Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
147s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
-
submitted
15/04/2024, 15:40 UTC
General
-
Target
https://we.tl/t-z7zfaCXd1p
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
86.121.5.213
Mutex
svchost
Attributes
-
delay
5000
-
install_path
temp
-
port
5243
-
startup_name
Realtek HD Audio
Signatures
-
XenorRat
XenorRat is a remote access trojan written in C#.
-
Downloads MZ/PE file
-
Executes dropped EXE 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
NTFS ADS 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 35 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
-
Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://we.tl/t-z7zfaCXd1p1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fffeac73cb8,0x7fffeac73cc8,0x7fffeac73cd82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1868 /prefetch:22⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3536 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6300 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5800 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4140 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Users\Admin\Downloads\svcmost.exe"C:\Users\Admin\Downloads\svcmost.exe"2⤵
- Executes dropped EXE
- NTFS ADS
-
C:\Users\Admin\AppData\Local\Temp\XenoManager\svcmost.exe"C:\Users\Admin\AppData\Local\Temp\XenoManager\svcmost.exe"3⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\schtasks.exe"schtasks.exe" /Create /TN "Realtek HD Audio" /XML "C:\Users\Admin\AppData\Local\Temp\tmpE85C.tmp" /F4⤵
- Creates scheduled task(s)
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1848,1424761502361063976,13898699557844767806,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2932 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004DC1⤵
- Suspicious use of AdjustPrivilegeToken
Network
-
DNSwe.tlRemote address:8.8.8.8:53Requestwe.tlIN AResponsewe.tlIN A18.165.160.34we.tlIN A18.165.160.65we.tlIN A18.165.160.105we.tlIN A18.165.160.55 -
DNSconfig.edge.skype.comRemote address:8.8.8.8:53Requestconfig.edge.skype.comIN AResponseconfig.edge.skype.comIN CNAMEconfig.edge.skype.com.trafficmanager.netconfig.edge.skype.com.trafficmanager.netIN CNAMEl-0007.config.skype.coml-0007.config.skype.comIN CNAMEconfig-edge-skype.l-0007.l-msedge.netconfig-edge-skype.l-0007.l-msedge.netIN CNAMEl-0007.l-msedge.netl-0007.l-msedge.netIN A13.107.42.16
-
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEwu-bg-shim.trafficmanager.netwu-bg-shim.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A23.14.90.82a767.dspw65.akamai.netIN A23.14.90.91
-
DNSwetransfer.comRemote address:8.8.8.8:53Requestwetransfer.comIN AResponsewetransfer.comIN A3.162.20.52wetransfer.comIN A3.162.20.121wetransfer.comIN A3.162.20.48wetransfer.comIN A3.162.20.20
-
DNS34.160.165.18.in-addr.arpaRemote address:8.8.8.8:53Request34.160.165.18.in-addr.arpaIN PTRResponse34.160.165.18.in-addr.arpaIN PTRserver-18-165-160-34man51r cloudfrontnet
-
DNS68.89.172.18.in-addr.arpaRemote address:8.8.8.8:53Request68.89.172.18.in-addr.arpaIN PTRResponse68.89.172.18.in-addr.arpaIN PTRserver-18-172-89-68man51r cloudfrontnet
-
DNS17.20.162.3.in-addr.arpaRemote address:8.8.8.8:53Request17.20.162.3.in-addr.arpaIN PTRResponse17.20.162.3.in-addr.arpaIN PTRserver-3-162-20-17man51r cloudfrontnet
-
DNS163.204.248.34.in-addr.arpaRemote address:8.8.8.8:53Request163.204.248.34.in-addr.arpaIN PTRResponse163.204.248.34.in-addr.arpaIN PTRec2-34-248-204-163 eu-west-1compute amazonawscom
-
DNSbat.bing.comRemote address:8.8.8.8:53Requestbat.bing.comIN AResponsebat.bing.comIN CNAMEbat-bing-com.dual-a-0034.a-msedge.netbat-bing-com.dual-a-0034.a-msedge.netIN CNAMEdual-a-0034.a-msedge.netdual-a-0034.a-msedge.netIN A204.79.197.237dual-a-0034.a-msedge.netIN A13.107.21.237
-
DNS98.201.58.216.in-addr.arpaRemote address:8.8.8.8:53Request98.201.58.216.in-addr.arpaIN PTRResponse98.201.58.216.in-addr.arpaIN PTRlhr48s48-in-f21e100net98.201.58.216.in-addr.arpaIN PTRprg03s02-in-f2�G98.201.58.216.in-addr.arpaIN PTRprg03s02-in-f98�G
-
DNS34.200.250.142.in-addr.arpaRemote address:8.8.8.8:53Request34.200.250.142.in-addr.arpaIN PTRResponse34.200.250.142.in-addr.arpaIN PTRlhr48s30-in-f21e100net
-
DNSekstrom.wetransfer.netRemote address:8.8.8.8:53Requestekstrom.wetransfer.netIN AResponseekstrom.wetransfer.netIN A54.76.94.58ekstrom.wetransfer.netIN A34.248.204.163ekstrom.wetransfer.netIN A52.30.32.26
-
DNS85.152.165.18.in-addr.arpaRemote address:8.8.8.8:53Request85.152.165.18.in-addr.arpaIN PTRResponse85.152.165.18.in-addr.arpaIN PTRserver-18-165-152-85man51r cloudfrontnet
-
DNS172.210.232.199.in-addr.arpaRemote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
DNSwe.tlRemote address:8.8.8.8:53Requestwe.tlIN AResponsewe.tlIN A18.165.160.34we.tlIN A18.165.160.65we.tlIN A18.165.160.105we.tlIN A18.165.160.55
-
DNSlogin.live.comRemote address:8.8.8.8:53Requestlogin.live.comIN AResponselogin.live.comIN CNAMElogin.msa.msidentity.comlogin.msa.msidentity.comIN CNAMEwww.tm.lg.prod.aadmsa.trafficmanager.netwww.tm.lg.prod.aadmsa.trafficmanager.netIN CNAMEprdv4a.aadg.msidentity.comprdv4a.aadg.msidentity.comIN CNAMEwww.tm.v4.a.prd.aadg.trafficmanager.netwww.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.17www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.76www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.136www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.140www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.22www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.72www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.133www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.74
-
DNSx.ss2.usRemote address:8.8.8.8:53Requestx.ss2.usIN AResponsex.ss2.usIN A54.230.10.36x.ss2.usIN A54.230.10.46x.ss2.usIN A54.230.10.22x.ss2.usIN A54.230.10.71
-
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
DNScdnjs.cloudflare.comRemote address:8.8.8.8:53Requestcdnjs.cloudflare.comIN AResponsecdnjs.cloudflare.comIN A104.17.25.14cdnjs.cloudflare.comIN A104.17.24.14
-
DNSpublic.profitwell.comRemote address:8.8.8.8:53Requestpublic.profitwell.comIN AResponsepublic.profitwell.comIN CNAMEdna8twue3dlxq.cloudfront.netdna8twue3dlxq.cloudfront.netIN A3.162.20.17dna8twue3dlxq.cloudfront.netIN A3.162.20.106dna8twue3dlxq.cloudfront.netIN A3.162.20.117dna8twue3dlxq.cloudfront.netIN A3.162.20.122
-
DNSapi.lab.amplitude.comRemote address:8.8.8.8:53Requestapi.lab.amplitude.comIN AResponseapi.lab.amplitude.comIN CNAMEamplitude.map.fastly.netamplitude.map.fastly.netIN A151.101.2.132amplitude.map.fastly.netIN A151.101.66.132amplitude.map.fastly.netIN A151.101.130.132amplitude.map.fastly.netIN A151.101.194.132
-
DNS1.42.161.35.in-addr.arpaRemote address:8.8.8.8:53Request1.42.161.35.in-addr.arpaIN PTRResponse1.42.161.35.in-addr.arpaIN PTRec2-35-161-42-1 us-west-2compute amazonawscom
-
DNSgoogleads.g.doubleclick.netRemote address:8.8.8.8:53Requestgoogleads.g.doubleclick.netIN AResponsegoogleads.g.doubleclick.netIN A142.250.200.34
-
DNSwww.facebook.comRemote address:8.8.8.8:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A157.240.221.35
-
DNS36.81.224.13.in-addr.arpaRemote address:8.8.8.8:53Request36.81.224.13.in-addr.arpaIN PTRResponse36.81.224.13.in-addr.arpaIN PTRserver-13-224-81-36man50r cloudfrontnet
-
DNSdonny.wetransfer.comRemote address:8.8.8.8:53Requestdonny.wetransfer.comIN AResponsedonny.wetransfer.comIN A99.80.201.152donny.wetransfer.comIN A54.74.216.13donny.wetransfer.comIN A52.212.176.246
-
DNS43.10.230.54.in-addr.arpaRemote address:8.8.8.8:53Request43.10.230.54.in-addr.arpaIN PTRResponse43.10.230.54.in-addr.arpaIN PTRserver-54-230-10-43man50r cloudfrontnet
-
GEThttps://we.tl/t-z7zfaCXd1pRemote address:18.165.160.34:443RequestGET /t-z7zfaCXd1p HTTP/1.1
Host: we.tl
Connection: keep-alive
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
ResponseHTTP/1.1 302 Moved Temporarily
Content-Type: text/html;charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: public, max-age=3600
Date: Mon, 15 Apr 2024 15:40:21 GMT
Expires: Mon, 15 Apr 2024 16:40:21 GMT
Location: https://wetransfer.com/downloads/cb717fe03a6260c7b81934e3f27170c520240415153456/77cc2c
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-request-id: 1c02a7510d201c20cc5192aae240dcce
x-xss-protection: 1; mode=block
X-Cache: Miss from cloudfront
Via: 1.1 5221344f73a937792e966fb661a9874e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAN51-P2
X-Amz-Cf-Id: 7uXbZQWbkkXxoTvi9gIoZsTn8qgaD_oNZ-N0MXHwak4TIs1Cf7e68A==
-
GEThttps://wetransfer.com/downloads/cb717fe03a6260c7b81934e3f27170c520240415153456/77cc2cRemote address:3.162.20.52:443RequestGET /downloads/cb717fe03a6260c7b81934e3f27170c520240415153456/77cc2c HTTP/2.0
host: wetransfer.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html; charset=utf-8
content-length: 3940
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:22 GMT
etag: "27b7-2FrvbH7ELWBtyvEU9MjXtHjgsgo"
referrer-policy: strict-origin-when-cross-origin
set-cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.; Max-Age=63072000; Domain=.wetransfer.com; Path=/
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HnAa63XTHmuwLSQuNx_EPcK3wzfERTHei3HanqthYn5x87DD0dSTGA==
-
GEThttps://wetransfer.com/07b66b45ed8c929bdda318bac89063954bb0a641/config.jsRemote address:3.162.20.52:443RequestGET /07b66b45ed8c929bdda318bac89063954bb0a641/config.js HTTP/2.0
host: wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=315360000, s-maxage=31530000
date: Mon, 15 Apr 2024 14:10:41 GMT
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4pT2Vq3C3v5Ttdf_QM79AiEFKpqVI-OAmFvq2L10Bl7eq-jq0T2TTQ==
age: 5381
-
GEThttps://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.cssRemote address:3.162.20.52:443RequestGET /_next/static/css/9b20a0eebcdc95f1.css HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Fri, 15 Sep 2023 19:52:46 GMT
last-modified: Fri, 15 Sep 2023 14:48:07 GMT
etag: W/"0d42cbc6f4575509a4b48ab8458f42a8"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: V8M3LcjMlENLO3RzJq7DPS16FF3SoMfZRFBnrdTh9SWLh-Ktctzqdw==
age: 18388057
-
GEThttps://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.cssRemote address:3.162.20.52:443RequestGET /_next/static/css/bacf6ffa65b559f2.css HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/css
date: Mon, 08 Apr 2024 15:00:17 GMT
last-modified: Mon, 08 Apr 2024 14:55:32 GMT
etag: W/"a8dababeca6bb25bf1adabec1826e87c"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wxg1fx3PHm3KQXqvwDNRz5SijcIc5f9wwngarVFn8FwaU_GjcAkpTg==
age: 607206
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Fri, 15 Sep 2023 19:52:46 GMT
last-modified: Fri, 15 Sep 2023 14:48:07 GMT
etag: W/"810b8db8296df1f82a3ddecef6ac0832"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tAfMKnA5dXC_YqYmcOwYN2R9caIRB9VsSewRSfcdLTWNQVpjhONmPQ==
age: 18388057
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/css
date: Wed, 13 Sep 2023 23:58:55 GMT
last-modified: Wed, 13 Sep 2023 21:13:21 GMT
etag: W/"7bc594d2f21c7b14c2bbb8ea785276a0"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: xpfMmyG_9kgV0ShxWXx_FJjC67ej3Dd8xx8zlmNgZG6AZ81pYBVZig==
age: 18546088
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/webpack-81b98aafeddc9bcd.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/webpack-81b98aafeddc9bcd.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Mon, 15 Apr 2024 09:55:26 GMT
last-modified: Mon, 15 Apr 2024 09:38:51 GMT
etag: W/"b64e4c6cdc591d3b249133abfbe7a56b"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XVzdlEWG4LcaufW9fdelFOcZArXtcOH-iMTddbGyEPCAn3gAUOK4Rw==
age: 20697
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 21 Sep 2023 15:15:57 GMT
last-modified: Thu, 21 Sep 2023 15:12:05 GMT
etag: W/"daff3ef8f54d4473d8048108fb36e699"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2bfWzTYlYsEtK7GC6rhak1J45awS7JpWf2EdAV_X_xBUlAYwd5vl1Q==
age: 17886266
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/404-6b4e9049f68ed7bb.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/404-6b4e9049f68ed7bb.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:20:14 GMT
etag: W/"a6dea26dfd8db672975daac854b60bcb"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Lhw4AUcGg0Y6tU4hBMY9nlHHnIsnGHhmRNYBETqmaq0yzovcrteXaw==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Wed, 13 Sep 2023 09:34:22 GMT
last-modified: Tue, 12 Sep 2023 17:54:04 GMT
etag: W/"65123faaba2e6ce6af74685759b7c08a"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sHbu3oUDm4vOSkZ8uVnGzDUkGH-oEgtLsz_dgzxdEu5jPb-ZaP_uzQ==
age: 18597961
-
GEThttps://cdn.wetransfer.com/_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_buildManifest.jsRemote address:3.162.20.52:443RequestGET /_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_buildManifest.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Mon, 15 Apr 2024 14:10:42 GMT
last-modified: Mon, 15 Apr 2024 12:57:19 GMT
etag: W/"a9d2eff0d6dfb50b7ce9ee7dddab623f"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 9nz8QN4XmZJhhNFhdQLFXESdgR2G6VzlW5E-Pt5L3hFVbx3xJ4HDEQ==
age: 5381
-
GEThttps://cdn.wetransfer.com/_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_ssgManifest.jsRemote address:3.162.20.52:443RequestGET /_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_ssgManifest.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
content-length: 77
date: Mon, 15 Apr 2024 14:10:42 GMT
last-modified: Mon, 15 Apr 2024 12:57:19 GMT
etag: "b6652df95db52feb4daf4eca35380933"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4s8hKIabbpoomk2_89sIuWMVVK_BhmihVqjIKUeZDketZyIuNyLJcQ==
age: 5381
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/dde21195-2697a3889c46ad74.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Fri, 15 Sep 2023 19:52:47 GMT
last-modified: Fri, 15 Sep 2023 14:48:07 GMT
etag: W/"02cd96af1fe12399200b70e7bf8fa6cd"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TWFNhrpwq_wBCktOHpoLC8rnEdGxUfmkvRQqGdZhEd7nWG5YIcwohg==
age: 18388056
-
GEThttps://cdn.wetransfer.com/_next/static/css/1a9f02d9a26a40a5.cssRemote address:3.162.20.52:443RequestGET /_next/static/css/1a9f02d9a26a40a5.css HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 29 Feb 2024 14:32:57 GMT
last-modified: Thu, 29 Feb 2024 13:38:02 GMT
etag: W/"633a43876f294113b67a16bac7c21511"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OUc0f0duAjdQ-8yW7w2bdOkmNM7oNOQRMD2MZaymTbDBgUd8DSpGgA==
age: 3978446
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/css
date: Mon, 08 Apr 2024 15:00:17 GMT
last-modified: Mon, 08 Apr 2024 14:45:04 GMT
etag: W/"49ad1eeb1cb6d478cdfa5f9f528262e2"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: WKloGfqyHkMvENebonQpx3EibrYWqdQ-JckBx6IKixfQAC5XDb3uPg==
age: 607205
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/955cc3f7.47e52b23a8132ed3.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Sat, 23 Sep 2023 02:07:57 GMT
last-modified: Fri, 22 Sep 2023 19:02:21 GMT
etag: W/"a9c492a1d32ed448859a2734294d8df6"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zxCoFK9mIr5NX7L8ZbO_No1erkavdZsKDvxy84bcnOYypgu4iaUeMQ==
age: 17760746
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/2edb282b.45c56c19221816df.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Sun, 17 Sep 2023 18:26:28 GMT
last-modified: Fri, 15 Sep 2023 14:48:07 GMT
etag: W/"0117ded66314d5d48929f64d97591068"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aEiJ-ohj7U7Xgzjo9YrHMUhVwORe9JOkQSrsNH1kuuQOswObukOJNQ==
age: 18220435
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.6727ee0cc1a539c4.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/1b6d7d6a.6727ee0cc1a539c4.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Sun, 17 Sep 2023 18:26:28 GMT
last-modified: Fri, 15 Sep 2023 14:48:06 GMT
etag: W/"42eaceaa10ced1bc091c1d9097c4897f"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nOhtD1hLQOYkh9Zpb7FUK3iI6OLEumYTjjGSCNrH6kss4qie-ChraA==
age: 18220435
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Tue, 09 Apr 2024 09:46:59 GMT
last-modified: Tue, 09 Apr 2024 09:43:27 GMT
etag: W/"30c77f1c465ffebc4a34178e9e87e6b9"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: q4jobbE32xhUOWClLZrRWEMZPYwsSRuKRKL1oQxW6tYZJhrxSaO4Dw==
age: 539604
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/2937.ff7cfe890d9fb17f.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/2937.ff7cfe890d9fb17f.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:20:14 GMT
etag: W/"7077e697ab6373d9d7502cc2a69edd04"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: x0p51ZLW6jgn7FDIwkjWgIa6onyU7IFHP1Vjw91JZ6czcw-gMTjhRw==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/5835-96da9b631b005695.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/5835-96da9b631b005695.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:20:15 GMT
etag: W/"17450fd9ee829d9230f81932680b2861"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8pOmQGYTo7s-lyv5qV1qGXBcYCIXevYYN5W3Yw48EdwM0EDAx5cuvA==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/8251.0db96b116ec6e272.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/8251.0db96b116ec6e272.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: text/javascript
date: Mon, 15 Apr 2024 09:55:26 GMT
last-modified: Mon, 15 Apr 2024 09:38:48 GMT
etag: W/"77a9e2081edf061550f1575c962b2397"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ezWChYS4jwBwQncNDlxqP_n8ek1cMdEl3zgJMY--cPAeOkcwr3mZVg==
age: 20697
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/8745.743a269fbc05ea1f.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:46 GMT
last-modified: Thu, 11 Apr 2024 09:49:17 GMT
etag: W/"6095c9597989539e31fb82efbb0997a8"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Xtw9hz-2hlu93B4arxr4TlcAWdZoPuoj1nH-UBupRH0CEggRA6d__A==
age: 353557
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/03a1f34a.cb7471b34076195a.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:49:15 GMT
etag: W/"5439e51f20378de7d73ba350c0b4b85b"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5KjuCnMhTNJ4K-W_u6qsvEjlp8U8MvYbAQb0jLXeGyZNpeHTPFVc9Q==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/e893f787.529ff2dd2d297b89.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:49:17 GMT
etag: W/"43a224ce59e07ead9cbb9a19231868d2"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: axKlIqcj_yYbWhj1z26ydYjpsoBW2VyiIZeQqgdi-2RjgWyk5sCyrg==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/1627.f2cf297cefb46766.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: text/javascript
date: Thu, 11 Apr 2024 13:27:40 GMT
last-modified: Thu, 11 Apr 2024 09:49:15 GMT
etag: W/"84a46d0b6196ffa368647e975120e17b"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XA6OcwO2RBI1kGICA8ty4_eF_ui8_bm99dhBtp_Vb_SBFu4mnZxMJg==
age: 353563
-
GEThttps://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.jsRemote address:3.162.20.52:443RequestGET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: text/javascript
content-length: 179
date: Thu, 11 Apr 2024 13:28:22 GMT
last-modified: Thu, 11 Apr 2024 09:49:17 GMT
etag: "67fa077ba9aac616309835ec3d822dbb"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vJpFHRtGNBojFjWa4GOCuZepO6qsMlQt6NQJNpLyN4J8GdJyD5o9rQ==
age: 353522
-
POSThttps://wetransfer.com/api/graphqlRemote address:3.162.20.52:443RequestPOST /api/graphql HTTP/2.0
host: wetransfer.com
content-length: 448
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/graphql+json, application/json
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: image/png
content-length: 521659
date: Fri, 15 Sep 2023 20:23:37 GMT
last-modified: Fri, 15 Sep 2023 14:48:10 GMT
etag: "5dd551d541f9c72bfa4ed8621d46908d"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: JwNng1FxHYVwFitWT6FHZwWveEvKiC-8UPzJ4oeWH_v4Jcm6gylv8A==
age: 18386207
-
GEThttps://cdn.wetransfer.com/_next/static/media/cookie-wall-trees.c260a47c.pngRemote address:3.162.20.52:443RequestGET /_next/static/media/cookie-wall-trees.c260a47c.png HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cdn.wetransfer.com/_next/static/css/1a9f02d9a26a40a5.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-origin: https://wetransfer.com
access-control-expose-headers:
access-control-max-age: 0
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:23 GMT
etag: W/"b53530c7c85593a1d1e6334b003c4ea9"
referrer-policy: strict-origin-when-cross-origin
set-cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003; domain=.wetransfer.com; path=/; expires=Wed, 15 Apr 2026 15:40:23 GMT; secure
set-cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........; domain=.wetransfer.com
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding, Origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-opaque: 6fd7e672c8ab6167c0876673e1eaeddf9720e06b-zhz7h-22699
x-permitted-cross-domain-policies: none
x-request-id: 40bb5d8ad8ac68885b707cd94c1994d5
x-runtime: 0.006908
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uiNQXQVxKBJVJuEqwux5KEntmq4pDatGLX1dxFMi_4DZrXlKa6AjkA==
-
GEThttps://wetransfer.com/favicon.icoRemote address:3.162.20.52:443RequestGET /favicon.ico HTTP/2.0
host: wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.0.1713195622.0.0.498271710
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
ResponseHTTP/2.0 200
content-type: image/x-icon
accept-ranges: bytes
cache-control: public, max-age=0
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:23 GMT
last-modified: Mon, 15 Apr 2024 12:52:32 GMT
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
etag: W/"a25e-18ee1d0f680"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: myr7-Qf-rfV2v-kq-8YUYIIkRJuGs-j0fIpAZGtf9DGKvQ2IqQSowg==
-
POSThttps://wetransfer.com/api/web-metricsRemote address:3.162.20.52:443RequestPOST /api/web-metrics HTTP/2.0
host: wetransfer.com
content-length: 117
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/json, text/plain, */*
x-amplitude-platform: Web
x-amplitude-device-id: 4nTKqtgCoeE_ECWe9EClTQ
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........
cookie: wt_lang=en-US
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.0.1713195622.0.0.498271710
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _dd_s=logs=1&id=420fc2e0-b925-4e48-bd9b-af2a113f01d4&created=1713195622924&expire=1713196522925
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l8hg.0.1.1
ResponseHTTP/2.0 200
content-type: application/json; charset=utf-8
content-length: 55
date: Mon, 15 Apr 2024 15:40:24 GMT
etag: "37-oVde9EThsAcnf99BielY1kNaySw"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uHGpBC2Bh-dudRbFhU5T8_wmB7jna14Cx8u5IySq0TsAaUjsxXMUkw==
-
GEThttps://cdn.wetransfer.com/_next/static/media/core-shape.cde027dc.svgRemote address:3.162.20.52:443RequestGET /_next/static/media/core-shape.cde027dc.svg HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.0.1713195622.0.0.498271710
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l94r.5.1.6
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 485
date: Thu, 21 Sep 2023 15:39:41 GMT
last-modified: Thu, 21 Sep 2023 15:12:07 GMT
etag: "9c5640120e49affc48fe61cda0b5b08d"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dtWfg4cSqMLZNDgfBqE3zrtWlhn5td2tkBkhPcyUHNOoLHNf9ljiFg==
age: 17884845
-
POSThttps://wetransfer.com/api/web-metricsRemote address:3.162.20.52:443RequestPOST /api/web-metrics HTTP/2.0
host: wetransfer.com
content-length: 95
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/json, text/plain, */*
x-amplitude-platform: Web
x-amplitude-device-id: 4nTKqtgCoeE_ECWe9EClTQ
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9uv.b.1.c
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: _dd_s=logs=1&id=420fc2e0-b925-4e48-bd9b-af2a113f01d4&created=1713195622924&expire=1713196524481&rum=0
ResponseHTTP/2.0 200
content-type: application/json; charset=utf-8
content-length: 46
date: Mon, 15 Apr 2024 15:40:25 GMT
etag: "2e-39YUiQSGtORZHsvS7VXQrAXD/Ag"
referrer-policy: strict-origin-when-cross-origin
set-cookie: _wt_snowplowid.0497=e63430fa-48f4-4354-9371-4cc72ad23c2a.1713195625941.0.1713195625941.; Max-Age=63072000; Domain=.wetransfer.com; Path=/
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ppeP2YWcd0hk02qmlsbGg9xbOeLJ92MhD_KaMhGlwuHMr9wCNJ4dUQ==
-
POSThttps://wetransfer.com/api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/prepare-downloadRemote address:3.162.20.52:443RequestPOST /api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/prepare-download HTTP/2.0
host: wetransfer.com
content-length: 26
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/json, text/plain, */*
x-amplitude-platform: Web
x-amplitude-device-id: 4nTKqtgCoeE_ECWe9EClTQ
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9uv.b.1.c
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: __td_signed=true
cookie: _td=bdd68b38-700f-4481-9cdd-6d07c5aff998
cookie: _fbp=fb.1.1713195624898.1343485940
cookie: _uetsid=79f3e550fb3e11ee9db9d3e6debb9151|1bppdk9|2|fky|0|1566
cookie: _uetvid=79f434a0fb3e11eeb67f8b71bde4f333|1t6bqj|1713195625251|1|1|bat.bing.com/p/insights/c/h
cookie: _dd_s=logs=1&id=420fc2e0-b925-4e48-bd9b-af2a113f01d4&created=1713195622924&expire=1713196525787&rum=0
cookie: wt_tandc=20240117%3A1
ResponseHTTP/2.0 200
content-type: application/json
content-length: 432
access-control-allow-credentials: true
access-control-allow-methods: POST, PUT, PATCH, GET, DELETE
access-control-allow-origin: https://wetransfer.com
access-control-expose-headers:
access-control-max-age: 0
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:27 GMT
etag: W/"33793878543f1df89193c087fa692d9c"
set-cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ..........; domain=.wetransfer.com
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-frame-options: deny
x-opaque: 6fd7e672c8ab6167c0876673e1eaeddf9720e06b-rgkd5-56262
x-request-id: ef2b64f65198697bf94b3ea23eeefae6
x-runtime: 0.017807
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sjGJG4FKg1fZxB6bJc2Q0L8gD_1RxlPNGzRUgaSNzBi_JmbEFlS34A==
-
POSThttps://wetransfer.com/api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/downloadRemote address:3.162.20.52:443RequestPOST /api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/download HTTP/2.0
host: wetransfer.com
content-length: 167
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/json, text/plain, */*
x-amplitude-platform: Web
x-amplitude-device-id: 4nTKqtgCoeE_ECWe9EClTQ
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ..........
cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: __td_signed=true
cookie: _td=bdd68b38-700f-4481-9cdd-6d07c5aff998
cookie: _fbp=fb.1.1713195624898.1343485940
cookie: _uetsid=79f3e550fb3e11ee9db9d3e6debb9151|1bppdk9|2|fky|0|1566
cookie: _uetvid=79f434a0fb3e11eeb67f8b71bde4f333|1t6bqj|1713195625251|1|1|bat.bing.com/p/insights/c/h
cookie: wt_tandc=20240117%3A1
cookie: _dd_s=logs=1&id=420fc2e0-b925-4e48-bd9b-af2a113f01d4&created=1713195622924&expire=1713196527470&rum=0
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6lcum.c.1.d
ResponseHTTP/2.0 200
content-type: application/json
content-length: 384
access-control-allow-credentials: true
access-control-allow-methods: POST, PUT, PATCH, GET, DELETE
access-control-allow-origin: https://wetransfer.com
access-control-expose-headers:
access-control-max-age: 0
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:28 GMT
etag: W/"2764dd7454fdd74218ef23c2a5098a3e"
set-cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ..........; domain=.wetransfer.com
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-frame-options: deny
x-opaque: 6fd7e672c8ab6167c0876673e1eaeddf9720e06b-qpg5f-22281
x-request-id: 082dd73e6092216db0b8cc0074a8f9c2
x-runtime: 0.056441
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: mLBpVh7gG0U6XvVAV4l4VMUZQ6dM_jpM0GDBjfin5Dz9RXqSrdwHKQ==
-
POSThttps://wetransfer.com/api/web-metricsRemote address:3.162.20.52:443RequestPOST /api/web-metrics HTTP/2.0
host: wetransfer.com
content-length: 107
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
x-amplitude-language: en-US
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: application/json, text/plain, */*
x-amplitude-platform: Web
x-amplitude-device-id: 4nTKqtgCoeE_ECWe9EClTQ
x-amplitude-country: GB
x-app-origin: decoupled
origin: https://wetransfer.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: amp_874b77=66c927a1-1fd8-4f8f-94da-cc430f3e2035..........
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: __td_signed=true
cookie: _td=bdd68b38-700f-4481-9cdd-6d07c5aff998
cookie: _fbp=fb.1.1713195624898.1343485940
cookie: _uetsid=79f3e550fb3e11ee9db9d3e6debb9151|1bppdk9|2|fky|0|1566
cookie: _uetvid=79f434a0fb3e11eeb67f8b71bde4f333|1t6bqj|1713195625251|1|1|bat.bing.com/p/insights/c/h
cookie: wt_tandc=20240117%3A1
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6lcum.c.1.d
cookie: wt_downloaded=1
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195627.0.0.498271710
cookie: _dd_s=logs=1&id=420fc2e0-b925-4e48-bd9b-af2a113f01d4&created=1713195622924&expire=1713196527470&rum=0
ResponseHTTP/2.0 200
content-type: application/json; charset=utf-8
content-length: 58
date: Mon, 15 Apr 2024 15:40:37 GMT
etag: "3a-Hyc8xQeN8nwiv81FhFdjMS39Te4"
referrer-policy: strict-origin-when-cross-origin
set-cookie: _wt_snowplowid.0497=920294bd-4984-401a-9510-bc43fe3aa8b0.1713195637009.0.1713195637009.; Max-Age=63072000; Domain=.wetransfer.com; Path=/
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1dc8492dd1b0b02885c719ffa2b4ec54.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BWCoKTkdnX1iWImne606pzaKVzaEplS1duWIEekASZ-1nKy3jl-e8A==
-
DNS17.160.190.20.in-addr.arpaRemote address:8.8.8.8:53Request17.160.190.20.in-addr.arpaIN PTRResponse
-
DNScdn.wetransfer.comRemote address:8.8.8.8:53Requestcdn.wetransfer.comIN AResponsecdn.wetransfer.comIN A3.162.20.52cdn.wetransfer.comIN A3.162.20.48cdn.wetransfer.comIN A3.162.20.121cdn.wetransfer.comIN A3.162.20.20
-
DNS14.25.17.104.in-addr.arpaRemote address:8.8.8.8:53Request14.25.17.104.in-addr.arpaIN PTRResponse
-
DNSauth-session-caching.wetransfer.netRemote address:8.8.8.8:53Requestauth-session-caching.wetransfer.netIN AResponseauth-session-caching.wetransfer.netIN A34.248.204.163auth-session-caching.wetransfer.netIN A52.30.32.26auth-session-caching.wetransfer.netIN A54.76.94.58
-
DNSsecure.globalsign.comRemote address:8.8.8.8:53Requestsecure.globalsign.comIN AResponsesecure.globalsign.comIN CNAMEglobal.prd.cdn.globalsign.comglobal.prd.cdn.globalsign.comIN CNAMEcdn.globalsigncdn.com.cdn.cloudflare.netcdn.globalsigncdn.com.cdn.cloudflare.netIN A104.18.21.226cdn.globalsigncdn.com.cdn.cloudflare.netIN A104.18.20.226
-
DNSpagead2.googlesyndication.comRemote address:8.8.8.8:53Requestpagead2.googlesyndication.comIN AResponsepagead2.googlesyndication.comIN A216.58.201.98
-
DNSconnect.facebook.netRemote address:8.8.8.8:53Requestconnect.facebook.netIN AResponseconnect.facebook.netIN CNAMEscontent.xx.fbcdn.netscontent.xx.fbcdn.netIN A157.240.221.16
-
DNSnolan.wetransfer.netRemote address:8.8.8.8:53Requestnolan.wetransfer.netIN AResponsenolan.wetransfer.netIN A18.172.89.12nolan.wetransfer.netIN A18.172.89.114nolan.wetransfer.netIN A18.172.89.112nolan.wetransfer.netIN A18.172.89.17
-
DNS16.221.240.157.in-addr.arpaRemote address:8.8.8.8:53Request16.221.240.157.in-addr.arpaIN PTRResponse16.221.240.157.in-addr.arpaIN PTRxx-fbcdn-shv-01-lhr8fbcdnnet
-
DNSsafety.wetransfer.comRemote address:8.8.8.8:53Requestsafety.wetransfer.comIN AResponsesafety.wetransfer.comIN A54.74.216.13safety.wetransfer.comIN A99.80.201.152safety.wetransfer.comIN A52.212.176.246
-
DNSprod-cdn.wetransfer.netRemote address:8.8.8.8:53Requestprod-cdn.wetransfer.netIN AResponseprod-cdn.wetransfer.netIN A13.33.52.26prod-cdn.wetransfer.netIN A13.33.52.71prod-cdn.wetransfer.netIN A13.33.52.12prod-cdn.wetransfer.netIN A13.33.52.47
-
DNSwetransfer.comRemote address:8.8.8.8:53Requestwetransfer.comIN AResponsewetransfer.comIN A3.162.20.52wetransfer.comIN A3.162.20.48wetransfer.comIN A3.162.20.121wetransfer.comIN A3.162.20.20
-
DNS82.90.14.23.in-addr.arpaRemote address:8.8.8.8:53Request82.90.14.23.in-addr.arpaIN PTRResponse82.90.14.23.in-addr.arpaIN PTRa23-14-90-82deploystaticakamaitechnologiescom
-
DNStagging.wetransfer.comRemote address:8.8.8.8:53Requesttagging.wetransfer.comIN AResponsetagging.wetransfer.comIN A18.172.89.68tagging.wetransfer.comIN A18.172.89.104tagging.wetransfer.comIN A18.172.89.128tagging.wetransfer.comIN A18.172.89.52
-
DNSwww.google-analytics.comRemote address:8.8.8.8:53Requestwww.google-analytics.comIN AResponsewww.google-analytics.comIN A142.250.179.238
-
DNSapi.amplitude.comRemote address:8.8.8.8:53Requestapi.amplitude.comIN AResponseapi.amplitude.comIN A35.161.42.1api.amplitude.comIN A34.212.45.0api.amplitude.comIN A35.155.145.237api.amplitude.comIN A35.165.225.238api.amplitude.comIN A34.209.159.134api.amplitude.comIN A54.149.37.245api.amplitude.comIN A54.185.3.142api.amplitude.comIN A52.88.74.24
-
DNS226.21.18.104.in-addr.arpaRemote address:8.8.8.8:53Request226.21.18.104.in-addr.arpaIN PTRResponse
-
DNSe-10220.adzerk.netRemote address:8.8.8.8:53Requeste-10220.adzerk.netIN AResponsee-10220.adzerk.netIN CNAMEe-10220-us-east-1.adzerk.nete-10220-us-east-1.adzerk.netIN CNAMEe-prod-alb-s105-us-east-1-01.adzerk.nete-prod-alb-s105-us-east-1-01.adzerk.netIN A18.204.80.181e-prod-alb-s105-us-east-1-01.adzerk.netIN A34.199.223.244e-prod-alb-s105-us-east-1-01.adzerk.netIN A54.164.141.9
-
DNSlebowski.wetransfer.comRemote address:8.8.8.8:53Requestlebowski.wetransfer.comIN AResponselebowski.wetransfer.comIN A52.212.176.246lebowski.wetransfer.comIN A99.80.201.152lebowski.wetransfer.comIN A54.74.216.13
-
DNS181.80.204.18.in-addr.arpaRemote address:8.8.8.8:53Request181.80.204.18.in-addr.arpaIN PTRResponse181.80.204.18.in-addr.arpaIN PTRec2-18-204-80-181 compute-1 amazonawscom
-
DNS28.2.50.20.in-addr.arpaRemote address:8.8.8.8:53Request28.2.50.20.in-addr.arpaIN PTRResponse
-
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEwu-bg-shim.trafficmanager.netwu-bg-shim.trafficmanager.netIN CNAMEbg.microsoft.map.fastly.netbg.microsoft.map.fastly.netIN A199.232.210.172bg.microsoft.map.fastly.netIN A199.232.214.172
-
DNS36.10.230.54.in-addr.arpaRemote address:8.8.8.8:53Request36.10.230.54.in-addr.arpaIN PTRResponse36.10.230.54.in-addr.arpaIN PTRserver-54-230-10-36man50r cloudfrontnet
-
DNS52.20.162.3.in-addr.arpaRemote address:8.8.8.8:53Request52.20.162.3.in-addr.arpaIN PTRResponse52.20.162.3.in-addr.arpaIN PTRserver-3-162-20-52man51r cloudfrontnet
-
DNS238.179.250.142.in-addr.arpaRemote address:8.8.8.8:53Request238.179.250.142.in-addr.arpaIN PTRResponse238.179.250.142.in-addr.arpaIN PTRlhr25s31-in-f141e100net
-
DNS132.2.101.151.in-addr.arpaRemote address:8.8.8.8:53Request132.2.101.151.in-addr.arpaIN PTRResponse
-
DNSc.amazon-adsystem.comRemote address:8.8.8.8:53Requestc.amazon-adsystem.comIN AResponsec.amazon-adsystem.comIN CNAMEd1ykf07e75w7ss.cloudfront.netd1ykf07e75w7ss.cloudfront.netIN A3.162.21.19
-
DNSeu01.in.treasuredata.comRemote address:8.8.8.8:53Requesteu01.in.treasuredata.comIN AResponseeu01.in.treasuredata.comIN A18.195.184.120eu01.in.treasuredata.comIN A35.156.125.55
-
DNS19.21.162.3.in-addr.arpaRemote address:8.8.8.8:53Request19.21.162.3.in-addr.arpaIN PTRResponse19.21.162.3.in-addr.arpaIN PTRserver-3-162-21-19man51r cloudfrontnet
-
DNSbackgrounds.wetransfer.netRemote address:8.8.8.8:53Requestbackgrounds.wetransfer.netIN AResponsebackgrounds.wetransfer.netIN A54.230.10.43backgrounds.wetransfer.netIN A54.230.10.100backgrounds.wetransfer.netIN A54.230.10.88backgrounds.wetransfer.netIN A54.230.10.116
-
DNS152.201.80.99.in-addr.arpaRemote address:8.8.8.8:53Request152.201.80.99.in-addr.arpaIN PTRResponse152.201.80.99.in-addr.arpaIN PTRec2-99-80-201-152 eu-west-1compute amazonawscom
-
DNSdonny.wetransfer.comRemote address:8.8.8.8:53Requestdonny.wetransfer.comIN AResponsedonny.wetransfer.comIN A99.80.201.152donny.wetransfer.comIN A52.212.176.246donny.wetransfer.comIN A54.74.216.13
-
GEThttps://tagging.wetransfer.com/gtm.js?id=GTM-NS54WBWRemote address:18.172.89.68:443RequestGET /gtm.js?id=GTM-NS54WBW HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=900
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:22 GMT
expires: Mon, 15 Apr 2024 15:54:31 GMT
last-modified: Mon, 15 Apr 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: 29PExjvPNiRKqu5il_avG1JuVTP7wfv94ZgD5nbwdTPDKlhzonPfQg==
-
GEThttps://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=415f5fda45a36041d47112895c768bad4a26fe5d66d5d1688b491731821d7d0d_20240415Remote address:18.172.89.68:443RequestGET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=415f5fda45a36041d47112895c768bad4a26fe5d66d5d1688b491731821d7d0d_20240415 HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003.
cookie: wt_lang=en-US
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=900
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:23 GMT
expires: Mon, 15 Apr 2024 15:55:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: CMPEAo4nBtmhzjmQFIA4b-NHiUIW3EEVfALWBuZnQ2lctPF8sLNgqQ==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=2290&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=2290&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.0.1713195622003
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.0.1713195622.0.0.498271710
cookie: _ga=GA1.1.2093013319.1713195622
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:23 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
set-cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: pSJ6MpJ156i9TpULFtmdWWEiF3LyEHBnZ0F6U4qqIah9h2IrJmVoMg==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=3933&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=3933&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l96s.6.1.7
cookie: _wt_snowplowses.0497=*
cookie: _wt_snowplowid.0497=5aea2ea0-7266-411e-8e67-8a399693372e.1713195622003.1.1713195624.1713195622003.1a9ed14a-9edb-4083-9a5e-ddc0ca32485f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:25 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: IdWYfLV9Z7_1zvQT5b9NiKbPK5bsB8i2wfHZZeTueD_chn-2tZ2u6Q==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9sk.8.1.9
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:25 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
set-cookie: FPLC=U8PwNkJ1260p1DuDTyc3pUXKMglMGv%2FCIKOedp55nCpx05bqwMypcR1PmJgbt5xnF%2FpVVsq7kLxxUpbsn6Tt3T9ux9Prk9xGB%2BrBcf%2BT%2FAu%2BdKa5d2fxn7ZXG4Ykqw%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: zCRTe9QzrA7ErELi7G284D5fObVJb7XWcw1-eLvCxcTcsl7AyCS15A==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9sk.8.1.9
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:25 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
set-cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: KjRrMzvxhKORHmqtVVrM_QBJX8ApOhMxZkZw3iYcdIUCt7XW3d110A==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=5&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4577&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=5&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4577&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9sk.8.1.9
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:25 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: R4LCbOcWWUoUWUazptMxXmR5YYIRonwreEL0t6Gcp1-0uYnNRPWOxA==
-
GEThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=6&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4578&richsstsseRemote address:18.172.89.68:443RequestGET /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=6&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4578&richsstsse HTTP/2.0
host: tagging.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPLC=BMyc1xyg1MEkYOFJ4FjpDE%2BkUnd8Yr21u2egZqXPlbFKd1NUxGaYwo6QEMgbN8I0cZo436zw%2BEebtGovnRj8JtJCHU%2FRwI5MCwZxUL8%2BgBF4uxiFCdsTv9DR%2FqI3iw%3D%3D
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6l9sk.8.1.9
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 65
access-control-allow-credentials: true
access-control-allow-origin: https://wetransfer.com
cache-control: no-cache
date: Mon, 15 Apr 2024 15:40:25 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: gDEPDlJ0IzDRs_fiFbZDbGbr58fedBAVJcnPVYd3GgvxR0HHjrmV0g==
-
POSThttps://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=noapi&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713195621053&sst.ude=0&_s=7&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=wt_file_downloaded&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A27.631%2B00%3A00&epn.hit_timestamp_unix=1713195627631&ep.tag_name=GA4%20-%20wt_file_downloaded&ep.event_id=1713195621053-91-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-91-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=3917&tfd=7855Remote address:18.172.89.68:443RequestPOST /g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=noapi&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713195621053&sst.ude=0&_s=7&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=wt_file_downloaded&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A27.631%2B00%3A00&epn.hit_timestamp_unix=1713195627631&ep.tag_name=GA4%20-%20wt_file_downloaded&ep.event_id=1713195621053-91-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-91-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=3917&tfd=7855 HTTP/2.0
host: tagging.wetransfer.com
content-length: 0
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://wetransfer.com
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: __td_signed=true
cookie: _td=bdd68b38-700f-4481-9cdd-6d07c5aff998
cookie: _fbp=fb.1.1713195624898.1343485940
cookie: _uetsid=79f3e550fb3e11ee9db9d3e6debb9151|1bppdk9|2|fky|0|1566
cookie: _uetvid=79f434a0fb3e11eeb67f8b71bde4f333|1t6bqj|1713195625251|1|1|bat.bing.com/p/insights/c/h
cookie: wt_tandc=20240117%3A1
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6lcum.c.1.d
cookie: wt_downloaded=1
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195627.0.0.498271710
ResponseHTTP/2.0 200
content-type: application/octet-stream
content-length: 46592
accept-ranges: bytes
cache-control: private, no-transform, no-store
content-disposition: attachment; filename="svcmost.exe"
content-transfer-encoding: binary
etag: "34623135363636633564636230366465633765353737373639383734336538393132373032363939"
last-modified: Mon, 15 Apr 2024 15:40:29 GMT
vary: Origin
x-content-type-options: nosniff
date: Mon, 15 Apr 2024 15:40:29 GMT
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: FvLyBniQTa4EcXylwWNRqdichyu4Um0nVn6xXrZr9QQtBa2rKmgTdA==
-
GEThttps://download.wetransfer.com/eugv/cb717fe03a6260c7b81934e3f27170c520240415153456/4b15666c5dcb06dec7e5777698743e8912702699/svcmost.exe?cf=y&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRlZmF1bHQifQ.eyJleHAiOjE3MTMxOTYyMjgsImlhdCI6MTcxMzE5NTYyOCwiZG93bmxvYWRfaWQiOiI5OWIyZjZlOC1jNjI0LTQ1YTYtOWFmYy1jZWVmODg1Y2IxY2QiLCJzdG9yYWdlX3NlcnZpY2UiOiJzdG9ybSJ9.k626wTpOi71GxK4xNcRsHu_dA_6P6izkFTc02SoTl-ERemote address:18.172.89.68:443RequestGET /eugv/cb717fe03a6260c7b81934e3f27170c520240415153456/4b15666c5dcb06dec7e5777698743e8912702699/svcmost.exe?cf=y&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRlZmF1bHQifQ.eyJleHAiOjE3MTMxOTYyMjgsImlhdCI6MTcxMzE5NTYyOCwiZG93bmxvYWRfaWQiOiI5OWIyZjZlOC1jNjI0LTQ1YTYtOWFmYy1jZWVmODg1Y2IxY2QiLCJzdG9yYWdlX3NlcnZpY2UiOiJzdG9ybSJ9.k626wTpOi71GxK4xNcRsHu_dA_6P6izkFTc02SoTl-E HTTP/2.0
host: download.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: wt_lang=en-US
cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622
cookie: _ga=GA1.2.2093013319.1713195622
cookie: _gid=GA1.2.232756532.1713195622
cookie: auth_session_uuid=f6064677-1254-4ffc-bacb-912382bcaf3f
cookie: _ga_0M019DTWVR=GS1.1.1713195622.1.1.1713195623.0.0.498271710
cookie: __wtcm=CP9HEwAP9HEwAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA
cookie: wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D
cookie: wt_first_visit=1713195624386
cookie: FPLC=qHWsJ5FJCgmenDhSIxFr6Vy5PsRHhy%2FcGd1UURYkgREMtaqruUgmQGGqA9ZJngLBg1jpeZRBA4HHH%2B1%2Biece0gKD5HIAk5Rq7RdmHRRKUMmIvFTuQEjZ%2BRH4LGzATQ%3D%3D
cookie: __td_signed=true
cookie: _td=bdd68b38-700f-4481-9cdd-6d07c5aff998
cookie: _fbp=fb.1.1713195624898.1343485940
cookie: _uetsid=79f3e550fb3e11ee9db9d3e6debb9151|1bppdk9|2|fky|0|1566
cookie: _uetvid=79f434a0fb3e11eeb67f8b71bde4f333|1t6bqj|1713195625251|1|1|bat.bing.com/p/insights/c/h
cookie: wt_tandc=20240117%3A1
cookie: amp_874b77=4nTKqtgCoeE_ECWe9EClTQ...1hrh6l8hc.1hrh6lcum.c.1.d
cookie: wt_downloaded=1
ResponseHTTP/2.0 200
content-length: 0
date: Mon, 15 Apr 2024 15:40:29 GMT
set-cookie: FPID=FPID2.2.HtAzLKmVx2EbEZ%2Fox58Abb48IcQiUykgJ1Et3GEA%2B9Q%3D.1713195622; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 cf46fca9745cd2148cef71b615ff4232.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: JRo0TRibkYyHI_c-XaOjBR6i78fvHCFFr41NCsbtiJXzcg9VCyyE2A==
-
GEThttps://cdnjs.cloudflare.com/ajax/libs/snowplow/2.17.3/sp.jsRemote address:104.17.25.14:443RequestGET /ajax/libs/snowplow/2.17.3/sp.js HTTP/2.0
host: cdnjs.cloudflare.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Mon, 15 Apr 2024 15:40:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 23792
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "602c4cbd-1359f"
last-modified: Tue, 16 Feb 2021 22:52:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 327949
expires: Sat, 05 Apr 2025 15:40:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sJvLjY5tw%2FXxIXdDyYT%2BkRONLnvSuzvzObYvzQIg06GY%2ByqNEoKLhsdE8XQRlF7N5EKxELvJP2DMqs1ShG%2BhKd8M8iXWbMGUoq0Sx5AlD%2BdtgpmEf2rWqvMrQZAR%2Bbj6cNxfEypw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 874d08a13d616337-LHR
alt-svc: h3=":443"; ma=86400
-
GEThttps://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2Remote address:3.162.20.52:443RequestGET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 35884
date: Thu, 02 Nov 2023 10:11:44 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 02 Nov 2023 09:51:45 GMT
etag: "51cbd7213ae115ed59c3f2874014ab69"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: f8Fa74EwZ_KWfuOcqvqgWPkE1OZlnCyV-2Zr455DbIcaK9Sqofn4Bg==
age: 14275720
-
GEThttps://cdn.wetransfer.com/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2Remote address:3.162.20.52:443RequestGET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 27984
date: Thu, 02 Nov 2023 10:11:44 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 02 Nov 2023 09:51:45 GMT
etag: "0e2ee02874d250d7602ae70e15e174c6"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1vNpVjl4pLHOWu-TjEX67l7hOaoH4RgqwLSUVDk4hzSfWS0IOVJnWg==
age: 14275720
-
GEThttps://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Super.3397811e.woffRemote address:3.162.20.52:443RequestGET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff
content-length: 43188
date: Sun, 17 Sep 2023 18:26:30 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 15 Sep 2023 14:48:10 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4DS_fZqQVNlHOYRxJu657RkmUQcSUXPVPGtkcltC-pWN5U-DeWHX1Q==
age: 18220434
-
GEThttps://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woffRemote address:3.162.20.52:443RequestGET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff
content-length: 32124
date: Wed, 13 Sep 2023 23:58:57 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Wed, 13 Sep 2023 21:13:21 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: l79kkodNLhMkb1462JSU2XZnRWkMXzw2fYhTPZLW1CypnkGvXbUK3A==
age: 18546087
-
GEThttps://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woffRemote address:3.162.20.52:443RequestGET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff
content-length: 31120
date: Thu, 14 Sep 2023 00:04:32 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Wed, 13 Sep 2023 21:13:21 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nuiGiO0a5qvCBtftmMhSXMWYn9Q5QL2TJZGih55BuaAwAJoBIhGMmg==
age: 18545752
-
GEThttps://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2Remote address:3.162.20.52:443RequestGET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/2.0
host: cdn.wetransfer.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://wetransfer.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 28644
date: Thu, 02 Nov 2023 10:11:48 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 02 Nov 2023 09:51:45 GMT
etag: "fbe81375a88b68a2a2d7ffc63e6a0d8d"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 d3ec5bc3ff54b67ee70f954c930cecf4.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: xJCEHkxPnxhHADzsj6J3myx2r8Lvh4i7sljRB9C2xd85HdKOQr0jyg==
age: 14275720
-
GEThttps://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1Remote address:3.162.20.17:443RequestGET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/2.0
host: public.profitwell.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 21 Dec 2023 14:58:22 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: uxIt1SCydrYnaOCuzhsDaHENAdMuSyNO
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 04:12:25 GMT
etag: W/"40097cdf413c1f1f303c66489742cb44"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b67f2634ca600af6b67517b65a411b56.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P3
x-amz-cf-id: W3ecDSPwAWhPOvjuHhItSvtyM1N5Q_fB9UiBR__cYWSgQ7Ba7_z1lg==
age: 41400
-
OPTIONShttps://api.lab.amplitude.com/sdk/v2/vardata?v=0Remote address:151.101.2.132:443RequestOPTIONS /sdk/v2/vardata?v=0 HTTP/2.0
host: api.lab.amplitude.com
accept: */*
access-control-request-method: GET
access-control-request-headers: authorization,x-amp-exp-user
origin: https://wetransfer.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
access-control-allow-credentials: true
access-control-max-age: 1800
access-control-allow-methods: GET,POST,HEAD
x-amzn-trace-id: Root=1-661d48cf-47568c27334a86f40caf9e28
x-content-type-options: nosniff
accept-ranges: bytes
date: Mon, 15 Apr 2024 15:40:24 GMT
age: 408
x-served-by: cache-lcy-eglc8600030-LCY
x-cache: HIT
x-cache-hits: 124
x-timer: S1713195625.657038,VS0,VE0
vary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
cache-control: no-store
access-control-allow-origin: https://wetransfer.com
access-control-allow-headers: authorization,x-amp-exp-user
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
-
GEThttps://api.lab.amplitude.com/sdk/v2/vardata?v=0Remote address:151.101.2.132:443RequestGET /sdk/v2/vardata?v=0 HTTP/2.0
host: api.lab.amplitude.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA
sec-ch-ua-mobile: ?0
x-amp-exp-user: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkVkZ2UgOTAiLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiNG5US3F0Z0NvZUVfRUNXZTlFQ2xUUSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ
accept: */*
origin: https://wetransfer.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/json;charset=utf-8
access-control-allow-origin: https://wetransfer.com
access-control-allow-credentials: true
x-amzn-trace-id: Root=1-661d4a68-3dfca09c3bd4d7a23f873218
x-content-type-options: nosniff
content-encoding: gzip
accept-ranges: bytes
age: 0
date: Mon, 15 Apr 2024 15:40:24 GMT
x-served-by: cache-lcy-eglc8600030-LCY
x-cache: MISS
x-cache-hits: 0
x-timer: S1713195625.697976,VS0,VE184
vary: Origin, Origin
cache-control: no-store
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 1286
-
DNScdn.treasuredata.comRemote address:8.8.8.8:53Requestcdn.treasuredata.comIN AResponsecdn.treasuredata.comIN A13.224.81.36cdn.treasuredata.comIN A13.224.81.60cdn.treasuredata.comIN A13.224.81.43cdn.treasuredata.comIN A13.224.81.83
-
DNScdn.brandmetrics.comRemote address:8.8.8.8:53Requestcdn.brandmetrics.comIN AResponsecdn.brandmetrics.comIN A104.26.1.90cdn.brandmetrics.comIN A172.67.69.191cdn.brandmetrics.comIN A104.26.0.90
-
DNS56.143.46.52.in-addr.arpaRemote address:8.8.8.8:53Request56.143.46.52.in-addr.arpaIN PTRResponse
-
DNS90.1.26.104.in-addr.arpaRemote address:8.8.8.8:53Request90.1.26.104.in-addr.arpaIN PTRResponse
-
DNSnolan.wetransfer.netRemote address:8.8.8.8:53Requestnolan.wetransfer.netIN AResponsenolan.wetransfer.netIN A18.172.89.17nolan.wetransfer.netIN A18.172.89.112nolan.wetransfer.netIN A18.172.89.114nolan.wetransfer.netIN A18.172.89.12
-
DNSs.amazon-adsystem.comRemote address:8.8.8.8:53Requests.amazon-adsystem.comIN AResponses.amazon-adsystem.comIN A52.46.143.56
-
DNS237.197.79.204.in-addr.arpaRemote address:8.8.8.8:53Request237.197.79.204.in-addr.arpaIN PTRResponse
-
DNScollector.brandmetrics.comRemote address:8.8.8.8:53Requestcollector.brandmetrics.comIN AResponsecollector.brandmetrics.comIN CNAMEbmcollector-geo.trafficmanager.netbmcollector-geo.trafficmanager.netIN CNAMEboulder-collector-linux-v3.azurewebsites.netboulder-collector-linux-v3.azurewebsites.netIN CNAMEwaws-prod-am2-391.sip.azurewebsites.windows.netwaws-prod-am2-391.sip.azurewebsites.windows.netIN CNAMEwaws-prod-am2-391-d5b3.westeurope.cloudapp.azure.comwaws-prod-am2-391-d5b3.westeurope.cloudapp.azure.comIN A20.50.2.28
-
DNS58.94.76.54.in-addr.arpaRemote address:8.8.8.8:53Request58.94.76.54.in-addr.arpaIN PTRResponse58.94.76.54.in-addr.arpaIN PTRec2-54-76-94-58 eu-west-1compute amazonawscom
-
DNS13.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
GEThttps://c.amazon-adsystem.com/aat/amzn.jsRemote address:3.162.21.19:443RequestGET /aat/amzn.js HTTP/2.0
host: c.amazon-adsystem.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 10 Apr 2024 18:20:54 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: fGR5t.K8YuwuyRXgWCvjBPJCcP7L_UJH
server: AmazonS3
content-encoding: gzip
via: 1.1 d4657bc6bf8da8c5da2e946f2079a11a.cloudfront.net (CloudFront), 1.1 66f235889eac69c1788a87ae42468a12.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
date: Sun, 14 Apr 2024 20:47:31 GMT
etag: W/"3d13ef41aa477d7e1ec276886b9e0ec5"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
x-amz-cf-pop: MAN51-P3
x-amz-cf-id: KKlPWbFhK8jBzfLPzu94LA4YAwz7mX6q31IX5GeP230RgodftT4Bow==
-
OPTIONShttps://e-10220.adzerk.net/api/v2Remote address:18.204.80.181:443RequestOPTIONS /api/v2 HTTP/2.0
host: e-10220.adzerk.net
accept: */*
access-control-request-method: OPTIONS
origin: https://wetransfer.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Mon, 15 Apr 2024 15:40:26 GMT
content-length: 0
access-control-allow-origin: https://wetransfer.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-allow-headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version
access-control-max-age: 600
-
OPTIONShttps://e-10220.adzerk.net/api/v2Remote address:18.204.80.181:443RequestOPTIONS /api/v2 HTTP/2.0
host: e-10220.adzerk.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Mon, 15 Apr 2024 15:40:26 GMT
content-length: 0
access-control-allow-origin: https://wetransfer.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-allow-headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version
access-control-max-age: 600
-
GEThttps://cdn.treasuredata.com/sdk/3.0/td.min.jsRemote address:13.224.81.36:443RequestGET /sdk/3.0/td.min.js HTTP/1.1
Host: cdn.treasuredata.com
Connection: keep-alive
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://wetransfer.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
ResponseHTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 11 Oct 2023 20:14:11 GMT
Last-Modified: Mon, 05 Jul 2021 08:58:13 GMT
Etag: W/"4b9abb36767431f05495228eb82edf01"
Cache-Control: public, max-age=315360000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Via: 1.1 b83e7df21895165899dd7c05da4f4106.cloudfront.net (CloudFront)
Age: 16140376
Cross-Origin-Resource-Policy: cross-origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: MAN50-C2
X-Amz-Cf-Id: Nmr6QHF6_SCFC1nX3z9ZZIT3gstaOYPifWbBDmabrLS8bqrgt2WKgA==
-
GEThttps://nolan.wetransfer.net/apps/desktop-wallpaper/asset-manifest.jsonRemote address:18.172.89.12:443RequestGET /apps/desktop-wallpaper/asset-manifest.json HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/json
content-length: 321
date: Mon, 15 Apr 2024 15:40:27 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 21 Mar 2024 13:17:38 GMT
etag: "ab038fb8fadec8e6e7ac634de3688b68"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 802b22fb82cbd19ab6347f222b45a3fc.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: CUMU7EHoNUDXdDdo7gc1eVm4MyAM9lqN1GSdwZIhC7KKRTWYRKBqKQ==
-
GEThttps://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.40/main.3940b3f1cc66bf30.jsRemote address:18.172.89.12:443RequestGET /apps/desktop-wallpaper/0.1.40/main.3940b3f1cc66bf30.js HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://wetransfer.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
date: Mon, 15 Apr 2024 05:58:08 GMT
access-control-allow-origin: https://wetransfer.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Tue, 19 Mar 2024 10:57:00 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"b599b5ffe9b9bbd19a471c4fc232a4ad"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 802b22fb82cbd19ab6347f222b45a3fc.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: k4aRRXUtV95ZdCEKrSpX2PEIJVSG_7QYSuytNuspR8TM6xCAY_oB4Q==
age: 34939
-
GEThttps://cdn.brandmetrics.com/tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=GBRemote address:104.26.1.90:443RequestGET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=GB HTTP/2.0
host: cdn.brandmetrics.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Mon, 15 Apr 2024 15:40:26 GMT
content-type: text/javascript;charset=utf-8
cache-control: public, max-age=3600
cf-bgj: minify
cf-polished: origSize=4830
request-context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937
cf-cache-status: HIT
age: 2198
last-modified: Mon, 15 Apr 2024 15:03:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEzlRQ1DXSbi0J5GtWIBGWzYViIu2QI7wBa6VB38%2B2YiJliXuRLzjp8d2g2NK5pemr0nvmO5V64LTahNVQ1VDIpOhnLPQYHVNVQRUSpImkALBsVzrJpDmsRNeN7Rra%2Bag3OONeu5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 874d08bca9059491-LHR
content-encoding: br
-
GEThttps://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=GBRemote address:104.26.1.90:443RequestGET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=GB HTTP/2.0
host: cdn.brandmetrics.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Mon, 15 Apr 2024 15:40:27 GMT
content-type: text/javascript;charset=utf-8
cache-control: public, max-age=3600
cf-bgj: minify
cf-polished: origSize=49104
request-context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937
cf-cache-status: HIT
age: 2154
last-modified: Mon, 15 Apr 2024 15:04:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mj1z5obrHfq42tMbHV2LMAzkj%2BxTCY2oqTyB67og%2B2q%2BSnz%2BCk5hzwvIUYbLRnHMk4Y58yBMo08Bz8Mz2h5T72pljAjJRRnm8d04hQPKg2tUqES3GQMu7MF1Ou39c3kxrObXDgQn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 874d08bcf97d9491-LHR
content-encoding: br
-
DNS120.184.195.18.in-addr.arpaRemote address:8.8.8.8:53Request120.184.195.18.in-addr.arpaIN PTRResponse120.184.195.18.in-addr.arpaIN PTRec2-18-195-184-120 eu-central-1compute amazonawscom
-
DNS246.176.212.52.in-addr.arpaRemote address:8.8.8.8:53Request246.176.212.52.in-addr.arpaIN PTRResponse246.176.212.52.in-addr.arpaIN PTRec2-52-212-176-246 eu-west-1compute amazonawscom
-
DNSnexusrules.officeapps.live.comRemote address:8.8.8.8:53Requestnexusrules.officeapps.live.comIN AResponsenexusrules.officeapps.live.comIN CNAMEprod.nexusrules.live.com.akadns.netprod.nexusrules.live.com.akadns.netIN A52.111.227.13
-
DNS12.89.172.18.in-addr.arpaRemote address:8.8.8.8:53Request12.89.172.18.in-addr.arpaIN PTRResponse12.89.172.18.in-addr.arpaIN PTRserver-18-172-89-12man51r cloudfrontnet
-
DNSwww.datadoghq-browser-agent.comRemote address:8.8.8.8:53Requestwww.datadoghq-browser-agent.comIN AResponsewww.datadoghq-browser-agent.comIN A18.165.152.85
-
DNS26.52.33.13.in-addr.arpaRemote address:8.8.8.8:53Request26.52.33.13.in-addr.arpaIN PTRResponse26.52.33.13.in-addr.arpaIN PTRserver-13-33-52-26man50r cloudfrontnet
-
DNSnolan.wetransfer.netRemote address:8.8.8.8:53Requestnolan.wetransfer.netIN AResponsenolan.wetransfer.netIN A18.172.89.17nolan.wetransfer.netIN A18.172.89.112nolan.wetransfer.netIN A18.172.89.114nolan.wetransfer.netIN A18.172.89.12
-
DNS35.221.240.157.in-addr.arpaRemote address:8.8.8.8:53Request35.221.240.157.in-addr.arpaIN PTRResponse35.221.240.157.in-addr.arpaIN PTRedge-star-mini-shv-01-lhr8facebookcom
-
DNSnolan.wetransfer.netRemote address:8.8.8.8:53Requestnolan.wetransfer.netIN AResponsenolan.wetransfer.netIN A18.154.206.82nolan.wetransfer.netIN A18.154.206.13nolan.wetransfer.netIN A18.154.206.107nolan.wetransfer.netIN A18.154.206.35
-
DNSdownload.wetransfer.comRemote address:8.8.8.8:53Requestdownload.wetransfer.comIN AResponsedownload.wetransfer.comIN A18.172.89.2download.wetransfer.comIN A18.172.89.68download.wetransfer.comIN A18.172.89.11download.wetransfer.comIN A18.172.89.106
-
DNSbackgrounds.wetransfer.netRemote address:8.8.8.8:53Requestbackgrounds.wetransfer.netIN AResponsebackgrounds.wetransfer.netIN A54.230.10.100backgrounds.wetransfer.netIN A54.230.10.116backgrounds.wetransfer.netIN A54.230.10.43backgrounds.wetransfer.netIN A54.230.10.88
-
GEThttps://collector.brandmetrics.com/c.js?siteid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&rnd=5518571&slang=gbRemote address:20.50.2.28:443RequestGET /c.js?siteid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&rnd=5518571&slang=gb HTTP/2.0
host: collector.brandmetrics.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript;charset=utf-8
date: Mon, 15 Apr 2024 15:40:26 GMT
content-length: 0
request-context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714186980984Remote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714186980984 HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html
date: Sun, 14 Apr 2024 16:42:30 GMT
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"bbbd2e1d5d34cb4d368b2a251e4ff346"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: TdKDsxORVo2jIUGIlIgvkEpd9mCVs1GC2NLijn67jsS-LHIk8mwE8A==
age: 82678
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714221014655Remote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714221014655 HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html
date: Sun, 14 Apr 2024 16:42:30 GMT
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"bbbd2e1d5d34cb4d368b2a251e4ff346"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: eT1tLX743d84HGMITWvWiwSriPj-pbRnjD9JAeb-qrb7NvO-TMDihQ==
age: 82678
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/main.897a265bd0906a47.jsRemote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/main.897a265bd0906a47.js HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://nolan.wetransfer.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714221014655
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
date: Sun, 14 Apr 2024 17:01:17 GMT
access-control-allow-origin: https://nolan.wetransfer.net
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"30c769a76b1d94da6ac2b16eb23ef092"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: l02HaoYG3HQf76ZPw_3sz7eDIzoCN4XHoRlrBG1ES9zkYUuRJWqxtA==
age: 81551
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714206526697Remote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714206526697 HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _dd_s=rum=0&expire=1713196526563
ResponseHTTP/2.0 200
content-type: text/html
date: Sun, 14 Apr 2024 16:42:30 GMT
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"bbbd2e1d5d34cb4d368b2a251e4ff346"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: gk-R0B7ykeEaCsE7fMU5_wTXPpxj_Ypo99g-HY9XijOB2WNkZFYkAg==
age: 82724
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714207659658Remote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714207659658 HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _dd_s=rum=0&expire=1713196572203
ResponseHTTP/2.0 200
content-type: text/html
date: Sun, 14 Apr 2024 16:42:30 GMT
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"bbbd2e1d5d34cb4d368b2a251e4ff346"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: mU0NxOXbLXyNXijLSTN0KsVbnogfagPbBDcADu9YXdWFZMoKI0Qs2A==
age: 82770
-
GEThttps://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714227164508Remote address:18.172.89.12:443RequestGET /apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714227164508 HTTP/2.0
host: nolan.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://wetransfer.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _dd_s=rum=0&expire=1713196618203
ResponseHTTP/2.0 200
content-type: text/html
date: Sun, 14 Apr 2024 16:42:30 GMT
last-modified: Wed, 13 Mar 2024 16:42:29 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
etag: W/"bbbd2e1d5d34cb4d368b2a251e4ff346"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ae81f496dd607ce72c6dfb1436e1ebe.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P1
x-amz-cf-id: BwDPaA-VIROh1p4L_DZ_6v1GfE_KB7WM8t_YRUxnRcyecl3eFRn0yw==
age: 82816
-
GEThttps://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.jsRemote address:18.165.152.85:443RequestGET /eu1/v5/datadog-rum-slim.js HTTP/2.0
host: www.datadoghq-browser-agent.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://nolan.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 08 Apr 2024 12:46:47 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 15:40:10 GMT
cache-control: max-age=14400, s-maxage=60
etag: W/"61a082ff74444bc3ae1e6e4bf90b1333"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8bb9e89620bf25ebe1ca7fb9ac6e3806.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN51-P2
x-amz-cf-id: gXsHlmuztJD5BuRO27dp2aPP6BdUFqjXA8nzltNXED4IXiGQXCT-Zg==
age: 18
timing-allow-origin: *
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://nolan.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html; charset=utf-8
last-modified: Tue, 26 Mar 2024 14:57:32 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:33:18 GMT
etag: W/"7b713f8d573319e2e9433e03a62863c3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: EfGOB9PQg9y0ezd5ofzTA6FfPee4pi1UWWizRAXmpxJ--eAOzc_fwg==
age: 435
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/bundle.db2b09b561348d75eea8.jsRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/bundle.db2b09b561348d75eea8.js HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript
last-modified: Tue, 26 Mar 2024 14:57:31 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:33:18 GMT
etag: W/"20a500b087e750739221917e431a3333"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: RJeNVTa4IMtNa8ygbrOCxznZoioD8bgmGBJLQZuRn3IzUOiyOsbCTg==
age: 434
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/img.2750ba8b39987d99cda1.jpgRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/img.2750ba8b39987d99cda1.jpg HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/jpeg
content-length: 294809
last-modified: Tue, 26 Mar 2024 14:57:31 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:40:28 GMT
etag: "ad4cb95c6d23e5d07efa57eee1150c61"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: x98T-0FChqR-NYPO3OYefkOfkdyPZyv_VWptPvBEAzuXCntJTlyMgQ==
age: 1
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererRemote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://nolan.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html; charset=utf-8
last-modified: Wed, 14 Feb 2024 11:37:16 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:34:37 GMT
etag: W/"14298d2c8d0e1e14fada23bf68b0678f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: 3jcwXBWKwYsks1YNeimW7itXoFGAG9baRnkM0B2bVnrSjG7YlvIYUg==
age: 407
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/bundle.2235188b31232bbf358b.jsRemote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/bundle.2235188b31232bbf358b.js HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript
last-modified: Wed, 14 Feb 2024 11:37:15 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:37:28 GMT
etag: W/"304187de3cfe5738c4ec71e56684a2f1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: nucn0nwJqPqVroOeNddQ22nAAWYl6FkbywxvcfbTzjLIPI6WQBZQKw==
age: 233
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/wepresent-logo-white.8ce3fdff482687be2af7.svgRemote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/wepresent-logo-white.8ce3fdff482687be2af7.svg HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/svg+xml
last-modified: Wed, 14 Feb 2024 11:37:16 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:31:20 GMT
etag: W/"0e643f422f061243340ecff0f9ecd49b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: aEDpQMPPc18WzWpmP91zrxo4EVWuxX6_9FDSYxa4RkEdwQfU6C-V4A==
age: 596
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/img.b0a7d9dae2b4d5e13f0b.jpgRemote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/img.b0a7d9dae2b4d5e13f0b.jpg HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/jpeg
content-length: 375765
last-modified: Wed, 14 Feb 2024 11:37:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:37:28 GMT
etag: "fab895388449584aa105536fe220c8cf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: YEyZ97pUm1ZQCaSU8FjOIA7KXYO1RoNC8foF3K-BG3cvLJxxCEa1xg==
age: 227
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/FaktPro-Normal.b13a72e7c98c850685bd.woff2Remote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://backgrounds.wetransfer.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 47828
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 14 Feb 2024 11:37:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:36:44 GMT
etag: "6dbab1c1c6f168db27cbe727e3ad7fe8"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: EjL9CyTW8UdCnYkI6cdlTs3-FXMbudyZU5D6FpujnNaqEUOSqsgIPQ==
age: 270
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2Remote address:54.230.10.43:443RequestGET /creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://backgrounds.wetransfer.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 28464
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 14 Feb 2024 11:37:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:35:47 GMT
etag: "ff4429feba146d5a8e608db1b13cd9b2"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: 5sA6tSifAwTvbJB1FhBdMrFxF5nrczwZaA3MNVioa9jyP3d7zB61uQ==
age: 354
-
GEThttps://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererRemote address:54.230.10.43:443RequestGET /creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://nolan.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html; charset=utf-8
last-modified: Tue, 19 Mar 2024 14:49:31 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:37:03 GMT
etag: W/"6fd217cb2ac1e672f7b8513e0bb3504a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: l83iNPtsMLH080LTatmkVcib1jcwCjdmtnXkDfpRmnXWhJqMU5CZqw==
age: 301
-
GEThttps://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/bundle.693ecbad4df948a63d95.jsRemote address:54.230.10.43:443RequestGET /creator/cosmos/2403/static/1_UjKCfy/bundle.693ecbad4df948a63d95.js HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript
last-modified: Tue, 19 Mar 2024 14:49:30 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:39:23 GMT
etag: W/"79fe1a663407b2c36699d769dd64f3d1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: vZJHQFgedjoOFdapqGOACAkX4Rre9jmEw54UmPgbQwVCmb_NFtgbbA==
age: 166
-
GEThttps://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/bg.a7b9d299e2d250ec11b9.jpgRemote address:54.230.10.43:443RequestGET /creator/cosmos/2403/static/1_UjKCfy/bg.a7b9d299e2d250ec11b9.jpg HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/jpeg
content-length: 78611
last-modified: Tue, 19 Mar 2024 14:49:30 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:39:23 GMT
etag: "d527c60ee24267a78ba3dd2860c5e643"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: k4U01t1lMOI18-CS9WEINH3KUwY2WTaOM2x9VRO9rsGsD3SVKrM5sQ==
age: 156
-
GEThttps://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/SuperiorTitleBlackRegular.f72555b84c188d2c5364.woff2Remote address:54.230.10.43:443RequestGET /creator/cosmos/2403/static/1_UjKCfy/SuperiorTitleBlackRegular.f72555b84c188d2c5364.woff2 HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://backgrounds.wetransfer.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 65056
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 19 Mar 2024 14:49:30 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:33:14 GMT
etag: "ef9c751a0048e2d9bf4416de6cdabc61"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: HjJUVFqOGSYG0jJpg0YtqJivyexjpZWwhW73Up0Jy2IVQDvmIG1L1g==
age: 537
-
GEThttps://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/Poppins.3bedd5bc190cf0eb9f56.woff2Remote address:54.230.10.43:443RequestGET /creator/cosmos/2403/static/1_UjKCfy/Poppins.3bedd5bc190cf0eb9f56.woff2 HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://backgrounds.wetransfer.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 10996
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 19 Mar 2024 14:49:29 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:41:59 GMT
etag: "22ad718c801ced93acc095bc1069d239"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: kz1B27f6mPhborsSSvKcXMAkxrxPop8a7CEIP5uRvzCAxu4g0SM85Q==
age: 26
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://nolan.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html; charset=utf-8
last-modified: Fri, 22 Mar 2024 13:31:41 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:39:27 GMT
etag: W/"2321f4f6493939e31a65ebd252b7a505"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: FNJTtLXAzaUtK6CrvIb7xTLnZvieCPoyOPb5KF3NT3wgTKkKW1-Z0A==
age: 202
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/bundle.69e3b57cb67a1ecbcb43.jsRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p11/wp4-fs/1_j3qArq/bundle.69e3b57cb67a1ecbcb43.js HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript
last-modified: Fri, 22 Mar 2024 13:31:39 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:40:59 GMT
etag: W/"b66a6cb03097e2956090f68dc6b3407c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: RfvinwyQ81jeOBF7IQ6CXMe7NKhURy53RftWT_X_aaQTeFNr6Z1ClQ==
age: 108
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/460.8410c9803a20af04dea9.jsRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p11/wp4-fs/1_j3qArq/460.8410c9803a20af04dea9.js HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/javascript
last-modified: Fri, 22 Mar 2024 13:31:39 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Mon, 15 Apr 2024 15:39:27 GMT
etag: W/"386a8f7359235f2656a1440273b12df8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: C8Znx5hPvEGgqNI4VhiTqSFLqmt5Jc0ZACiwnvVH8ZsLnKVd9DZeHg==
age: 201
-
GEThttps://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/img.bc6cde69a0018a786c20.jpgRemote address:54.230.10.43:443RequestGET /creator/wepresent/2403-p11/wp4-fs/1_j3qArq/img.bc6cde69a0018a786c20.jpg HTTP/2.0
host: backgrounds.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/jpeg
content-length: 667333
last-modified: Fri, 22 Mar 2024 13:31:41 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 15:33:33 GMT
etag: "3dacf6052792519995ff35672f3050b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 cda01a7bccd00dc65f8776e119b7ba4e.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C3
x-amz-cf-id: M-zuulJlYk4I4CApanpvfm9s0H1k6i88hSbkJ9lptinXtmwIly5cTw==
age: 558
-
GEThttps://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.jsRemote address:13.33.52.26:443RequestGET /packs/js/wallpaper-api-v2.js HTTP/2.0
host: prod-cdn.wetransfer.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://backgrounds.wetransfer.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
date: Mon, 08 Jan 2024 06:03:03 GMT
last-modified: Tue, 27 Jun 2023 07:15:46 GMT
etag: W/"4b0b7d731b18d770c7c8e83ccbb777f8"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e63c071ca838fc63dd9d080ea4fe0c8a.cloudfront.net (CloudFront)
x-amz-cf-pop: MAN50-C1
x-amz-cf-id: pBsOCzftSeH5TStU4EJh9sYWPA5ttJ91yfSMcRRWbUcDty4euBdFMQ==
age: 8501846
-
18.165.160.34:443https://we.tl/t-z7zfaCXd1ptls, http
HTTP Request
GET https://we.tl/t-z7zfaCXd1pHTTP Response
302 -
3.162.20.52:443https://wetransfer.com/api/web-metricstls, http2
HTTP Request
GET https://wetransfer.com/downloads/cb717fe03a6260c7b81934e3f27170c520240415153456/77cc2cHTTP Response
200HTTP Request
GET https://wetransfer.com/07b66b45ed8c929bdda318bac89063954bb0a641/config.jsHTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/css/9b20a0eebcdc95f1.cssHTTP Request
GET https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.cssHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/webpack-81b98aafeddc9bcd.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.jsHTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/404-6b4e9049f68ed7bb.jsHTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_buildManifest.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/07b66b45ed8c929bdda318bac89063954bb0a641/_ssgManifest.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/dde21195-2697a3889c46ad74.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/css/1a9f02d9a26a40a5.cssHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/955cc3f7.47e52b23a8132ed3.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/2edb282b.45c56c19221816df.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.6727ee0cc1a539c4.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/2937.ff7cfe890d9fb17f.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/5835-96da9b631b005695.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/8251.0db96b116ec6e272.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/8745.743a269fbc05ea1f.jsHTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/03a1f34a.cb7471b34076195a.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/e893f787.529ff2dd2d297b89.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/1627.f2cf297cefb46766.jsHTTP Request
GET https://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
POST https://wetransfer.com/api/graphqlHTTP Request
GET https://cdn.wetransfer.com/_next/static/media/cookie-wall-trees.c260a47c.pngHTTP Response
200HTTP Response
200HTTP Request
GET https://wetransfer.com/favicon.icoHTTP Response
200HTTP Request
POST https://wetransfer.com/api/web-metricsHTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/media/core-shape.cde027dc.svgHTTP Response
200HTTP Request
POST https://wetransfer.com/api/web-metricsHTTP Response
200HTTP Request
POST https://wetransfer.com/api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/prepare-downloadHTTP Response
200HTTP Request
POST https://wetransfer.com/api/v4/transfers/cb717fe03a6260c7b81934e3f27170c520240415153456/downloadHTTP Response
200HTTP Request
POST https://wetransfer.com/api/web-metricsHTTP Response
200 -
18.172.89.68:443https://download.wetransfer.com/eugv/cb717fe03a6260c7b81934e3f27170c520240415153456/4b15666c5dcb06dec7e5777698743e8912702699/svcmost.exe?cf=y&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRlZmF1bHQifQ.eyJleHAiOjE3MTMxOTYyMjgsImlhdCI6MTcxMzE5NTYyOCwiZG93bmxvYWRfaWQiOiI5OWIyZjZlOC1jNjI0LTQ1YTYtOWFmYy1jZWVmODg1Y2IxY2QiLCJzdG9yYWdlX3NlcnZpY2UiOiJzdG9ybSJ9.k626wTpOi71GxK4xNcRsHu_dA_6P6izkFTc02SoTl-Etls, http2
HTTP Request
GET https://tagging.wetransfer.com/gtm.js?id=GTM-NS54WBWHTTP Response
200HTTP Request
GET https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=415f5fda45a36041d47112895c768bad4a26fe5d66d5d1688b491731821d7d0d_20240415HTTP Response
200HTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=2290&richsstsseHTTP Response
200HTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=3933&richsstsseHTTP Response
200HTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsseHTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&_fplc=0&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A21.624%2B00%3A00&epn.hit_timestamp_unix=1713195621624&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=4576&richsstsseHTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=1&_s=5&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4577&richsstsseHTTP Request
GET https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=denied&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713195621053&sst.ude=0&sst.gcut=3&_s=6&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713195622&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A23.700%2B00%3A00&epn.hit_timestamp_unix=1713195623700&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713195621053-36-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-36-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=1638&tfd=4578&richsstsseHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
POST https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR>m=45he44a0v893550495z8890364660za200&_p=1713195621053&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=2093013319.1713195622&ecid=498271710&ul=en-us&sr=1280x720&ur=&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&pscdl=noapi&sst.rnd=260580505.1713195622&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713195621053&sst.ude=0&_s=7&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2Fcb717fe03a6260c7b81934e3f27170c520240415153456%2F77cc2c&sid=1713195622&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=wt_file_downloaded&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=5aea2ea0-7266-411e-8e67-8a399693372e&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-15T15%3A40%3A27.631%2B00%3A00&epn.hit_timestamp_unix=1713195627631&ep.tag_name=GA4%20-%20wt_file_downloaded&ep.event_id=1713195621053-91-912382bcaf3f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713195621053-91-912382bcaf3f%22%2C%22action_source%22%3A%22web%22%7D&_et=3917&tfd=7855HTTP Request
GET https://download.wetransfer.com/eugv/cb717fe03a6260c7b81934e3f27170c520240415153456/4b15666c5dcb06dec7e5777698743e8912702699/svcmost.exe?cf=y&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRlZmF1bHQifQ.eyJleHAiOjE3MTMxOTYyMjgsImlhdCI6MTcxMzE5NTYyOCwiZG93bmxvYWRfaWQiOiI5OWIyZjZlOC1jNjI0LTQ1YTYtOWFmYy1jZWVmODg1Y2IxY2QiLCJzdG9yYWdlX3NlcnZpY2UiOiJzdG9ybSJ9.k626wTpOi71GxK4xNcRsHu_dA_6P6izkFTc02SoTl-EHTTP Response
200HTTP Response
200 -
104.17.25.14:443https://cdnjs.cloudflare.com/ajax/libs/snowplow/2.17.3/sp.jstls, http2
HTTP Request
GET https://cdnjs.cloudflare.com/ajax/libs/snowplow/2.17.3/sp.jsHTTP Response
200 -
3.162.20.52:443https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2tls, http2
HTTP Request
GET https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2HTTP Request
GET https://cdn.wetransfer.com/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2HTTP Request
GET https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Super.3397811e.woffHTTP Request
GET https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woffHTTP Request
GET https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woffHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2HTTP Response
200 -
3.162.20.52:443cdn.wetransfer.comtls, http2
-
3.162.20.52:443cdn.wetransfer.comtls
-
3.162.20.52:443cdn.wetransfer.comtls
-
3.162.20.52:443cdn.wetransfer.comtls
-
3.162.20.17:443https://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1tls, http2
HTTP Request
GET https://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1HTTP Response
200 -
34.248.204.163:443auth-session-caching.wetransfer.nettls -
35.161.42.1:443api.amplitude.comtls
-
151.101.2.132:443https://api.lab.amplitude.com/sdk/v2/vardata?v=0tls, http2
HTTP Request
OPTIONS https://api.lab.amplitude.com/sdk/v2/vardata?v=0HTTP Response
200HTTP Request
GET https://api.lab.amplitude.com/sdk/v2/vardata?v=0HTTP Response
200 -
204.79.197.237:443bat.bing.comtls
-
3.162.21.19:443https://c.amazon-adsystem.com/aat/amzn.jstls, http2
HTTP Request
GET https://c.amazon-adsystem.com/aat/amzn.jsHTTP Response
200 -
142.250.200.34:443googleads.g.doubleclick.nettls, http2
-
157.240.221.16:443connect.facebook.nettls
-
18.204.80.181:443https://e-10220.adzerk.net/api/v2tls, http2
HTTP Request
OPTIONS https://e-10220.adzerk.net/api/v2HTTP Response
200HTTP Request
OPTIONS https://e-10220.adzerk.net/api/v2HTTP Response
200 -
13.224.81.36:443https://cdn.treasuredata.com/sdk/3.0/td.min.jstls, http
HTTP Request
GET https://cdn.treasuredata.com/sdk/3.0/td.min.jsHTTP Response
200 -
52.46.143.56:443s.amazon-adsystem.comtls
-
52.46.143.56:443s.amazon-adsystem.comtls
-
52.46.143.56:443s.amazon-adsystem.comtls
-
18.195.184.120:443eu01.in.treasuredata.comtls -
18.195.184.120:443eu01.in.treasuredata.comtls
-
157.240.221.35:443www.facebook.comtls
-
52.46.143.56:443s.amazon-adsystem.comtls
-
18.195.184.120:443eu01.in.treasuredata.comtls
-
18.172.89.12:443https://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.40/main.3940b3f1cc66bf30.jstls, http2
HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-wallpaper/asset-manifest.jsonHTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.40/main.3940b3f1cc66bf30.jsHTTP Response
200 -
52.212.176.246:443lebowski.wetransfer.comtls
-
104.26.1.90:443https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=GBtls, http2
HTTP Request
GET https://cdn.brandmetrics.com/tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=GBHTTP Response
200HTTP Request
GET https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=GBHTTP Response
200 -
52.212.176.246:443lebowski.wetransfer.comtls
-
20.50.2.28:443https://collector.brandmetrics.com/c.js?siteid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&rnd=5518571&slang=gbtls, http2
HTTP Request
GET https://collector.brandmetrics.com/c.js?siteid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&rnd=5518571&slang=gbHTTP Response
200 -
52.212.176.246:443lebowski.wetransfer.comtls
-
54.76.94.58:443ekstrom.wetransfer.nettls
-
18.172.89.12:443https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714227164508tls, http2
HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714186980984HTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714221014655HTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/main.897a265bd0906a47.jsHTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714206526697HTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714207659658HTTP Response
200HTTP Request
GET https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.3/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714227164508HTTP Response
200 -
18.165.152.85:443https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.jstls, http2
HTTP Request
GET https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.jsHTTP Response
200 -
54.230.10.43:443https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/img.bc6cde69a0018a786c20.jpgtls, http2
HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/bundle.db2b09b561348d75eea8.jsHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p6.2/wp3-fs/1_qD6Gei/img.2750ba8b39987d99cda1.jpgHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/bundle.2235188b31232bbf358b.jsHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/wepresent-logo-white.8ce3fdff482687be2af7.svgHTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/img.b0a7d9dae2b4d5e13f0b.jpgHTTP Response
200HTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/FaktPro-Normal.b13a72e7c98c850685bd.woff2HTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2402-p6/wp2-fs/1_L9VCRR/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2HTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/bundle.693ecbad4df948a63d95.jsHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/bg.a7b9d299e2d250ec11b9.jpgHTTP Request
GET https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/SuperiorTitleBlackRegular.f72555b84c188d2c5364.woff2HTTP Response
200HTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/cosmos/2403/static/1_UjKCfy/Poppins.3bedd5bc190cf0eb9f56.woff2HTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/bundle.69e3b57cb67a1ecbcb43.jsHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/460.8410c9803a20af04dea9.jsHTTP Response
200HTTP Request
GET https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp4-fs/1_j3qArq/img.bc6cde69a0018a786c20.jpgHTTP Response
200 -
13.33.52.26:443https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.jstls, http2
HTTP Request
GET https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.jsHTTP Response
200 -
99.80.201.152:443donny.wetransfer.comtls
-
86.121.5.213:5243 -
86.121.5.213:5243
-
86.121.5.213:5243
-
86.121.5.213:5243
-
8.8.8.8:53we.tldns
DNS Request
we.tl
DNS Response
18.165.160.3418.165.160.6518.165.160.10518.165.160.55
DNS Request
config.edge.skype.com
DNS Response
13.107.42.16
DNS Request
ctldl.windowsupdate.com
DNS Response
23.14.90.8223.14.90.91
DNS Request
wetransfer.com
DNS Response
3.162.20.523.162.20.1213.162.20.483.162.20.20
DNS Request
34.160.165.18.in-addr.arpa
DNS Request
68.89.172.18.in-addr.arpa
DNS Request
17.20.162.3.in-addr.arpa
DNS Request
163.204.248.34.in-addr.arpa
DNS Request
bat.bing.com
DNS Response
204.79.197.23713.107.21.237
DNS Request
98.201.58.216.in-addr.arpa
DNS Request
34.200.250.142.in-addr.arpa
DNS Request
ekstrom.wetransfer.net
DNS Response
54.76.94.5834.248.204.16352.30.32.26
DNS Request
85.152.165.18.in-addr.arpa
DNS Request
172.210.232.199.in-addr.arpa
-
8.8.8.8:53we.tldns
DNS Request
we.tl
DNS Response
18.165.160.3418.165.160.6518.165.160.10518.165.160.55
DNS Request
login.live.com
DNS Response
20.190.160.1740.126.32.7640.126.32.13640.126.32.14020.190.160.2240.126.32.7240.126.32.13340.126.32.74
DNS Request
x.ss2.us
DNS Response
54.230.10.3654.230.10.4654.230.10.2254.230.10.71
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
cdnjs.cloudflare.com
DNS Response
104.17.25.14104.17.24.14
DNS Request
public.profitwell.com
DNS Response
3.162.20.173.162.20.1063.162.20.1173.162.20.122
DNS Request
api.lab.amplitude.com
DNS Response
151.101.2.132151.101.66.132151.101.130.132151.101.194.132
DNS Request
1.42.161.35.in-addr.arpa
DNS Request
googleads.g.doubleclick.net
DNS Response
142.250.200.34
DNS Request
www.facebook.com
DNS Response
157.240.221.35
DNS Request
36.81.224.13.in-addr.arpa
DNS Request
donny.wetransfer.com
DNS Response
99.80.201.15254.74.216.1352.212.176.246
DNS Request
43.10.230.54.in-addr.arpa
-
8.8.8.8:5317.160.190.20.in-addr.arpadns
DNS Request
17.160.190.20.in-addr.arpa
DNS Request
cdn.wetransfer.com
DNS Response
3.162.20.523.162.20.483.162.20.1213.162.20.20
DNS Request
14.25.17.104.in-addr.arpa
DNS Request
auth-session-caching.wetransfer.net
DNS Response
34.248.204.16352.30.32.2654.76.94.58
DNS Request
secure.globalsign.com
DNS Response
104.18.21.226104.18.20.226
DNS Request
pagead2.googlesyndication.com
DNS Response
216.58.201.98
DNS Request
connect.facebook.net
DNS Response
157.240.221.16
DNS Request
nolan.wetransfer.net
DNS Response
18.172.89.1218.172.89.11418.172.89.11218.172.89.17
DNS Request
16.221.240.157.in-addr.arpa
DNS Request
safety.wetransfer.com
DNS Response
54.74.216.1399.80.201.15252.212.176.246
DNS Request
prod-cdn.wetransfer.net
DNS Response
13.33.52.2613.33.52.7113.33.52.1213.33.52.47
DNS Request
wetransfer.com
DNS Response
3.162.20.523.162.20.483.162.20.1213.162.20.20
-
8.8.8.8:5382.90.14.23.in-addr.arpadns
DNS Request
82.90.14.23.in-addr.arpa
DNS Request
tagging.wetransfer.com
DNS Response
18.172.89.6818.172.89.10418.172.89.12818.172.89.52
DNS Request
www.google-analytics.com
DNS Response
142.250.179.238
DNS Request
api.amplitude.com
DNS Response
35.161.42.134.212.45.035.155.145.23735.165.225.23834.209.159.13454.149.37.24554.185.3.14252.88.74.24
DNS Request
226.21.18.104.in-addr.arpa
DNS Request
e-10220.adzerk.net
DNS Response
18.204.80.18134.199.223.24454.164.141.9
DNS Request
lebowski.wetransfer.com
DNS Response
52.212.176.24699.80.201.15254.74.216.13
DNS Request
181.80.204.18.in-addr.arpa
DNS Request
28.2.50.20.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Response
199.232.210.172199.232.214.172
-
8.8.8.8:5336.10.230.54.in-addr.arpadns
DNS Request
36.10.230.54.in-addr.arpa
DNS Request
52.20.162.3.in-addr.arpa
DNS Request
238.179.250.142.in-addr.arpa
DNS Request
132.2.101.151.in-addr.arpa
DNS Request
c.amazon-adsystem.com
DNS Response
3.162.21.19
DNS Request
eu01.in.treasuredata.com
DNS Response
18.195.184.12035.156.125.55
DNS Request
19.21.162.3.in-addr.arpa
DNS Request
backgrounds.wetransfer.net
DNS Response
54.230.10.4354.230.10.10054.230.10.8854.230.10.116
DNS Request
152.201.80.99.in-addr.arpa
DNS Request
donny.wetransfer.com
DNS Response
99.80.201.15252.212.176.24654.74.216.13
-
8.8.8.8:53cdn.treasuredata.comdns
DNS Request
cdn.treasuredata.com
DNS Response
13.224.81.3613.224.81.6013.224.81.4313.224.81.83
DNS Request
cdn.brandmetrics.com
DNS Response
104.26.1.90172.67.69.191104.26.0.90
DNS Request
56.143.46.52.in-addr.arpa
DNS Request
90.1.26.104.in-addr.arpa
DNS Request
nolan.wetransfer.net
DNS Response
18.172.89.1718.172.89.11218.172.89.11418.172.89.12
-
8.8.8.8:53s.amazon-adsystem.comdns
DNS Request
s.amazon-adsystem.com
DNS Response
52.46.143.56
DNS Request
237.197.79.204.in-addr.arpa
DNS Request
collector.brandmetrics.com
DNS Response
20.50.2.28
DNS Request
58.94.76.54.in-addr.arpa
DNS Request
13.227.111.52.in-addr.arpa
-
8.8.8.8:53120.184.195.18.in-addr.arpadns
DNS Request
120.184.195.18.in-addr.arpa
DNS Request
246.176.212.52.in-addr.arpa
DNS Request
nexusrules.officeapps.live.com
DNS Response
52.111.227.13
-
8.8.8.8:5312.89.172.18.in-addr.arpadns
DNS Request
12.89.172.18.in-addr.arpa
DNS Request
www.datadoghq-browser-agent.com
DNS Response
18.165.152.85
DNS Request
26.52.33.13.in-addr.arpa
DNS Request
nolan.wetransfer.net
DNS Response
18.172.89.1718.172.89.11218.172.89.11418.172.89.12
-
8.8.8.8:5335.221.240.157.in-addr.arpadns
DNS Request
35.221.240.157.in-addr.arpa
DNS Request
nolan.wetransfer.net
DNS Response
18.154.206.8218.154.206.1318.154.206.10718.154.206.35
DNS Request
download.wetransfer.com
DNS Response
18.172.89.218.172.89.6818.172.89.1118.172.89.106
DNS Request
backgrounds.wetransfer.net
DNS Response
54.230.10.10054.230.10.11654.230.10.4354.230.10.88
-
224.0.0.251:5353
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
226B
MD51294de804ea5400409324a82fdc7ec59
SHA19a39506bc6cadf99c1f2129265b610c69d1518f7
SHA256494398ec6108c68573c366c96aae23d35e7f9bdbb440a4aab96e86fcad5871d0
SHA512033905cc5b4d0c0ffab2138da47e3223765146fa751c9f84b199284b653a04874c32a23aae577d2e06ce6c6b34fec62331b5fc928e3baf68dc53263ecdfa10c1
-
Filesize
152B
MD5f1a9c7fa806c60a3c2ed8a7829b1461f
SHA1376cafc1b1b6b2a70cd56455124554c21b25c683
SHA2561eb39b1409ce78188c133089bf3660393ac043b5baade7ff322df5a0ca95380b
SHA512e1cb2f84b5cbd86b107c0a9ec0356ab65a54c91208f9f8e83fec64bf17ae89356a09b0cd39d2726424f4041d7b25b962c23672b8645c2e10f11ff4d2075f4afd
-
Filesize
152B
MD5f3f6e86c8b7bdc605f5559df800bfd34
SHA1862d05bfba760ae8adcbb509216dc18ead59a6b2
SHA2565dfe9be21d4916615025055f1a70151362bdb404b40f074685e39b33ad545a78
SHA512de576ebf0cbe1c5e7639c42517253796cf4b5770298271ac2e6958404998f2d6b8e3378a535f2f316f4020fd8e60b5cc9c1b6b5171d307ca3215afe8ac47a7c3
-
Filesize
1KB
MD502cc67bb147e978658f7e4a5b1cdbb37
SHA1ec9cb8afaa4146063e388a07da10f28bb6f6f3a7
SHA25607175280858d2a7713fd283c645eaa9d7a8c9224b8ab88fdba108c99443c7bc3
SHA5123e0bacff3c677af3b46223e151b8bc985546fe2ead6e3ba02c8e87b534f91d0684f986b6d459ee19cb33616b8e82faae01dcaf16aa80ab01455772db5b94f85e
-
Filesize
984B
MD5f50a755bcc3e8a78ff5d25e62c8b31c0
SHA1d42cac1e97dca0729c8835dc723b720dd99450e7
SHA256316be337d3f2565b6fc0b9dbf8a5c7c21efc01d00923b2dd7f0dc5d0c69e616e
SHA512fc2f2b4683a8841d96810e7430d9ad3bf22ce2df05b0e8fce01e5047fc36ecfbde8d8f7b79730665f2b2a709fd87e5d5df68bbcb699dcb7911c60dbb9ac22c83
-
Filesize
1KB
MD59eb42cba0d00805f10e741f6e3f3c092
SHA1e37f8781b27b2d140c20347fa49a7ffcf2e7a732
SHA25637647302a7a37b40286712d8e8713d964e69f1ebd0e240376db0d3d8edd7dc80
SHA512ae1f76d175d62289f5e379f1c098787c23856c84f5655c88f6c7cf02ed9ce51032176838d2875ec75cc2e8582140a85e15106258f52c57a4e979535e557ad79a
-
Filesize
2KB
MD5f96c1bc38d58d6bda418850db8b11dbb
SHA1862218893377598117fb0c15d846928d2686c97c
SHA2567d4a910cb3090fa169329e954b77e1e335555436fab11d32d0af02f2f808b4f9
SHA5128cebd0ca07b8df41a79e3f000e1fe0573be48529ff7e13dbedf0dd607757b379c357fa38cfffdcd18b1b61113fb407f265a0569499a809a6ecd79fa0b317daad
-
Filesize
5KB
MD514c6efe3d46ae129e98e15a4da89d8c3
SHA1736ad3b5c71bca2992f4f28ae6fcc129b6e14e54
SHA256f44d44ce599b88723bbe20b54562c931df0672dc8af989064f16073e2e741f0b
SHA51232be11ad70cd2dd8855b8695b35602d0cee506a0d7cb308ab533420ec4436ec4bf85b4132795400d355545fce8ae8b3c6692e4315e7b781b18e15bb64f7aaebf
-
Filesize
6KB
MD5a2c426ec9775e2ad0bae6c7d7fa2ee74
SHA17c21d008f704ca4cc5358e83064c8514c45fd5f2
SHA25685c8e85ff94f4edc54a82f5f83952ef799bae9f9792bd624e5c46926562341fd
SHA5126f8751ea4002f417e602fa12a33ae1624cb673da162218fd6abc7fb43d7a525c1eaab6b040cb692ded99a3c3371cd27bb7dead140fa840008687ffb56632baf8
-
Filesize
6KB
MD5be76196043cb16f4e27dafb23c0be624
SHA16efaeda5ab0f4c8dac7bef2722d60e84d3e429b4
SHA25663eb64dbe235ea128dfb413c180b56e61d942b6eefe7a4bfe652edfc1f865410
SHA512e1c234d65b80051660e5825654d9ca6c0a49ee734ec8c3eea216685d366af77377dbd050f97859e2708258bc625b318135118082798b6d6e61c2dbedfb1b7510
-
Filesize
2KB
MD5ce1f3374d990d1e84040ed5bd36601f4
SHA129e6787efe16729cfa6c4f69d745c82aa00ab0b3
SHA256310e1fb0c9c941755a1ef776f656f19006978daf1016608aae54ece8f52e34a4
SHA512c62dd923cfec8266e2c86e4e1453c58492a456a16bfc4db12d44560905079fc9bc0cbb66b6c5ac455a390d6dfa47c096140d6eb9ff68e22b3d54f8b4eb2cdb32
-
Filesize
2KB
MD592ed55155af9358b683dfbd3bdf88144
SHA1b1986ff2b2a83b6ce2fd66b72234339882dc52f7
SHA25656f12ffdb49e68c08f36620b1f8dce73fc27bcdc338111b14e1042efd89aeff2
SHA51292a471db6b85cc30f49e44302b06fca6afc1ff165b40d1236cd25beb0ac532fde673f4b7295f75d174c948a2a2505452df1c4e2b551df042ddb7f33814ba8f6f
-
Filesize
2KB
MD5cbb65951d34e4b7930d3a5d7405a4ecc
SHA1ef6164100f1587421dc5099c6a366f640b646003
SHA256e2950626d3944129ad814afe27bcb75ad96335be5ae7e68769bff5a8c22ebe88
SHA512030394f027e677dff38a2e806d2cdd26809e416cafa960112df6bac242626cb553339bd105a8b120abbda6e038774735ca66ff8cc1d5f425ff3c05e45f75f86f
-
Filesize
2KB
MD5c4e9bec789d55c0fb72b538c436a180a
SHA1cd3ff87c8ea2b60f63f04b8b859f0424c972484e
SHA25611f1733f258f614680ef3636a624cff7319ee73f753f8a9ce6ece7ab60bfc32a
SHA512fa68eda33d2429e0e2683d07bb750e76e7639c9a6e21dfe3825764880da5ffc214ee996990346d8d5cb91f348b6b1d1644158d8253dbbb80aa5d8fe4c226e862
-
Filesize
2KB
MD5e42c0784f17ab19ced8446fa9467642c
SHA1c57adfd426a8e33bc6b9871c7b17343903948027
SHA256fdc55512572fe1926009634b60e0c042cdc73653680c09d88d5a0227d3595937
SHA5124faadf9d40430a9dd94e4611f2009cbf0352569ada731a1394da9fb5cbdfde97cf77d3e5c7e1c878fae77f5930e27ffe7f19946d2ef9c56385087ab6daa3e805
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
11KB
MD588d117efc8c9cdf938c8b0aeba94566a
SHA1e1c097c5053120033bf2a2896025c517f8f7787b
SHA2564feb6f868731402003b75a044e272f0d11d2b92788483e71382d75864d88e033
SHA51288ba06e14ee4b988237cdad8ddfdb83b884c7a05dee719a99c478949743400c16f75f79163f781b97660869cb2d54cedd49350eb0c408ffc4b7e3cd8d4297bea
-
Filesize
11KB
MD5af709b262c91c431ba67f26a3427aa3d
SHA14d6b38203e1955ed14d05ec5d97c372549b28b03
SHA256c2b267b9757fca7b65815073a17d65f0de76d6ed5276042c5ced68ce2f9df505
SHA5125bef1b1c2f2e31dedfb6055aa5dc5f5e03e90836d4395f6a6901cfc5d4e2518249aa1cf88cbd3a435524ddd00351138a3befb187120db32faf0c30c6808a910d
-
Filesize
1KB
MD531a64e250bf784ee98dec8f698cb9eab
SHA1a5126c37364382624063c8b56bb6af37d6e253f3
SHA256982eb76a6b7e4ef0d77a36ba22e2845658eb7ac18ccc925f435835fd733500a3
SHA512df4dac2495575af76e667103dd66c1b3e315697c1ad28f873284915b6a786880e1a2fffad44c6577a823538a42da317bed31346e11033fde7608ceca48c83143
-
Filesize
45KB
MD546ae19bb3f96808608ef5394c42df20b
SHA13b2223c73b2564b8b9b4002892c8d7ab02ffc5a3
SHA25658b7e282d54f2daf939093b7f091139ac169c2363b20511e6912891b5ef32074
SHA51266a3ff8fe9f58e8cc628563d8d7316caa252b5f9754f92b8d31cb3b5b0d0afe0a175bccb207abe35acc2173a64718d31517e6ba626c91ee6641f33b734a5944f
-
Filesize
476B
MD57eb95792a4d72b620823ec636dcc81e6
SHA18eb09c7f9fa84e112e7848a99d0e28c6d29c00d0
SHA2567602c20a3430d8380b73f9b7dce83c9be0663b36183472895905497907718199
SHA512e8d9ae32b669ccea640322d6b8c8ef0eeab2f9c427649c020ac663c4f3f55f5324fcd78db56532ed513723fc09430b3a2a74a65e3bc0e1c2bca2b05e760c4f56
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
7.7MB
-
Filesize
7.7MB