GET cj.mplxtms.com/click-6361382-15020510?url=https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html
302 Found 627 B URL User Request GET HTTP/1.1 cj.mplxtms.com/click-6361382-15020510?url=https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html
IP
Certificate IssuerGlobalSign nv-sa
Subjectwww.qksrv.net
FingerprintDA:F0:4E:7F:39:78:20:F5:91:7B:91:04:A3:90:D0:4B:F3:52:F3:0F
ValidityThu, 21 Sep 2023 15:44:58 GMT - Tue, 22 Oct 2024 15:44:57 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (311)
Hash a3aa79122abaf91a58df3b81d2bbc5a2
9a936b968b8e5aeab159a5964648e8c5cae4e94a
00c19f588d02dd1c3d9a00ddfe74a8959de39fe37b9e1a6d0f145cc4ba591aa8
Analyzer Verdict Alert OpenPhish phishing WeTransfer
GET /click-6361382-15020510?url=https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html HTTP/1.1
Host: cj.mplxtms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: Resin/4.0.66
P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Tue, 31 Oct 2023 12:03:33 GMT
Location: https://cj.dotomi.com/sk82qgpo6/gns/59464954/A7A57C6/4/4/4?d=fB82%3DyAA69%25KR%25JW%25JW6Bs-PsuLsOrKOJvuLNQJPHQuPwLvNurJMNPI.8J.uvC%25JWDvA8r49wv89.yA32%3c%3cyAA69%3A%2F%2Ft0.362EA39.t53%2Ft2zt1-NKNIKPJ-IMHJHMIH%3c%3cX%3c%3c%3cI%3cI%3cH%3cH%3c
Content-Type: text/html; charset=UTF-8
Content-Length: 627
Date: Tue, 31 Oct 2023 12:03:33 GMT
X-VC-HTTPS: On
GET cj.dotomi.com/sk82qgpo6/gns/59464954/A7A57C6/4/4/4?d=fB82%3DyAA69%25KR%25JW%25JW6Bs-PsuLsOrKOJvuLNQJPHQuPwLvNurJMNPI.8J.uvC%25JWDvA8r49wv89.yA32%3c%3cyAA69%3A%2F%2Ft0.362EA39.t53%2Ft2zt1-NKNIKPJ-IMHJHMIH%3c%3cX%3c%3c%3cI%3cI%3cH%3cH%3c
302 Found 853 B URL User Request GET HTTP/1.1 cj.dotomi.com/sk82qgpo6/gns/59464954/A7A57C6/4/4/4?d=fB82%3DyAA69%25KR%25JW%25JW6Bs-PsuLsOrKOJvuLNQJPHQuPwLvNurJMNPI.8J.uvC%25JWDvA8r49wv89.yA32%3c%3cyAA69%3A%2F%2Ft0.362EA39.t53%2Ft2zt1-NKNIKPJ-IMHJHMIH%3c%3cX%3c%3c%3cI%3cI%3cH%3cH%3c
IP
Certificate IssuerGlobalSign nv-sa
Subjectwww.qksrv.net
FingerprintDA:F0:4E:7F:39:78:20:F5:91:7B:91:04:A3:90:D0:4B:F3:52:F3:0F
ValidityThu, 21 Sep 2023 15:44:58 GMT - Tue, 22 Oct 2024 15:44:57 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (424)
Hash c128749e005381d2deb97be998198d71
8d5c969ad946285166983b58f42d8ea1a0ed31c9
b4a25f9323c52d728a0d0370420e00e9af30f72eaecdff98959d846c3ccaa396
GET /sk82qgpo6/gns/59464954/A7A57C6/4/4/4?d=fB82%3DyAA69%25KR%25JW%25JW6Bs-PsuLsOrKOJvuLNQJPHQuPwLvNurJMNPI.8J.uvC%25JWDvA8r49wv89.yA32%3c%3cyAA69%3A%2F%2Ft0.362EA39.t53%2Ft2zt1-NKNIKPJ-IMHJHMIH%3c%3cX%3c%3c%3cI%3cI%3cH%3cH%3c HTTP/1.1
Host: cj.dotomi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: Resin/4.0.66
P3P: policyref="/w3c/p3p-d.xml", CP="NOI DSP NID OUR STP"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Tue, 31 Oct 2023 12:03:33 GMT
Set-Cookie: CJSession=8d7e18c2-2941-4da3-8828-1914c47a0958; Domain=.dotomi.com; Path=/; Secure; SameSite=None
cjae=0ZiEOkikD2xy; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None
DotomiUser=400405434553080567$0$1; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None
LCLK=cjo!w69l-w2fq1ki; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None
Location: https://www.emjcd.com/lr82efon7/fmr/48353843/96946B5/3/7337387678863B389A:3clHRnlnG5-0/B6f9i93eAAh844hhB6h9fgBB3d4BeBiC?p=b0xr%3Dnzzvy%259G%258L%258Lv0h-EhjAhDg9D8kjACF8E6FjElAkCjg8BCE7.x8.jk1%258L2kzxgtylkxy.nzsr%3cipu!2CFr-28lw7qo%3cnzzvy%3A%2F%2Fip.svr3zsy.ius%2Firoiq-C9C79E8-7B686B76%3c%3cM%3c%3cEjDk7Ei8-8FA7-Ajg9-EE8E-7F7AiADg6FBE%3c7%3c7%3c6%3c6%3c
Content-Type: text/html; charset=UTF-8
Content-Length: 853
Date: Tue, 31 Oct 2023 12:03:33 GMT
X-VC-HTTPS: On
GET www.emjcd.com/lr82efon7/fmr/48353843/96946B5/3/7337387678863B389A:3clHRnlnG5-0/B6f9i93eAAh844hhB6h9fgBB3d4BeBiC?p=b0xr%3Dnzzvy%259G%258L%258Lv0h-EhjAhDg9D8kjACF8E6FjElAkCjg8BCE7.x8.jk1%258L2kzxgtylkxy.nzsr%3cipu!2CFr-28lw7qo%3cnzzvy%3A%2F%2Fip.svr3zsy.ius%2Firoiq-C9C79E8-7B686B76%3c%3cM%3c%3cEjDk7Ei8-8FA7-Ajg9-EE8E-7F7AiADg6FBE%3c7%3c7%3c6%3c6%3c
302 Found 569 B URL User Request GET HTTP/1.1 www.emjcd.com/lr82efon7/fmr/48353843/96946B5/3/7337387678863B389A:3clHRnlnG5-0/B6f9i93eAAh844hhB6h9fgBB3d4BeBiC?p=b0xr%3Dnzzvy%259G%258L%258Lv0h-EhjAhDg9D8kjACF8E6FjElAkCjg8BCE7.x8.jk1%258L2kzxgtylkxy.nzsr%3cipu!2CFr-28lw7qo%3cnzzvy%3A%2F%2Fip.svr3zsy.ius%2Firoiq-C9C79E8-7B686B76%3c%3cM%3c%3cEjDk7Ei8-8FA7-Ajg9-EE8E-7F7AiADg6FBE%3c7%3c7%3c6%3c6%3c
IP
Certificate IssuerGlobalSign nv-sa
Subjectwww.qksrv.net
FingerprintDA:F0:4E:7F:39:78:20:F5:91:7B:91:04:A3:90:D0:4B:F3:52:F3:0F
ValidityThu, 21 Sep 2023 15:44:58 GMT - Tue, 22 Oct 2024 15:44:57 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 11e07533c0347e5ad6e2c846e2cb4d9b
90f1c476a56665154e5d8fa4fb7a0500cca95849
06add5bec9f025e0a7b6831fb4a07ce2968a064013d9d2b68e539c84d933928f
GET /lr82efon7/fmr/48353843/96946B5/3/7337387678863B389A:3clHRnlnG5-0/B6f9i93eAAh844hhB6h9fgBB3d4BeBiC?p=b0xr%3Dnzzvy%259G%258L%258Lv0h-EhjAhDg9D8kjACF8E6FjElAkCjg8BCE7.x8.jk1%258L2kzxgtylkxy.nzsr%3cipu!2CFr-28lw7qo%3cnzzvy%3A%2F%2Fip.svr3zsy.ius%2Firoiq-C9C79E8-7B686B76%3c%3cM%3c%3cEjDk7Ei8-8FA7-Ajg9-EE8E-7F7AiADg6FBE%3c7%3c7%3c6%3c6%3c HTTP/1.1
Host: www.emjcd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: Resin/4.0.66
Set-Cookie: S=400405434553080567:0ZiEOkikD2xy; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None
LCLK=cjo!w69l-w2fq1ki; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None
CJSession=8d7e18c2-2941-4da3-8828-1914c47a0958; Domain=.emjcd.com; Path=/; Secure; SameSite=None
S=400405434553080567:0ZiEOkikD2xy; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Tue, 31 Oct 2023 12:03:33 GMT
Location: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Content-Type: text/html; charset=UTF-8
Content-Length: 569
Date: Tue, 31 Oct 2023 12:03:33 GMT
X-VC-HTTPS: On
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
200 OK 156 kB URL User Request GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
IP
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62958), with CRLF line terminators
Size 156 kB (156101 bytes)
Hash a2de7d7a9086eb93de10243af46fa188
dc678f16db966328c5c0d383097bac22ee53a224
6a460bd01bd343b29cda6b2efe5036d478693e280fac57393127ae76603cb6e2
GET /wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510 HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"a2de7d7a9086eb93de10243af46fa188"
Last-Modified: Thu, 24 Aug 2023 18:43:56 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc169087fb4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/runtimeapplication-bafdd8b86fd88bb4273d.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16bfaa0b4f1-OSL
Content-Encoding: gzip
GET prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff
200 OK 43 kB URL GET HTTP/2 prod-cdn.wetransfer.net/packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 43188, version 0.0\012- data
Hash 55576599a2d772f9297c5036d355b1fb
c52e4f9a59137105deb12a3de25ee7d5a15fd286
1e3d5d86432b9bfcdf25ce0e35fd23667cea86f6fa71fa920cd84abb70258f73
GET /packs/media/gt-super-wt/GT-Super-WT-Super-1b214df1.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 43188
date: Sat, 28 Oct 2023 19:20:52 GMT
last-modified: Fri, 27 Oct 2023 13:10:40 GMT
etag: "55576599a2d772f9297c5036d355b1fb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ukd08f6i7n_5YBrLNGtQU1YBdQJXvfxiHVn3PnmdWDPtZXIcMqNxew==
age: 232963
X-Firefox-Spdy: h2
GET prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
200 OK 31 kB URL GET HTTP/2 prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31120, version 1.6554\012- data
Hash 57cbbfdafc43e0deecc75a309dd042c6
b9cc2ff331b8520706de175f5b3fdba6731a9bfc
a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 31120
date: Sat, 28 Oct 2023 19:20:52 GMT
last-modified: Fri, 27 Oct 2023 13:10:40 GMT
etag: "57cbbfdafc43e0deecc75a309dd042c6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uI5OWGF0ivmLDcFIYafqabu9fowMDWsWYGsrLnpgvhiUqsG9mG9b0g==
age: 232963
X-Firefox-Spdy: h2
GET prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
200 OK 32 kB URL GET HTTP/2 prod-cdn.wetransfer.net/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 32124, version 1.6554\012- data
Hash 868aedeefe7669e8a4f7196f7df5d058
45bd20ef2c6b717a2526efd98a01207979b2a623
d8700b022ef56752cd12ff224b3f409e84aeb8a43ac68ba052167096baf46555
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 32124
date: Sat, 28 Oct 2023 19:20:52 GMT
last-modified: Fri, 27 Oct 2023 13:10:40 GMT
etag: "868aedeefe7669e8a4f7196f7df5d058"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UzolEx_UUEAMdVEWXTQEkMgTpFt5NXxTSyshOtTO2fgygktUR9dzyA==
age: 232963
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
200 OK 6.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 31 Oct 2023 12:03:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 537808
expires: Sun, 20 Oct 2024 12:03:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=48bb9a4CDrwXFnRgfhbB3vfYVlq8mhCvhAFtwgMCMZOBSHyp0Xv1ox%2Bgb0IzHjD26F0mwUXU6A5x7G%2FWiyOvX64r64A77%2FBRnFP%2FFkAGJ%2Fb%2FD%2BijICJtsX%2FODy64Z2d1kvTNcQAE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81ebc16cb9f3b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.2.1.slim.min.js
200 OK 24 kB URL GET HTTP/2 code.jquery.com/jquery-3.2.1.slim.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32012)
Hash 5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Oct 2023 12:03:34 GMT
age: 3850015
x-served-by: cache-lga21963-LGA, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 22, 38204
x-timer: S1698753815.524832,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/application-c2b6f877fed288c2431f.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/application-c2b6f877fed288c2431f.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/application-c2b6f877fed288c2431f.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c4eea0b02-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/vendor-ef8fd9ca3a0295622111.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/vendor-ef8fd9ca3a0295622111.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/vendor-ef8fd9ca3a0295622111.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c49d4568b-OSL
Content-Encoding: gzip
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint87:BD:C2:71:54:40:3F:F2:18:79:1A:89:F5:E9:BC:63:E5:EC:57:64
ValidityMon, 09 Oct 2023 08:10:33 GMT - Mon, 01 Jan 2024 08:10:32 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Oct 2023 12:50:39 GMT
expires: Sun, 27 Oct 2024 12:50:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 256375
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/bat.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/bat.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/bat.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c8e8fb515-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/fbevents.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/fbevents.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/fbevents.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c89ccb4ff-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/analytics.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/analytics.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/analytics.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c8c4d5693-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/17116643.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/17116643.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/17116643.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16cfa71568b-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/wallpaper-59e18dcf37d4cc5f163b.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/wallpaper-59e18dcf37d4cc5f163b.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/wallpaper-59e18dcf37d4cc5f163b.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16cff480b02-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/gtm.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16d0eeab515-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-0d65947306b8b68f172b.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-0d65947306b8b68f172b.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16d2ca75693-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/sp.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/sp.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/sp.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16d2a2fb4ff-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-de295c39cb769807d9fa.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-de295c39cb769807d9fa.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16d6acc568b-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/0.txt
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/0.txt
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/0.txt HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16d6f8d0b02-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm_002.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm_002.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/gtm_002.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16c8b09b4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/runtimeapplication-bafdd8b86fd88bb4273d.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/runtimeapplication-bafdd8b86fd88bb4273d.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16e8c80b4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/application-c2b6f877fed288c2431f.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/application-c2b6f877fed288c2431f.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/application-c2b6f877fed288c2431f.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16f0d38b4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/vendor-ef8fd9ca3a0295622111.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/vendor-ef8fd9ca3a0295622111.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/vendor-ef8fd9ca3a0295622111.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc16f8d9fb4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/wallpaper-59e18dcf37d4cc5f163b.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/wallpaper-59e18dcf37d4cc5f163b.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/wallpaper-59e18dcf37d4cc5f163b.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc1702e32b4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/17116643.html
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/17116643.html
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/17116643.html HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc170af2db4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-0d65947306b8b68f172b.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-0d65947306b8b68f172b.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/en-0d65947306b8b68f172b.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc170cda8568b-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/gtm.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/gtm.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc170befa5693-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/sp.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/sp.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/sp.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc170cd5fb4ff-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-de295c39cb769807d9fa.js
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/en-de295c39cb769807d9fa.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/en-de295c39cb769807d9fa.js HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc171980bb4f1-OSL
Content-Encoding: gzip
GET pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/0.txt
404 Not Found 6.5 kB URL GET HTTP/1.1 pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/css/0.txt
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint91:F0:8B:D3:AA:FC:86:18:F9:F2:29:EB:98:8C:D8:5A:3A:76:5C:CF
ValidityWed, 11 Oct 2023 17:13:53 GMT - Tue, 09 Jan 2024 17:13:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
GET /css/0.txt HTTP/1.1
Host: pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 31 Oct 2023 12:03:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81ebc172188cb4f1-OSL
Content-Encoding: gzip
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
200 OK 38 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 31 Oct 2023 12:03:35 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 456457
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81ebc1723831b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
200 OK 6.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Oct 2023 12:03:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 537809
expires: Sun, 20 Oct 2024 12:03:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RBauOi3J2RoqGhgbIWIO%2FunhGdUaq%2Fmx9tFgqKReZSSyQPz1zLQ2K5foQB%2FiyomwiEgOQDBi%2FcCwqwwOMaJjabhD2sPw9W%2BHgEMkV6DNIiKKMtCweTRWXnZzWO9r3NlEXshkAb63"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81ebc172beddb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint87:BD:C2:71:54:40:3F:F2:18:79:1A:89:F5:E9:BC:63:E5:EC:57:64
ValidityMon, 09 Oct 2023 08:10:33 GMT - Mon, 01 Jan 2024 08:10:32 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Oct 2023 12:50:39 GMT
expires: Sun, 27 Oct 2024 12:50:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 256376
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
200 OK 56 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 31 Oct 2023 12:03:35 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 456457
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81ebc17379aab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
404 Not Found 15 kB URL GET HTTP/2 mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64
ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Medium-293e86f0.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 31 Oct 2023 12:03:35 GMT
X-Firefox-Spdy: h2
GET prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico
200 OK 42 kB URL GET HTTP/2 prod-cdn.wetransfer.net/packs/media/images/favicon-a34a7465.ico
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 692e1c7339c359b6412f059c9c9a0474
e7c1a53dca16b7664880e5b8a92524cf9a47fb62
d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda
GET /packs/media/images/favicon-a34a7465.ico HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 41566
date: Tue, 04 Apr 2023 02:41:35 GMT
last-modified: Mon, 03 Apr 2023 15:02:55 GMT
etag: "692e1c7339c359b6412f059c9c9a0474"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FaPzHy9dQKTRteAD8Togj-Oa3N7nzs6SneE2WjopPonRAC-bu9mRYw==
age: 18177722
X-Firefox-Spdy: h2
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
200 OK 49 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 31 Oct 2023 12:03:35 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 11/25/2022 23:23:38
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9711db700d302d3a8c5e1c1c9e722ee3
cdn-cache: HIT
cf-cache-status: HIT
age: 140414
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81ebc172e8e9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff
404 Not Found 12 kB URL GET HTTP/2 mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64
ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Bd-1bdd99f9.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 31 Oct 2023 12:03:35 GMT
X-Firefox-Spdy: h2
GET prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg
200 OK 1.7 kB URL GET HTTP/2 prod-cdn.wetransfer.net/packs/media/transfer_window/email-verification-lock-e6ed8c56.svg
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerAmazon
Subjectwetransfer.net
Fingerprint0B:0D:65:82:74:97:1B:AD:60:D8:48:2B:7D:A7:00:EA:34:08:86:48
ValiditySun, 30 Jul 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1818), with no line terminators
Hash 886c669e43a2cb3b3d624da08a9c39ff
565a6c535981f273b263ee8e6ae2d0fc9ab97565
c1532b769622f6757e4958c8b1c0789e73fab7c1bcc50ce57a0cfb903d6dfdd3
GET /packs/media/transfer_window/email-verification-lock-e6ed8c56.svg HTTP/1.1
Host: prod-cdn.wetransfer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 23 Oct 2023 12:20:35 GMT
last-modified: Mon, 23 Oct 2023 11:50:34 GMT
etag: W/"207f0c93fc997af575b8b9ad9db8777c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qFTajy3cu1xGaW8Iz0auX45Kx28XfSdy27L1ziQ842OoZX2F88nnJQ==
age: 690180
X-Firefox-Spdy: h2
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
200 OK 49 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 31 Oct 2023 12:03:34 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 11/25/2022 23:23:38
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9711db700d302d3a8c5e1c1c9e722ee3
cdn-cache: HIT
cf-cache-status: HIT
age: 140413
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81ebc16cbd9c5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg
404 Not Found 0 B URL GET HTTP/2 mk2-b4c8d3.ingress-earth.ewp.live/packs/media/images/globe-dd3d31e7.svg
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64
ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/images/globe-dd3d31e7.svg HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 31 Oct 2023 12:03:35 GMT
X-Firefox-Spdy: h2
GET mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
404 Not Found 12 kB URL GET HTTP/2 mk2-b4c8d3.ingress-earth.ewp.live/packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff
IP
Requested by https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/wetransfers.html?cjdata=MXxZfDB8WXww&CMP=afc_m_p_cj_na_ot_2022_99&SID=&cjevent=83c6f60b77e511ee83e6cd880a18b8f9&vendorid=CJM&PID=6361382&AID=15020510
Certificate IssuerSectigo Limited
Subject*.ingress-earth.ewp.live
Fingerprint87:B0:FA:CD:15:B0:DC:6A:0B:9C:74:EB:0C:94:AB:86:6C:62:06:64
ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /packs/media/actiefgrotesque/ActiefGrotesque_W_Regular-1f437876.woff HTTP/1.1
Host: mk2-b4c8d3.ingress-earth.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev/
Origin: https://pub-8bd4b7a372ed4692809d8f4e6da25681.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
date: Tue, 31 Oct 2023 12:03:35 GMT
X-Firefox-Spdy: h2
89.207.16.75
104.17.25.14