813fd239149"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.5	50604	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=4eae8e84-0abc-40b4-9088-58caa289414a&batch_time=1714028875498 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 18607 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:57 UTC	16384	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 30 33 65 65 38 62 33 36 2d 39 34 30 64 2d 34 33 61 63 2d 62 30 31 33 2d 64 65 37 30 39 62 65 66 65 61 35 30 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 30 32 38 38 37 35 34 39 35 2c 22 73 65 72 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 35 2e 39 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 Data Ascii: {"_dd":{"format_version":2,"drift":1,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0}},"application":{"id":"03ee8b36-940d-43ac-b013-de709befea50"},"date":1714028875495,"service":"desktop-web-renderer","version":"0.5.9","source":"br
2024-04-25 07:07:57 UTC	2223	OUT	Data Raw: 35 36 31 26 6d 6f 61 74 43 6c 69 65 6e 74 4c 65 76 65 6c 34 3d 35 32 33 34 35 31 39 31 36 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 31 3d 55 53 26 6d 6f 61 74 43 6c 69 65 6e 74 53 6c 69 63 65 72 32 3d 31 39 39 30 37 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 3c 2f 73 63 72 69 70 74 3e 22 2c 22 3c 53 43 52 49 50 54 20 54 59 50 45 3d 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 27 20 53 52 43 3d 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 72 6a 73 73 2f 73 74 2f 32 30 34 39 36 37 36 2f 37 39 35 36 32 35 30 31 2f 73 6b 65 6c 65 74 6f 6e 2e 6a 73 3f 62 75 6e 64 6c 65 49 64 3d 24 7b 42 55 4e 44 4c 45 5f 49 44 7d 26 62 69 64 75 72 6c Data Ascii: 561&moatClientLevel4=523451916&moatClientSlicer1=US&moatClientSlicer2=199071' type='text/javascript'></script>","<SCRIPT TYPE='application/javascript' SRC='https://pixel.adsafeprotected.com/rjss/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl
2024-04-25 07:07:57 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 4eae8e84-0abc-40b4-9088-58caa289414a cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:57 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 34 65 61 65 38 65 38 34 2d 30 61 62 63 2d 34 30 62 34 2d 39 30 38 38 2d 35 38 63 61 61 32 38 39 34 31 34 61 22 7d Data Ascii: {"request_id":"4eae8e84-0abc-40b4-9088-58caa289414a"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.5	50605	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	618	OUT	GET /rjss/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=${SOURCE_URL_ENC} HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:57 UTC	352	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:57 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 61409 Connection: close pragma: no-cache cache-control: no-cache expires: Wed, 31 Dec 1969 23:59:59 GMT access-control-allow-origin: pixel.adsafeprotected.com access-control-allow-credentials: true vary: accept-encoding
2024-04-25 07:07:57 UTC	16032	IN	Data Raw: 0a 0a 0a 0a 0a 76 61 72 20 5f 5f 49 6e 74 65 67 72 61 6c 41 53 44 69 61 67 6e 6f 73 74 69 63 43 61 6c 6c 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 61 6c 72 65 61 64 79 53 65 6e 74 20 3d 20 7b 7d 3b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 76 61 72 20 67 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 20 3d 20 27 2f 2f 64 69 61 67 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 6a 73 3f 27 3b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 72 72 4d 73 67 20 3d 20 65 Data Ascii: var __IntegralASDiagnosticCall = (function() {try {var alreadySent = {};return function(code, err, config) {try {var gen = function(code, err, config) {var url = '//diag.adsafeprotected.com/js?';try {var errMsg = e
2024-04-25 07:07:57 UTC	10482	IN	Data Raw: 62 22 2c 7d 2c 20 44 65 76 69 63 65 43 61 74 65 67 6f 72 79 3a 7b 43 54 56 3a 22 63 74 76 22 2c 20 44 45 53 4b 54 4f 50 3a 22 64 65 73 6b 74 6f 70 22 2c 20 4d 4f 42 49 4c 45 3a 22 6d 6f 62 69 6c 65 22 2c 20 4f 54 48 45 52 3a 22 6f 74 68 65 72 22 2c 7d 2c 20 49 6e 74 65 72 61 63 74 69 6f 6e 54 79 70 65 3a 7b 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2c 20 49 4e 56 49 54 41 54 49 4f 4e 5f 41 43 43 45 50 54 3a 22 69 6e 76 69 74 61 74 69 6f 6e 41 63 63 65 70 74 22 2c 7d 2c 20 43 72 65 61 74 69 76 65 54 79 70 65 3a 7b 44 45 46 49 4e 45 44 5f 42 59 5f 4a 41 56 41 53 43 52 49 50 54 3a 22 64 65 66 69 6e 65 64 42 79 4a 61 76 61 53 63 72 69 70 74 22 2c 20 48 54 4d 4c 5f 44 49 53 50 4c 41 59 3a 22 68 74 6d 6c 44 69 73 70 6c 61 79 22 2c 20 4e 41 54 49 56 45 5f 44 49 53 Data Ascii: b",}, DeviceCategory:{CTV:"ctv", DESKTOP:"desktop", MOBILE:"mobile", OTHER:"other",}, InteractionType:{CLICK:"click", INVITATION_ACCEPT:"invitationAccept",}, CreativeType:{DEFINED_BY_JAVASCRIPT:"definedByJavaScript", HTML_DISPLAY:"htmlDisplay", NATIVE_DIS
2024-04-25 07:07:57 UTC	16384	IN	Data Raw: 24 44 65 74 65 63 74 4f 6d 69 64 2e 4f 4d 49 44 5f 50 52 45 53 45 4e 54 5f 46 52 41 4d 45 5f 4e 41 4d 45 5f 41 50 50 2c 20 62 5b 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 63 6f 6e 73 74 61 6e 74 73 2e 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 57 45 42 5d 20 3d 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 44 65 74 65 63 74 4f 6d 69 64 2e 4f 4d 49 44 5f 50 52 45 53 45 4e 54 5f 46 52 41 4d 45 5f 4e 41 4d 45 5f 57 45 42 2c 20 62 29 5b 61 5d 3b 0a 7d 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 44 65 74 65 63 74 4f 6d 69 64 5f 69 73 49 66 72 61 6d 65 50 72 65 73 65 6e 74 28 61 2c 20 62 29 20 7b 0a 20 20 74 72 79 20 Data Ascii: $DetectOmid.OMID_PRESENT_FRAME_NAME_APP, b[module$exports$omid$common$constants.Environment.WEB] = module$exports$omid$common$DetectOmid.OMID_PRESENT_FRAME_NAME_WEB, b)[a];}};function module$contents$omid$common$DetectOmid_isIframePresent(a, b) { try
2024-04-25 07:07:57 UTC	4611	IN	Data Raw: 73 65 72 76 69 63 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 73 74 61 72 74 56 65 72 69 66 69 63 61 74 69 6f 6e 53 65 72 76 69 63 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 28 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 77 69 6e 64 6f 77 55 74 69 6c 73 5f 72 65 73 6f 6c 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 28 29 29 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 6f 6e 4d 65 73 73 61 67 65 20 3d 20 74 68 69 73 2e 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 5f 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 69 66 20 28 61 20 3d 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 Data Ascii: serviceCommunication_startVerificationServiceCommunication(module$contents$omid$common$windowUtils_resolveGlobalContext())) { this.communication.onMessage = this.handleMessage_.bind(this); } else { if (a = module$contents$omid$verificationClient
2024-04-25 07:07:57 UTC	13900	IN	Data Raw: 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 4f 6d 69 64 47 6c 6f 62 61 6c 50 72 6f 76 69 64 65 72 2e 6f 6d 69 64 47 6c 6f 62 61 6c 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 20 62 29 3b 0a 20 20 7d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 61 72 20 63 20 3d 20 74 68 69 73 2e 72 65 6d 6f 74 65 54 69 6d 65 6f 75 74 73 5f 2b 2b 3b 0a 20 20 76 61 72 20 63 20 3d 20 28 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 20 2a 20 31 30 30 30 30 30 30 29 20 2b 20 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 30 30 30 30 30 30 29 29 3b 0a 20 20 74 68 69 73 2e 73 65 6e 64 4d 65 73 73 61 67 65 5f 28 22 73 65 74 54 69 6d 65 6f 75 74 22 Data Ascii: { return module$exports$omid$common$OmidGlobalProvider.omidGlobal.setTimeout(a, b); }//----------var c = this.remoteTimeouts_++; var c = ((new Date()).getTime() * 1000000) + (Math.floor(Math.random() * 1000000)); this.sendMessage_("setTimeout"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.5	50611	13.226.100.86	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	3209	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028863437&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1947097447.1714028864&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028863437&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1714028816&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-25T09%3A07%3A48.620%2B02%3A00&epn.hit_timestamp_unix=1714028868620&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1714028863437-110-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028863437-110-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=1444&tfd=11441&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028876..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.15
2024-04-25 07:07:57 UTC	715	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:07:57 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 bf2be852aaf805fb40deebbbbca361e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: zbikvvyBKQumgCqvBSdji1pPktStfqiaEh58wLTK9NTy1r04b-cceA==
2024-04-25 07:07:57 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.5	50616	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	808	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=COT_r5Ln3IUDFdEvigMdAtgP8g;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1714028870147;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa
2024-04-25 07:07:57 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg; expires=Tue, 22-Oct-2024 07:07:57 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.5	50607	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	2938	OUT	GET /i.gif?e=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&s=IqGW-zWLtXcEJPRspK0dHKXj-5U HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028874..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.14
2024-04-25 07:07:57 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.5	50608	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028876..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.15
2024-04-25 07:07:57 UTC	3480	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 32 61 30 38 66 33 31 36 2d 36 32 31 34 2d 34 35 65 31 2d 61 66 36 61 2d 62 33 66 32 62 33 33 30 35 61 33 36 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"2a08f316-6214-45e1-af6a-b3f2b3305a36","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:57 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:57 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:57 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:57 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.5	50609	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	1936	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028876..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.15
2024-04-25 07:07:57 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:07:57 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-25 07:07:57 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.5	50615	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	2705	OUT	GET /i.gif?e=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&s=AEtTo_l1ZDXK-z5sTMTTDtyGkqc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028876..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.15
2024-04-25 07:07:58 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.5	50618	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028876..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.15
2024-04-25 07:07:57 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:57 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.5	50619	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	895	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ad94c286-781a-4282-9695-1a593ae05d04&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A54.843Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:58 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:57 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.5	50623	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	1094	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ad94c286-781a-4282-9695-1a593ae05d04&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A54.843Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1204%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1204%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts=0.8%2C1200 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:58 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:58 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.5	50629	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:57 UTC	1259	OUT	GET /openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028875196%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://backgrounds.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:58 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 879c7fc8c880adb9-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://backgrounds.wetransfer.net Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJmV2TVvn%2FunwKiBeW%2BQzbZMz%2FRcG2j98BNPGcXsb9VQGM5L3J%2BFTH76zqgnYWxB1%2FXxabuKqpmEjhMNaRvmCOxHFkE%2FEdZZldNBja21FBhdI78QZywKDuZgS3gcaWIZCU8Vm%2FMK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 32 39 64 30 0d 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 35 35 37 34 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 31 30 37 37 35 35 36 2f 38 35 2f 63 6f 6c 30 32 6a 6a 39 34 31 32 38 35 71 34 64 67 6e 39 30 2f 39 61 36 34 31 63 39 36 2d 30 33 66 31 2d 34 30 34 61 2d 38 64 30 33 2d 30 34 61 62 35 38 66 37 32 66 37 64 3f 76 65 72 69 66 69 65 44 3d 31 26 75 73 65 72 49 44 3d 26 63 6d 70 72 6f 3d 30 26 64 65 76 69 63 65 54 79 70 65 3d 32 26 65 78 70 69 72 79 54 69 6d 65 3d 31 37 31 34 30 32 39 34 37 38 26 70 72 6f 66 69 6c 65 49 44 73 3d 26 63 72 65 61 74 69 76 65 49 44 3d 32 66 33 35 61 35 33 26 70 75 62 49 44 3d 31 39 34 30 35 32 26 66 6f 72 6d 61 74 3d 62 61 6e 6e 65 72 26 63 68 61 6e 6e 65 Data Ascii: 29d0<img src="https://a5574.casalemedia.com/impression/v2/1077556/85/col02jj941285q4dgn90/9a641c96-03f1-404a-8d03-04ab58f72f7d?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029478&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channe
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 6d 32 72 79 54 46 74 5a 6c 63 6d 56 35 61 73 51 5a 57 41 56 42 47 61 43 78 41 74 74 63 6a 4e 62 47 67 44 38 76 36 64 52 39 31 36 62 45 6c 70 43 46 43 45 44 38 5a 58 56 34 6b 44 79 64 77 35 32 45 36 31 66 4d 5f 4c 4e 6d 6e 6f 61 46 57 5f 4d 7a 4b 32 45 73 6c 70 57 57 6c 38 79 61 51 39 4f 6a 75 4f 74 53 6d 45 79 6b 7a 65 31 5f 34 53 79 79 59 5f 52 43 50 36 6f 39 4d 48 39 30 6d 72 30 4d 64 49 69 76 32 72 54 56 75 37 66 44 4e 32 46 45 77 76 46 44 4d 6a 41 75 38 48 59 7a 70 59 79 71 6f 48 4f 35 49 4b 72 49 37 41 33 44 53 4b 4d 75 6c 69 71 32 56 73 58 62 76 38 45 77 54 54 76 72 51 48 78 41 39 6d 37 31 4c 44 7a 41 6b 61 33 75 6e 69 31 31 73 4a 48 46 71 4a 65 57 57 41 32 34 4a 48 48 52 51 36 69 66 7a 4a 68 4b 61 63 53 37 57 6a 4a 51 67 35 61 73 66 4c 51 5a 30 65 Data Ascii: m2ryTFtZlcmV5asQZWAVBGaCxAttcjNbGgD8v6dR916bElpCFCED8ZXV4kDydw52E61fM_LNmnoaFW_MzK2EslpWWl8yaQ9OjuOtSmEykze1_4SyyY_RCP6o9MH90mr0MdIiv2rTVu7fDN2FEwvFDMjAu8HYzpYyqoHO5IKrI7A3DSKMuliq2VsXbv8EwTTvrQHxA9m71LDzAka3uni11sJHFqJeWWA24JHHRQ6ifzJhKacS7WjJQg5asfLQZ0e
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 69 47 76 62 53 36 2d 34 41 78 39 58 63 68 64 61 6e 71 48 49 43 74 2d 52 63 36 6a 33 77 34 5f 52 79 62 73 34 52 66 49 58 71 61 7a 61 79 59 5f 32 51 50 54 74 48 77 6f 75 57 33 5a 74 37 62 34 63 54 51 34 77 44 57 38 5a 53 6b 2d 38 4d 35 78 62 6d 72 55 4a 48 65 51 38 6b 54 72 5f 73 54 64 45 51 49 73 76 6b 61 53 55 77 44 37 46 37 59 54 67 2d 36 34 38 72 7a 53 78 53 6e 41 6e 42 6d 72 71 79 79 55 42 56 32 6f 4d 31 64 4f 43 32 53 45 4e 6a 62 78 47 75 71 69 55 46 4d 46 6a 37 7a 54 50 30 68 46 78 4e 54 4a 59 70 78 6b 41 79 64 5f 47 68 39 45 68 41 70 52 31 74 75 6b 67 76 7a 56 52 42 78 48 44 6e 73 76 31 58 7a 39 59 76 79 43 73 2d 2d 30 31 2d 74 48 61 4f 53 71 50 64 70 46 65 6f 41 43 59 68 51 30 67 75 6e 41 44 6b 31 73 34 39 49 49 4f 58 4a 77 32 56 6a 4a 75 32 78 63 Data Ascii: iGvbS6-4Ax9XchdanqHICt-Rc6j3w4_Rybs4RfIXqazayY_2QPTtHwouW3Zt7b4cTQ4wDW8ZSk-8M5xbmrUJHeQ8kTr_sTdEQIsvkaSUwD7F7YTg-648rzSxSnAnBmrqyyUBV2oM1dOC2SENjbxGuqiUFMFj7zTP0hFxNTJYpxkAyd_Gh9EhApR1tukgvzVRBxHDnsv1Xz9YvyCs--01-tHaOSqPdpFeoACYhQ0gunADk1s49IIOXJw2VjJu2xc
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 65 53 6b 4c 43 75 4f 52 34 68 52 65 48 35 5f 71 31 4f 71 72 66 5f 30 56 63 36 64 6c 51 78 4b 73 72 61 38 44 39 54 6d 37 55 2d 31 6f 75 62 32 58 41 57 5f 48 61 37 45 54 72 76 4d 78 42 59 68 43 6e 6c 33 58 71 57 48 44 70 6b 49 4a 37 43 61 74 72 73 55 48 71 53 7a 6e 73 52 68 70 7a 59 38 58 79 6a 62 6d 33 50 50 5f 4d 67 4a 66 75 6b 61 6f 45 57 73 6d 4b 79 36 4a 73 74 36 69 67 6d 30 56 58 58 47 32 52 70 52 76 42 41 6c 58 7a 48 47 52 56 58 69 50 67 6c 36 6f 79 76 68 55 66 35 50 74 30 56 58 4f 4a 6b 48 54 74 4d 52 33 37 58 31 35 78 33 42 7a 42 4c 6f 56 50 79 6b 31 7a 6c 46 48 4a 62 52 70 34 32 6f 76 49 51 4f 58 43 6a 67 43 6e 52 6a 42 69 5a 38 79 39 79 4a 7a 79 4d 55 67 7a 51 41 64 39 46 70 56 7a 32 63 58 50 55 47 73 44 6e 5a 39 74 6f 70 43 67 55 51 5a 2d 57 47 Data Ascii: eSkLCuOR4hReH5_q1Oqrf_0Vc6dlQxKsra8D9Tm7U-1oub2XAW_Ha7ETrvMxBYhCnl3XqWHDpkIJ7CatrsUHqSznsRhpzY8Xyjbm3PP_MgJfukaoEWsmKy6Jst6igm0VXXG2RpRvBAlXzHGRVXiPgl6oyvhUf5Pt0VXOJkHTtMR37X15x3BzBLoVPyk1zlFHJbRp42ovIQOXCjgCnRjBiZ8y9yJzyMUgzQAd9FpVz2cXPUGsDnZ9topCgUQZ-WG
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 64 62 6d 2f 61 64 3f 64 62 6d 5f 63 3d 41 4b 41 6d 66 2d 41 72 57 2d 48 45 6e 38 52 55 76 42 58 46 50 7a 74 4d 30 56 51 4a 63 7a 70 4b 59 4f 54 7a 41 49 43 65 73 33 63 76 68 38 51 32 37 55 4d 35 74 31 5a 79 4f 43 39 69 69 30 5f 70 39 41 6a 4a 4a 2d 79 57 73 59 35 42 78 67 79 74 5a 49 6f 4c 79 64 4e 74 38 69 6a 42 6b 38 42 7a 76 39 7a 46 55 4d 73 52 48 54 70 43 67 73 45 4e 51 66 2d 51 54 52 6d 39 59 6e 67 32 54 70 71 77 70 67 68 46 6c 55 4c 61 30 69 6d 32 43 34 4e 67 71 62 5f 39 34 69 6e 74 77 79 42 62 64 33 7a 50 31 66 61 38 62 2d 52 4a 32 5a 38 32 57 38 4e 74 58 4e 7a 58 64 48 5f 47 72 33 31 4b 4d 46 73 67 32 49 41 30 36 70 43 6c 43 4c 49 69 64 71 35 58 35 4a 41 68 65 76 66 4f 35 75 51 5a 45 68 50 44 73 75 44 72 30 71 42 41 2d 6d 67 42 71 45 43 70 56 78 Data Ascii: dbm/ad?dbm_c=AKAmf-ArW-HEn8RUvBXFPztM0VQJczpKYOTzAICes3cvh8Q27UM5t1ZyOC9ii0_p9AjJJ-yWsY5BxgytZIoLydNt8ijBk8Bzv9zFUMsRHTpCgsENQf-QTRm9Yng2TpqwpghFlULa0im2C4Ngqb_94intwyBbd3zP1fa8b-RJ2Z82W8NtXNzXdH_Gr31KMFsg2IA06pClCLIidq5X5JAhevfO5uQZEhPDsuDr0qBA-mgBqECpVx
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 56 55 68 4c 42 79 34 67 71 34 70 59 4d 70 48 57 30 75 51 4d 30 44 46 49 44 4f 52 58 7a 58 65 37 6b 74 6b 4a 47 43 6d 38 4b 32 49 79 53 6a 4a 76 72 48 4b 38 74 78 4a 67 36 47 38 71 42 6a 63 4e 4d 70 64 43 6e 5a 7a 39 75 54 31 48 38 32 75 79 4f 58 62 4b 59 62 48 53 78 70 64 61 5f 50 78 67 42 58 32 77 5a 6e 48 62 56 45 51 6e 70 5f 61 32 39 55 78 70 54 35 59 79 38 4d 43 44 62 39 47 47 4f 78 49 4c 74 34 4c 2d 67 77 6b 4c 30 34 63 6a 30 61 43 4d 59 4a 49 38 53 45 78 48 71 75 49 49 30 4d 50 6d 66 4d 59 4a 7a 49 78 71 7a 76 7a 67 6d 37 78 73 53 6e 6a 35 75 32 2d 61 6b 42 65 31 63 4e 6f 56 78 79 6f 36 61 5a 50 61 55 34 78 55 4c 37 32 47 64 66 6f 4b 32 44 55 6b 69 4d 6a 5f 35 4f 70 44 69 49 78 5a 37 6b 55 42 6a 63 4c 7a 33 65 66 45 34 69 6b 4e 7a 30 5a 4d 37 6e 4f Data Ascii: VUhLBy4gq4pYMpHW0uQM0DFIDORXzXe7ktkJGCm8K2IySjJvrHK8txJg6G8qBjcNMpdCnZz9uT1H82uyOXbKYbHSxpda_PxgBX2wZnHbVEQnp_a29UxpT5Yy8MCDb9GGOxILt4L-gwkL04cj0aCMYJI8SExHquII0MPmfMYJzIxqzvzgm7xsSnj5u2-akBe1cNoVxyo6aZPaU4xUL72GdfoK2DUkiMj_5OpDiIxZ7kUBjcLz3efE4ikNz0ZM7nO
2024-04-25 07:07:58 UTC	1369	IN	Data Raw: 5a 33 44 50 4c 47 77 2d 68 79 45 36 57 56 42 75 6a 58 45 53 64 61 52 50 51 39 62 75 33 59 49 36 37 68 36 41 59 78 56 4c 6e 32 6c 6f 46 4e 2d 5f 58 36 55 2d 30 51 51 7a 64 36 64 35 56 45 4d 48 5a 71 73 5f 78 61 71 4f 35 34 57 62 43 39 79 47 4c 6f 71 74 66 76 78 55 31 61 70 6e 48 59 74 41 35 7a 50 75 46 37 63 52 31 42 5f 39 6b 6e 75 45 54 79 61 76 4a 50 52 59 57 49 45 70 43 55 34 39 58 55 71 43 65 4d 35 77 39 43 42 7a 57 7a 76 49 51 75 51 44 78 6a 56 6c 7a 4b 5f 7a 35 5a 4d 72 6a 34 64 44 6b 42 79 64 4e 4c 4e 6a 6f 38 4e 42 54 45 34 35 74 75 62 74 4f 77 36 4e 53 76 59 46 6b 5f 79 42 42 69 53 43 61 4a 37 63 53 72 63 34 4f 64 51 61 65 4c 75 39 74 71 56 36 42 37 71 7a 55 48 45 7a 32 65 43 72 55 57 66 52 34 50 68 6b 70 44 45 52 6b 43 42 37 7a 49 4e 67 45 39 6f Data Ascii: Z3DPLGw-hyE6WVBujXESdaRPQ9bu3YI67h6AYxVLn2loFN-_X6U-0QQzd6d5VEMHZqs_xaqO54WbC9yGLoqtfvxU1apnHYtA5zPuF7cR1B_9knuETyavJPRYWIEpCU49XUqCeM5w9CBzWzvIQuQDxjVlzK_z5ZMrj4dDkBydNLNjo8NBTE45tubtOw6NSvYFk_yBBiSCaJ7cSrc4OdQaeLu9tqV6B7qzUHEz2eCrUWfR4PhkpDERkCB7zINgE9o
2024-04-25 07:07:58 UTC	1129	IN	Data Raw: 4e 51 7a 38 44 5f 43 46 36 62 55 4d 26 70 72 3d 31 33 3a 5a 69 6f 42 54 67 41 41 41 41 43 39 79 66 56 50 36 44 62 4f 6d 41 78 43 6c 4c 45 31 4c 49 39 65 59 53 34 35 55 51 26 63 69 64 3d 43 41 51 53 47 77 42 37 46 4c 74 71 50 34 76 35 7a 78 32 76 76 30 67 4a 6f 70 5a 5f 4e 65 51 62 4e 72 58 39 65 74 64 55 6d 42 67 42 22 20 64 61 74 61 2d 64 76 33 2d 77 69 64 74 68 3d 22 33 30 30 22 20 64 61 74 61 2d 64 76 33 2d 68 65 69 67 68 74 3d 22 32 35 30 22 20 64 61 74 61 2d 64 76 33 2d 72 65 6e 64 65 72 2d 6d 6f 64 65 3d 22 73 63 72 69 70 74 22 20 64 61 74 61 2d 64 76 33 2d 6d 65 74 61 2d 64 61 74 61 3d 22 5b 31 33 2c 37 36 2c 33 37 35 30 37 34 38 36 38 30 36 35 31 36 36 32 30 35 30 5d 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d Data Ascii: NQz8D_CF6bUM&pr=13:ZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cid=CAQSGwB7FLtqP4v5zx2vv0gJopZ_NeQbNrX9etdUmBgB" data-dv3-width="300" data-dv3-height="250" data-dv3-render-mode="script" data-dv3-meta-data="[13,76,3750748680651662050]"></script><script data-jc=
2024-04-25 07:07:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.5	50630	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	1086	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:58 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:58 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.5	50631	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.16
2024-04-25 07:07:58 UTC	1776	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 61 32 37 62 63 33 38 34 2d 31 34 32 31 2d 34 32 37 61 2d 39 61 35 36 2d 31 65 35 32 35 65 33 34 30 32 62 32 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/pricing?trk=NAV_pricing","eid":"a27bc384-1421-427a-9a56-1e525e3402b2","tv":"js-3.23.0","tna":"c
2024-04-25 07:07:59 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:58 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:58 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:59 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.5	50645	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	1087	OUT	GET /xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNVm21DdchzuhTI3w2O4kJshRz_Iz3lZr5Xlm3HX6h_oGBl5II93fcRo_lUur2vK2_QL0RYnlPPvVgV30Yl7ZEDq3nDcFQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:59 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:58 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 07:07:59 UTC	497	IN	Data Raw: 31 65 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 6e 65 78 75 73 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 6e 65 78 75 73 26 67 6f 6f 67 6c 65 5f 68 6d 3d 24 7b 42 41 53 45 36 34 5f 55 49 44 Data Ascii: 1ea<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID
2024-04-25 07:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.5	50644	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	5123	OUT	GET /dbm/ad?dbm_c=AKAmf-ArW-HEn8RUvBXFPztM0VQJczpKYOTzAICes3cvh8Q27UM5t1ZyOC9ii0_p9AjJJ-yWsY5BxgytZIoLydNt8ijBk8Bzv9zFUMsRHTpCgsENQf-QTRm9Yng2TpqwpghFlULa0im2C4Ngqb_94intwyBbd3zP1fa8b-RJ2Z82W8NtXNzXdH_Gr31KMFsg2IA06pClCLIidq5X5JAhevfO5uQZEhPDsuDr0qBA-mgBqECpVx5eCzo&dbm_d=AKAmf-BjemhnpRGeyMotUw4NKitilyUn3WfyOrFA_HFqicla34xJAlbkbtoCvb4ok4Ppg-iXgU_NLTYhbIfmdVGlm2ryTFtZlcmV5asQZWAVBGaCxAttcjNbGgD8v6dR916bElpCFCED8ZXV4kDydw52E61fM_LNmnoaFW_MzK2EslpWWl8yaQ9OjuOtSmEykze1_4SyyY_RCP6o9MH90mr0MdIiv2rTVu7fDN2FEwvFDMjAu8HYzpYyqoHO5IKrI7A3DSKMuliq2VsXbv8EwTTvrQHxA9m71LDzAka3uni11sJHFqJeWWA24JHHRQ6ifzJhKacS7WjJQg5asfLQZ0eyngNDyKR6PmBuI0Ef-SoQjbeyjsEsaHOy24f7rGeoIcJlSqhy8koYYrPVyxJDKyqPegq0xaeT3697NVk6-qODV38mXZ9IllSa-QIruDGH-O0Ahtl9xTHCMcQn4NxcalyZPNN3qIX7wptg-rdIstSSsJJ00kaNsOs6X7-U0AWgZhXFjzxrClnb5TmzMJTyulvdh4weNC-dA7KW5yvyvq34yPO6-2voyVU3uzXwJa88X0vpgUIomrP42YEaIi2xTj-CClB18xmoO5UC_tUhzOdPEgtDrj9OKnWSlEx-nPLiM6T4bzhQlg4UETu8E2DAo_J31e5QhGD60KZpr_-DmI2CwV0ttGd7znWlYIqR8zpxDssbWOW8KU8qjFPXSLgg98PmuOvhvuU7cqlxAStY_QUZ2pWBzO1Psmy74SyJf8OHnc1knLQXrgW6dIXpB9BPjezQCd19pG6BPkvNJRAY9KKZzp3mk-MpIcwTz8RokVhBLwa4jOByEMF9KOb2iIl9SN5XOvzY-bozLOu1VAMewQfp6EjiJQcKrt1WrPzpJQBrrVwMEvVSApBHNQ-6JY_2xhsF7jUqWbTKQvu3D67LMmBppoFfvjm9jw2ewntPMToJA8AWDPpKp3dp7nnocLffzsquxxAwCUA3G-Vl-rqyo7LGaePg-hzdnUfiWzq7DUsp951pKY3JYky_BpHhWhzuIABXgJ52uiPdLLtkBnMNbYGcb-mDuGT8IFrq6TLTg49EQLeny3HwbxcXFVVUhLBy4gq4pYMpHW0uQM0DFIDORXzXe7ktkJGCm8K2IySjJvrHK8txJg6G8qBjcNMpdCnZz9uT1H82uyOXbKYbHSxpda_PxgBX2wZnHbVEQnp_a29UxpT5Yy8MCDb9GGOxILt4L-gwkL04cj0aCMYJI8SExHquII0MPmfMYJzIxqzvzgm7xsSnj5u2-akBe1cNoVxyo6aZPaU4xUL72GdfoK2DUkiMj_5OpDiIxZ7kUBjcLz3efE4ikNz0ZM7nOvrhylnBTdkoHHFl8tRPokZuWHWqRf7fc7svgQ9qIa8kshYgZudWd5eE0Lp_vCUZYrs_SNp68cFxEeT1NjXiJZDZMeBblosg9whoRiGvbS6-4Ax9XchdanqHICt-Rc6j3w4_Rybs4RfIXqazayY_2QPTtHwouW3Zt7b4cTQ4wDW8ZSk-8M5xbmrUJHeQ8kTr_sTdEQIsvkaSUwD7F7YTg-648rzSxSnAnBmrqyyUBV2oM1dOC2SENjbxGuqiUFMFj7zTP0hFxNTJYpxkAyd_Gh9EhApR1tukgvzVRBxHDnsv1Xz9YvyCs--01-tHaOSqPdpFeoACYhQ0gunADk1s49IIOXJw2VjJu2xcWPUkcucXWidWlZmvQFU-LRsALNXI8L3FYurTUtRFC5opPZrcfauMgfVUggxU3zemOPkAUORxgxDg3mTJIDk7AY4u0UlGlGw9Qi2kfjtF56w7jGjR_2eytHJ131yCIW4Kr5t3B17k15y2-arONj6gaQqP-DDYV4sqloPqa0gEy3KIMYWtVIO6-WE2CWd2w5N3MEG9PTEw-FfOxLIJOkM9I8EFnHcyPLartm64HOFRincw126snLrxTIYqysqIJrzVc9vvzNTMMBo_20-oLGanDRONNBrMT46tTPXwPF_ZENAU0quaPhvAb95WEBBiNWozR2Q9mhjupUO4TgJFoInYSnKpBMn1xKT4DO0NLENY3zW2Xio6jPw6hSIpubODI72J5WOpG_oRfYYSZFSBK2phGVkbGxbWJ1ecveVNDeEYVe-ebjMZWVpEU3VNIDjf2m1PAYxoFX-435SdfxjqCqbmK5rVWbaoWaA3sxTMvJGuPLELdLR0BnYF5esg2xnhnX_Bx-yhDI5qU0S-76IbZdBRifydotc11ed_QyIjDIpP7pMr5z0w4bnFl74fbDsdG2RQ4kElq05Hw85fAvJOSApcXHIXsc72qrPdDcDAFBSG11dY-Kp9l5lln_qMA3-E016cxlwO8nWwDtpfVSgh-Z06hQpjNK7r9UbnEmW5zgx-VFAclcxzsoTqFCB8U_nO5IKsEKBzraGXmAl9lGdXj6NtnYWkXzD1FJes2e_v9Y9iwCd-vXmAPoR_1A3Z3DPLGw-hyE6WVBujXESdaRPQ9bu3YI67h6AYxVLn2loFN-_X6U-0QQzd6d5VEMHZqs_xaqO54WbC9yGLoqtfvxU1apnHYtA5zPuF7cR1B_9knuETyavJPRYWIEpCU49XUqCeM5w9CBzWzvIQuQDxjVlzK_z5ZMrj4dDkBydNLNjo8NBTE45tubtOw6NSvYFk_yBBiSCaJ7cSrc4OdQaeLu9tqV6B7qzUHEz2eCrUWfR4PhkpDERkCB7zINgE9obTzPES-YtHE18EaNqWlVdEQAHiloH_qdmV1rbvXA1_epe9Z-lsMzEugO_J5R9KnPzudVHzTYZqr1L0wZTqZQFGa5YtBCrJ25ctUqeSkLCuOR4hReH5_q1Oqrf_0Vc6dlQxKsra8D9Tm7U-1oub2XAW_Ha7ETrvMxBYhCnl3XqWHDpkIJ7CatrsUHqSznsRhpzY8Xyjbm3PP_MgJfukaoEWsmKy6Jst6igm0VXXG2RpRvBAlXzHGRVXiPgl6oyvhUf5Pt0VXOJkHTtMR37X15x3BzBLoVPyk1zlFHJbRp42ovIQOXCjgCnRjBiZ8y9yJzyMUgzQAd9FpVz2cXPUGsDnZ9topCgUQZ-WGigMYzHQUYF8RyyMKLBru7mJTx6EOPHj7II52nwjD1NQae2fgVoySoASh3v6jUPKb-n7DL_4W96AHOiuUWH2MmhNwTGABz-rTYAodsXRdyusiGKD8TJ3cV2ydeeFQZ3sDGRjYV1lDTYrTtoHQkucDSBD3NBfivifWzgRycRGF-qIHyUNPxeehzX-3VAXm3bUETNhgyTZHW7X_4mUol1Kqvq7SAzzpyemNVUHC6li79Fh9NO5vuoidCk5oBKpgH1Pqez2RzY_nb9U6921PCBSRk9yJVYD5eFEG2DHK46muJ16eONTyp83e8Lw9NHYz0cH1WEb0WOrMok3UeRpkKixXd50phev0fZkbEvLkmgjUjWv1bZX7hGbVGPxGH8oi7wtSVhjrBPH6MDKiGD-ioWw2-x2m4AXAXdLu_i9d873GlFq5BZFkgDLeVeVm9dsELDxxFORZ-zkX6iFh0C0p1XRYtQ3Qms43N-IHQlNBR_mrpfLAPaN2-OC0hmvdCn7d7ii6B930xaSgPctS-1f6UeT1jtiHkeiB1TFwZX9SHCDtHpQuhKti8wHkPHwc9z4hLrYEaVzzN0tLsusurZP17N0jSrlIWQ78CJrUK-xIT_Tm8R867cLekIdmWyUtIxOaJwH2nU_lGfo5CsGVIEHHfs7O3RcrrDsVw_HrykSDPl7fhNMfHYAPEqmxzGAednLNzsdMjCfwOeZUO3r5Aq0DesX_TD73uJrL2S2ZLlqCuT48I5nXn0FaJ1RaqBONQz8D_CF6bUM&pr=13%3AZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cid=CAQSGwB7FLtqP4v5zx2vv0gJopZ_NeQbNrX9etdUmBgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwetransfer.com&ds=l&xdt=1&iif=1&cor=3750748680651662000&adk=3123349629&dtd=23 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:58 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:07:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 07:07:58 UTC	552	IN	Data Raw: 38 30 30 30 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 32 31 32 37 37 35 38 34 30 39 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 54 67 45 71 5a 75 Data Ascii: 8000if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_2127758409"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_TgEqZu
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e Data Ascii: ht The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}fun
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 72 72 34 50 72 38 57 71 6f 41 34 22 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6a 63 27 2c 20 27 38 38 27 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 27 2c 20 27 72 32 30 32 34 30 34 32 33 27 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6a 63 70 2d 6a 73 63 64 27 2c 20 27 5b 5c 78 32 32 68 74 74 70 73 3a 2f 2f 66 77 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 72 6a 73 73 2f 73 74 2f 32 30 34 39 36 37 36 2f 37 39 35 36 32 35 30 30 2f 73 6b 65 6c 65 74 6f 6e 2e 6a 73 3f 62 75 6e 64 Data Ascii: rr4Pr8WqoA4");(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '88');m.setAttribute('data-jc-version', 'r20240423');m.setAttribute('data-jcp-jscd', '[\x22https://fw.adsafeprotected.com/rjss/st/2049676/79562500/skeleton.js?bund
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a Data Ascii: function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global obj
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 Data Ascii: (b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.includes must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype.includes must not be a regular expression");return-1!==t
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 21 42 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 42 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 43 28 29 3f 30 3a 42 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 43 28 29 3f 30 3a 42 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 43 28 29 3f 30 3a 42 28 22 45 64 67 65 22 29 29 7c 7c 28 43 28 29 3f 41 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 42 28 22 45 64 67 2f 22 29 29 7c 7c 43 28 29 26 26 41 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 46 3d 7b 7d 2c 47 3d 6e 75 6c 6c 3b 76 61 72 20 6a 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 6b 61 3d 21 69 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 48 3b 48 3d 22 66 75 6e Data Ascii: !B("Android")\|\|D();D();B("Safari")&&(D()\|\|(C()?0:B("Coast"))\|\|(C()?0:B("Opera"))\|\|(C()?0:B("Edge"))\|\|(C()?A("Microsoft Edge"):B("Edg/"))\|\|C()&&A("Opera"));var F={},G=null;var ja="undefined"!==typeof Uint8Array,ka=!ia&&"function"===typeof btoa;var H;H="fun
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 64 3d 49 28 61 29 3b 69 66 28 64 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 64 26 36 34 29 72 65 74 75 72 6e 20 61 3b 64 7c 3d 36 34 3b 69 66 28 63 26 26 28 64 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6d 69 64 22 29 3b 61 3a 7b 63 3d 61 3b 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 7b 76 61 72 20 66 3d 65 2d 31 3b 69 66 28 4a 28 63 5b 66 5d 29 29 7b 64 7c 3d 32 35 36 3b 62 3d 66 2d 28 2b 21 21 28 64 26 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 3c 3d 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 76 74 6c 6d 74 22 29 3b 64 3d 64 26 Data Ascii: (!Array.isArray(a))throw Error("narr");d=I(a);if(d&2048)throw Error("farr");if(d&64)return a;d\|=64;if(c&&(d\|=512,c!==a[0]))throw Error("mid");a:{c=a;var e=c.length;if(e){var f=e-1;if(J(c[f])){d\|=256;b=f-(+!!(d&512)-1);if(1024<=b)throw Error("pvtlmt");d=d&
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 6e 67 74 68 2d 66 29 7b 63 61 73 65 20 32 3a 67 3d 61 5b 66 2b 31 5d 2c 68 3d 62 5b 28 67 26 31 35 29 3c 3c 32 5d 7c 7c 64 3b 63 61 73 65 20 31 3a 61 3d 61 5b 66 5d 2c 63 5b 65 5d 3d 62 5b 61 3e 3e 32 5d 2b 62 5b 28 61 26 33 29 3c 3c 34 7c 67 3e 3e 34 5d 2b 68 2b 64 7d 61 3d 63 2e 6a 6f 69 6e 28 22 22 29 7d 72 65 74 75 72 6e 20 61 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 49 28 61 29 26 32 3f 61 3a 75 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 4a 28 61 29 29 7b 76 61 72 20 66 Data Ascii: ngth-f){case 2:g=a[f+1],h=b[(g&15)<<2]\|\|d;case 1:a=a[f],c[e]=b[a>>2]+b[(a&3)<<4\|g>>4]+h+d}a=c.join("")}return a}}return a};function ta(a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=K(a,void 0,0)?void 0:e&&I(a)&2?a:ua(a,b,c,void 0!==d,e);else if(J(a)){var f
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 61 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 66 3b 69 66 28 4a 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 67 3d 63 3b 76 61 72 20 68 3d 7b 7d 2c 74 3d 21 31 2c 6e 3b 66 6f 72 28 6e 20 69 6e 20 67 29 7b 76 61 72 20 71 3d 67 5b 6e 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 71 29 29 7b 76 61 72 20 46 61 3d 71 3b 69 66 28 4b 28 71 2c 64 2c 2b 6e 29 7c 7c 71 61 28 71 29 26 26 30 3d 3d 3d 71 2e 73 69 7a 65 29 71 3d 6e 75 6c 6c 3b 71 21 3d 46 61 26 26 28 74 3d 21 30 29 7d 6e 75 6c 6c 21 3d 71 3f 68 5b 6e 5d 3d 71 3a 74 3d 21 30 7d 69 66 28 74 29 7b 66 6f 72 28 76 61 72 20 45 20 69 6e 20 68 29 7b 67 3d 68 3b 62 72 65 61 6b 20 61 7d 67 3d 6e 75 6c 6c 7d 7d 67 21 3d 63 26 26 28 66 3d 21 30 29 3b 61 2d 2d 7d 66 6f 72 28 6e 3d 2b 21 21 28 Data Ascii: a)return b;var f;if(J(c=b[a-1])){a:{var g=c;var h={},t=!1,n;for(n in g){var q=g[n];if(Array.isArray(q)){var Fa=q;if(K(q,d,+n)\|\|qa(q)&&0===q.size)q=null;q!=Fa&&(t=!0)}null!=q?h[n]=q:t=!0}if(t){for(var E in h){g=h;break a}g=null}}g!=c&&(f=!0);a--}for(n=+!!(
2024-04-25 07:07:58 UTC	1255	IN	Data Raw: 68 65 2d 32 2e 30 20 2a 2f 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3f 76 6f 69 64 20 30 3a 63 2e 63 61 6c 6c 28 62 2c 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 3b 28 62 3d 64 3f 64 2e 6e 6f 6e 63 65 7c 7c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 22 22 3a 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 29 7b 61 3d 76 6f 69 64 Data Ascii: he-2.0 */ function Ca(a){var b,c,d=null==(c=(b=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)?void 0:c.call(b,"script[nonce]");(b=d?d.nonce\|\|d.getAttribute("nonce")\|\|"":"")&&a.setAttribute("nonce",b)};function Da(a){a=void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.5	50646	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	1628	OUT	GET /rfw/st/2049676/79562501/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=${SOURCE_URL_ENC}&adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=e&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Flandrover%2F2403%2Faccordion%2F2_d6hcUN%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=d&adsafe_jsinfo=,id:7d863bc7-215d-9e41-26f8-a4dd7c5a71e7,c:aSphML,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-88pjn,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:1,reas:f,mu:10000,br:c,bru:c,an:n,oam:0,scm:jl1,mtim:681,mot:0,app:0,maw:0,tdt:s,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:1,renddet:DIV.qs.sn,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,tt:rjss,et:689,oid:8b366475-02d2-11ef-9264-f68659d1dabe,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	268	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:07:58 GMT Content-Length: 0 Connection: close server: Apache-Coyote/1.1 p3p: CP="COM NAV INT STA NID OUR IND NOI" pragma: no-cache cache-control: no-cache location: https://static.adsafeprotected.com/skeleton.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.5	50647	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	1206	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-3,time:708,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,0~0%5D,as:%5B26~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt13.va.303net.net
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.5	50637	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	2705	OUT	GET /i.gif?e=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&s=IqGW-zWLtXcEJPRspK0dHKXj-5U HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.17
2024-04-25 07:07:59 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:07:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.5	50648	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	1093	OUT	GET /openrtb/adtag?s=1077556&r=%7B%22id%22%3A%221714028875196%22%2C%22imp%22%3A%5B%7B%22id%22%3A%221%22%2C%22banner%22%3A%7B%22format%22%3A%5B%7B%22h%22%3A250%2C%22w%22%3A300%7D%5D%2C%22height%22%3A250%2C%22width%22%3A300%2C%22pos%22%3A0%7D%2C%22pmp%22%3A%7B%22private_auction%22%3A1%2C%22deals%22%3A%5B%7B%22id%22%3A%22IX712857616261749328%22%2C%22at%22%3A1%7D%5D%7D%7D%5D%2C%22site%22%3A%7B%22domain%22%3A%22wetransfer.com%22%2C%22page%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22publisher%22%3A%7B%22id%22%3A%22194052%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%22consent%22%3A%22true%22%7D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3Atrue%7D%7D%2C%22at%22%3A1%2C%22tmax%22%3A1000%7D HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:59 UTC	626	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 879c7fcdbe5678d1-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqw3n7LIGQsysUoWbfvEnyAj6ebSXc75MHTlU8GJhM%2FrngXZ%2B3EvIVhySvChERuccxyriIeZYb%2FaiPgweH0P4FyXqSYeH0H03XYj8tM2bUWbScmnbRTVgdT3TkQX8Senj8LRF88J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:59 UTC	743	IN	Data Raw: 32 61 31 31 0d 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 35 35 36 36 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 31 30 37 37 35 35 36 2f 38 35 2f 63 6f 6c 30 32 6a 75 70 6e 63 6d 70 66 71 6f 37 69 67 62 67 2f 64 61 36 66 37 34 63 32 2d 35 30 34 36 2d 34 36 32 61 2d 39 31 39 62 2d 63 32 35 39 65 63 34 61 34 65 37 64 3f 76 65 72 69 66 69 65 44 3d 31 26 75 73 65 72 49 44 3d 5a 69 6f 42 50 39 48 4d 34 79 63 41 41 44 53 38 41 52 46 50 7a 67 41 41 26 63 6d 70 72 6f 3d 35 38 37 26 64 65 76 69 63 65 54 79 70 65 3d 32 26 65 78 70 69 72 79 54 69 6d 65 3d 31 37 31 34 30 32 39 34 37 39 26 70 72 6f 66 69 6c 65 49 44 73 3d 26 63 72 65 61 74 69 76 65 49 44 3d 32 66 33 35 61 35 33 26 70 75 62 49 44 3d 31 Data Ascii: 2a11<img src="https://a5566.casalemedia.com/impression/v2/1077556/85/col02jupncmpfqo7igbg/da6f74c2-5046-462a-919b-c259ec4a4e7d?verifieD=1&userID=ZioBP9HM4ycAADS8ARFPzgAA&cmpro=587&deviceType=2&expiryTime=1714029479&profileIDs=&creativeID=2f35a53&pubID=1
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 3d 43 50 61 4b 6d 67 45 51 75 37 75 41 77 77 51 59 38 66 4c 78 6a 41 49 77 41 51 26 76 3d 41 50 45 75 63 4e 57 5f 6f 4e 46 70 5a 4f 52 61 37 75 4d 30 79 30 6b 6e 63 39 6a 67 6e 6c 35 61 49 58 43 72 79 4b 33 31 68 63 33 4e 51 36 55 53 72 6d 5f 6b 4c 58 37 53 49 30 57 56 74 77 31 69 78 4d 45 30 76 48 59 77 66 51 34 45 63 52 52 4c 56 4e 70 46 61 4f 53 5a 39 62 47 42 4b 6a 70 57 35 67 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 22 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 Data Ascii: et/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNW_oNFpZORa7uM0y0knc9jgnl5aIXCryK31hc3NQ6USrm_kLX7SI0WVtw1ixME0vHYwfQ4EcRRLVNpFaOSZ9bGBKjpW5g" style="display:none" aria-hidden="true"></iframe><div><div style="position:absolute;"><script>(function() {var
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 31 54 42 38 6c 6d 52 38 78 6a 43 57 6f 65 33 77 72 33 52 55 63 79 66 6d 30 72 72 66 62 2d 5f 46 65 64 5f 73 69 44 65 71 6e 38 61 43 74 34 4f 55 78 7a 37 64 70 72 49 71 34 48 66 57 37 77 47 66 41 5a 58 55 50 54 37 4e 39 71 43 56 38 59 51 6d 64 61 37 43 35 46 2d 59 5a 59 74 39 4c 51 74 4a 67 71 41 45 73 53 35 71 54 4e 53 4e 50 4c 41 63 5a 31 39 50 44 6f 6b 66 73 44 56 53 33 46 30 46 74 32 6a 64 79 61 32 53 4f 75 57 63 6b 56 52 4f 36 4c 61 74 6b 57 4d 44 48 53 64 36 6a 70 49 65 61 30 6e 7a 48 38 74 7a 36 34 62 30 6c 74 6f 55 62 79 30 45 65 6c 62 71 41 6e 42 78 71 6a 4f 38 4e 78 6d 78 31 5a 6a 63 62 54 34 51 56 6c 5a 70 48 59 6d 45 63 4c 42 30 78 33 71 59 31 50 75 2d 6f 46 71 31 78 59 7a 6f 51 52 54 6c 48 31 4d 38 57 67 45 6c 6c 72 76 35 47 43 7a 43 74 34 5f Data Ascii: 1TB8lmR8xjCWoe3wr3RUcyfm0rrfb-_Fed_siDeqn8aCt4OUxz7dprIq4HfW7wGfAZXUPT7N9qCV8YQmda7C5F-YZYt9LQtJgqAEsS5qTNSNPLAcZ19PDokfsDVS3F0Ft2jdya2SOuWckVRO6LatkWMDHSd6jpIea0nzH8tz64b0ltoUby0EelbqAnBxqjO8Nxmx1ZjcbT4QVlZpHYmEcLB0x3qY1Pu-oFq1xYzoQRTlH1M8WgEllrv5GCzCt4_
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 66 5f 6b 6a 64 5a 71 69 36 33 66 67 37 4f 36 6b 59 4f 72 4f 42 4a 62 54 50 71 71 61 64 79 6c 79 64 32 4b 79 35 35 66 59 74 59 79 4e 58 63 6a 6e 6e 74 41 5a 76 4c 2d 52 52 59 52 4c 47 63 36 47 48 47 62 46 4a 43 47 6b 59 58 42 64 6a 42 71 31 35 56 5a 33 34 53 53 6e 51 45 61 75 4b 5a 4f 78 77 46 71 73 74 34 2d 62 62 41 56 52 71 48 70 4b 31 6a 6b 46 45 34 5a 6f 49 64 5a 4b 31 37 62 4c 4c 47 66 72 63 39 79 58 34 46 77 37 31 36 73 35 7a 5f 72 78 5f 4d 6d 53 5a 6b 6e 38 79 6f 62 4c 6e 63 46 74 79 49 51 74 33 34 65 6e 73 4d 4c 76 6b 37 72 64 45 66 50 62 54 51 68 58 77 79 45 46 66 53 7a 49 37 58 49 50 49 54 31 33 4f 56 37 71 35 7a 55 76 57 37 4e 4c 6a 31 73 54 4a 32 64 68 52 46 51 6b 53 68 41 57 73 49 51 33 68 68 34 70 62 71 4c 72 56 6a 46 78 4f 4a 49 30 54 77 75 Data Ascii: f_kjdZqi63fg7O6kYOrOBJbTPqqadylyd2Ky55fYtYyNXcjnntAZvL-RRYRLGc6GHGbFJCGkYXBdjBq15VZ34SSnQEauKZOxwFqst4-bbAVRqHpK1jkFE4ZoIdZK17bLLGfrc9yX4Fw716s5z_rx_MmSZkn8yobLncFtyIQt34ensMLvk7rdEfPbTQhXwyEFfSzI7XIPIT13OV7q5zUvW7NLj1sTJ2dhRFQkShAWsIQ3hh4pbqLrVjFxOJI0Twu
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 53 62 33 62 6f 4b 31 61 74 71 6d 36 35 56 79 6b 6f 76 50 45 65 6f 5a 68 45 6f 4b 4c 55 34 56 52 7a 67 5a 39 6a 41 49 77 47 6e 36 43 2d 61 4e 30 56 61 68 39 79 68 39 34 63 66 55 50 63 5a 41 37 70 37 75 6e 75 37 6b 69 59 54 4e 55 42 4d 6c 4c 62 76 55 41 74 53 51 6e 6f 69 36 64 55 46 62 57 30 6c 71 50 6f 79 69 59 59 4c 2d 61 38 77 34 54 77 69 76 45 37 73 55 33 64 33 68 32 41 48 45 74 50 57 71 70 76 63 79 54 74 6e 4c 7a 55 6c 56 32 49 5a 49 66 6f 47 50 2d 57 73 57 64 6e 33 73 56 4f 70 78 67 6a 77 53 58 38 69 55 44 64 65 75 34 76 5f 41 65 4a 49 42 57 58 37 38 75 72 6d 51 72 49 34 72 69 47 58 70 56 78 47 48 6d 63 45 5f 46 67 63 6c 59 71 73 50 6e 44 55 44 6a 74 75 39 46 52 55 4d 42 33 54 6a 78 4a 30 53 6c 71 5f 72 6c 55 68 50 35 47 78 2d 35 59 77 77 32 5f 7a 6f Data Ascii: Sb3boK1atqm65VykovPEeoZhEoKLU4VRzgZ9jAIwGn6C-aN0Vah9yh94cfUPcZA7p7unu7kiYTNUBMlLbvUAtSQnoi6dUFbW0lqPoyiYYL-a8w4TwivE7sU3d3h2AHEtPWqpvcyTtnLzUlV2IZIfoGP-WsWdn3sVOpxgjwSX8iUDdeu4v_AeJIBWX78urmQrI4riGXpVxGHmcE_FgclYqsPnDUDjtu9FRUMB3TjxJ0Slq_rlUhP5Gx-5Yww2_zo
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 77 32 4d 68 6a 69 5a 5f 4a 75 43 63 31 43 36 6e 62 52 33 64 62 55 69 4e 77 6c 6c 7a 74 4c 74 5a 4e 5a 48 70 5f 6c 65 70 71 50 2d 55 59 61 4d 64 43 46 79 4b 4b 59 38 66 4f 70 33 50 59 59 4e 6c 51 66 79 41 36 4f 4f 71 78 30 45 38 4f 43 6b 51 54 56 77 72 64 61 46 75 33 62 76 6e 4a 53 51 50 59 65 7a 6b 77 5a 4e 48 2d 6e 6e 4a 34 49 6a 36 36 79 64 76 70 5f 65 57 47 32 6d 53 42 74 4f 57 37 66 36 71 62 39 56 57 75 31 79 66 45 6f 76 68 34 55 72 70 69 45 42 4d 48 35 34 59 68 75 65 6c 61 53 61 5f 33 4b 38 34 5a 37 6b 4f 4c 69 46 69 44 63 30 52 4f 54 62 45 5a 33 52 50 66 54 71 30 68 67 61 68 64 4d 66 4d 6b 77 44 32 49 58 68 31 58 31 61 33 5a 4d 47 76 39 56 4c 32 77 66 41 33 64 49 67 54 70 41 6a 36 4f 4b 5a 54 37 75 46 67 6f 46 34 6a 42 6f 5a 63 52 37 6a 34 4e 6c 46 Data Ascii: w2MhjiZ_JuCc1C6nbR3dbUiNwllztLtZNZHp_lepqP-UYaMdCFyKKY8fOp3PYYNlQfyA6OOqx0E8OCkQTVwrdaFu3bvnJSQPYezkwZNH-nnJ4Ij66ydvp_eWG2mSBtOW7f6qb9VWu1yfEovh4UrpiEBMH54YhuelaSa_3K84Z7kOLiFiDc0ROTbEZ3RPfTq0hgahdMfMkwD2IXh1X1a3ZMGv9VL2wfA3dIgTpAj6OKZT7uFgoF4jBoZcR7j4NlF
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 4d 36 4c 30 58 44 6f 38 39 57 66 51 64 66 44 33 54 64 57 5f 46 2d 78 4c 63 30 6e 77 6e 68 47 42 79 59 47 43 4a 54 69 6b 47 65 4c 76 78 2d 77 4e 30 2d 55 73 52 69 6a 38 6e 38 35 33 49 48 41 41 42 68 38 53 52 4d 37 54 63 7a 41 6b 72 36 30 79 6b 57 56 47 6d 66 79 32 45 52 51 4f 5a 2d 38 4a 6a 79 45 6a 37 68 2d 42 64 31 54 38 30 78 33 4a 47 2d 63 43 73 5a 44 35 30 74 72 74 5f 54 36 4b 7a 6d 63 79 51 38 63 69 67 65 79 38 52 53 70 48 44 35 49 66 79 33 79 39 4d 78 4a 59 4f 58 4e 37 5a 7a 6a 6c 4c 57 42 6a 2d 31 31 72 53 77 35 46 30 79 46 4b 64 52 5f 33 39 63 6c 44 38 4b 34 64 4f 78 36 37 73 6e 34 64 50 54 77 52 34 6d 6a 73 47 52 57 61 55 30 68 56 4e 6d 55 75 4e 4c 64 56 75 2d 67 78 4c 42 78 6e 52 34 4a 53 35 38 35 43 4d 57 51 42 45 55 6e 6d 79 36 69 39 67 57 73 Data Ascii: M6L0XDo89WfQdfD3TdW_F-xLc0nwnhGByYGCJTikGeLvx-wN0-UsRij8n853IHAABh8SRM7TczAkr60ykWVGmfy2ERQOZ-8JjyEj7h-Bd1T80x3JG-cCsZD50trt_T6KzmcyQ8cigey8RSpHD5Ify3y9MxJYOXN7ZzjlLWBj-11rSw5F0yFKdR_39clD8K4dOx67sn4dPTwR4mjsGRWaU0hVNmUuNLdVu-gxLBxnR4JS585CMWQBEUnmy6i9gWs
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 6b 39 54 39 36 36 62 53 4d 47 45 50 61 42 68 52 55 70 36 70 4c 79 52 47 42 7a 46 49 64 57 62 44 30 59 69 52 71 4c 6b 4f 4d 65 42 50 79 58 39 4e 31 78 43 6d 52 59 31 55 6a 34 77 2d 58 75 4e 77 54 6e 66 6e 69 5f 6b 65 39 50 62 6b 57 65 72 6d 74 70 36 4f 6d 6d 43 61 6b 75 66 38 36 74 70 4c 2d 49 58 7a 38 34 7a 61 6f 51 54 31 64 46 68 68 31 6b 6f 41 35 74 41 54 7a 44 6d 68 6b 70 61 44 36 35 56 65 38 32 75 79 39 48 7a 6f 63 63 35 32 74 43 46 36 53 49 69 4a 34 63 4d 7a 6e 36 66 6e 6b 38 4e 2d 70 65 4d 4b 75 6b 4e 53 55 69 48 61 45 37 34 36 63 59 52 46 59 70 31 68 70 4a 62 33 6f 64 4b 65 38 73 49 35 57 67 74 62 73 72 58 4f 6e 71 63 44 56 49 41 71 5a 6c 44 55 55 50 6e 39 6b 50 5a 70 7a 68 72 61 78 49 4f 45 4c 63 78 49 76 36 4d 64 44 67 59 49 75 45 66 4d 31 34 6b Data Ascii: k9T966bSMGEPaBhRUp6pLyRGBzFIdWbD0YiRqLkOMeBPyX9N1xCmRY1Uj4w-XuNwTnfni_ke9PbkWermtp6OmmCakuf86tpL-IXz84zaoQT1dFhh1koA5tATzDmhkpaD65Ve82uy9Hzocc52tCF6SIiJ4cMzn6fnk8N-peMKukNSUiHaE746cYRFYp1hpJb3odKe8sI5WgtbsrXOnqcDVIAqZlDUUPn9kPZpzhraxIOELcxIv6MdDgYIuEfM14k
2024-04-25 07:07:59 UTC	451	IN	Data Raw: 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 64 76 33 2d 61 73 66 72 6d 22 29 3b 66 6f 72 28 6c 65 74 20 62 3d 30 3b 62 3c 6d 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 63 6f 6e 73 74 20 63 3d 6d 5b 62 5d 3b 69 66 28 63 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 26 26 66 28 63 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 22 73 63 72 69 70 74 22 2c 61 29 29 7b 6c 3d 21 30 3b 62 72 65 61 6b 20 61 7d 7d 6c 3d 21 31 7d 7d 6c 7c 7c 6b 28 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d Data Ascii: tsByClassName("dv3-asfrm");for(let b=0;b<m.length;++b){const c=m[b];if(c.contentWindow&&f(c.contentWindow.document,"script",a)){l=!0;break a}}l=!1}}l\|\|k()};}).call(this);</script></div></div><iframe width="0" height="0" frameborder="0" scrolling="no" src=
2024-04-25 07:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.5	50634	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3502 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.17
2024-04-25 07:07:58 UTC	3502	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 66 61 66 34 37 33 31 37 2d 35 34 66 32 2d 34 36 61 66 2d 38 35 62 63 2d 38 61 32 35 35 39 37 63 36 66 61 31 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"faf47317-54f2-46af-85bc-8a25597c6fa1","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-25 07:07:59 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:59 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:59 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.5	50652	209.204.230.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:58 UTC	866	OUT	GET /impression/v2/1077556/85/col02jj941285q4dgn90/9a641c96-03f1-404a-8d03-04ab58f72f7d?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029478&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site HTTP/1.1 Host: a5574.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:59 UTC	223	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.5	50649	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	909	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ad94c286-781a-4282-9695-1a593ae05d04&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A54.843Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1204%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1204%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts=0.8%2C1200 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:59 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.5	50636	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.17
2024-04-25 07:07:59 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:59 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.5	50656	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	901	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:07:59 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.5	50651	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18
2024-04-25 07:07:59 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 33 63 38 39 63 63 64 65 2d 32 64 61 64 2d 34 33 30 62 2d 62 65 33 31 2d 37 66 65 66 34 32 33 33 37 31 61 37 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"3c89ccde-2dad-430b-be31-7fef423371a7","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-25 07:07:59 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:07:59 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:07:59 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port
693	192.168.2.5	50661	74.125.136.154	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	883	OUT	GET /pixel?google_nid=appnexus&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:07:59 UTC	655	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEDl2HoJpvfIVNQQoRwk7jsU&google_cver=1 Date: Thu, 25 Apr 2024 07:07:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:07:59 UTC	290	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 31 30 31 26 61 6d 70 3b 63 6f 64 65 3d 43 41 45 53 45 44 6c 32 48 6f 4a 70 76 66 49 56 4e 51 51 6f 52 77 6b 37 6a 73 55 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ib.adnxs.com/setuid?entity=101&code=CAESEDl2HoJpvfIVNQQoRwk7jsU&google_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.5	50660	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	1183	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-6,time:708,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,1~0%5D,as:%5B27~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt17.va.303net.net
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.5	50659	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	1538	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphNa,pingTime:-2,time:713,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:52,bdZ:892,beA:894,beZ:896,mfA:1575,cmA:1576,inA:1576,inZ:1577,prA:1577,prZ:1579,si:1583,poA:1584,poZ:1594,cmZ:1594,mfZ:1594,loA:1602,loZ:1604,ltA:1607,ltZ:1607,mdA:896,mdZ:909%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:713,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,5~0%5D,as:%5B31~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt17.va.303net.net
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.5	50662	68.67.161.182	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	859	OUT	GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; receive-cookie-deprecation=1; uuid2=6142091251808246355
2024-04-25 07:07:59 UTC	1466	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NjE0MjA5MTI1MTgwODI0NjM1NQ%3D%3D AN-X-Request-Uuid: ee47af65-dc8a-4302-bf92-2d409b5d2f6e Set-Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:07:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:07:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.5	50663	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	960	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-3,time:708,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,0~0%5D,as:%5B26~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt26.va.303net.net
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.5	50666	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=6fa75900-82d7-4369-9d70-7076a983d0f7&batch_time=1714028877795 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1966 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	1966	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 33 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 74 22 3a 31 30 32 35 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":3,"page_states":[{"state":"passive","start":1025300000},{"state":"hidden","sta
2024-04-25 07:07:59 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: 6fa75900-82d7-4369-9d70-7076a983d0f7 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:07:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.5	50667	209.204.230.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	620	OUT	GET /impression/v2/1077556/85/col02jj941285q4dgn90/9a641c96-03f1-404a-8d03-04ab58f72f7d?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1714029478&profileIDs=&creativeID=2f35a53&pubID=194052&format=banner&channel=site HTTP/1.1 Host: a5574.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:59 UTC	223	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-04-25 07:07:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.5	50670	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	2326	OUT	GET /explore HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; _dd_s=rum=0&expire=1714029776130&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:07:59 UTC	872	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: s-maxage=120, stale-while-revalidate Date: Thu, 25 Apr 2024 07:07:59 GMT etag: "16e0wn1ernz2m3h" Referrer-Policy: strict-origin-when-cross-origin set-cookie: stickounet=1714028880.768.63.854384; Expires=Sat, 27-Apr-24 07:07:59 GMT; Max-Age=172800; Path=/; HttpOnly strict-transport-security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN x-nextjs-cache: HIT x-powered-by: Next.js X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6jbAPRKCjRCxy8eTERZSJd33if9AePHU1mqhl0bQN6nQQvWc3LMDkw==
2024-04-25 07:07:59 UTC	15512	IN	Data Raw: 35 65 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 70 74 69 6d 69 7a 65 6c 79 2e 63 6f 6d 2f 6a 73 2f 32 36 37 34 34 33 37 30 33 34 36 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 Data Ascii: 5ec3<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="icon" href="/favicon.ico"/><link rel="preload" href="https://cdn.optimizely.com/js/26744370346.js" as="script"/><link rel="
2024-04-25 07:07:59 UTC	8755	IN	Data Raw: 70 3b 77 3d 33 38 34 30 26 61 6d 70 3b 71 3d 37 35 22 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 5f 5f 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 74 65 78 74 2d 62 6c 6f 63 6b 22 3e 3c 68 33 20 63 6c 61 73 73 3d 22 75 69 2d 74 65 78 74 2d 62 6c 6f 63 6b 5f 5f 74 69 74 6c 65 20 62 6f 64 79 2d 74 69 74 6c 65 2d 6c 61 72 67 65 2d 61 63 63 65 6e 74 22 3e 3c 73 70 61 6e 3e 50 72 6f 75 64 20 74 6f 20 62 65 20 42 20 43 6f 72 70 e2 84 a2 20 61 6e 64 20 43 6c 69 6d 61 74 65 20 4e 65 75 74 72 61 6c 20 63 65 72 74 69 66 69 65 64 3c 2f 73 70 61 6e 3e 3c 2f 68 33 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 74 65 78 74 2d 62 6c 6f 63 6b 5f 5f 74 65 78 74 20 62 6f 64 79 2d Data Ascii: p;w=3840&q=75"/></div><div class="ui-content-block__content"><div class="ui-text-block"><h3 class="ui-text-block__title body-title-large-accent"><span>Proud to be B Corp and Climate Neutral certified</span></h3><div class="ui-text-block__text body-
2024-04-25 07:07:59 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 65 62 70 26 61 6d 70 3b 77 3d 33 38 34 30 26 61 6d 70 3b 71 3d 37 35 22 2f 3e 3c 2f 64 69 76 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 61 64 2d 63 61 72 6f 75 73 65 6c 5f 5f 61 72 72 6f 77 73 20 73 70 6c 69 64 65 5f 5f 61 72 72 6f 77 73 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 75 69 2d 61 64 2d 63 61 72 6f 75 73 65 6c 5f 5f 61 72 72 6f 77 20 73 70 6c 69 64 65 5f 5f 61 72 72 6f 77 2d 2d 70 72 65 76 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 50 72 65 76 69 6f 75 73 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 3c 70 61 74 68 20 64 3d 22 4d 20 31 30 2c 35 30 20 4c 20 36 30 2c 31 30 30 20 4c 20 Data Ascii: 4000ebp&w=3840&q=75"/></div></li></ul></div><div class="ui-ad-carousel__arrows splide__arrows"><button class="ui-ad-carousel__arrow splide__arrow--prev"><span class="sr-only">Previous</span><svg viewBox="0 0 100 100"><path d="M 10,50 L 60,100 L
2024-04-25 07:07:59 UTC	8	IN	Data Raw: 22 73 69 67 6e 75 0d 0a Data Ascii: "signu
2024-04-25 07:07:59 UTC	4097	IN	Data Raw: 66 66 61 0d 0a 70 53 6f 75 72 63 65 57 74 22 20 76 61 6c 75 65 3d 22 57 65 54 72 61 6e 73 66 65 72 20 46 6f 6f 74 65 72 22 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 69 6e 70 75 74 20 75 69 2d 69 6e 70 75 74 2d 2d 64 61 72 6b 20 75 69 2d 69 6e 70 75 74 2d 2d 68 69 64 64 65 6e 20 75 69 2d 6e 65 77 73 6c 65 74 74 65 72 5f 5f 69 6e 70 75 74 22 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 75 69 2d 69 6e 70 75 74 5f 5f 65 6c 65 6d 65 6e 74 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 61 72 69 61 2d 72 65 71 75 69 72 65 64 3d 22 74 72 75 65 22 20 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 63 6f 6e 73 65 6e 74 44 61 74 65 57 65 74 72 61 6e 73 66 65 72 22 20 61 72 69 61 2d 69 6e 76 61 6c 69 64 3d 22 66 61 6c 73 65 22 20 6e 61 6d Data Ascii: ffapSourceWt" value="WeTransfer Footer"/></div><div class="ui-input ui-input--dark ui-input--hidden ui-newsletter__input"><input class="ui-input__element" type="text" aria-required="true" aria-describedby="consentDateWetransfer" aria-invalid="false" nam
2024-04-25 07:07:59 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 69 74 65 6d 22 20 64 61 74 61 2d 6c 61 6e 67 75 61 67 65 3d 22 66 72 2d 46 52 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 6c 6f 63 61 6c 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 69 63 6f 6e 22 3e 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 38 20 31 35 2e 38 37 20 34 2e 36 33 20 31 31 2e 37 Data Ascii: 3ffai><li class="ui-language-selector__item" data-language="fr-FR"><button class="ui-language-selector__locale"><div class="ui-language-selector__icon"><svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M8.8 15.87 4.63 11.7
2024-04-25 07:08:00 UTC	16363	IN	Data Raw: 0d 0a 33 66 65 31 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 69 74 65 6d 22 20 64 61 74 61 2d 6c 61 6e 67 75 61 67 65 3d 22 6e 62 2d 4e 4f 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 6c 6f 63 61 6c 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 5f 5f 69 63 6f 6e 22 3e 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 38 20 31 35 2e 38 37 20 34 2e 36 33 20 31 31 2e 37 Data Ascii: 3fe1<li class="ui-language-selector__item" data-language="nb-NO"><button class="ui-language-selector__locale"><div class="ui-language-selector__icon"><svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M8.8 15.87 4.63 11.7
2024-04-25 07:08:00 UTC	12294	IN	Data Raw: 32 66 66 65 0d 0a 35 6f 6e 39 73 73 34 65 65 2f 31 52 55 4c 4f 73 79 6c 58 4e 44 47 43 63 78 38 51 41 54 36 32 6c 2f 33 38 65 39 64 36 33 33 39 31 38 64 30 32 65 63 66 32 61 66 61 33 35 38 30 39 39 34 33 30 31 64 2f 6d 61 72 71 75 65 65 2d 6c 61 6e 76 69 6e 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 31 37 37 32 2c 22 68 65 69 67 68 74 22 3a 31 31 30 36 7d 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 47 75 63 63 69 22 2c 22 61 64 64 69 74 69 6f 6e 61 6c 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 62 72 61 6e 64 4c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 62 75 74 74 6f 6e 22 3a 6e 75 6c 6c 2c 22 76 69 64 65 6f 49 64 22 3a 6e 75 6c 6c 2c 22 74 65 78 74 22 3a 6e 75 6c 6c 2c 22 69 6d 61 67 65 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 73 73 65 74 22 2c 22 73 79 73 22 3a 7b Data Ascii: 2ffe5on9ss4ee/1RULOsylXNDGCcx8QAT62l/38e9d633918d02ecf2afa3580994301d/marquee-lanvin.jpg","width":1772,"height":1106}},{"brand":"Gucci","additionalText":null,"brandLogo":null,"button":null,"videoId":null,"text":null,"image":{"__typename":"Asset","sys":{
2024-04-25 07:08:00 UTC	4091	IN	Data Raw: 66 66 34 0d 0a 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 76 69 64 65 6f 48 65 61 64 65 72 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 76 69 64 65 6f 53 75 62 48 65 61 64 65 72 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6d 65 64 69 61 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 73 73 65 74 22 2c 22 73 79 73 22 3a 7b 22 69 64 22 3a 22 33 6f 51 68 52 59 48 38 61 47 59 4f 54 44 66 46 33 64 58 4f 39 68 22 7d 2c 22 74 69 74 6c 65 22 3a 22 45 76 65 72 79 6f 6e 65 e2 80 99 73 20 42 75 73 69 6e 65 73 73 3a 20 53 68 61 70 69 6e 67 20 61 20 4d 6f 72 65 20 52 65 73 70 6f 6e 73 69 62 6c 65 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 75 74 75 72 65 20 2d 20 49 6d 61 67 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 69 6d 61 Data Ascii: ff4Link":null,"videoHeaderLink":null,"videoSubHeaderLink":null,"media":{"__typename":"Asset","sys":{"id":"3oQhRYH8aGYOTDfF3dXO9h"},"title":"Everyones Business: Shaping a More Responsible Advertising Future - Image","description":"","contentType":"ima
2024-04-25 07:08:00 UTC	12300	IN	Data Raw: 33 30 30 34 0d 0a 72 20 57 65 54 72 61 6e 73 66 65 72 22 2c 22 74 65 78 74 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 69 4c 69 6e 6b 22 2c 22 73 79 73 22 3a 7b 22 69 64 22 3a 22 32 64 50 65 35 65 42 72 44 49 4b 59 47 4a 45 6a 33 4b 6f 32 73 6c 22 7d 2c 22 74 69 74 6c 65 22 3a 22 52 65 61 64 20 6d 6f 72 65 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 62 6c 6f 67 2f 73 74 6f 72 79 2f 74 61 6c 6b 2d 74 6f 2d 74 68 65 2d 6d 6f 6f 6e 2d 6f 6e 65 2d 67 69 61 6e 74 2d 6c 65 61 70 2d 66 6f 72 2d 77 65 74 72 61 6e 73 66 65 72 2f 22 2c 22 74 72 61 63 6b 69 6e 67 4c 61 62 65 6c 22 3a 6e 75 6c 6c 2c 22 69 73 49 6e 50 61 67 65 4e 61 76 69 67 61 74 69 6f 6e 22 3a 66 61 Data Ascii: 3004r WeTransfer","text":null,"link":{"__typename":"UiLink","sys":{"id":"2dPe5eBrDIKYGJEj3Ko2sl"},"title":"Read more","link":"https://wetransfer.com/blog/story/talk-to-the-moon-one-giant-leap-for-wetransfer/","trackingLabel":null,"isInPageNavigation":fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.5	50672	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	621	OUT	GET /rjss/st/2049676/79562500/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=https://wetransfer.com/ HTTP/1.1 Host: fw.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:07:59 UTC	349	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 61490 Connection: close pragma: no-cache cache-control: no-cache expires: Wed, 31 Dec 1969 23:59:59 GMT access-control-allow-origin: fw.adsafeprotected.com access-control-allow-credentials: true vary: accept-encoding
2024-04-25 07:07:59 UTC	16035	IN	Data Raw: 0a 0a 0a 0a 0a 76 61 72 20 5f 5f 49 6e 74 65 67 72 61 6c 41 53 44 69 61 67 6e 6f 73 74 69 63 43 61 6c 6c 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 61 6c 72 65 61 64 79 53 65 6e 74 20 3d 20 7b 7d 3b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 76 61 72 20 67 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 20 3d 20 27 2f 2f 64 69 61 67 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 6a 73 3f 27 3b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 72 72 4d 73 67 20 3d 20 65 Data Ascii: var __IntegralASDiagnosticCall = (function() {try {var alreadySent = {};return function(code, err, config) {try {var gen = function(code, err, config) {var url = '//diag.adsafeprotected.com/js?';try {var errMsg = e
2024-04-25 07:07:59 UTC	1533	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 65 64 22 2c 20 46 4f 52 45 47 52 4f 55 4e 44 45 44 3a 22 66 6f 72 65 67 72 6f 75 6e 64 65 64 22 2c 7d 2c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 7b 41 50 50 3a 22 61 70 70 22 2c 20 0a 57 45 42 3a 22 77 65 62 22 2c 7d 2c 20 44 65 76 69 63 65 43 61 74 65 67 6f 72 79 3a 7b 43 54 56 3a 22 63 74 76 22 2c 20 44 45 53 4b 54 4f 50 3a 22 64 65 73 6b 74 6f 70 22 2c 20 4d 4f 42 49 4c 45 3a 22 6d 6f 62 69 6c 65 22 2c 20 4f 54 48 45 52 3a 22 6f 74 68 65 72 22 2c 7d 2c 20 49 6e 74 65 72 61 63 74 69 6f 6e 54 79 70 65 3a 7b 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2c 20 49 4e 56 49 54 41 54 49 4f 4e 5f 41 43 43 45 50 54 3a 22 69 6e 76 69 74 61 74 69 6f 6e 41 63 63 65 70 74 22 2c 7d 2c 20 43 72 65 61 74 69 76 65 54 79 70 65 3a 7b 44 45 46 49 4e Data Ascii: backgrounded", FOREGROUNDED:"foregrounded",}, Environment:{APP:"app", WEB:"web",}, DeviceCategory:{CTV:"ctv", DESKTOP:"desktop", MOBILE:"mobile", OTHER:"other",}, InteractionType:{CLICK:"click", INVITATION_ACCEPT:"invitationAccept",}, CreativeType:{DEFIN
2024-04-25 07:07:59 UTC	16384	IN	Data Raw: 45 3a 22 6f 6d 69 64 2d 65 6c 65 6d 65 6e 74 22 2c 7d 2c 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 54 79 70 65 3a 7b 4e 4f 4e 45 3a 22 4e 4f 4e 45 22 2c 20 44 49 52 45 43 54 3a 22 44 49 52 45 43 54 22 2c 20 50 4f 53 54 5f 4d 45 53 53 41 47 45 3a 22 50 4f 53 54 5f 4d 45 53 53 41 47 45 22 2c 7d 2c 20 0a 4f 6d 69 64 49 6d 70 6c 65 6d 65 6e 74 65 72 3a 7b 4f 4d 53 44 4b 3a 22 6f 6d 73 64 6b 22 2c 7d 2c 20 4d 65 73 73 61 67 65 4d 65 74 68 6f 64 3a 7b 49 44 45 4e 54 49 46 59 5f 53 45 52 56 49 43 45 5f 57 49 4e 44 4f 57 3a 22 69 64 65 6e 74 69 66 79 53 65 72 76 69 63 65 57 69 6e 64 6f 77 22 2c 7d 7d 3b 0a 76 61 72 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 49 6e 74 65 72 6e 61 6c 4d 65 73 73 61 67 65 5f 47 55 49 44 5f Data Ascii: E:"omid-element",}, CommunicationType:{NONE:"NONE", DIRECT:"DIRECT", POST_MESSAGE:"POST_MESSAGE",}, OmidImplementer:{OMSDK:"omsdk",}, MessageMethod:{IDENTIFY_SERVICE_WINDOW:"identifyServiceWindow",}};var module$contents$omid$common$InternalMessage_GUID_
2024-04-25 07:08:00 UTC	16384	IN	Data Raw: 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 65 78 70 6f 72 74 65 72 5f 67 65 74 4f 72 43 72 65 61 74 65 4e 61 6d 65 2c 20 63 29 5b 61 5b 61 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 5d 20 3d 20 62 3b 0a 20 20 7d 0a 7d 0a 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 65 78 70 6f 72 74 65 72 2e 70 61 63 6b 61 67 65 45 78 70 6f 72 74 20 3d 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 65 78 70 6f 72 74 65 72 5f 70 61 63 6b 61 67 65 45 78 70 6f 72 74 3b 0a 76 61 72 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 77 69 6e 64 6f 77 55 74 69 6c 73 20 3d 20 7b 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 75 6c 65 24 63 6f 6e 74 65 6e Data Ascii: e$contents$omid$common$exporter_getOrCreateName, c)[a[a.length - 1]] = b; }}module$exports$omid$common$exporter.packageExport = module$contents$omid$common$exporter_packageExport;var module$exports$omid$common$windowUtils = {};function module$conten
2024-04-25 07:08:00 UTC	11154	IN	Data Raw: 2e 73 65 6e 64 4d 65 73 73 61 67 65 5f 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 5b 61 2c 20 6e 75 6c 6c 5d 2e 63 6f 6e 63 61 74 28 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 46 72 6f 6d 49 74 65 72 61 62 6c 65 28 62 29 29 29 3b 0a 7d 3b 0a 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 24 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 4d 65 73 73 61 67 65 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 29 20 7b 0a 20 20 76 61 72 20 63 20 3d 20 24 6a 73 63 6f 6d 70 2e 67 65 74 52 65 73 74 41 72 67 75 6d 65 6e 74 73 2e 61 70 70 6c 79 28 32 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 69 66 20 28 74 68 69 73 2e 63 6f 6d 6d 75 6e 69 63 61 74 Data Ascii: .sendMessage_.apply(this, [a, null].concat($jscomp.arrayFromIterable(b)));};module$exports$omid$verificationClient$VerificationClient.prototype.sendMessage_ = function(a, b) { var c = $jscomp.getRestArguments.apply(2, arguments); if (this.communicat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.5	50674	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	850	OUT	GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:07:59 UTC	991	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:07:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 879c7fd32ca57ba5-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:07:59 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:07:59 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KTqqLctoEcfV78EZU749R9jCwyPaejqLcA4eYAafP9RYZ3iED9AcZ5UBu3xgkS29smRJ1sbHMml1xqPZ2MMXG8fSVOXMlKbGONvtXopQAdolWf5uU6Ldq3X9Ugp0%2Bkj3%2FEvds1m%2BNhWTLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:07:59 UTC	378	IN	Data Raw: 36 66 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 63 61 73 61 6c 65 2f 5a 69 6f 42 50 39 48 4d 34 79 63 41 41 44 53 38 41 52 46 50 7a 67 41 41 41 6b 73 41 41 41 41 42 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 Data Ascii: 6fd<html><head><title></title></head><body><img src="https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><i
2024-04-25 07:07:59 UTC	1369	IN	Data Raw: 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 34 30 2f 73 79 6e 63 3f 5f 6f 72 69 67 69 6e 3d 31 26 61 6d 70 3b 72 65 64 69 72 32 3d 74 72 75 65 26 61 6d 70 3b 75 69 64 3d 5a 69 6f 42 50 39 48 4d 34 79 63 41 41 44 53 38 41 52 46 50 7a 67 41 41 41 6b 73 41 41 41 41 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 Data Ascii: ="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="
2024-04-25 07:07:59 UTC	49	IN	Data Raw: 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: " height="0" alt="" border="0" /></body></html>
2024-04-25 07:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.5	50673	142.250.9.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	2817	OUT	GET /pcs/view?xai=AKAOjst_oZaLdZDI42H9ZztiHtVwg8MgNp0jhJdOx90DcrgeI4Ro61IV0vUuSYQpECzL7Vu8-UM-qfsO8-pw_R2pYgfpzJX1UVfTT8Dli88hKbVdq8fym4Ik4lN86fdJaZw6RjTfvMlejPZJOl0xJy6ayZrLyJV2rPJ188KsHCNbXbRaArmmQeR2ET8a3hKprt45zsCA5Nv_ElmpNSK_YlLhyJME64k1epga7dGtfoslFTzu-sA42_jlD15m0j8bKv_ABYpBSUj6_YYtl-Ln_0HkcDxGV23pHSJtr1dmp5p0HjSHJLHmFPRpe15NWWE3Uv2CuR1XIpEkWvxf0GH7jDXr9S1oTGMaFmmUAdl0FGBbIeTB6vlpxucZWeDGpcmhVmgyCX4jUqznNLrf52TedGQjquc_OWnvxfesqwimLHquZXhhEp1d-90WMARbWs00MVwb9MZpcSlH9bwdObVL5NIQbKn_r1VU77OjxrRz2r55vGMmpIN2YS4YkTS2Y9DD6ZFi7pmopPcrUCsO-rzVZSpMEiPvQp8LFMfIgPyb26LuZjK3pyidQER4hNUV724zSboSCQtDxkZ30FjQRiWU1KKJiTK16z27bF1r1HU3DGCANg9qWnuELh3QTGwELQJBRXEloPqLMvNJt01UdEzPPJOFxmAwI6MV9kcF850bxHJI2O_WPH2llepgsAUbfSRZYOEV_w99yABiLWFvoMDdITSuchiorABzhR4-xIyv8SB8p0A7yMoNKahdV2Rh-EIaIDOzoD9phxH_ZFFteCwh6H1-tsfw3lFYh_LvQxrR8TrbdujEHOEFqL9ZyHZBatZf_0pFPTTAuqseAeBwWo2G3uIEU7IDNhcK_C4JBYUhtAfa2h4nW3biNZYIfsMCFEb-0x-gip-VTa-vgIcfpHDqGmsgf2ezl26bUDD_VM7lsQ0uex2A5pk0MNmQ30ujrdqTOtdE03mnxouRfK7bgTsf4r8M9iaP_sMAiMPGvVvuGCmByMHNGWMe5psHxQR4GZxYEsbu1qX6sU9sFsPLed34DkyeFLfvAK2Ya1wSn7Smu6kEq3kdpmVdcxfAP9AYDpdH_-0vlP75mFP-ZxmBuvgjwzMWI2ecGJpEOC6xWOO9UNTxS60yvxWK9q0rJ6xU0M1D3OubjZVbzFCQWhJtf8Nc3jpVMcFcXortTyhP7Av1Vra4NZXJQSDAulAMpnOENnHRS6ojqWOHlnygk1orwocQyN2C-HLi426hKmdluc05MrZ30QQWaCiJiVlXDbRFQJ3U684e5TRAMHTrXYDI1usyKwj4PTtyKwFMV2924JYJw180NkxwVDM6UYvmmBPHnJdhdo7r9UD7ji03hjaQiwroFXUcRT3nh_86LNiFkzocDikjkDMgtCCpZE-K71H39Yf1qYoEwpnl6qp_MyBvoNwn2P8nGiTNN_Va-HfO10nTAhcHtfkDESIoYj7NSK2YlB-TMFaHVaxNdcLZCu-h_V_tG3N53g&sai=AMfl-YTa-1id5BfXFGvzMveffwd41vWnrcMiHexAZVhq98NHMe_tp4GOr0WDeZrRRZQzcPJo0-gWsIETqwtfwwGaYFO0xgceu_-yTNREBXTWQSD6usQTyuJ3l3X5T-Ic07sN1IBqug9ncNJ5Ui9jXIvmXJxCOJ5TqlyjYQetkAFOlGwwS_GzP-u9CyT_F879gKh7um4&sig=Cg0ArKJSzCD3YwOzOEN5EAE&uach_m=%5BUACH%5D&pr=13:ZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240423.25027&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source, not-navigation-source;trigger Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:00 UTC	1622	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xa0fcf2ea52d462f70000000000000000","13":"0x7c7e9aa188a2909a0000000000000000","14":"0xce3b54cd10a13bdc0000000000000000","15":"0xd90587466156b7760000000000000000"},"debug_key":"12094009995359779794","debug_reporting":true,"destination":["https://landroverusa.com","https://jaguarusa.com","https://debugconversiondomain1.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13976782"],"21":[],"8":["12949653"]},"priority":"0","source_event_id":"12099410375644867362"} X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:07:59 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:07:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 07:07:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.5	50668	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18
2024-04-25 07:08:00 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:00 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.5	50677	68.67.161.182	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	834	OUT	GET /setuid?entity=101&code=CAESEDl2HoJpvfIVNQQoRwk7jsU&google_cver=1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; receive-cookie-deprecation=1; uuid2=6142091251808246355
2024-04-25 07:08:00 UTC	1512	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 173e4379-4c75-4842-a7c4-dfb4604abb64 Set-Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2GU]tymuu!@wnfH8K6pQK`!5=E<L5?%K-f5kPd]1Z$l4]'P.3P+OzlL?Qw@<c-qQR+Ig%nugO%v4VB%nn<y0vu$; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.5	50678	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	2004	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpi35,pingTime:-10,time:1700,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028878046%7C%7C1425b7da8930335f3cec37a6bf29203a%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C75bf83fbd6e4dfa1962435da92142deb%7C%7C666e8a34ab0ab089bd5e6dbd45fe12fe%7C%7Cedd64f7adecd27ee04be4aa405afc3df%7C%7C374b15d2d59cb060f1a86252387bf7c5%7C%7C9d5cb65a61332e0d9059cf7e90e3fd9f%7C%7C1663701684,im:%7Bimprf:%7Bttecl:2169,ecd:636,tsecr:1%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt42.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.5	50679	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	1292	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphNa,pingTime:-2,time:713,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:52,bdZ:892,beA:894,beZ:896,mfA:1575,cmA:1576,inA:1576,inZ:1577,prA:1577,prZ:1579,si:1583,poA:1584,poZ:1594,cmZ:1594,mfZ:1594,loA:1602,loZ:1604,ltA:1607,ltZ:1607,mdA:896,mdZ:909%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:713,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,5~0%5D,as:%5B31~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt40.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.5	50680	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	937	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSphN5,pingTime:-6,time:708,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:708,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,1~0%5D,as:%5B27~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C12111,idMap:121,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt40.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.5	50682	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:07:59 UTC	809	OUT	GET /pixel?google_nid=appnexus&google_hm=NjE0MjA5MTI1MTgwODI0NjM1NQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:00 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 07:08:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:00 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.5	50688	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	2555	OUT	GET /pcs/view?xai=AKAOjst_oZaLdZDI42H9ZztiHtVwg8MgNp0jhJdOx90DcrgeI4Ro61IV0vUuSYQpECzL7Vu8-UM-qfsO8-pw_R2pYgfpzJX1UVfTT8Dli88hKbVdq8fym4Ik4lN86fdJaZw6RjTfvMlejPZJOl0xJy6ayZrLyJV2rPJ188KsHCNbXbRaArmmQeR2ET8a3hKprt45zsCA5Nv_ElmpNSK_YlLhyJME64k1epga7dGtfoslFTzu-sA42_jlD15m0j8bKv_ABYpBSUj6_YYtl-Ln_0HkcDxGV23pHSJtr1dmp5p0HjSHJLHmFPRpe15NWWE3Uv2CuR1XIpEkWvxf0GH7jDXr9S1oTGMaFmmUAdl0FGBbIeTB6vlpxucZWeDGpcmhVmgyCX4jUqznNLrf52TedGQjquc_OWnvxfesqwimLHquZXhhEp1d-90WMARbWs00MVwb9MZpcSlH9bwdObVL5NIQbKn_r1VU77OjxrRz2r55vGMmpIN2YS4YkTS2Y9DD6ZFi7pmopPcrUCsO-rzVZSpMEiPvQp8LFMfIgPyb26LuZjK3pyidQER4hNUV724zSboSCQtDxkZ30FjQRiWU1KKJiTK16z27bF1r1HU3DGCANg9qWnuELh3QTGwELQJBRXEloPqLMvNJt01UdEzPPJOFxmAwI6MV9kcF850bxHJI2O_WPH2llepgsAUbfSRZYOEV_w99yABiLWFvoMDdITSuchiorABzhR4-xIyv8SB8p0A7yMoNKahdV2Rh-EIaIDOzoD9phxH_ZFFteCwh6H1-tsfw3lFYh_LvQxrR8TrbdujEHOEFqL9ZyHZBatZf_0pFPTTAuqseAeBwWo2G3uIEU7IDNhcK_C4JBYUhtAfa2h4nW3biNZYIfsMCFEb-0x-gip-VTa-vgIcfpHDqGmsgf2ezl26bUDD_VM7lsQ0uex2A5pk0MNmQ30ujrdqTOtdE03mnxouRfK7bgTsf4r8M9iaP_sMAiMPGvVvuGCmByMHNGWMe5psHxQR4GZxYEsbu1qX6sU9sFsPLed34DkyeFLfvAK2Ya1wSn7Smu6kEq3kdpmVdcxfAP9AYDpdH_-0vlP75mFP-ZxmBuvgjwzMWI2ecGJpEOC6xWOO9UNTxS60yvxWK9q0rJ6xU0M1D3OubjZVbzFCQWhJtf8Nc3jpVMcFcXortTyhP7Av1Vra4NZXJQSDAulAMpnOENnHRS6ojqWOHlnygk1orwocQyN2C-HLi426hKmdluc05MrZ30QQWaCiJiVlXDbRFQJ3U684e5TRAMHTrXYDI1usyKwj4PTtyKwFMV2924JYJw180NkxwVDM6UYvmmBPHnJdhdo7r9UD7ji03hjaQiwroFXUcRT3nh_86LNiFkzocDikjkDMgtCCpZE-K71H39Yf1qYoEwpnl6qp_MyBvoNwn2P8nGiTNN_Va-HfO10nTAhcHtfkDESIoYj7NSK2YlB-TMFaHVaxNdcLZCu-h_V_tG3N53g&sai=AMfl-YTa-1id5BfXFGvzMveffwd41vWnrcMiHexAZVhq98NHMe_tp4GOr0WDeZrRRZQzcPJo0-gWsIETqwtfwwGaYFO0xgceu_-yTNREBXTWQSD6usQTyuJ3l3X5T-Ic07sN1IBqug9ncNJ5Ui9jXIvmXJxCOJ5TqlyjYQetkAFOlGwwS_GzP-u9CyT_F879gKh7um4&sig=Cg0ArKJSzCD3YwOzOEN5EAE&uach_m=%5BUACH%5D&pr=13:ZioBTgAAAAC9yfVP6DbOmAxClLE1LI9eYS45UQ&cry=1&crd=aHR0cHM6Ly9sYW5kcm92ZXJ1c2EuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240423.25027&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:00 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.5	50698	54.230.31.3	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	665	OUT	GET /ozc5on9ss4ee/4N6IgU20edopK57bj43GqQ/d034d4aed51e559274a039eeb950c645/wepresent-logo.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14408 Connection: close Date: Thu, 25 Apr 2024 05:59:01 GMT Last-Modified: Tue, 05 Mar 2024 09:45:05 GMT ETag: "b2b6891582acf566c71068bfacbd5629" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cdebf0009712844928e9487620fe17f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: CX5aUm8B482ru-J3vJidTEaLg2cI5jEn-7D035Rt1nYzqdPO-L5Tww== Age: 4140
2024-04-25 07:08:00 UTC	14408	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 32 33 22 20 68 65 69 67 68 74 3d 22 31 37 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 32 33 20 31 37 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 35 2e 35 30 33 20 32 30 2e 39 33 34 37 43 31 35 32 2e 39 30 39 20 31 30 2e 38 33 37 39 20 31 35 31 2e 30 35 37 20 36 2e 37 36 32 31 31 20 31 34 38 20 32 2e 34 30 38 34 33 56 32 2e 31 33 30 35 33 48 31 36 36 2e 33 34 31 56 32 2e 34 30 38 34 33 43 31 36 34 2e 36 37 34 20 36 2e 30 32 31 30 36 20 31 36 34 2e 30 32 35 20 31 32 2e 38 37 35 38 20 31 36 36 2e 31 35 36 20 32 31 2e 35 38 33 32 4c 31 37 37 2e 34 35 37 20 36 38 2e 33 36 Data Ascii: <svg width="823" height="176" viewBox="0 0 823 176" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M155.503 20.9347C152.909 10.8379 151.057 6.76211 148 2.40843V2.13053H166.341V2.40843C164.674 6.02106 164.025 12.8758 166.156 21.5832L177.457 68.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.5	50697	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1758	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpi35,pingTime:-10,time:1700,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028878046%7C%7C1425b7da8930335f3cec37a6bf29203a%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C75bf83fbd6e4dfa1962435da92142deb%7C%7C666e8a34ab0ab089bd5e6dbd45fe12fe%7C%7Cedd64f7adecd27ee04be4aa405afc3df%7C%7C374b15d2d59cb060f1a86252387bf7c5%7C%7C9d5cb65a61332e0d9059cf7e90e3fd9f%7C%7C1663701684,im:%7Bimprf:%7Bttecl:2169,ecd:636,tsecr:1%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt18.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.5	50699	64.233.177.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 274 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	274	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6a 61 67 75 61 72 75 73 61 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 61 6e 64 72 6f 76 65 72 75 73 61 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 30 39 34 30 30 39 39 39 35 33 35 39 37 37 39 37 39 34 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 32 30 39 39 34 31 30 33 37 35 36 34 34 38 36 37 33 36 32 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://jaguarusa.com","https://landroverusa.com"],"source_debug_key":"12094009995359779794","source_event_id":"12099410375644867362","source_site":"https://wetransfer.com"},"type"
2024-04-25 07:08:00 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.5	50700	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	882	OUT	GET /pixel?google_nid=rubicon&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:00 UTC	683	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEKXpoUTeqJVgDvSnOIx5Jqw&google_cver=1 Date: Thu, 25 Apr 2024 07:08:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 326 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:00 UTC	326	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 75 74 3d 43 41 45 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.5	50695	44.206.160.179	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	677	OUT	GET /sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFABKmYCEBcsYpti1mp2tRJMiuCrL48FEgEBAQFSK2YzZgAAAAAA_eMAAA&S=AQAAAvsF1Objw-fBUXznmsNVMVA; Expires=Fri, 25 Apr 2025 13:08:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.5	50696	68.67.179.164	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	850	OUT	GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; receive-cookie-deprecation=1; uuid2=6142091251808246355
2024-04-25 07:08:00 UTC	1456	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=6142091251808246355 AN-X-Request-Uuid: 9ef4744f-9ea7-44f6-bced-2d7a7d562d07 Set-Cookie: XANDR_PANID=Pcu0rMkobx3hu1Yb1qbQtX3lZkOxMbU7vOCdt9zm_JHxs-AHhswrYgX7HVyE_T_HIzNyv03pU-GgWmwZUhfxhj-XmcXuBSNZD0XgJ_d4iAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.5	50705	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	659	OUT	GET /pixel?google_nid=appnexus&google_hm=NjE0MjA5MTI1MTgwODI0NjM1NQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:00 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 07:08:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:00 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.5	50691	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	580	OUT	GET /_next/static/css/259caa46cf3a8fe3.css HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	522	IN	HTTP/1.1 200 OK accept-ranges: bytes access-control-allow-origin: * cache-control: public, max-age=31536000, immutable Content-Type: text/css; charset=UTF-8 Date: Thu, 25 Apr 2024 07:08:00 GMT etag: W/"38bcf-18f0fe0c556" last-modified: Wed, 24 Apr 2024 11:32:19 GMT Set-Cookie: stickounet=1714028881.8.68.6418; Expires=Sat, 27-Apr-24 07:08:00 GMT; Max-Age=172800; Path=/; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding Content-Length: 232399 Connection: Close
2024-04-25 07:08:00 UTC	3754	IN	Data Raw: 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 20 30 20 30 2f 30 29 7d 6d 61 69 6e 2e 69 73 2d 70 72 65 76 69 65 77 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 34 70 78 7d 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 61 64 64 69 6e 67 3a 34 72 65 6d 20 32 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2c 55 62 75 6e 74 75 2c 43 61 6e 74 61 72 65 6c 6c 2c 46 69 72 61 20 53 61 6e 73 2c 44 72 6f 69 64 20 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e Data Ascii: html{height:100%;-webkit-tap-highlight-color:rgb(0 0 0/0)}main.is-preview{padding-top:64px}body{min-height:100vh;padding:4rem 2rem;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,san
2024-04-25 07:08:00 UTC	8192	IN	Data Raw: 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 38 70 78 3b 6d 61 72 67 69 6e 3a 33 70 78 3b 6f 70 61 63 69 74 79 3a 2e 37 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 20 6c 69 6e 65 61 72 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 20 6c 69 6e 65 61 72 3b 77 69 64 74 68 3a 38 70 78 7d 2e 73 70 6c 69 64 65 5f 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 70 61 67 65 2e 69 Data Ascii: 0%;display:inline-block;height:8px;margin:3px;opacity:.7;padding:0;position:relative;transition:-webkit-transform .2s linear;transition:transform .2s linear;transition:transform .2s linear,-webkit-transform .2s linear;width:8px}.splide__pagination__page.i
2024-04-25 07:08:01 UTC	16384	IN	Data Raw: 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 72 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 73 75 62 74 69 74 6c 65 2d 61 63 63 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 72 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 72 65 6d 7d 7d 2e 73 75 62 74 69 74 6c 65 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 72 65 6d 3b 66 6f 6e 74 Data Ascii: {font-size:3rem;font-weight:700;line-height:4rem}@media only screen and (min-width:1024px){.subtitle-accent{font-size:4rem;letter-spacing:-.01em;line-height:5rem}}.subtitle-medium{font-family:Actief Grotesque,Arial,Helvetica,sans-serif;font-size:3rem;font
2024-04-25 07:08:01 UTC	12288	IN	Data Raw: 3a 38 72 65 6d 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 34 30 70 78 29 7b 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 2d 2d 31 20 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 2d 2d 32 20 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 2d 2d 33 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 2d 2d 62 6c 6f 67 2d 6c 61 72 67 65 20 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d 73 74 61 74 73 2d 2d 34 20 2e 75 69 2d 61 64 2d 62 6c 6f 67 2d Data Ascii: :8rem}}@media only screen and (min-width:1440px){.ui-ad-blog-stats--1 .ui-ad-blog-stats__content,.ui-ad-blog-stats--2 .ui-ad-blog-stats__content,.ui-ad-blog-stats--3.ui-ad-blog-stats--blog-large .ui-ad-blog-stats__content,.ui-ad-blog-stats--4 .ui-ad-blog-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.5	50704	68.67.179.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	551	OUT	GET /setuid?entity=101&code=CAESEDl2HoJpvfIVNQQoRwk7jsU&google_cver=1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=6142091251808246355; anj=dTM7k!M41.D>6NRF']wIg2GU]tymuu!@wnfH8K6pQK`!5=E<L5?%K-f5kPd]1Z$l4]'P.3P+OzlL?Qw@<c-qQR+Ig%nugO%v4VB%nn<y0vu$
2024-04-25 07:08:00 UTC	1512	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 32c44168-fc48-44b3-95a7-baef921320ff Set-Cookie: XANDR_PANID=o2Yh2bMKEEquCsMdbFXJJGI501DRhA3Ew-vH78HQqegNNs1WMabj9lBafLJTE6P-Q1Mu8Si9ge-kMO84irh-EDBNjLmxGQfxvPQSpq8nXWA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2GU]tymuu!@wnfH8K6pQK`!5=E<L5?%K-f5kPd]1Z$l4]'P.3P+OzlL?Qw@<c-qQR+Ig%nugO%v4VB%nn<y0vu$; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6142091251808246355; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 07:08:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.5	50692	54.76.94.58	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	580	OUT	GET /_next/static/css/bf5318e875434d25.css HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	523	IN	HTTP/1.1 200 OK accept-ranges: bytes access-control-allow-origin: * cache-control: public, max-age=31536000, immutable Content-Type: text/css; charset=UTF-8 Date: Thu, 25 Apr 2024 07:08:00 GMT etag: W/"282-18f0fe0c556" last-modified: Wed, 24 Apr 2024 11:32:19 GMT Set-Cookie: stickounet=1714028881.803.39754.47314; Expires=Sat, 27-Apr-24 07:08:00 GMT; Max-Age=172800; Path=/; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding Content-Length: 642 Connection: Close
2024-04-25 07:08:00 UTC	642	IN	Data Raw: 2e 62 61 6e 6e 65 72 5f 62 61 6e 6e 65 72 5f 5f 65 75 52 6b 30 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 61 72 6b 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 36 31 36 31 36 3b 63 6f 6c 6f 72 3a Data Ascii: .banner_banner__euRk0{position:fixed;z-index:100;top:0;right:0;left:0;display:flex;height:64px;align-items:center;justify-content:space-between;padding:20px;border-bottom:2px solid var(--button-background-dark);margin-bottom:80px;background:#161616;color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.5	50694	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	576	OUT	GET /_next/static/chunks/webpack-af3be6f7d63ec55d.js HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.5	50693	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	578	OUT	GET /_next/static/chunks/framework-e060caed557d1899.js HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.5	50690	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	573	OUT	GET /_next/static/chunks/main-dd74e6604ccfa35a.js HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.5	50689	54.76.94.58	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	579	OUT	GET /_next/static/chunks/pages/_app-bd35f45d75100cbe.js HTTP/1.1 Host: frontsite-nextjs.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.5	50706	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1645	OUT	GET /rfw/st/2049676/79562500/skeleton.js?bundleId=${BUNDLE_ID}&bidurl=https://wetransfer.com/&adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=c&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Flandrover%2F2403%2Faccordion%2F2_d6hcUN%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=bed&adsafe_jsinfo=,id:672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc,c:aSpije,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-97s77,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,mu:10000,br:c,bru:c,an:n,oam:0,scm:jl1,mtim:371,mot:0,app:0,maw:0,tdt:s,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:0,renddet:IMG.us,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,tt:rjss,et:396,oid:8ca2ece2-02d2-11ef-9e78-f640dd71ee56,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1 Host: fw.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	268	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Length: 0 Connection: close server: Apache-Coyote/1.1 p3p: CP="COM NAV INT STA NID OUR IND NOI" pragma: no-cache cache-control: no-cache location: https://static.adsafeprotected.com/skeleton.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.5	50707	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1369	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpijy,pingTime:-2.1,time:2721,type:a,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2721,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,2013~0%5D,as:%5B2039~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:619,fm:uaWeuhR+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc.40_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true,sis:1327%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt27.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.5	50708	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1182	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijA,pingTime:-3,time:417,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:395%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:417,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B44~0%5D,as:%5B44~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt40.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.5	50709	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1215	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijG,pingTime:-6,time:423,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:423,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B50~0%5D,as:%5B50~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:00 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt28.va.303net.net
2024-04-25 07:08:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.5	50710	52.46.151.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	768	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:01 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 4DRNFFT1J5BR7XTFNDQE Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.5	50711	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1625	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijV,pingTime:-2,time:438,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:979,bdZ:1726,beA:1729,beZ:1732,mfA:2101,cmA:2102,inA:2102,inZ:2104,prA:2104,prZ:2107,si:2125,poA:2127,poZ:2142,cmZ:2142,mfZ:2142,loA:2153,loZ:2154,ltA:2167,ltZ:2167,mdA:1732,mdZ:1732%7D%7D,sca:%7Bdfp:%7Bdf:2,sz:300.250,dom:img%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:395%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:438,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B65~0%5D,as:%5B65~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:121.7d863bc7-215d-9e41-26f8-a4dd7c5a71e7.15_2049676-79562501%7C1211,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:396,sinceFw:41,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt19.va.303net.net
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.5	50701	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18
2024-04-25 07:08:01 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:00 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.5	50669	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	2466	OUT	GET / HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://wetransfer.com/explore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; stickounet=1714028880.768.63.854384; _dd_s=rum=0&expire=1714029776130&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713&lock=17c95806-c42b-4db9-a27a-31d6941f5fd2
2024-04-25 07:08:01 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10026 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Thu, 25 Apr 2024 07:08:01 GMT ETag: "272a-b22+6g5+39wlYzq4tbqjw+zrNXw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 b9ef75517b1966dcade06d83002b5eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DZ542Ak5h6zrn302F6oSaqiW1kiQBbsPsGuPjb2TZ6qST81LwUu3BQ==
2024-04-25 07:08:01 UTC	10026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.5	50717	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	706	OUT	GET /crum?cm_dsp_id=46&external_user_id=6142091251808246355 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:01 UTC	985	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fdacffd7ba2-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dy6izDJCw5zQNhfolgSAurLaba7iPPQ4FRn4uO4or0Zvkir5tr1rji5H2igGepqA%2F1bEGccHPOwg38ew0jzO5cGASvqpS5%2FxzmLmkeLG4j66ubwRwNG7LkiZkwfFcU%2FDsT8TNtdU7%2F2n7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.5	50712	34.200.65.202	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	710	OUT	GET /ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	647	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q; Expires=Fri, 25 Apr 2025 13:08:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.5	50716	135.148.152.196	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:00 UTC	663	OUT	GET /api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	366	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 07:08:00 GMT location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4861984360693410835&gdpr=0&gdpr_consent= set-cookie: pid=4861984360693410835; expires=Mon, 26 May 2025 07:07:01 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.5	50720	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	945	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.16.0%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Adesktop-web-renderer%2Cversion%3A0.5.9&dd-api-key=pubd26aceef5e2edd716e41259bd529db3a&dd-evp-origin-version=5.16.0&dd-evp-origin=browser&dd-request-id=c5aaa15a-5feb-4c2a-8870-beaa8fa6e88b&batch_time=1714028879348 HTTP/1.1 Host: browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 1458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://nolan.wetransfer.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	1458	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 73 74 61 72 74 22 3a 39 35 39 30 30 30 30 30 30 7d 2c 7b 22 73 74 61 74 65 22 3a 22 70 61 73 73 69 76 65 22 2c 22 73 74 61 72 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":1,"session_replay_sample_rate":0,"start_session_replay_recording_manually":false},"document_version":2,"page_states":[{"state":"hidden","start":959000000},{"state":"passive","star
2024-04-25 07:08:01 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: c5aaa15a-5feb-4c2a-8870-beaa8fa6e88b cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 25 Apr 2024 07:08:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.5	50715	52.205.65.239	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	689	OUT	GET /ping_match.gif?ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	647	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 25 Apr 2024 07:08:00 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-015118df6b666958e@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=w8FkgRMn1RZTd75; Domain=.w55c.net; Expires=Sun, 25 May 2025 17:08:01 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.5	50723	54.230.31.32	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	431	OUT	GET /ozc5on9ss4ee/4N6IgU20edopK57bj43GqQ/d034d4aed51e559274a039eeb950c645/wepresent-logo.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14408 Connection: close Date: Thu, 25 Apr 2024 05:59:01 GMT Last-Modified: Tue, 05 Mar 2024 09:45:05 GMT ETag: "b2b6891582acf566c71068bfacbd5629" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a66314b3ce69a241720d2c01420e322e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: 9HXfBIDI7uKYZvswniQOlVGCLC4Qi9wV1N09Yz0a3HB4v1dOr0qJfQ== Age: 4141
2024-04-25 07:08:01 UTC	14408	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 32 33 22 20 68 65 69 67 68 74 3d 22 31 37 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 32 33 20 31 37 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 35 2e 35 30 33 20 32 30 2e 39 33 34 37 43 31 35 32 2e 39 30 39 20 31 30 2e 38 33 37 39 20 31 35 31 2e 30 35 37 20 36 2e 37 36 32 31 31 20 31 34 38 20 32 2e 34 30 38 34 33 56 32 2e 31 33 30 35 33 48 31 36 36 2e 33 34 31 56 32 2e 34 30 38 34 33 43 31 36 34 2e 36 37 34 20 36 2e 30 32 31 30 36 20 31 36 34 2e 30 32 35 20 31 32 2e 38 37 35 38 20 31 36 36 2e 31 35 36 20 32 31 2e 35 38 33 32 4c 31 37 37 2e 34 35 37 20 36 38 2e 33 36 Data Ascii: <svg width="823" height="176" viewBox="0 0 823 176" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M155.503 20.9347C152.909 10.8379 151.057 6.76211 148 2.40843V2.13053H166.341V2.40843C164.674 6.02106 164.025 12.8758 166.156 21.5832L177.457 68.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.5	50713	192.184.67.40	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	621	OUT	GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	720	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=8T8tKvc4KnrqOnov8T8yePQ-fnnqaigvpjgHSJ9N P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EAkBDQHZK7jvsQA; expires=Wed, 24-Jul-2024 07:08:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=662a0151-3ed66-337a2-c7da1; expires=Mon, 26-May-2025 07:08:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.5	50727	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	830	OUT	GET /pixel?google_nid=rubicon&google_hm=MmI4ODgwZjRhYzBkNDJhNjRmYzg2NjlhYzEzOGNiMWQ0ZjNlMWQyOQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:01 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 07:08:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:01 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.5	50721	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	1102	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2865%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C266&vmax=2865%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C266&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=1%2C3100 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:08:01 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.5	50724	34.193.26.160	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	540	OUT	GET /sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFABKmYCEBcsYpti1mp2tRJMiuCrL48FEgEBAQFSK2YzZgAAAAAA_eMAAA&S=AQAAAvsF1Objw-fBUXznmsNVMVA
2024-04-25 07:08:01 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFABKmYCEBcsYpti1mp2tRJMiuCrL48FEgEBAQFSK2YzZgAAAAAA_eMAAA&S=AQAAAvsF1Objw-fBUXznmsNVMVA; Expires=Fri, 25 Apr 2025 13:08:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.5	50671	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	2145	OUT	GET /_next/static/chunks/pages/index-2f88e58ea095e005.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18
2024-04-25 07:08:01 UTC	583	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 506 Connection: close Date: Mon, 04 Mar 2024 06:17:45 GMT Last-Modified: Sat, 02 Mar 2024 02:14:01 GMT ETag: "ad44b89485565e8fea3631a9c760cb11" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pvl4wrJH-o_3wXGZFAKvvzfbPHXcAdbJ8VEWdvtUkcZDScahlKRafg== Age: 4495817
2024-04-25 07:08:01 UTC	506	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 30 35 5d 2c 7b 32 31 30 38 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 35 32 31 33 34 29 7d 5d 29 7d 2c 35 32 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 75 28 35 32 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5405],{21086:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return u(52134)}])},52134:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return a}});var r=u(52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.5	50731	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	1123	OUT	GET /dt?advEntityId=2049676&asId=7d863bc7-215d-9e41-26f8-a4dd7c5a71e7&tv=%7Bc:aSpijy,pingTime:-2.1,time:2721,type:a,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:688%7D,%7Bpiv:0,r:l.f,t:708%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2721,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:688,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B26~1,2013~0%5D,as:%5B2039~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:619,fm:uaWeuhR+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111,idMap:1211.672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc.40_2049676-79562500%7C121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:DIV.qs.sn,siq:689,sinceFw:22,readyFired:true,sis:1327%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.va.303net.net
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.5	50732	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	936	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijA,pingTime:-3,time:417,type:v,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:395%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:417,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B44~0%5D,as:%5B44~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt10.va.303net.net
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.5	50733	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	969	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijG,pingTime:-6,time:423,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:423,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B50~0%5D,as:%5B50~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuT3+11%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:1211,rmeas:1,rend:0,renddet:IMG.us,siq:396%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net%2Cbackgrounds.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt16.va.303net.net
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.5	50734	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	1379	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpijV,pingTime:-2,time:438,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:979,bdZ:1726,beA:1729,beZ:1732,mfA:2101,cmA:2102,inA:2102,inZ:2104,prA:2104,prZ:2107,si:2125,poA:2127,poZ:2142,cmZ:2142,mfZ:2142,loA:2153,loZ:2154,ltA:2167,ltZ:2167,mdA:1732,mdZ:1732%7D%7D,sca:%7Bdfp:%7Bdf:2,sz:300.250,dom:img%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r.h.f,w:0,h:0,t:395%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:0,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:438,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:395,wc:0.0.1280.984,ac:NaN.NaN.0.0,am:sp,cc:0.0.0.0,piv:0,obst:0,th:1,reas:r.h.f,bkn:%7Bpiv:%5B65~0%5D,as:%5B65~0.0%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaWeuhR+11%7C121.2049676-79562501%7C1211.2049676-79562500%7C12111%7C12112%7C12113%7C1212,idMap:121.7d863bc7-215d-9e41-26f8-a4dd7c5a71e7.15_2049676-79562501%7C1211,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:396,sinceFw:41,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:01 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt18.va.303net.net
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.5	50735	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	524	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:01 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DXENKR27QR4EXW5BZ1DP Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.5	50737	34.200.65.202	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	829	OUT	GET /ups/55940/sync?_origin=1&redir2=true&uid=ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q
2024-04-25 07:08:01 UTC	707	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=175w~2i27;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 25-Apr-2025 07:08:01 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pr-bh.ybp.yahoo.com/sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q; Expires=Fri, 25 Apr 2025 13:08:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.5	50740	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	462	OUT	GET /crum?cm_dsp_id=46&external_user_id=6142091251808246355 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:01 UTC	983	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fde08b444ef-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0DLV%2FfEQS%2F6YVnYWGGzLk64xUZ7sbeyKHS4KnQBtgblkjciYEugtWnFlPnPUttZ%2FTX15TP4MKbpl3NojxEANo69yKpm8foZHst7IowUTHf9NsrCEe2uxWQEmgBzGDCzzVXmxIBDk2tVpUw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.5	50738	52.205.65.239	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	731	OUT	GET /ping_match.gif?scc=1&ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=w8FkgRMn1RZTd75
2024-04-25 07:08:01 UTC	709	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 25 Apr 2024 07:08:00 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=w8FkgRMn1RZTd75 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-00af2083c286792aa@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=w8FkgRMn1RZTd75; Domain=.w55c.net; Expires=Sun, 25 May 2025 07:08:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchcasale=5; Domain=.w55c.net; Expires=Sat, 25 May 2024 07:08:01 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.5	50730	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028868.0.0.988032707; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18
2024-04-25 07:08:01 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:01 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.5	50739	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	728	OUT	GET /crum?cm_dsp_id=196&external_user_id=4861984360693410835&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:01 UTC	993	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fde1a0a674b-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ch%2FSK0VZ7KLliuoqFJSQQdSVjL98fEouMaC%2B9V%2FwcjH0gqVl5rwcHkR7r1FdpRhGEApDZMrbvxBnQ5pQGNzAI2HX5WSC%2B2OLRbb0%2BA%2FpyUNbAY%2FnzPaIAbezTM81n7%2BzEleq52mIqxjQPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.5	50742	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	733	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=8T8tKvc4KnrqOnov8T8yePQ-fnnqaigvpjgHSJ9N HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:01 UTC	981	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fdf3ed5b05d-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ldOIWwFNkdN%2FUX5JJT1E8dWX7p2P4Le32YlAjaRrrW1DWQxmBZE3jxgbmzgx6M114QP17TnSblsIJxn90UL4rG5f6F3k%2BbkoaQ960jnICUybqDGReDpY57Ue4DYQEIzV1BcLJIkyn6iHCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.5	50743	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	712	OUT	GET /api/segment?pid=712597&pdata=sid%3D18%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:08:01 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:08:01 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.5	50744	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	680	OUT	GET /pixel?google_nid=rubicon&google_hm=MmI4ODgwZjRhYzBkNDJhNjRmYzg2NjlhYzEzOGNiMWQ0ZjNlMWQyOQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:01 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 07:08:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:01 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.5	50745	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Homepage&ts=1714028879988 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:02 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 51K71Z88YTT9YEN03ZN2 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:02 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.5	50725	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	2502	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _dd_s=rum=0&expire=1714029776130&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:01 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-25 07:08:02 UTC	1474	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:08:02 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; domain=.wetransfer.com; path=/; expires=Sat, 25 Apr 2026 07:08:02 GMT; secure Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-9kjdf-250 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 47c8e0ecc1ae7922c83910d0704c11c7 X-Runtime: 0.006521 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 9ccf0420be8414e77edc70962db79938.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FKneltEe3V2zoABj1L-sG3SYLVWAwwRTXoRnUz8s6gSU8OB4Otb2Ww==
2024-04-25 07:08:02 UTC	643	IN	Data Raw: 32 37 63 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 Data Ascii: 27c{"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd
2024-04-25 07:08:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.5	50746	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	3453	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028879910&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1734018447.1714028880&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028879910&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2F&sid=1714028816&sct=1&seg=1&dr=https%3A%2F%2Fwetransfer.com%2Fexplore&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=18&ep.hit_timestamp_local=2024-04-25T09%3A07%3A59.966%2B02%3A00&epn.hit_timestamp_unix=1714028879966&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028879910-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028879910-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=612&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:08:02 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:08:02 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775939; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 1e357724bdb0ea3eaba680124ea9eaca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: xNVdrLFdNrMf5QE0xFXwWS0j1y4to8nCVkcN78xyoTKgsdMU9pspew==
2024-04-25 07:08:02 UTC	635	IN	Data Raw: 32 37 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 3b 6f 72 64 3d 34 32 33 31 38 35 39 31 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 Data Ascii: 274event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-U
2024-04-25 07:08:02 UTC	567	IN	Data Raw: 32 33 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 3b 6f 72 64 3d 34 32 33 31 38 35 39 31 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 Data Ascii: 230event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetrans
2024-04-25 07:08:02 UTC	635	IN	Data Raw: 32 37 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 31 34 38 34 34 38 34 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 Data Ascii: 274event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-U
2024-04-25 07:08:02 UTC	567	IN	Data Raw: 32 33 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 39 31 34 38 34 34 38 34 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 Data Ascii: 230event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetrans
2024-04-25 07:08:02 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 36 38 33 31 33 31 39 33 34 26 66 73 74 3d 31 37 31 34 30 32 38 38 38 32 31 33 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1683131934&fst=1714028882131&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:08:02 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 42 49 6d 38 70 59 55 77 52 72 66 4b 6c 67 50 79 59 7a 37 39 34 62 77 6d 6f 71 56 45 69 6a 58 31 58 4a 4e 39 36 6d 7a 4b 6a 4d 47 4a 32 50 57 62 72 50 47 53 78 37 73 33 68 70 68 6b 76 4c 41 43 6f 55 72 64 75 51 59 5a 77 77 55 25 32 42 44 76 35 64 56 52 32 47 47 79 37 39 46 4b 55 37 53 55 6e 69 72 59 30 69 6d 77 25 32 46 6c 25 32 42 58 78 31 38 43 75 72 46 6e 79 53 65 25 32 42 6c 6e 4f 65 64 66 55 37 34 69 57 64 6e 44 74 36 75 65 48 57 39 49 53 61 65 61 70 54 55 6c 65 4f 4e 78 44 65 64 6c 6f 53 75 65 4c 71 6c 6f 49 72 55 66 51 65 43 6a Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=BIm8pYUwRrfKlgPyYz794bwmoqVEijX1XJN96mzKjMGJ2PWbrPGSx7s3hphkvLACoUrduQYZwwU%2BDv5dVR2GGy79FKU7SUnirY0imw%2Fl%2BXx18CurFnySe%2BlnOedfU74iWdnDt6ueHW9ISaeapTUleONxDedloSueLqloIrUfQeCj
2024-04-25 07:08:02 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:08:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.5	50747	44.206.160.179	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	738	OUT	GET /sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q
2024-04-25 07:08:02 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q; Expires=Fri, 25 Apr 2025 13:08:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.5	50748	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	2005	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpiCa,pingTime:-10,time:1569,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028880221%7C%7C81950277cb91e561d2f6a9c05b55d312%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C1aaa3d829ea88044a2c8c22fd46e49d6%7C%7C62fe7ae2293222bce0b0f7e5e73fd73b%7C%7Cffe1f48a49d024933bacde4e4539887d%7C%7Cc5d386b01e658c4018779c1f6879da71%7C%7Cd7195e79f086ec320b9ad905bbb79af0%7C%7C1663701684,im:%7Bimprf:%7Bttecl:1701,ecd:543,tsecr:11%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt16.va.303net.net
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.5	50750	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:01 UTC	702	OUT	GET /crum?cm_dsp_id=47&external_user_id=w8FkgRMn1RZTd75 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:02 UTC	981	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe159994502-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=icUkP8Ar52Bv%2BcCZJVTJX49daf3msNOEzs554fnErtfClPVZSRwjf9rDYwYY93GboqRBdZEpiR4fQDcr9KwIMHChMSk9JOa%2BYeU8WG39Zrbj9jeMfUK07iYEH72iGhYXJSvmTRaWUeaElg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.5	50756	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	484	OUT	GET /crum?cm_dsp_id=196&external_user_id=4861984360693410835&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:02 UTC	993	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe1efd7b0bb-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MIf3FdJePlGzzAZr7lbzydZKbrjFwFAFHjI6Q9jyTt%2B564868vmXdsVvPeJusagK0eZ%2BuycuWaIkQv23jX%2BeX%2B1SqH7Xk2aQqzP%2BFIvzs4%2BO5RiFTnPP7VwvmLzg%2FH5Z0lyC%2BudhvImTug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.5	50758	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	489	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=8T8tKvc4KnrqOnov8T8yePQ-fnnqaigvpjgHSJ9N HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:02 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe2ee6144cf-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dIVIw%2FIQqSMPzIAtNdDiNnhXHPBdegzkVGdEPpZ%2B8VNyjT8PJqtcalpn%2Bn3HfK996XBJ6xJBzF6TKIL7%2FkaRBMMX0clQmruVNWsNj14%2F1CPznis7Uedf8lP0NQNIz9ZjBcMJCsmY0laklQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.5	50754	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	917	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=b63b9eed-a07b-4348-9c6f-171ccf04e141&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-25T07%3A07%3A56.218Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2865%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C266&vmax=2865%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C266&trk=false&cm=wetransfer&cp_advertiserId=2846063&cp_campaignId=309897607&cp_placementId=512178561&cp_creativeId=523451916&cp_creativeType=Custom__Video__Image_accordion&lp_format=premium&ct=US&vts=1%2C3100 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	94	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 07:08:02 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.5	50759	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	746	OUT	GET /rum?cm_dsp_id=65&external_user_id=AAAMvzG-WejzUANqRLfzAAAAAAA&expiration=1714115281&is_secure=true HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:02 UTC	973	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe329e47bd8-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZaNncz0KI8G3f83dbx5tOMAnHeD55UnD%2FU%2FkuZGjmWpgbAyKxwss1d1UF%2FUWifGKqAjUbsu2F9pOpViXRbLxpn4Qk5oqAoTYj9suUJ96PmQlWoMIs9BdGf8HjIfsAieTc5sLQ%2BR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.5	50761	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	478	OUT	GET /api/segment?pid=712597&pdata=sid%3D18%2Cuid%3D23868141-bd48-45de-a476-ac29f1c40d92 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:08:02 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.5	50762	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	863	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1734018447.1714028880&url=https%3A%2F%2Fwetransfer.com%2F&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	856	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1734018447.1714028880&url=https%3A%2F%2Fwetransfer.com%2F&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.5	50763	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	909	OUT	GET /rp.gif?ts=1714028880625&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:02 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:08:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.5	50767	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028880692&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:02 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9136932975900249 Date: Thu, 25 Apr 2024 07:08:02 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:02 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.5	50768	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028880692&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:02 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 9203844503469155 Date: Thu, 25 Apr 2024 07:08:02 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:02 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.5	50769	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1629	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fwetransfer.com%2Fexplore%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028880693 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:02 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1411667613294174 Date: Thu, 25 Apr 2024 07:08:02 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.5	50771	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Homepage&ts=1714028879988 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source=event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:02 GMT x-amzn-RequestId: 1c401e9d-d5fe-436c-b062-5b222849544e Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 0fe01300cc0fd23ed9b49b075bd8fc3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 9HBFMg7H34GngFFPbNIssZ4HyYuXuXQQ9f8by2FBmTvG2sf1A3cvmw==
2024-04-25 07:08:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.5	50773	34.193.26.160	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	494	OUT	GET /sync/casale/ZioBP9HM4ycAADS8ARFPzgAAAksAAAAB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q
2024-04-25 07:08:02 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFEBKmYCEIIvU2f4AYmIaVIXyvsNy2IFEgEBAQFSK2YzZtwx0iMA_eMAAA&S=AQAAAsn-SfCubauo4OIbJrtOy2Q; Expires=Fri, 25 Apr 2025 13:08:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.5	50772	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Homepage&ts=1714028879988 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:02 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 1PV5X6F7YA76J5NZFPR7 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:02 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.5	50760	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1077	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2F&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwiEvf_ipMDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:08:02 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:08:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwjK_97YpcDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:08:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:08:02 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.5	50774	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1759	OUT	GET /dt?advEntityId=2049676&asId=672c52e0-f8af-a5b3-bad2-7a8a1a4e66bc&tv=%7Bc:aSpiCa,pingTime:-10,time:1569,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1714028880221%7C%7C81950277cb91e561d2f6a9c05b55d312%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C1aaa3d829ea88044a2c8c22fd46e49d6%7C%7C62fe7ae2293222bce0b0f7e5e73fd73b%7C%7Cffe1f48a49d024933bacde4e4539887d%7C%7Cc5d386b01e658c4018779c1f6879da71%7C%7Cd7195e79f086ec320b9ad905bbb79af0%7C%7C1663701684,im:%7Bimprf:%7Bttecl:1701,ecd:543,tsecr:11%7D%7D%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt11.va.303net.net
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.5	50775	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1314	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	1108	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.5	50776	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1419	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2765801693512733250"}],"aggregatable_trigger_data":[{"filters":[{"14":["13314262"]}],"key_piece":"0xc8012b02a318afe9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x5fce5d1c4b8f727b","not_filters":{"14":["13314262"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13314262"]}],"key_piece":"0x49c4ea758db9c5bb","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7050827e2b676ce9","not_filters":{"14":["13314262"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2765801693512733250","filters":[{"14":["13314262"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2765801693512733250","filters":[{"14":["13314262"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2765801693512733250","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2765801693512733250","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.5	50780	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	458	OUT	GET /crum?cm_dsp_id=47&external_user_id=w8FkgRMn1RZTd75 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:02 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe49b681d78-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pi55uk5%2FgcZPpcwDdJdvyN%2BmPXDgxRLa4sqNyn156wxCcfFX%2BQ0Ev2uFLJOX2ySFYJKgRdWSeaoZ5p09btXk1AqaCB3R1%2FNfSDYpwjG3wQKgaopS8wiM24W2T%2FMNQBTfIfOxPTv7Lc7Ypg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.5	50779	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	934	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2F&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&if=false&ts=1714028880661&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028880620&coo=false&eid=1714028879910-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=120, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:08:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.5	50777	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1396	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"101900495709351231"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"101900495709351231","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"101900495709351231","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"101900495709351231","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"101900495709351231","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.5	50778	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1044	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2F&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&if=false&ts=1714028880661&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028880620&coo=false&eid=1714028879910-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:08:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:08:02 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:08:02 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:08:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.5	50764	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: fc8d706f-5a3a-4212-b6cd-833348100cc9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:08:02 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:08:02 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 30 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.5	50765	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028880636 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:02 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:08:02 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.5	50781	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1314	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	1108	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.5	50783	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	2127	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _dd_s=rum=0&expire=1714029776130&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:02 UTC	581	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Thu, 25 Apr 2024 07:08:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-lfn9x-4754 X-Request-Id: 96f283af59ec2a9cd0e0f3e4892857ad X-Runtime: 0.001524 X-Cache: Error from cloudfront Via: 1.1 ccabcd8388f812f18b0c897b2047fa80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6QpF0oHEfse_ImckLEv_8kEUvrvrAnN6TgxrNdd4KA5Tgf0SDvkHqg==
2024-04-25 07:08:02 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.5	50784	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	3175	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028879910&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1734018447.1714028880&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028879910&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2F&sid=1714028816&sct=1&seg=1&dr=https%3A%2F%2Fwetransfer.com%2Fexplore&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=23868141-bd48-45de-a476-ac29f1c40d92&ep.snowplow_session_id=18&ep.hit_timestamp_local=2024-04-25T09%3A07%3A59.966%2B02%3A00&epn.hit_timestamp_unix=1714028879966&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028879910-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028879910-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=612&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; _gat_UA-11792855-4=1; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:02 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:08:02 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775938; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 97652e165c8f8163b61c6245c084f160.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: 1HwTJ-YldjDVQ1Grsj0n0HVlIG1KnziQoogEjrOtUvLf-t57UK_U9g==
2024-04-25 07:08:02 UTC	636	IN	Data Raw: 32 37 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 3b 6f 72 64 3d 31 39 33 32 39 37 39 37 31 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d Data Ascii: 275event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=1932979712;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-
2024-04-25 07:08:02 UTC	568	IN	Data Raw: 32 33 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 3b 6f 72 64 3d 31 39 33 32 39 37 39 37 31 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e Data Ascii: 231event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra00;ord=1932979712;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetran
2024-04-25 07:08:02 UTC	635	IN	Data Raw: 32 37 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 39 32 30 38 34 39 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 Data Ascii: 274event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1292084944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-U
2024-04-25 07:08:02 UTC	567	IN	Data Raw: 32 33 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 39 32 30 38 34 39 34 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 Data Ascii: 230event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1292084944;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetrans
2024-04-25 07:08:02 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 38 36 31 34 34 32 37 32 31 26 66 73 74 3d 31 37 31 34 30 32 38 38 38 32 38 39 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1861442721&fst=1714028882892&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:08:03 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 38 33 50 25 32 42 74 68 62 48 42 56 6b 62 42 62 53 4a 79 5a 66 31 51 66 63 6b 64 50 6c 56 67 4c 4a 75 41 66 6c 6e 58 42 6a 49 6c 69 4d 36 77 63 51 5a 66 50 66 25 32 42 55 57 37 32 54 47 6c 31 6a 4c 75 45 58 70 7a 6e 7a 79 4d 55 50 45 47 58 53 38 49 43 72 46 71 72 42 44 32 25 32 46 5a 30 78 6c 32 4f 50 4d 37 57 6a 76 30 42 77 57 4d 34 74 6e 72 4f 72 57 44 79 61 73 44 59 69 4f 43 79 71 55 4c 6b 6f 78 51 41 4c 5a 32 6e 76 70 70 48 6e 50 53 61 49 52 62 73 43 25 32 42 55 64 67 35 49 75 6d 49 72 6c 49 79 70 61 57 6e 4e 6e 6c 62 75 4b 55 7a Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=83P%2BthbHBVkbBbSJyZf1QfckdPlVgLJuAflnXBjIliM6wcQZfPf%2BUW72TGl1jLuEXpznzyMUPEGXS8ICrFqrBD2%2FZ0xl2OPM7Wjv0BwWM4tnrOrWDyasDYiOCyqULkoxQALZ2nvppHnPSaIRbsC%2BUdg5IumIrlIypaWnNnlbuKUz
2024-04-25 07:08:03 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:08:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.5	50786	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1436	OUT	GET /pagead/viewthroughconversion/778938880/?random=1683131934&fst=1714028882131&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2F&ref=https%3A%2F%2Fwetransfer.com%2Fexplore&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	1304	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1683131934&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2F&ref=https%3A%2F%2Fwetransfer.com%2Fexplore&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtquObdFgVqxJngXK1GrJDfWiXWLKyhlTsaJi_jn9C8BQNyMlfq&random=1737079248 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.5	50787	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	974	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1734018447.1714028880&url=https%3A%2F%2Fwetransfer.com%2F&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:02 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.5	50788	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	675	OUT	GET /rp.gif?ts=1714028880625&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:02 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.5	50791	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	2362	OUT	GET /_set_cookie?val=BIm8pYUwRrfKlgPyYz794bwmoqVEijX1XJN96mzKjMGJ2PWbrPGSx7s3hphkvLACoUrduQYZwwU%2BDv5dVR2GGy79FKU7SUnirY0imw%2Fl%2BXx18CurFnySe%2BlnOedfU74iWdnDt6ueHW9ISaeapTUleONxDedloSueLqloIrUfQeCjOqczqE4Z%2BTuC6LQSTJ%2F8YVs%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028877..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.18; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:03 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:08:03 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8528880e4af6df680be8e63d35ed90ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: REPVN3dHOzgpkt7jxdh7QCe7OyQ4nvlcjsPecVIA8fflgsd5IonfkQ==
2024-04-25 07:08:03 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.5	50790	151.101.128.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1660	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028881184&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fwetransfer.com%2Fexplore%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:03 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYxUGpnazBWNk5zSDhCZ0tLSkhRUkZydUF4dmRDNkVZc3FNOWlPY2tlUXk5ZWp3NzliTGwrLzk2QmZ5M0YrVDBHL0ordkFobTkxMUovYStxbXhwcExUcEpMUXNCNGM1RGNqM3NOVmVMZmd6RT0maWlaL0VhQ2RtYlhLK1B2eHdjcXYrWE1udGtRPQ=="; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1745681932554432 Date: Thu, 25 Apr 2024 07:08:03 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.5	50793	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	502	OUT	GET /rum?cm_dsp_id=65&external_user_id=AAAMvzG-WejzUANqRLfzAAAAAAA&expiration=1714115281&is_secure=true HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:03 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe71f4dad92-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:03 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MECkInmFbfMG%2FjpD7HujajW0le3RfvBrmM7gRp8yuG5lOEm3xi33reWRsymydRRGyc62FGG0qxeZIBRHSDCVTuaXegZ93ob6cXC862R2JDrYVHtUYU4Z6otNXssZxBL5omIkxXLR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.5	50799	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1146	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.5	50800	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1427	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fwetransfer.com%2Fexplore%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028880693 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:03 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1306091807616707 Date: Thu, 25 Apr 2024 07:08:03 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.5	50802	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028880692&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:03 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1026638693246751 Date: Thu, 25 Apr 2024 07:08:03 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:03 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.5	50801	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028880692&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZwaUlpaTJiSnFGZ3BhTDBVTVVKbGNCZnF1aDY0WCtheUtlSHRsQ1E1VEdyeER1b1NOK1RnK0p1MWRKRFlTclZpa2hMeDdZUEx6alJPdDdxVkRzcXUzd1MxRi9iNUZsb2tCVHJ1RUJoMzREMD0mOFY4b1dvYVlTYjYrZFhOYmZBeUtMR0UrcDFFPQ=="
2024-04-25 07:08:03 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6962381750788236 Date: Thu, 25 Apr 2024 07:08:03 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:03 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.5	50803	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Homepage&ts=1714028879988 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:03 GMT x-amzn-RequestId: 09f58249-96d4-407b-9e31-88b97d2ea08b X-Cache: Miss from cloudfront Via: 1.1 7b7f9409a41e78466e3ab2772654a73c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 3tah8uXI1acKkvWUgyB9s9fMqjOVKK9VzsEyZ6JVsfzRH4w88krTVA==
2024-04-25 07:08:03 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.5	50805	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:02 UTC	1107	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:03 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2765801693512733250"}],"aggregatable_trigger_data":[{"filters":[{"14":["13314262"]}],"key_piece":"0xc8012b02a318afe9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x5fce5d1c4b8f727b","not_filters":{"14":["13314262"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13314262"]}],"key_piece":"0x49c4ea758db9c5bb","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7050827e2b676ce9","not_filters":{"14":["13314262"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2765801693512733250","filters":[{"14":["13314262"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2765801693512733250","filters":[{"14":["13314262"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2765801693512733250","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2765801693512733250","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.5	50806	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	1107	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:03 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"101900495709351231"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"101900495709351231","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"101900495709351231","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"101900495709351231","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"101900495709351231","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.5	50807	64.233.185.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:08:03 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:03 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.5	50809	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	1146	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.5	50796	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	2209	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa19s4a.14.3.17; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028881..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.19
2024-04-25 07:08:03 UTC	1226	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 62 36 64 66 61 62 30 36 66 64 35 39 62 66 35 39 38 65 31 38 39 63 61 32 34 33 37 37 66 34 38 32 32 30 32 34 30 34 32 34 30 39 34 31 35 35 2f 61 39 62 30 62 65 35 66 30 39 31 39 34 38 30 34 39 65 35 64 38 64 64 31 30 35 64 35 38 32 65 36 32 30 32 34 30 34 32 34 30 39 34 32 32 38 2f 66 36 32 65 32 34 3f 74 72 6b 3d 54 52 4e 5f 54 44 4c 5f 30 31 26 75 74 6d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm
2024-04-25 07:08:03 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:03 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:03 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.5	50811	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	700	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2F&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&if=false&ts=1714028880661&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028880620&coo=false&eid=1714028879910-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	1024	IN	HTTP/1.1 302 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Date: Thu, 25 Apr 2024 07:08:03 GMT Set-Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.; expires=Wednesday, 24-Jul-2024 07:08:03 GMT; path=/; domain=.facebook.com; SameSite=None; HttpOnly; secure Location: /tr/?a=tmSimo-GTM-WebTemplate&cdl=API_unavailable&coo=false&cs_est=true&dl=https%3A%2F%2Fwetransfer.com%2F&ec=0&eid=1714028879910-39-833348100cc9&ev=PageView&fbp=fb.1.1714028820410.1151239194&id=1904796869803472&if=false&it=1714028880620&ler=empty&o=4126&r=stable&redirect=0&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&rqm=GET&sh=1024&sw=1280&tm=1&ts=1714028880661&v=2.9.154 Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Content-Type: text/plain Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.5	50810	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	737	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2F&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&if=false&ts=1714028880661&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028880620&coo=false&eid=1714028879910-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:08:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:08:03 UTC	1610	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.5	50814	142.251.15.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:08:03 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:03 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.5	50816	172.253.124.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	1356	OUT	GET /pagead/1p-user-list/778938880/?random=1683131934&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2F&ref=https%3A%2F%2Fwetransfer.com%2Fexplore&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtquObdFgVqxJngXK1GrJDfWiXWLKyhlTsaJi_jn9C8BQNyMlfq&random=1737079248 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.5	50819	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiVTA3Mjl5TnltSFFaVmx2eGJzbjBoZCIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5996 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-662a011a-48f7e17d299da0f31f67788b X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:03 GMT Age: 57 X-Served-By: cache-pdk-kfty2130066-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714028883.424819,VS0,VE1 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:08:03 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-25 07:08:03 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-25 07:08:03 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-25 07:08:03 UTC	1378	IN	Data Raw: 22 7d 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 73 6b 69 70 2d 6d 65 6d 62 65 72 73 68 69 70 73 2d 74 61 62 6c 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 30 33 2d 61 73 73 6f 63 69 61 74 65 2d 74 72 61 6e 73 66 65 72 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 Data Ascii: "},"value":"control"},"skip-memberships-table":{"key":"on","value":"on"},"transfer-details-03-associate-transfer":{"key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"exper
2024-04-25 07:08:03 UTC	484	IN	Data Raw: 61 70 6f 6c 6c 6f 2d 74 72 61 6e 73 66 65 72 6c 69 73 74 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 Data Ascii: apollo-transferlist":{"key":"on","metadata":{"experimentKey":"exp-1"},"value":"on"},"workspace-settings":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.5	50820	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	2549	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028881..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.19; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1a9lv.14.4.18
2024-04-25 07:08:03 UTC	110	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 39 37 35 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":975.7999999999884,"tags":{"rating":"good","page_group":"/","country":"US"}}
2024-04-25 07:08:03 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Thu, 25 Apr 2024 07:08:03 GMT ETag: "37-BqPsLJtrjrvbPZj6CTXx2/og5E8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G3c920wz0mpzIRngaDuxdoWPt8MJaGx3gbpCirUVhycPm-2rW7U32Q==
2024-04-25 07:08:03 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 39 37 35 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"FCP","time":975.7999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.5	50821	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	2549	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028881..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.19; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1a9lv.14.4.18
2024-04-25 07:08:03 UTC	112	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 33 39 39 2e 37 39 39 39 39 39 39 39 39 39 38 38 33 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":399.79999999998836,"tags":{"rating":"good","page_group":"/","country":"US"}}
2024-04-25 07:08:03 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Thu, 25 Apr 2024 07:08:03 GMT ETag: "39-QBvPMR7CXJWcm3PQulKc2e4N0c0" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 4682be42fcf0ad8d4088eb312e665eb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UlAftYJZhtHRE0GM6wqefQH4KpsaHzF7oK7kpWfQQQHCD0pdm0pcxw==
2024-04-25 07:08:03 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 33 39 39 2e 37 39 39 39 39 39 39 39 39 39 38 38 33 36 7d Data Ascii: {"status":"ok","metric":"TTFB","time":399.79999999998836}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.5	50822	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	725	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZioBUgAAMFcu8QAF&_test=ZioBUgAAMFcu8QAF HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:03 UTC	991	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fe9ea8fb0e7-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:03 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phlp3EeUuPMCGkj4eK1vOfMojKw5t%2FiWo1RP3JUlE8973AALSBjrbz04HIcAoKMqxfAl%2Bdl2Lf5KsTx4NYuFfYK9EhnWXc3SxfFu6a29IcT%2FZGK7JYC%2Boi%2BgcWM60mKlDIldlc9%2BtiB%2FgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.5	50823	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	1458	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028881184&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Fwetransfer.com%2Fexplore%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYxUGpnazBWNk5zSDhCZ0tLSkhRUkZydUF4dmRDNkVZc3FNOWlPY2tlUXk5ZWp3NzliTGwrLzk2QmZ5M0YrVDBHL0ordkFobTkxMUovYStxbXhwcExUcEpMUXNCNGM1RGNqM3NOVmVMZmd6RT0maWlaL0VhQ2RtYlhLK1B2eHdjcXYrWE1udGtRPQ=="
2024-04-25 07:08:03 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="; Expires=Fri, 25 Apr 2025 07:08:03 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8915442332246700 Date: Thu, 25 Apr 2024 07:08:03 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.5	50813	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028880636 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 940 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:08:03 UTC	940	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 73 69 64 22 3a 22 31 38 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"23868141-bd48-45de-a476-ac29f1c40d92","sid":"18","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-25 07:08:03 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:03 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8; Path=/; Expires=Sat, 25 Apr 2026 07:08:03 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-25 07:08:03 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.5	50824	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	2129	OUT	GET /_set_cookie?val=BIm8pYUwRrfKlgPyYz794bwmoqVEijX1XJN96mzKjMGJ2PWbrPGSx7s3hphkvLACoUrduQYZwwU%2BDv5dVR2GGy79FKU7SUnirY0imw%2Fl%2BXx18CurFnySe%2BlnOedfU74iWdnDt6ueHW9ISaeapTUleONxDedloSueLqloIrUfQeCjOqczqE4Z%2BTuC6LQSTJ%2F8YVs%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028881..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.19; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1a9lv.14.4.18
2024-04-25 07:08:03 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:08:03 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8528880e4af6df680be8e63d35ed90ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: LILG8ZM4Q2OzycPfRbELFpGOSJlpA39MSpFM05H-rbfQzTvBroSNLw==
2024-04-25 07:08:03 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.5	50817	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:08:03 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Thu, 25 Apr 2024 07:08:03 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1498 RateLimit-Reset: 29 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.5	50826	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	912	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra00;ord=423185918;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.5	50827	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	763	OUT	GET /tr/?a=tmSimo-GTM-WebTemplate&cdl=API_unavailable&coo=false&cs_est=true&dl=https%3A%2F%2Fwetransfer.com%2F&ec=0&eid=1714028879910-39-833348100cc9&ev=PageView&fbp=fb.1.1714028820410.1151239194&id=1904796869803472&if=false&it=1714028880620&ler=empty&o=4126&r=stable&redirect=0&rl=https%3A%2F%2Fwetransfer.com%2Fexplore&rqm=GET&sh=1024&sw=1280&tm=1&ts=1714028880661&v=2.9.154 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.
2024-04-25 07:08:03 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:08:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.5	50818	44.229.205.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 63 61 65 32 66 32 66 31 66 34 34 66 33 35 39 36 61 38 36 65 61 35 31 63 30 63 38 32 66 32 39 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 38 31 35 39 39 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 34 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=5cae2f2f1f44f3596a86ea51c0c82f29&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028881599%2C%22event_id%22%3A4%2C%22session_id%22%3A1714028821782%2C%22
2024-04-25 07:08:03 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:03 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0153-5bc383a60cf832bf2937927b Strict-Transport-Security: max-age=15768000
2024-04-25 07:08:03 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.5	50830	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	912	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1914844845;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2F;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2F;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.5	50832	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	1122	OUT	GET /pagead/1p-user-list/778938880/?random=1683131934&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2F&ref=https%3A%2F%2Fwetransfer.com%2Fexplore&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtquObdFgVqxJngXK1GrJDfWiXWLKyhlTsaJi_jn9C8BQNyMlfq&random=1737079248 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:03 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.5	50834	151.101.194.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:04 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-662a0153-57e70e9c2019c98c75279176 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:03 GMT X-Served-By: cache-pdk-kfty2130093-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714028884.917887,VS0,VE72 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:08:04 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.5	50837	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:04 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 6DPZ4ACY0NF16W8B21F1 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.5	50841	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:03 UTC	481	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZioBUgAAMFcu8QAF&_test=ZioBUgAAMFcu8QAF HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; CMPS=587; CMPRO=587
2024-04-25 07:08:04 UTC	985	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879c7fee5b06b0db-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZioBP9HM4ycAADS8ARFPzgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 07:08:04 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=587; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 07:08:04 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5RuN4wM%2BsbkwWXvoTlpa8sXE66Txi2ehpBtg%2BUNZo50P306ZTn06nL2X2XDqPgmMlo2BspvbVT%2FOdq4019g%2F3l10kbB4spzRTdEMj14fdtVkPER29J9HGDOY12RgGXR5BCoGnMhoA8eA2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 07:08:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.5	50842	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2131	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:04 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:04 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 4b24194db427c7e0a216991d8bb1bfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: L0YiG2VcfluqKZjJE31AXsT61DFhPxQCC5iMyAXj9SygCKYuzrj3pw==
2024-04-25 07:08:04 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.5	50836	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2727 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028868685\|4\|1\|bat.bing.com/p/insights/c/a; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aa6f.1d.4.1h; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.20
2024-04-25 07:08:04 UTC	2727	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6f 43 49 41 50 39 6f 43 49 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-25 07:08:04 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:04 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:04 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.5	50844	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:04 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0154-032cfc76064ce012760776bc Strict-Transport-Security: max-age=15768000
2024-04-25 07:08:04 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.5	50839	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:04 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:04 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.5	50843	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028880636 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:08:04 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-25 07:08:04 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.5	50847	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:04 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: V45S14EA33FEFMCW0QZC Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.5	50848	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	1015	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=767400574&gjid=1018053846&_gid=1979514058.1714028817&_u=SACAAUABAAAAACgFKgC~&z=396582669 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:04 UTC	592	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 07:08:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:04 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.5	50849	44.195.207.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:04 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.5	50845	44.235.23.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:04 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 33 38 33 31 32 61 34 61 64 65 32 30 63 37 64 36 66 63 39 62 30 62 32 62 63 63 63 62 30 33 30 33 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 38 32 30 37 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 37 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 Data Ascii: checksum=38312a4ade20c7d6fc9b0b2bcccb0303&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028882073%2C%22event_id%22%3A37%2C%22session_id%22%3A1714028821782%2C%2
2024-04-25 07:08:05 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0154-10b229ef70f76c817eff342e Strict-Transport-Security: max-age=15768000
2024-04-25 07:08:05 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.5	50852	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2571	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:04 UTC	124	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 38 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":2864.2999999999884,"tags":{"rating":"needs-improvement","page_group":"/","country":"US"}}
2024-04-25 07:08:05 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:08:04 GMT ETag: "38-ab7q+rgrH5ShZXJt9AUhTpfFwJI" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XG89JtaabIGptfKrDB087R14ZHX6y55xONrZXl8yQ6QwoCCjcX3_Xg==
2024-04-25 07:08:05 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 32 38 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"LCP","time":2864.2999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.5	50851	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2571	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:04 UTC	113	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 31 33 33 35 30 38 35 31 36 31 32 30 32 39 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.005013350851612029,"tags":{"rating":"good","page_group":"/","country":"US"}}
2024-04-25 07:08:05 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Thu, 25 Apr 2024 07:08:05 GMT ETag: "3a-XYSmjVA7BzBhiA/FndYcHwmtlAM" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 31240efd84da865ccb5c6adf215095b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1-P0wNb7NntjCyoJwO7qmE1Hv0i1Ynmynvq7GMXAuEyg2kktU4Y1AQ==
2024-04-25 07:08:05 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 31 33 33 35 30 38 35 31 36 31 32 30 32 39 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.005013350851612029}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.5	50853	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2131	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _dd_s=rum=0&expire=1714029781579&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:05 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:05 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 a39699152176bddffd29fe58063d838a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8-DVpRVoN3hA4GYIqAwJPgC_h_eiHkPAAzDwlvIws5Huy6GqNwQqCA==
2024-04-25 07:08:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.5	50854	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	2390	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783105&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:08:05 UTC	830	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:08:04 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6065fa4dfa87d92a6009e7fe74c3def0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: t1qU9wtiEamnubgxxdpwQiQ24LIJrfQ8izcmQS7bJO2LW1ME7sbzlA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.5	50859	64.233.177.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:04 UTC	767	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=767400574&gjid=1018053846&_gid=1979514058.1714028817&_u=SACAAUABAAAAACgFKgC~&z=396582669 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:05 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 07:08:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:05 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.5	50860	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:05 UTC	633	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 07:08:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0fa9aecd8cce758c9 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-25 07:08:05 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.5	50861	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	816	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=767400574&_u=SACAAUABAAAAACgFKgC~&z=1038242861 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:05 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.5	50857	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2231	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 4963 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:05 UTC	4963	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 72 65 66 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 78 70 6c 6f 72 65 22 2c 22 65 69 64 22 3a 22 38 34 66 62 62 35 39 35 2d 61 66 37 36 2d 34 63 63 31 2d 61 63 39 38 2d 36 37 62 66 31 65 35 35 65 65 37 66 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/","page":"/","refr":"https://wetransfer.com/explore","eid":"84fbb595-af76-4cc1-ac98-67bf1e55ee7f","tv":"js-3.23.0","tna":"co","ai
2024-04-25 07:08:05 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:05 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:05 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:05 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.5	50858	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	1960	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:05 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:05 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.5	50865	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2360	OUT	GET /help HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; _wt_snowplowid.0497=23868141-bd48-45de-a476-ac29f1c40d92.1714028834318.0.1714028882..7da85cc0-0fef-4b23-a5b1-e022169eecb1..20b9bea7-9fe8-44a8-a293-ea6e62d914ea.1714028836012.22; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:05 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10329 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Thu, 25 Apr 2024 07:08:05 GMT ETag: "2859-9ddDbn3q8Ii4dmYsWZ/NyFO9J3w" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 556e27b2376aefcd1536a5e3e2ddd0d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ceJtoF0dJEFcuUzx1JbhdglRvCSZkeMrvRehCpwis4WFWcb8--EzQA==
2024-04-25 07:08:05 UTC	10329	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.5	50866	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2481	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 95 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:05 UTC	95	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":16,"tags":{"rating":"good","page_group":"/","country":"US"}}
2024-04-25 07:08:05 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Thu, 25 Apr 2024 07:08:05 GMT ETag: "28-HfI+TrRevDdkylP6fMXM4RhLFbc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SbtetMiil4FbLXTyz6o6zERHOct6o58PgFLccN3TBdfFjKXaD1K-MA==
2024-04-25 07:08:05 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 31 36 7d Data Ascii: {"status":"ok","metric":"INP","time":16}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.5	50867	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2066	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347. If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-25 07:08:05 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Thu, 25 Apr 2024 07:08:05 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6b05c043343be4e7a403a603c9187f38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DjPX3J9KS8zkt1ACDHev1QwswB4XRbQcD9A46_FrjkDgdvgZYzPcWA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.5	50862	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:05 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Thu, 25 Apr 2024 07:08:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.5	50868	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:05 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 07:08:05 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-662a0155-374616635bf1cb9461101b3f Strict-Transport-Security: max-age=15768000
2024-04-25 07:08:05 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.5	50869	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2042	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:05 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:05 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: K2Ihx46jdaQkNETbrwWa-t6TPRrCBeol5nlao0kgzzE_6MMg5jP0wQ==
2024-04-25 07:08:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.5	50872	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	582	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=224122617.1714028817&jid=767400574&_u=SACAAUABAAAAACgFKgC~&z=1038242861 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:05 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.5	50864	18.160.78.124	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:05 UTC	2055	OUT	GET /_next/static/chunks/pages/help-6179d85e8f7fbccf.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:05 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 596 Connection: close Date: Thu, 25 Apr 2024 05:59:09 GMT Last-Modified: Thu, 25 Apr 2024 05:55:17 GMT ETag: "b3b2ec1af6e0bb8b2bc3c666c233bd9b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tZgYL10AzZXBMY-ZvrCnUTFZlVj8LCVywEUaELrOnOJo3hkYXrqiCg== Age: 4137
2024-04-25 07:08:05 UTC	596	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 33 33 5d 2c 7b 32 34 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 68 65 6c 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 32 33 39 34 37 29 7d 5d 29 7d 2c 32 33 39 34 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 2c 65 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 20 69 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1233],{24148:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/help",function(){return e(23947)}])},23947:function(n,t,e){"use strict";e.r(t),e.d(t,{__N_SSP:function(){return _}});var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.5	50875	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	2042	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:06 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:06 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P7gzQoBDBtQ6_4J2dqO2neLUDaLuAYbQMBVYS4ZOxoHQGeMT_1mYtA==
2024-04-25 07:08:06 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.5	50877	34.49.212.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	710	OUT	GET /api/segment?pid=712597&pdata=sid%3D%2Cuid%3Daea856b4-45d7-4d25-90ef-642b02d57292 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=qLxSuDDsZWJDBz0SxvbILipiJfJ3PUJXtsnofwuzHZs=
2024-04-25 07:08:06 UTC	443	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:06 GMT Content-Length: 27 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:06 UTC	27	IN	Data Raw: 70 64 61 74 61 20 63 6f 6e 74 61 69 6e 73 20 65 6d 70 74 79 20 76 61 6c 75 65 0a Data Ascii: pdata contains empty value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.5	50878	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	3261	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028884348&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=691932089.1714028884&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028884348&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&sid=1714028816&sct=1&seg=1&dt=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=aea856b4-45d7-4d25-90ef-642b02d57292&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A08%3A04.423%2B02%3A00&epn.hit_timestamp_unix=1714028884423&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028884348-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028884348-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=892&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.1.224122617.1714028817
2024-04-25 07:08:06 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Thu, 25 Apr 2024 07:08:06 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775935; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0b00705d5489207e9b2ca43397d52bfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: BndoO57VT649qlgxkEXzPL5Rq4uHjy8FdZcpbQeowvTOziBeIfCQCw==
2024-04-25 07:08:06 UTC	647	IN	Data Raw: 32 38 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 37 30 38 33 38 34 38 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 68 65 6c 70 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d Data Ascii: 280event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=
2024-04-25 07:08:06 UTC	579	IN	Data Raw: 32 33 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 37 30 38 33 38 34 38 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 68 65 6c 70 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 Data Ascii: 23cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwet
2024-04-25 07:08:06 UTC	611	IN	Data Raw: 32 35 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 30 38 34 33 38 39 35 39 34 26 66 73 74 3d 31 37 31 34 30 32 38 38 38 36 33 35 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 25cevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2084389594&fst=1714028886355&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&u
2024-04-25 07:08:06 UTC	294	IN	Data Raw: 31 31 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 64 58 4f 51 51 54 44 65 7a 66 6a 46 50 7a 65 62 4f 4b 63 4a 66 6d 31 25 32 42 55 5a 62 62 43 4b 49 30 58 6b 33 47 70 66 78 6c 67 50 44 6d 30 73 4a 35 65 4c 49 25 32 46 35 4b 42 34 36 43 55 6f 52 59 61 77 42 76 70 64 73 32 4b 74 4f 44 4c 53 31 4c 59 44 75 49 67 53 77 6f 33 32 4c 72 57 44 72 78 51 4d 77 69 41 42 48 4b 36 56 67 49 58 34 6e 56 25 32 46 49 4f 54 66 6b 48 35 64 4e 36 64 32 33 37 6a 38 43 53 67 65 77 34 79 38 5a 34 33 31 6e 64 79 34 79 41 6a 7a 58 68 41 48 78 25 32 46 6d 45 56 78 45 66 42 41 33 51 44 39 35 42 25 32 46 65 6b Data Ascii: 11fevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=dXOQQTDezfjFPzebOKcJfm1%2BUZbbCKI0Xk3GpfxlgPDm0sJ5eLI%2F5KB46CUoRYawBvpds2KtODLS1LYDuIgSwo32LrWDrxQMwiABHK6VgIX4nV%2FIOTfkH5dN6d237j8CSgew4y8Z431ndy4yAjzXhAHx%2FmEVxEfBA3QD95B%2Fek
2024-04-25 07:08:06 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.5	50876	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	2102	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:06 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-23868141-bd48-45de-a476-ac29f1c40d92","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:08:07 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:08:06 GMT ETag: W/"43a2-BRTrSBH315GX760efJU5jyuNMHk" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17314 Connection: Close
2024-04-25 07:08:07 UTC	16001	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 35 36 36 37 38 32 35 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 30 33 37 34 36 38 34 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 34 34 37 34 36 31 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 33 35 31 33 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 33 34 30 33 34 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4d 7a 51 77 4d 7a 51 35 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 7a Data Ascii: {"creatives":[{"adId":515667825,"creativeId":340374684,"flightId":504474613,"campaignId":288235130,"advertiserId":2340349,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIz
2024-04-25 07:08:07 UTC	1313	IN	Data Raw: 6a 6f 69 4d 54 67 31 4c 6a 45 31 4d 69 34 32 4e 69 34 79 4d 7a 41 69 4c 43 4a 75 64 79 49 36 4d 54 41 79 4d 6a 41 73 49 6e 42 6a 49 6a 6f 30 4d 43 77 69 62 33 41 69 4f 6a 51 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 78 73 4c 43 4a 77 63 69 49 36 4d 54 51 35 4e 6a 67 32 4c 43 4a 79 64 43 49 36 4d 69 77 69 63 6e 4d 69 4f 6a 55 77 4d 43 77 69 63 32 45 69 4f 69 49 31 4e 53 49 73 49 6e 4e 69 49 6a 6f 69 61 53 30 77 4f 47 4e 6a 5a 54 68 6c 4d 54 42 6c 4d 7a 4d 77 4d 47 52 6b 4d 69 49 73 49 6e 4e 77 49 6a 6f 78 4e 54 59 77 4e 44 6b 77 4c 43 4a 7a 64 43 49 36 4d 54 41 31 4e 54 6b 79 4d 69 77 69 64 57 73 69 4f 69 4a 7a 63 43 30 79 4d 7a 67 32 4f 44 45 30 4d 53 31 69 5a 44 51 34 4c 54 51 31 5a 47 55 74 59 54 51 33 Data Ascii: joiMTg1LjE1Mi42Ni4yMzAiLCJudyI6MTAyMjAsInBjIjo0MCwib3AiOjQwLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTQ5Njg2LCJydCI6MiwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wOGNjZThlMTBlMzMwMGRkMiIsInNwIjoxNTYwNDkwLCJzdCI6MTA1NTkyMiwidWsiOiJzcC0yMzg2ODE0MS1iZDQ4LTQ1ZGUtYTQ3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.5	50874	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1871	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.
2024-04-25 07:08:06 UTC	469	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f850b167-800c-48d0-912d-956f588d119f; Expires=Fri, 25 Apr 2025 07:08:06 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-25 07:08:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.5	50880	52.46.130.91	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028884444 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:06 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:06 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: QFN5RQ44NGRCNWK6KPKC Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:06 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.5	50882	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	2042	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028880.0.0.988032707; _ga=GA1.2.224122617.1714028817; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:06 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:06 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 793a32fc98b22fca416cf87070f3ac80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YMK8sZiWsBXzVs7B7C_j5-LhBDRu3wRrLJYxhFayndabJsoW_RcWXQ==
2024-04-25 07:08:06 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.5	50881	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	2413	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817
2024-04-25 07:08:06 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-25 07:08:06 UTC	1379	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Thu, 25 Apr 2024 07:08:06 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; domain=.wetransfer.com; path=/; expires=Sat, 25 Apr 2026 07:08:06 GMT; secure Set-Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-nz4nj-43692 X-Permitted-Cross-Domain-Policies: none X-Request-Id: d76c1d47c212a61c46c4146e833fcfd6 X-Runtime: 0.007655 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 b98d9359af9bfef991c5b64e71032a66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -N1sW9C0rtJN8H5tekziUd_RqqJu8BwBK7ItcmLWA4io928Ii-oSlg==
2024-04-25 07:08:06 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.5	50883	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	866	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=691932089.1714028884&url=https%3A%2F%2Fwetransfer.com%2Fhelp&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:06 UTC	859	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=691932089.1714028884&url=https%3A%2F%2Fwetransfer.com%2Fhelp&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.5	50887	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1326	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:07 UTC	1120	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.5	50886	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1431	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:07 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16904481986262007482"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16904481986262007482","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16904481986262007482","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16904481986262007482","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16904481986262007482","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.5	50888	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1358	OUT	GET /pagead/viewthroughconversion/778938880/?random=2084389594&fst=1714028886355&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fhelp&tiba=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:06 UTC	1226	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=2084389594&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fhelp&tiba=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqEl-AXglI5UA6TbX7Mja0F4uBOuiJG5tXRdNF3oiGJMh3IjIz&random=2751339720 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:06 UTC	29	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 Data Ascii: GIF89a!,
2024-04-25 07:08:06 UTC	13	IN	Data Raw: 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.5	50890	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	2297	OUT	GET /_set_cookie?val=dXOQQTDezfjFPzebOKcJfm1%2BUZbbCKI0Xk3GpfxlgPDm0sJ5eLI%2F5KB46CUoRYawBvpds2KtODLS1LYDuIgSwo32LrWDrxQMwiABHK6VgIX4nV%2FIOTfkH5dN6d237j8CSgew4y8Z431ndy4yAjzXhAHx%2FmEVxEfBA3QD95B%2Fek%2F4snkH0%2BUDEESBvBoXkh9GEss%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5
2024-04-25 07:08:07 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:08:06 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 f42ffbcae499c78a2420149a88d4dd98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: l9_xS-hVinuWQVGT63H2BFoPw_m2vSUuckaXQBBuMducbK7ZGEjYZg==
2024-04-25 07:08:07 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.5	50894	151.101.193.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	631	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c4d61fbb6e730a840c7f140cbb9bcd06" If-Modified-Since: Wed, 24 Apr 2024 17:35:49 GMT
2024-04-25 07:08:07 UTC	821	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Apr 2024 07:08:06 GMT Via: 1.1 varnish Cache-Control: public, max-age=60 ETag: "c4d61fbb6e730a840c7f140cbb9bcd06" Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.5	50884	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1081	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fhelp&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwjK_97YpcDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..
2024-04-25 07:08:07 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:08:06 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=adcfda1d-b31b-4940-83bb-df9046f5388a; expires=Fri, 25 Apr 2025 07:08:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI6P3kiozA8jwQBRIWCgdydWJpY29uEgsIpJvliozA8jwQBRIXCghhcHBuZXh1cxILCKbv5K2MwPI8EAUSFQoGY2FzYWxlEgsI9o3zg43A8jwQBRIYCgliaWRzd2l0Y2gSCwi0rvODjcDyPBAFEhcKCHB1Ym1hdGljEgsIzs_zg43A8jwQBRgFKAMyCwjWmNmDpsDyPBAFQg8iDQgBEgkKBXRpZXIzEAFaBzgxYzNqZ25gAQ..; expires=Fri, 25 Apr 2025 07:08:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 07:08:07 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.5	50895	3.163.80.24	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	697	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028884444 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT x-amzn-RequestId: 36dd577b-ecf6-488b-9eab-a91b5abe57da Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 0fe01300cc0fd23ed9b49b075bd8fc3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: D8rSHIdf3IMOt70cJ-T2ghs3Cvrbt1OTlXtatJq3LAPg5Qtan4Zu8g==
2024-04-25 07:08:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.5	50892	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	952	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&rl=&if=false&ts=1714028885165&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028885147&coo=false&eid=1714028884348-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.
2024-04-25 07:08:07 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=120, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:08:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.5	50893	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1062	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&rl=&if=false&ts=1714028885165&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028885147&coo=false&eid=1714028884348-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.
2024-04-25 07:08:07 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:08:07 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:08:07 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 07:08:07 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 07:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.5	50885	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: fc8d706f-5a3a-4212-b6cd-833348100cc9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-25 07:08:07 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Thu, 25 Apr 2024 07:08:07 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 28 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.5	50900	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028885150&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1521453310434988 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.5	50898	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028885149&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1232907068650487 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.5	50899	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	1595	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fhelp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028885151 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1175598289790124 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.5	50903	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	3006	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44o0v893550495z8890364660za200&_p=1714028884348&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=224122617.1714028817&ecid=988032707&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=691932089.1714028884&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1714028884348&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&sid=1714028816&sct=1&seg=1&dt=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=aea856b4-45d7-4d25-90ef-642b02d57292&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-25T09%3A08%3A04.423%2B02%3A00&epn.hit_timestamp_unix=1714028884423&ep.tag_name=GA4%20-%20page_view&ep.event_id=1714028884348-1-833348100cc9&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221714028884348-1-833348100cc9%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=892&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:07 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Thu, 25 Apr 2024 07:08:07 GMT set-cookie: FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.2028829226.1714028821; Max-Age=7775934; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6503a4af08a1126fe0f20f95c7ca4d6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: K2z3eX1JrNRh-k_p6uyaXg2RA9lodDxy8vvbwjsH2Gkfbz33vc4y3w==
2024-04-25 07:08:07 UTC	647	IN	Data Raw: 32 38 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 33 30 34 36 35 30 31 38 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 68 65 6c 70 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d Data Ascii: 280event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1304650182;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=
2024-04-25 07:08:07 UTC	579	IN	Data Raw: 32 33 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 33 30 34 36 35 30 31 38 32 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 68 65 6c 70 3b 75 34 3d 32 32 34 31 32 32 36 31 37 2e 31 37 31 34 30 32 38 38 31 37 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 Data Ascii: 23cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1304650182;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwet
2024-04-25 07:08:07 UTC	610	IN	Data Raw: 32 35 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 33 31 30 39 32 34 35 32 26 66 73 74 3d 31 37 31 34 30 32 38 38 38 37 32 33 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6e 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 25bevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=131092452&fst=1714028887233&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&ur
2024-04-25 07:08:07 UTC	294	IN	Data Raw: 31 31 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 7a 65 54 25 32 46 4c 42 25 32 42 63 4c 4b 74 58 59 64 57 63 77 6f 68 5a 77 75 6a 69 54 52 61 76 6e 44 32 55 72 77 70 4f 39 6e 77 6e 34 62 41 31 35 77 38 56 4e 6c 4c 75 4e 59 6b 78 32 49 4b 6f 55 49 32 4a 38 47 68 64 25 32 42 58 73 69 57 41 51 32 6a 34 6f 74 70 41 33 61 75 69 47 6f 32 45 72 6e 50 42 6a 76 37 38 35 6f 42 62 68 71 77 43 4c 42 79 25 32 46 25 32 42 6b 51 71 53 4c 50 76 35 64 44 57 37 47 67 53 6c 48 5a 5a 48 45 53 37 34 42 49 64 53 69 77 50 59 39 4b 78 64 76 43 63 51 47 35 51 6a 45 6a 6a 4f 70 6e 57 35 41 78 72 25 32 42 42 Data Ascii: 11fevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=zeT%2FLB%2BcLKtXYdWcwohZwujiTRavnD2UrwpO9nwn4bA15w8VNlLuNYkx2IKoUI2J8Ghd%2BXsiWAQ2j4otpA3auiGo2ErnPBjv785oBbhqwCLBy%2F%2BkQqSLPv5dDW7GgSlHZZHES74BIdSiwPY9KxdvCcQG5QjEjjOpnW5Axr%2BB
2024-04-25 07:08:07 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-25 07:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.5	50904	52.46.143.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:06 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028884444 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; ad-privacy=0
2024-04-25 07:08:07 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 07:08:07 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: MNWCMNP9XEZHW8807C56 Set-Cookie: ad-id=A4wsf0neYU2oqUp1UjRx_ug; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 07:08:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 07:08:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 07:08:07 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.5	50901	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2102	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347.; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a
2024-04-25 07:08:07 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 32 33 38 36 38 31 34 31 2d 62 64 34 38 2d 34 35 64 65 2d 61 34 37 36 2d 61 63 32 39 66 31 63 34 30 64 39 32 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-23868141-bd48-45de-a476-ac29f1c40d92","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-25 07:08:07 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 07:08:07 GMT ETag: W/"43b6-uYumDehlrQUZtJj5qjpIVHXZE8Y" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17334 Connection: Close
2024-04-25 07:08:07 UTC	16001	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 35 36 36 37 38 32 32 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 30 33 37 34 36 38 35 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 34 34 37 34 36 31 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 33 35 31 33 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 33 34 30 33 34 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4d 7a 51 77 4d 7a 51 35 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 7a Data Ascii: {"creatives":[{"adId":515667822,"creativeId":340374685,"flightId":504474613,"campaignId":288235130,"advertiserId":2340349,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIz
2024-04-25 07:08:07 UTC	1333	IN	Data Raw: 6a 6f 31 4d 44 51 30 4e 7a 51 32 4d 54 4d 73 49 6d 6c 77 49 6a 6f 69 4d 54 67 31 4c 6a 45 31 4d 69 34 32 4e 69 34 79 4d 7a 41 69 4c 43 4a 75 64 79 49 36 4d 54 41 79 4d 6a 41 73 49 6e 42 6a 49 6a 6f 30 4d 43 77 69 62 33 41 69 4f 6a 51 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 78 73 4c 43 4a 77 63 69 49 36 4d 54 51 35 4e 6a 67 32 4c 43 4a 79 64 43 49 36 4d 69 77 69 63 6e 4d 69 4f 6a 55 77 4d 43 77 69 63 32 45 69 4f 69 49 31 4e 53 49 73 49 6e 4e 69 49 6a 6f 69 61 53 30 77 4f 57 51 77 4d 7a 4d 78 4f 54 59 79 4d 57 59 78 4e 7a 6b 78 4e 69 49 73 49 6e 4e 77 49 6a 6f 78 4e 44 6b 33 4e 44 49 77 4c 43 4a 7a 64 43 49 36 4d 54 41 31 4e 54 6b 79 4d 69 77 69 64 57 73 69 4f 69 4a 7a 63 43 30 79 4d 7a 67 32 4f 44 45 30 Data Ascii: jo1MDQ0NzQ2MTMsImlwIjoiMTg1LjE1Mi42Ni4yMzAiLCJudyI6MTAyMjAsInBjIjo0MCwib3AiOjQwLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTQ5Njg2LCJydCI6MiwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wOWQwMzMxOTYyMWYxNzkxNiIsInNwIjoxNDk3NDIwLCJzdCI6MTA1NTkyMiwidWsiOiJzcC0yMzg2ODE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.5	50905	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	977	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=691932089.1714028884&url=https%3A%2F%2Fwetransfer.com%2Fhelp&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44o0n81NS54WBWv890364660za200&auid=2028829226.1714028821 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi6Tslmrd4zCPHkUD3QqhMDmkF5pV1I-xT-S24Ow5GnSGb89LQ
2024-04-25 07:08:07 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.5	50906	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2037	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _dd_s=rum=0&expire=1714029783149&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347
2024-04-25 07:08:07 UTC	580	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w6bmc-230 X-Request-Id: f4c9900c8e94763891cc0ead366ac38b X-Runtime: 0.001537 X-Cache: Error from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: l67fvDMpCLhUhyqck2dWaqwOEXOVChvCBi0iHjqzsrFqg3X4bUGlLw==
2024-04-25 07:08:07 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.5	50907	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1278	OUT	GET /pagead/1p-user-list/778938880/?random=2084389594&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fhelp&tiba=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqEl-AXglI5UA6TbX7Mja0F4uBOuiJG5tXRdNF3oiGJMh3IjIz&random=2751339720 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.5	50896	18.195.184.120	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028885125 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	420	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 07:08:07 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.5	50909	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1158	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.5	50910	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2063	OUT	GET /_set_cookie?val=dXOQQTDezfjFPzebOKcJfm1%2BUZbbCKI0Xk3GpfxlgPDm0sJ5eLI%2F5KB46CUoRYawBvpds2KtODLS1LYDuIgSwo32LrWDrxQMwiABHK6VgIX4nV%2FIOTfkH5dN6d237j8CSgew4y8Z431ndy4yAjzXhAHx%2FmEVxEfBA3QD95B%2Fek%2F4snkH0%2BUDEESBvBoXkh9GEss%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225
2024-04-25 07:08:07 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT Set-Cookie: _fbp=fb.1.1714028820410.1151239194; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8fd23adcee29b78303863f20d62cabd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL52-C1 X-Amz-Cf-Id: w7mud4IXlx8L2P1OfwTOK0fz1JrciMgiDEYURLsn7V84o57q5kkN_g==
2024-04-25 07:08:07 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.5	50911	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1119	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=2028829226.1714028821;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnL3rkwXRaUzoAjQMRXV2WUuK-j647bD4IzjgFqiOyO-ti7hrHP27gSTzHa; APC=AfxxVi4sKk92-V9YU9oIP1Joi8b30DlB8XHq-78KLHnNPtJipo_1Pg
2024-04-25 07:08:07 UTC	2232	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16904481986262007482"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0xaf07fff09e45bd21","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x46384e0df541753d","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0x62df7be6a6caf225","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x5ae0f4f29ed399ae","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"872980309500361569","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16904481986262007482","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16904481986262007482","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16904481986262007482","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16904481986262007482","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 25-May-2024 07:08:07 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.5	50912	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	718	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&rl=&if=false&ts=1714028885165&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028885147&coo=false&eid=1714028884348-39-833348100cc9&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.
2024-04-25 07:08:07 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=112, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 07:08:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.5	50913	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1714028884444 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT x-amzn-RequestId: 1644c216-a6f4-42b3-8b8e-543a8a7f960e X-Cache: Miss from cloudfront Via: 1.1 a080982e88a54647df03225aa56b97c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: bBBrmTyuwidBz2eWv8eUsvyFFupLsTqNdb1g9auBC4trB6v_uZmuRg==
2024-04-25 07:08:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.5	50914	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	755	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fhelp&rl=&if=false&ts=1714028885165&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714028820410.1151239194&cs_est=true&ler=empty&cdl=API_unavailable&it=1714028885147&coo=false&eid=1714028884348-39-833348100cc9&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fr=0RdhZoZIvuTAmqAZ0..BmKgFT...1.0.BmKgFT.
2024-04-25 07:08:07 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 07:08:07 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 07:08:07 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.5	50916	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	909	OUT	GET /rp.gif?ts=1714028885641&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:07 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-25 07:08:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.5	50915	173.194.219.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 37 32 39 38 30 33 30 39 35 30 30 33 36 31 35 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"872980309500361569"},"type":"trigger-no-matching-source"}]
2024-04-25 07:08:07 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 07:08:07 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.5	50917	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1627	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1714028885755&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fhelp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZFRU5Qa0ZPb0xEUzBtQkVQOUdISEFvcHVmWXpxZ3JUYnlveFBrY2MwZDVwVUVJaFlLRUR5YUpraStXblZYcnVPTUFZc01WZjhRRVZjWkIwVzRLUGZTZE8xYmxCT3VZQWQzZFplMzJjdWpyMD0mZnRjL3pOaERHL1A3RDFXSEV1aFJyd1lCSm9RPQ=="; Expires=Fri, 25 Apr 2025 07:08:07 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3041216124133068 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.5	50918	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&cb=1714028885149&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1364877454491572 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.5	50919	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1714028885150&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 6223387299796779 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.5	50920	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1393	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fhelp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714028885151 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZUTVdKdThGTnJIR05hMGdSMEZyUVpkTDN6LysvbEJoeFpLTXlaVlRnN1A3ZWxlbXRpMFp5VWlvZmxaUlQ2d2JoL2h1TWxPczBKSVB1SlUycVBuYWwza0FkN3d4cmtvNDNIUm5YSklBUGY2UT0mK1RoSmpGZmlnam1yREJLV09KSDVFT2JkTWNNPQ=="
2024-04-25 07:08:07 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 07:08:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8134125268622326 Date: Thu, 25 Apr 2024 07:08:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 07:08:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.5	50922	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	918	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715049028241 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029783142
2024-04-25 07:08:07 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Wed, 24 Apr 2024 10:20:25 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2ac0cc67fc59e7d4a98e8309d42e7572.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: EoRHoJWHdjz_tIOC29FhUY_EzKZd2gSlcRQK8-JDSpMe0uPsOg7Vqg== Age: 74863
2024-04-25 07:08:07 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.5	50925	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2481	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1advh.1e.5.1j; _dd_s=rum=0&expire=1714029785977&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713
2024-04-25 07:08:07 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 33 33 35 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 68 65 6c 70 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":1335.7000000000116,"tags":{"rating":"good","page_group":"/help","country":"US"}}
2024-04-25 07:08:07 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT ETag: "38-xvh9Nw6hTfZsgyna7FQyF0XZymc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WOgDwpw628MzNJqFR6dGeE-7WvHUtSJfvsWpOJ-4JU9n_sTFoBIJOA==
2024-04-25 07:08:07 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 31 33 33 35 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 7d Data Ascii: {"status":"ok","metric":"FCP","time":1335.7000000000116}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.5	50921	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1846	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; _gat_UA-11792855-4=1; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1aaau.1e.4.1i; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.5	50926	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2523	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1advh.1e.5.1j; _dd_s=rum=0&expire=1714029785977&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713&lock=94c7ee48-8de3-49e6-b248-84e4a8ab89d1
2024-04-25 07:08:07 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 36 37 35 2e 38 30 30 30 30 30 30 30 30 30 34 36 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 68 65 6c 70 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":675.8000000000466,"tags":{"rating":"good","page_group":"/help","country":"US"}}
2024-04-25 07:08:07 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Thu, 25 Apr 2024 07:08:07 GMT ETag: "38-EfXExM70qV4SsLfTju0ABSL9KMA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: f3jdZgXPHvkWlcDt-HM2MOMpkVAk22ugc4MiULASGBFukcWsTpQOfg==
2024-04-25 07:08:07 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 36 37 35 2e 38 30 30 30 30 30 30 30 30 30 34 36 36 7d Data Ascii: {"status":"ok","metric":"TTFB","time":675.8000000000466}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.5	50928	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	1044	OUT	GET /pagead/1p-user-list/778938880/?random=2084389594&fst=1714028400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44n0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fhelp&tiba=How%20to%20send%20large%20files%20%7C%20WeTransfer%20Help&auid=2028829226.1714028821&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqEl-AXglI5UA6TbX7Mja0F4uBOuiJG5tXRdNF3oiGJMh3IjIz&random=2751339720 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 07:08:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 07:08:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.5	50929	151.101.2.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiVTA3Mjl5TnltSFFaVmx2eGJzbjBoZCIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:08 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5996 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-662a011a-48f7e17d299da0f31f67788b X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Thu, 25 Apr 2024 07:08:07 GMT Age: 62 X-Served-By: cache-pdk-kfty2130087-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714028888.958537,VS0,VE1 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 07:08:08 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.5	50923	52.30.32.26	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.5	50931	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	2522	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 98 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: U0729yNymHQZVlvxbsn0hd X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=06fab23a-91ff-4103-a8ec-c2731b986966..........; wt_lang=en-US; _gid=GA1.2.1979514058.1714028817; FPID=FPID2.2.yE2lDx4YRqwBTgc%2F%2BLJa7vPp6L7tcpYeQ1b%2Fg311rnc%3D.1714028817; __wtcm=CP9oCIAP9oCIAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1714028817880; __wtccpa=1YYY; auth_session_uuid=fc8d706f-5a3a-4212-b6cd-833348100cc9; _fbp=fb.1.1714028820410.1151239194; _gcl_au=1.1.2028829226.1714028821; FPAU=1.1.2028829226.1714028821; __td_signed=true; _pin_unauth=dWlkPVpUVTJNelF4WmpjdE4yWTNOeTAwWmpVeUxUbG1aak10TkRrNU9HUXdNamxsT0RZeg; _wt_snowplowses.0497=*; FPLC=sOLvmCRyIhxt5Z4i8fj1icdCwoV0xC0QHEInvTI0zQmF4IvcNi3GGm9uek7gZfccEwMuwv87n2NQwZtk8aaVc1sLOo6wYdGuPjrmgXyiBz3bgLiNBOueH%2BzzJNZtHA%3D%3D; sp=f850b167-800c-48d0-912d-956f588d119f; wt_trk=NAV_pricing; stickounet=1714028880.768.63.854384; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1714028816.1.1.1714028884.0.0.988032707; _ga=GA1.2.224122617.1714028817; _td=c4bbbf19-c5d2-4954-ad52-677ad15619f5; _uetsid=6a25a41002d211ef8919a929586b2cf1\|1x5ol3k\|2\|fl8\|0\|1576; _uetvid=6a25e15002d211ef85b29d2f0d6f657d\|sv246m\|1714028882292\|5\|1\|bat.bing.com/p/insights/c/a; _wt_snowplowid.0497=aea856b4-45d7-4d25-90ef-642b02d57292.1714028884347.0.1714028884347; _rdt_uuid=1714028821632.444fc1e4-0cc1-4519-a494-cf593bbb3225; amp_874b77=U0729yNymHQZVlvxbsn0hd...1hsa18f8m.1hsa1advh.1e.5.1j; _dd_s=rum=0&expire=1714029786151&logs=1&id=7433f30f-61eb-4f46-88a4-6f63aa5dc3a8&created=1714028821713&lock=10a864dc-3e20-47f0-a7c8-ff15092aeed9
2024-04-25 07:08:07 UTC	98	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 68 65 6c 70 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0,"tags":{"rating":"good","page_group":"/help","country":"US"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.5	50924	44.235.23.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 07:08:07 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 63 62 64 36 37 37 37 31 33 36 31 32 39 31 61 32 36 64 38 39 34 39 38 31 66 36 62 61 61 35 30 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 55 30 37 32 39 79 4e 79 6d 48 51 5a 56 6c 76 78 62 73 6e 30 68 64 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 34 30 32 38 38 38 36 30 30 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 35 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 34 30 32 38 38 32 31 37 38 32 25 32 43 25 32 32 Data Ascii: checksum=5cbd67771361291a26d894981f6baa50&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22U0729yNymHQZVlvxbsn0hd%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1714028886001%2C%22event_id%22%3A5%2C%22session_id%22%3A1714028821782%2C%22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.5	50933	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	898	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715049028875 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=4cd98913-3000-422a-b8a8-17ac56277efb&created=1714028834321&expire=1714029783142

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.5	50932	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	924	OUT	GET /ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1670838484;gtm=45h91e44n0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fhelp;u4=224122617.1714028817;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fhelp;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fhelp HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.5	50935	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	675	OUT	GET /rp.gif?ts=1714028885641&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=444fc1e4-0cc1-4519-a494-cf593bbb3225&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.5	50930	18.195.184.120	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 07:08:07 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1714028885125 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 747 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=f2cec79b-c9a8-4b67-8dfc-fba389d005f8
2024-04-25 07:08:07 UTC	747	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 61 65 61 38 35 36 62 34 2d 34 35 64 37 2d 34 64 32 35 2d 39 30 65 66 2d 36 34 32 62 30 32 64 35 37 32 39 32 22 2c 22 73 69 64 22 3a 22 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 63 34 62 62 62 66 31 39 2d 63 35 64 32 2d 34 39 35 34 2d 61 64 35 32 2d 36 37 37 61 64 31 35 36 31 39 66 35 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 32 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"aea856b4-45d7-4d25-90ef-642b02d57292","sid":"","td_version":"3.0.0","td_client_id":"c4bbbf19-c5d2-4954-ad52-677ad15619f5","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x102

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.5	50934	151.101.64.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.5	50937	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.5	50941	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.5	50942	151.101.194.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.5	50945	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.5	50948	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.5	50947	52.46.130.91	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.5	50952	151.101.129.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.5	50951	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.5	50950	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.5	50953	52.46.130.91	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.5	50954	151.101.192.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.5	50944	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.5	50956	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.5	50946	18.195.184.120	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.5	50957	157.240.14.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.5	50961	13.226.100.99	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.5	50599	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.5	50959	52.88.79.77	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.5	50955	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.5	50966	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.5	50965	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.5	50964	3.126.72.131	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.5	50958	44.235.23.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.5	50970	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.5	50977	151.101.193.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.5	50976	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.5	50983	151.101.0.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.5	50973	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.5	50974	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.5	50986	151.101.65.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.5	50975	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.5	50982	151.101.0.84	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.5	50984	151.101.65.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.5	50971	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.5	50979	44.198.210.177	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.5	50988	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.5	50989	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.5	50990	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.5	50980	130.211.115.4	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.5	50969	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.5	50991	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.5	50993	3.163.80.126	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.5	50995	13.33.4.47	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.5	50994	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.5	50978	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.5	50981	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.5	50999	31.13.88.13	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.5	51000	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.5	50998	209.54.182.161	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.5	50997	209.54.182.161	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.5	51002	3.214.158.55	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.5	50987	18.195.184.120	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.5	51004	151.101.65.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.5	51001	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.5	51005	172.253.124.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.5	51009	151.101.1.140	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.5	51011	13.226.100.80	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.5	51015	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.5	51017	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.5	51014	54.81.241.151	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.5	51016	44.198.210.177	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.5	51019	172.217.215.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.5	51020	74.125.138.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.5	51010	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.5	51021	3.163.80.52	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.5	51023	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.5	51012	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.5	51022	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.5	51006	54.189.132.192	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.5	51024	13.33.4.121	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.5	51025	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.5	51018	130.211.115.4	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.5	51003	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.5	51026	44.193.171.244	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.5	51028	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.5	51027	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.5	51031	64.233.177.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.5	51036	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.5	51035	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.5	51032	18.195.184.120	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.5	51038	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.5	51039	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.5	51040	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.5	51042	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.5	51041	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.5	51037	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.5	51043	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.5	51045	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.5	51046	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.5	51049	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.5	51050	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.5	51053	104.18.70.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.5	51051	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.5	51048	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.5	51052	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.5	51054	104.18.70.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.5	51056	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.5	51055	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.5	51059	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.5	51047	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.5	51061	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.5	51063	18.160.78.7	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.5	51058	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.5	51062	34.246.249.180	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.5	51064	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.5	51065	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.5	51057	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.5	51067	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.5	51068	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.5	51070	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.5	51071	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.5	51074	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.5	51072	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.5	51073	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.5	51069	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.5	51066	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.5	51077	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.5	51076	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.5	51075	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.5	51078	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.5	51079	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.5	51080	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.5	51081	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.5	51085	3.161.188.72	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.5	51086	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.5	51089	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.5	51092	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.5	51093	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.5	51090	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.5	51095	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.5	51094	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.5	51091	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.5	51101	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.5	51100	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.5	51104	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.5	51105	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.5	51106	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.5	51107	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.5	51108	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.5	51109	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.5	51099	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.5	51112	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.5	51113	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.5	51116	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.5	51122	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.5	51119	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.5	51118	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.5	51121	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.5	51117	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.5	51123	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.5	51120	209.204.230.47	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.5	51125	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.5	51126	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.5	50163	35.211.178.172	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.5	51130	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.5	51133	172.217.215.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.5	51132	52.71.236.203	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.5	51134	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.5	51128	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.5	51135	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.5	51136	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.5	51140	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.5	51141	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.5	51124	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.5	51143	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.5	51145	216.239.34.181	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.5	51146	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.5	51147	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.5	51150	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.5	51149	209.204.230.47	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.5	51142	35.211.178.172	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.5	51151	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.5	51152	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.5	51154	104.18.36.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.5	51153	142.250.9.148	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.5	51155	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.5	51156	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.5	51157	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.5	51158	108.177.122.103	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.5	51159	172.217.215.156	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.5	51161	34.98.64.218	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.5	51164	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.5	51165	104.16.53.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.5	51166	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.5	51169	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.5	51172	172.253.124.157	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.5	51171	216.239.34.181	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.5	51170	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.5	51162	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.5	51173	34.98.64.218	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.5	51175	64.233.177.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.5	51167	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.5	51180	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.5	51179	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.5	51181	34.98.64.218	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.5	51177	52.70.223.132	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.5	51183	107.23.238.117	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.5	51184	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.5	51185	31.13.66.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.5	51189	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.5	51188	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.5	51193	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.5	51190	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.5	51191	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.5	51192	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.5	51196	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.5	51194	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.5	51195	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.5	51197	74.125.136.154	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.5	51198	13.33.4.47	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.5	51199	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.5	51201	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.5	51203	172.217.215.105	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.5	51202	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.5	51205	104.18.70.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.5	51204	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.5	51207	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.5	51212	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.5	51206	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.5	51208	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.5	51210	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.5	51214	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.5	51215	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.5	51217	35.244.159.8	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1130	192.168.2.5	51216	104.16.51.111	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.5	51220	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.5	51222	31.13.88.35	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.5	51219	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.5	51223	74.125.136.155	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.5	51226	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.5	51225	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.5	51224	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.5	51211	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.5	51227	104.18.72.113	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.5	51229	13.33.4.121	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.5	51230	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.5	51228	35.236.220.17	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.5	51231	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.5	51235	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.5	51236	3.163.80.106	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.5	51241	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.5	51243	18.64.155.15	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.5	51245	34.149.135.19	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.5	51244	54.144.38.225	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.5	51234	52.212.176.246	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.5	51251	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.5	51240	52.223.40.198	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.5	51249	34.160.19.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.5	51252	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.5	51246	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.5	51247	192.132.33.69	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.5	51253	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.5	51248	35.214.226.31	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.5	51254	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.5	51255	3.231.143.107	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.5	51257	142.250.9.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.5	51259	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.5	51242	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.5	51260	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.5	51268	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.5	51267	52.21.237.79	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.5	51263	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.5	51262	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.5	51266	15.197.193.217	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.5	51275	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.5	51280	104.16.51.111	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.5	51279	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.5	51282	142.251.15.149	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.5	51270	34.253.35.38	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.5	51285	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.5	51281	34.250.238.125	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.5	51283	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.5	51289	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.5	51287	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.5	51290	54.158.106.27	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.5	51293	172.64.151.101	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.5	51294	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.5	51297	99.80.74.93	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.5	51300	54.158.106.27	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.5	51295	34.250.136.134	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.5	51301	52.210.6.56	443	6396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1187	192.168.2.5	51305	74.125.136.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1188	192.168.2.5	51304	52.210.6.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1189	192.168.2.5	51309	13.226.100.80	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	09:06:47
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:06:50
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:06:52
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:07:12
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6016 --field-trial-handle=2016,i,1738351667249229604,9916656833613684001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: Total embedded image size: 22182
Source: https://wetransfer.com/pricing?trk=NAV_pricing	HTTP Parser: Total embedded image size: 16996

Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715048975233	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a&google_gid=CAESEG_gxsiPJj6fH2PskJq3N8w&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6142091251808246355&ttd_tdid=adcfda1d-b31b-4940-83bb-df9046f5388a	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715064485338	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXklqFJkASJ69jFDJs76ppjN_AYALC_l1Ipk-Sb5pBaodZCN2NaHczaoQM3VB9oIXnP7W9Dnn9nhrbmnUNhnb09LbFxOw	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=194052&gdpr=0	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714527233754	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715020673250	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wetransfer/2211-refresh/static-2/1_GQft9D/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNVm21DdchzuhTI3w2O4kJshRz_Iz3lZr5Xlm3HX6h_oGBl5II93fcRo_lUur2vK2_QL0RYnlPPvVgV30Yl7ZEDq3nDcFQ	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715049028875	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1715069653329	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CPaKmgEQu7uAwwQY8fLxjAIwAQ&v=APEucNXSCIR4HnSAc2GWO61etzmBsqfQq1ss94ea6ktsirtHFoh3vMuIg2E-t8HFPGhnNrgdXgS_7SVYvQp8yI9xZ9yRnJP3og	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/dolce-and-gabbana/2404/static/1_yEBReB/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon

Source: chromecache_322.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/wetransfer/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_322.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_459.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"slug":"/","richText
Source: chromecache_459.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"slug":"/","richText
Source: chromecache_459.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"slug":"/","richText
Source: chromecache_613.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_289.2.dr, chromecache_336.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_289.2.dr, chromecache_405.2.dr, chromecache_336.2.dr, chromecache_748.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.107
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: cdn.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: tagging.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: public.profitwell.com
Source: global traffic	DNS traffic detected: DNS query: auth-session-caching.wetransfer.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.treasuredata.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: api.lab.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: eu01.in.treasuredata.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snowplow.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: e-10220.adzerk.net
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com
Source: global traffic	DNS traffic detected: DNS query: nolan.wetransfer.net
Source: global traffic	DNS traffic detected: DNS query: lebowski.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: cdn.brandmetrics.com
Source: global traffic	DNS traffic detected: DNS query: collector.brandmetrics.com
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: backgrounds.wetransfer.net
Source: global traffic	DNS traffic detected: DNS query: browser-intake-datadoghq.eu
Source: global traffic	DNS traffic detected: DNS query: prod-cdn.wetransfer.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: z.moatads.com
Source: global traffic	DNS traffic detected: DNS query: donny.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: d9.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: data.ad-score.com
Source: global traffic	DNS traffic detected: DNS query: tracker.samplicio.us
Source: global traffic	DNS traffic detected: DNS query: px.moatads.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: pixel.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: cdn.lamp.avct.cloud
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: measure.lamp.avct.cloud
Source: global traffic	DNS traffic detected: DNS query: static.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: a5594.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: cs.lkqd.net
Source: global traffic	DNS traffic detected: DNS query: dt.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: fw.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: dsum.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: a5574.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: frontsite-nextjs.wetransfer.net
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: casale-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: wetransfer.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: cdn.statuspage.io
Source: global traffic	DNS traffic detected: DNS query: sc26zwwp3c0r.statuspage.io
Source: global traffic	DNS traffic detected: DNS query: help.wetransfer.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: p18.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: theme.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: a5565.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Windows Analysis Report
https://wetransfer.com/downloads/b6dfab06fd59bf598e189ca24377f48220240424094155/a9b0be5f091948049e5d8dd105d582e620240424094228/f62e24?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid