{"report_id":"038aee60-209a-4d41-b6ac-70bbb21d1ac5","version":0,"status":"done","tags":[],"date":"2026-09-27T14:44:54Z","url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":0,"asn":31898,"as":"Oracle Corporation","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"title":"WeTransfer account | WeTransfer","dom":{"size":271709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65087)","md5":"cf8dbe0d4ff2b69d2a502254d6c79be7","sha1":"ddea105f14a43fc1b42e6f7b8140b66151894095","sha256":"402ce51c39379a62fcc7623b74f581763c2fab09a97f88662dbf7a181ba26668","sha512":"c264ae659a1c9accc1f046ae8f1600c18a0c78888ba9a51379d2d91fdf952232df38a41c34878a0ffa5e652fb9e07b4c5a3802bd9876e865d144f0dcecdf5586","ssdeep":"3072:dtLPcFdzM7pS8kCV9nT/Pf/xtAv1sZUwwecv8loLC5:nczzwpqCV9rPLA2ZjFlB5","tlshash":"aa443b230735a2699b192d24caf726c8700de4d2450b7fbaf08fd7d4d26e63c7857a68","dom_hash":"domhashd9c246c21eb3cdc0f95d4426c988b5cd","first_seen":"2026-09-27T14:44:57.025213Z","last_seen":"2026-09-27T14:44:57.025213Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":0,"asn":31898,"as":"Oracle Corporation","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T14:44:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"okklink.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amarulalodgewau.com","ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2011-02-02","domain_rank":0,"first_seen":"2026-09-27T12:29:11.846348Z","last_seen":"2026-09-27T12:29:11.846348Z","alert_count":0,"request_count":8,"received_data":1035866,"sent_data":3765,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"okklink.top","ip":{"addr":"104.21.0.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-20","domain_rank":64285,"first_seen":"2024-10-21T19:32:46.161037Z","last_seen":"2026-04-20T19:01:47.378511Z","alert_count":1,"request_count":1,"received_data":68345,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auth-cdn.wetransfer.com","ip":{"addr":"13.249.8.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-12-14","domain_rank":0,"first_seen":"2021-02-19T10:02:05Z","last_seen":"2026-06-28T02:01:44.628366Z","alert_count":0,"request_count":2,"received_data":18052,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Rokt","description":"Rokt is an ecommerce marketing technology that gives customers a personalised and relevant experience while buying online.","website":"https://www.rokt.com","common_platform_enumeration":"","icon":"Rokt.svg","categories":["Personalisation"]},{"name":"Very Good Security","description":"Very Good Security (VGS) is a data security and compliance platform that enables developers to securely handle sensitive data by encrypting, tokenising, and transmitting it through an intermediary service.","website":"https://www.verygoodsecurity.com","common_platform_enumeration":"","icon":"Very Good Security.svg","categories":["Security"]},{"name":"Linkedin Ads","description":"Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.","website":"https://business.linkedin.com/marketing-solutions/ads","common_platform_enumeration":"","icon":"Linkedin.svg","categories":["Advertising"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"okklink.top/js/amarulalodgewau.com/matomo.js?id=M-1790520266","fqdn":"okklink.top","domain":"okklink.top","tld":"top"},"ip":{"addr":"104.21.0.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b41888a87c22615114d73c91cc70a3","sha1":"a9e02fdb328a29bd8753e7000d0afe6ef635aad1","sha256":"f2e8975ed834c578c50d3923ceb26de04d4fa44f74380f45f147585d909a874d","sha512":"0023e6fd1e095cb37ffd94393f583f9a1ad1fe18a03b72bd035d431401038b48cc9689e2bbf4b0bbee5b6082e77db6e2bdd55b4d5ffb1c45f86e0f330789c10f","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEy+XzsyWbuds06Vdda8EbdAAOV4ITzvBCQaFLa:AT+Z2fuULzsyWbbVdda8EbdAA0XvBv5","tlshash":"0263d5ca72c275398bca6074603f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","size":67460,"data":"","first_seen":"2024-05-09T17:51:40Z","last_seen":"2026-10-11T22:42:53.936748Z","times_seen":8708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:44:25.794Z","timestamp":1790520265794,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/ HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:26 GMT\r\nServer: nginx/1.29.8\r\nContent-Type: text/html; charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Server-Cache: false\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271629,"size_decoded":139804,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65087)","md5":"56116d471d5517859e9454ca81d6035c","sha1":"e9ef0177e083c3ddd5923f2fbf67b013e34781bd","sha256":"31fbc18b77b047e1a9a62c5540143192e854815da20aafb0ac6fd92a9b4e1bdc","sha512":"e4a3667fa21cf05212cc409d1c1e6784337ab3459ed46c4b6eade33ee10d2ce9e72aa89180e108a45b04342af068bb86e2c85e2c5c9f9777daf0906646aceeb4","ssdeep":"3072:dtLPcFdzM7pS8kCV9nT/Pf/xtAv1sZUwwecv4lJLCy:nczzwpqCV9rPLA2Zjpl0y","tlshash":"98443b230735a2699b192d24caf726c8700de5d2450b7fbaf08fd7d0d26e63c7857a68","first_seen":"2026-09-27T14:44:57.026978Z","last_seen":"2026-09-27T14:44:57.026978Z","times_seen":1,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/images/transfer-general.png","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.413Z","timestamp":1790520266413,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/images/transfer-general.png HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/Wetransfer2/clients/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:26 GMT\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade\r\nLast-Modified: Sun, 30 Jun 2024 01:59:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 749894\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":749894,"size_decoded":750121,"mime_type":"image/png","magic":"PNG image data, 1064 x 728, 8-bit/color RGBA, non-interlaced","md5":"191ca40eb60d9cec5c2bc10a4234b220","sha1":"ab246ed9555de1211f4f43c9929f1d2ec4b49fa6","sha256":"26350bef02c0812b33389f4d5336ba0aa3422ad165cd536507b8431a22992582","sha512":"91026fa8f6f92dd5c31a7af9e44e89f02e77f344ef61620581d43b555a784dbabba64b24046fab56e029bb7bf321bd7aa9a75f7153c65e287c94ec7689893137","ssdeep":"12288:R9ukJ7HfHYz+eAQHfCD7r+RXsi1JjM5+z9LLkgiMc7uwagRGTvkZIWyZucQE:Tukl/vDQ6naRcirw5+z5kvMAagUrOIWo","tlshash":"7df42377578f2b84cf17cd13948b43ab9544cc0b365738b2dab5948883212fbc99b9b6","first_seen":"2023-11-17T10:59:19Z","last_seen":"2026-09-27T14:44:57.028339Z","times_seen":131,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":145,"dns":0,"connect":152,"send":0,"wait":154,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/images/logo-free-mobile.svg","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.415Z","timestamp":1790520266415,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/images/logo-free-mobile.svg HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/Wetransfer2/clients/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:26 GMT\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade\r\nLast-Modified: Sun, 30 Jun 2024 01:59:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5886\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5886,"size_decoded":6115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d60027d90ce87f982371e109b4fea0b","sha1":"1eb0a51d053f58edd3b4c51d08ee163996b7f4f8","sha256":"9fe25d8abe96455f6df6a86e43a7647cdd2c6fc3a9594fdb09911cece95d6b72","sha512":"e84e40b1c5f1734f78404d42dbe400bad128de33a79f5d2bb5d25f287ad4456a298ae3cbd6e4bba477d4c08b398864166cd40f451c841038fc8b2e0d8cc7bf46","ssdeep":"96:XMHMrKAP4o4/elbA9PrmUYpa2w2QPZGl2D4oqvYkg/34yi6lFCrye17IpbpbYJX:WSKAPBAmHkZpP4l2DuvYk0i6fCryMe18","tlshash":"45c1a6de779562f46906e7f4c83250797e6634f9bb40ef5083399e54b8620eecc44c92","first_seen":"2023-11-24T15:24:58Z","last_seen":"2026-09-27T14:44:57.029909Z","times_seen":18,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":144,"dns":0,"connect":152,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okklink.top/js/amarulalodgewau.com/matomo.js?id=M-1790520266","fqdn":"okklink.top","domain":"okklink.top","tld":"top"},"ip":{"addr":"104.21.0.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.692Z","timestamp":1790520266692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okklink.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:18:47 GMT","end":"Fri, 30 Oct 2026 04:17:13 GMT"},"fingerprint":{"sha1":"E5:44:AA:A5:44:D8:24:76:2B:0B:0C:E5:C8:55:03:70:D1:33:29:55","sha256":"AD:3D:1D:16:12:CA:78:6C:6A:6A:68:36:47:F7:5A:0E:18:8A:65:98:27:E3:8E:C5:26:E4:29:C4:C3:4B:CE:0D"}}},"request":{"raw":"GET /js/amarulalodgewau.com/matomo.js?id=M-1790520266 HTTP/1.1\r\nHost: okklink.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 14:44:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21925\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: Content-Type, X-Custom-Header\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Sun, 27 Sep 2026 14:44:27 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il907zyct4FtXiqXUuM1cLUbqxA6vT%2BJgkPAgjPZYa%2F4Z2kqJzoeCOKAoAaSRRCMMKnhOKBZl3pOiGXhykKjrc56lC4U%2FW5bFVvrj2%2Fla%2B36xEhpvDbjrIPvK7OBGA%3D%3D\"}]}\r\ncf-ray: a41b495338e723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67460,"size_decoded":22810,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2854)","md5":"97b41888a87c22615114d73c91cc70a3","sha1":"a9e02fdb328a29bd8753e7000d0afe6ef635aad1","sha256":"f2e8975ed834c578c50d3923ceb26de04d4fa44f74380f45f147585d909a874d","sha512":"0023e6fd1e095cb37ffd94393f583f9a1ad1fe18a03b72bd035d431401038b48cc9689e2bbf4b0bbee5b6082e77db6e2bdd55b4d5ffb1c45f86e0f330789c10f","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEy+XzsyWbuds06Vdda8EbdAAOV4ITzvBCQaFLa:AT+Z2fuULzsyWbbVdda8EbdAA0XvBv5","tlshash":"0263d5ca72c275398bca6074603f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","first_seen":"2024-05-09T17:51:40Z","last_seen":"2026-10-11T22:42:53.936748Z","times_seen":8708,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":54,"connect":1,"send":0,"wait":374,"receive":141,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"okklink.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-cdn.wetransfer.com/assets/styles/fonts.css","fqdn":"auth-cdn.wetransfer.com","domain":"wetransfer.com","tld":"com"},"ip":{"addr":"13.249.8.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.357Z","timestamp":1790520266357,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /assets/styles/fonts.css HTTP/1.1\r\nHost: auth-cdn.wetransfer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 9\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://cdn.wetransfer.com 'nonce-3cee6958-7c28-41b9-9290-77d1ef480e9b' 'sha256-4hRuHNFOqK6I2GgL9T5HwGETI5qu8rNsCs1G/d5PPBk=' 'sha256-ZES/2z0cbUZYbmG6sgCzU453zUUUmmotyFwnZ7G8WaY=' 'sha256-NvzBT9rJnGEWMlHqwvXg6OHIegGdn5PsAP3YZ7RzmgE=' 'sha256-f/k++c7mXW35G13Y7R6PzP/vWuqKqAVF3ph0iisXZX0=' 'sha256-ws2EcVAq3u/bDFH4r+3pcRahQuX/HRlekAqTc6GnDWI=' 'sha256-Bd1r8fyU+a98FYknUDsYXLvQwPaw2Trg0SDQ0pT+cWY=' 'sha256-scue6/wrhAUP1T4+YMVMvhoJLHziYmv37BcJuN11XwM=' 'sha256-tUHp97FxQMwOfUs1KAvNxJvnntHhr1ukXQBr1sZ/vKA=' 'sha256-L8m6ygYvYlmr5M0s5E/t19ls7FHY3o5G8LFtd8UqytA=' 'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo=' 'sha256-1+tdasFuSYydtmIV8i2k8bpXyDasrvpd0i6vXt5p8xo=' 'sha256-pe6hK6/pXs86IrWP5sSJTjHKKgBqZoSjkbrMZLM0MQg=' 'wasm-unsafe-eval' blob: https://nolan.wetransfer.net https://nolan.wetransferbeta.net https://accounts.google.com https://tagging.wetransfer.com https://www.googletagmanager.com https://bat.bing.com https://cdn.cookielaw.org https://js.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms https://*.rokt.com https://*.hcaptcha.com https://*.typeform.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://snap.licdn.com https://*.brandmetrics.com https://*.amazon-adsystem.com https://*.crwdcntrl.net https://js.adsrvr.org https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://*.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://privacy.wetransfer.com https://*.doubleverify.com https://aam.a47b.com https://cdn.xpln.tech https://unpkg.com; style-src 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com https://fonts.gstatic.com; style-src-elem 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com; font-src 'self' https://cdn.wetransfer.com data: https://fonts.gstatic.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com; img-src 'self' data: blob: itms-apps: itms-appss: https://*.zendesk.com https://*.zdassets.com https://*.wetransfer.com https://*.wetransfer.net https://*.wetransferbeta.net https://*.wetransferbeta.com https://*.hotjar.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://cdn.cookielaw.org https://*.googleusercontent.com https://accounts.google.com https://www.googletagmanager.com https://*.amazonaws.com https://www.facebook.com https://connect.facebook.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://adservice.google.com https://*.analytics.google.com https://www.google.com https://google.com https://unpkg.com https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.co.in https://www.google.it https://www.google.nl https://www.google.at https://www.google.pl https://www.google.ch https://www.google.com.br https://www.google.co.za https://www.google.be https://www.google.pt https://www.google.ro https://www.google.com.tr https://www.google.se https://www.google.com.co https://www.google.com.ng https://www.google.si https://www.google.ca https://www.google.gr https://www.google.no https://www.google.com.au https://www.google.com.ar https://www.google.ge https://www.google.cl https://www.google.bg https://www.google.dk https://www.google.com.pk https://www.google.com.hk https://www.google.com.mx https://www.google.jo https://www.google.com.cy https://www.google.com.lb https://www.google.iq https://www.google.hr https://www.google.az https://www.google.al https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleverify.com https://di.rlcdn.com https://*.brandmetrics.com https://*.clarity.ms https://data.ad-score.com https://*.adform.net https://fonts.gstatic.com https://ep1.adtrafficquality.google https://*.flashtalking.com https://*.adsafeprotected.com https://*.adition.com https://*.everesttech.net https://tracker.samplicio.us https://track.activemetering.com https://pixel.mtrcs.samba.tv https://tag.researchnow.com https://*.hit.gemius.pl https://secure.insightexpressai.com https://*.innovid.com https://secure-gl.imrworldwide.com https://translate.google.com https://px.ads.linkedin.com https://x.bndspn.com https://apps.apple.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com; connect-src 'self' blob: https://wetransferbeta.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransfer.com https://*.wetransfer.net https://*.wetransfer.com https://*.datadoghq.eu https://browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu https://*.hcaptcha.com https://*.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://vgs-collect-keeper.apps.verygood.systems https://*.zendesk.com wss://*.zendesk.com https://*.zdassets.com https://app.launchdarkly.com wss://*.hotjar.com https://*.hotjar.io https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://fonts.googleapis.com https://accounts.google.com https://www.google.com https://www.googletagmanager.com https://*.rokt.com https://*.adzerk.net https://*.googlesyndication.com https://*.googleusercontent.com https://*.typeform.com https://*.amazonaws.com https://s.pinimg.com https://ct.pinterest.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://insight.adsrvr.org https://*.crwdcntrl.net https://*.ltmsphrcl.net https://x.bndspn.com https://apps.apple.com https://www.facebook.com https://www.google-analytics.com https://ad.doubleclick.net https://securepubads.g.doubleclick.net https://collector.brandmetrics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://google.com https://ep1.adtrafficquality.google https://csi.gstatic.com https://translate-pa.googleapis.com https://translate.googleapis.com https://px.ads.linkedin.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutanalytics-test.adyen.com https://checkoutanalytics-live.adyen.com; frame-src 'self' https://accounts.google.com https://tagging.wetransfer.com https://*.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://*.hcaptcha.com https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransfer.zendesk.com https://*.rokt.com https://match.adsrvr.org https://insight.adsrvr.org https://ct.pinterest.com https://*.crwdcntrl.net https://www.googletagmanager.com https://www.google.com https://cm.g.doubleclick.net https://ep2.adtrafficquality.google https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://*.amazon-adsystem.com https://gum.criteo.com https://google-bidout-d.openx.net https://www.facebook.com https://*.trustpilot.com https://console.googletagservices.com; worker-src 'self' blob:; media-src 'self' blob: https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransferplusimages.s3.eu-west-1.amazonaws.com https://static.zdassets.com; object-src 'none'; base-uri 'self'; form-action 'self' https://webto.salesforce.com https://test.salesforce.com https://wetransfer.zendesk.com https://www.facebook.com; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pubabbc81b16855ec184b0753bf36600da1\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=service%3Afrontend-transfer%2Cenv%3Aproduction%2Cversion%3Abd92faaec73ca824d65e996c181f9d9aa4678155\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ndate: Sun, 27 Sep 2026 14:44:26 GMT\r\ndocument-policy: js-profiling\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Error from cloudfront\r\nvia: 1.1 7d287cb7ea5225b8d6559a32aee5ce72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: yelQ2flWuHjEe23A9M4X6dwdMgeFeWrcDqm0fFj4QHSipR-197-GIw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Rokt","description":"Rokt is an ecommerce marketing technology that gives customers a personalised and relevant experience while buying online.","website":"https://www.rokt.com","common_platform_enumeration":"","icon":"Rokt.svg","categories":["Personalisation"]},{"name":"Very Good Security","description":"Very Good Security (VGS) is a data security and compliance platform that enables developers to securely handle sensitive data by encrypting, tokenising, and transmitting it through an intermediary service.","website":"https://www.verygoodsecurity.com","common_platform_enumeration":"","icon":"Very Good Security.svg","categories":["Security"]},{"name":"Linkedin Ads","description":"Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.","website":"https://business.linkedin.com/marketing-solutions/ads","common_platform_enumeration":"","icon":"Linkedin.svg","categories":["Advertising"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T02:31:02.197527Z","times_seen":19043841,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-cdn.wetransfer.com/assets/styles/transfer_login_styles.css?v=6c30b921f9dd647809ab6d2438aa5522","fqdn":"auth-cdn.wetransfer.com","domain":"wetransfer.com","tld":"com"},"ip":{"addr":"13.249.8.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.401Z","timestamp":1790520266401,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /assets/styles/transfer_login_styles.css?v=6c30b921f9dd647809ab6d2438aa5522 HTTP/1.1\r\nHost: auth-cdn.wetransfer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 9\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://cdn.wetransfer.com 'nonce-cfd19197-ef11-4d11-a8b6-631070bbc2f2' 'sha256-4hRuHNFOqK6I2GgL9T5HwGETI5qu8rNsCs1G/d5PPBk=' 'sha256-ZES/2z0cbUZYbmG6sgCzU453zUUUmmotyFwnZ7G8WaY=' 'sha256-NvzBT9rJnGEWMlHqwvXg6OHIegGdn5PsAP3YZ7RzmgE=' 'sha256-f/k++c7mXW35G13Y7R6PzP/vWuqKqAVF3ph0iisXZX0=' 'sha256-ws2EcVAq3u/bDFH4r+3pcRahQuX/HRlekAqTc6GnDWI=' 'sha256-Bd1r8fyU+a98FYknUDsYXLvQwPaw2Trg0SDQ0pT+cWY=' 'sha256-scue6/wrhAUP1T4+YMVMvhoJLHziYmv37BcJuN11XwM=' 'sha256-tUHp97FxQMwOfUs1KAvNxJvnntHhr1ukXQBr1sZ/vKA=' 'sha256-L8m6ygYvYlmr5M0s5E/t19ls7FHY3o5G8LFtd8UqytA=' 'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo=' 'sha256-1+tdasFuSYydtmIV8i2k8bpXyDasrvpd0i6vXt5p8xo=' 'sha256-pe6hK6/pXs86IrWP5sSJTjHKKgBqZoSjkbrMZLM0MQg=' 'wasm-unsafe-eval' blob: https://nolan.wetransfer.net https://nolan.wetransferbeta.net https://accounts.google.com https://tagging.wetransfer.com https://www.googletagmanager.com https://bat.bing.com https://cdn.cookielaw.org https://js.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms https://*.rokt.com https://*.hcaptcha.com https://*.typeform.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://snap.licdn.com https://*.brandmetrics.com https://*.amazon-adsystem.com https://*.crwdcntrl.net https://js.adsrvr.org https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://*.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://privacy.wetransfer.com https://*.doubleverify.com https://aam.a47b.com https://cdn.xpln.tech https://unpkg.com; style-src 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com https://fonts.gstatic.com; style-src-elem 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com; font-src 'self' https://cdn.wetransfer.com data: https://fonts.gstatic.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com; img-src 'self' data: blob: itms-apps: itms-appss: https://*.zendesk.com https://*.zdassets.com https://*.wetransfer.com https://*.wetransfer.net https://*.wetransferbeta.net https://*.wetransferbeta.com https://*.hotjar.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://cdn.cookielaw.org https://*.googleusercontent.com https://accounts.google.com https://www.googletagmanager.com https://*.amazonaws.com https://www.facebook.com https://connect.facebook.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://adservice.google.com https://*.analytics.google.com https://www.google.com https://google.com https://unpkg.com https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.co.in https://www.google.it https://www.google.nl https://www.google.at https://www.google.pl https://www.google.ch https://www.google.com.br https://www.google.co.za https://www.google.be https://www.google.pt https://www.google.ro https://www.google.com.tr https://www.google.se https://www.google.com.co https://www.google.com.ng https://www.google.si https://www.google.ca https://www.google.gr https://www.google.no https://www.google.com.au https://www.google.com.ar https://www.google.ge https://www.google.cl https://www.google.bg https://www.google.dk https://www.google.com.pk https://www.google.com.hk https://www.google.com.mx https://www.google.jo https://www.google.com.cy https://www.google.com.lb https://www.google.iq https://www.google.hr https://www.google.az https://www.google.al https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleverify.com https://di.rlcdn.com https://*.brandmetrics.com https://*.clarity.ms https://data.ad-score.com https://*.adform.net https://fonts.gstatic.com https://ep1.adtrafficquality.google https://*.flashtalking.com https://*.adsafeprotected.com https://*.adition.com https://*.everesttech.net https://tracker.samplicio.us https://track.activemetering.com https://pixel.mtrcs.samba.tv https://tag.researchnow.com https://*.hit.gemius.pl https://secure.insightexpressai.com https://*.innovid.com https://secure-gl.imrworldwide.com https://translate.google.com https://px.ads.linkedin.com https://x.bndspn.com https://apps.apple.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com; connect-src 'self' blob: https://wetransferbeta.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransfer.com https://*.wetransfer.net https://*.wetransfer.com https://*.datadoghq.eu https://browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu https://*.hcaptcha.com https://*.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://vgs-collect-keeper.apps.verygood.systems https://*.zendesk.com wss://*.zendesk.com https://*.zdassets.com https://app.launchdarkly.com wss://*.hotjar.com https://*.hotjar.io https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://fonts.googleapis.com https://accounts.google.com https://www.google.com https://www.googletagmanager.com https://*.rokt.com https://*.adzerk.net https://*.googlesyndication.com https://*.googleusercontent.com https://*.typeform.com https://*.amazonaws.com https://s.pinimg.com https://ct.pinterest.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://insight.adsrvr.org https://*.crwdcntrl.net https://*.ltmsphrcl.net https://x.bndspn.com https://apps.apple.com https://www.facebook.com https://www.google-analytics.com https://ad.doubleclick.net https://securepubads.g.doubleclick.net https://collector.brandmetrics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://google.com https://ep1.adtrafficquality.google https://csi.gstatic.com https://translate-pa.googleapis.com https://translate.googleapis.com https://px.ads.linkedin.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutanalytics-test.adyen.com https://checkoutanalytics-live.adyen.com; frame-src 'self' https://accounts.google.com https://tagging.wetransfer.com https://*.stripe.com https://js.verygoodvault.com https://js3.verygoodvault.com https://*.hcaptcha.com https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransfer.zendesk.com https://*.rokt.com https://match.adsrvr.org https://insight.adsrvr.org https://ct.pinterest.com https://*.crwdcntrl.net https://www.googletagmanager.com https://www.google.com https://cm.g.doubleclick.net https://ep2.adtrafficquality.google https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://*.amazon-adsystem.com https://gum.criteo.com https://google-bidout-d.openx.net https://www.facebook.com https://*.trustpilot.com https://console.googletagservices.com; worker-src 'self' blob:; media-src 'self' blob: https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransferplusimages.s3.eu-west-1.amazonaws.com https://static.zdassets.com; object-src 'none'; base-uri 'self'; form-action 'self' https://webto.salesforce.com https://test.salesforce.com https://wetransfer.zendesk.com https://www.facebook.com; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pubabbc81b16855ec184b0753bf36600da1\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=service%3Afrontend-transfer%2Cenv%3Aproduction%2Cversion%3Abd92faaec73ca824d65e996c181f9d9aa4678155\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ndate: Sun, 27 Sep 2026 14:44:26 GMT\r\ndocument-policy: js-profiling\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cache: Error from cloudfront\r\nvia: 1.1 7d287cb7ea5225b8d6559a32aee5ce72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: eNaZeWeXYvroaIt8yyOSV_coAu5CYlBXVZDQ1ClV-jRwfO0M6X45bw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Rokt","description":"Rokt is an ecommerce marketing technology that gives customers a personalised and relevant experience while buying online.","website":"https://www.rokt.com","common_platform_enumeration":"","icon":"Rokt.svg","categories":["Personalisation"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Very Good Security","description":"Very Good Security (VGS) is a data security and compliance platform that enables developers to securely handle sensitive data by encrypting, tokenising, and transmitting it through an intermediary service.","website":"https://www.verygoodsecurity.com","common_platform_enumeration":"","icon":"Very Good Security.svg","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Linkedin Ads","description":"Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.","website":"https://business.linkedin.com/marketing-solutions/ads","common_platform_enumeration":"","icon":"Linkedin.svg","categories":["Advertising"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T02:31:02.197527Z","times_seen":19043841,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/images/cross-icon.svg","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.409Z","timestamp":1790520266409,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/images/cross-icon.svg HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/Wetransfer2/clients/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:26 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Jun 2024 01:59:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 977\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":977,"size_decoded":1167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50504507665a7565f3f5cea4b2061938","sha1":"0272d06c5c8c0289682b0d0261f65bacf8c774d8","sha256":"d58a7b9518c5f32458eccc39b0cd4c187968697f83fea7bfc56ce0dc21cd5f62","sha512":"8fab7aca24d2b57b8d095fa1f771bec221c0e449df31f262111cd45b2135745605d4a1b560e3ccaa50627e984b4f846961a761bbe5c15edab2261b3dc9fc72d4","ssdeep":"","tlshash":"ae11d0e37629a5cc4502733d967e29dbd46e207da3c5ce65c040fce61c265748ae4d94","first_seen":"2023-11-17T10:59:19Z","last_seen":"2026-09-27T14:44:57.033081Z","times_seen":32,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/images/wetransfer-text-logo.svg","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:26.412Z","timestamp":1790520266412,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/images/wetransfer-text-logo.svg HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/Wetransfer2/clients/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:26 GMT\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade\r\nLast-Modified: Sun, 30 Jun 2024 01:59:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5988\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5988,"size_decoded":6217,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fd2a2852ba84958a0cc197210565da2","sha1":"5a455c337382da2c78915ef4b73ce9a770bd3f9a","sha256":"fd7108379b77e618b1f8e812a72c90338233b88137fe80666d236db4295ed57c","sha512":"6b2c2967ccebe845c4615cd3595d0820fb9303e00d67505f71e0fae559e718968c525ccfa137c64700b1a8610fcc961170c89f25730f57ac2f4477bdf2325b0e","ssdeep":"96:LlItmaWWj7NfEdNjsuLqZKWJgI9mTkBpojU7EOVbX40WOyIQJI5:BFI6dGKWJlokaOBZyIN","tlshash":"d5c197f562e893e4aa05e7d1d72ba076745f24fcbbc6c774c248ee84e85115d9c4cc82","first_seen":"2024-05-06T15:04:59Z","last_seen":"2026-09-27T14:44:57.034293Z","times_seen":126,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":146,"dns":0,"connect":154,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients/images/favicon.ico","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://amarulalodgewau.com/Wetransfer2/clients/","date":"2026-09-27T14:44:27.071Z","timestamp":1790520267071,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients/images/favicon.ico HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://amarulalodgewau.com/Wetransfer2/clients/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 14:44:27 GMT\r\nServer: nginx/1.29.8\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nX-Server-Cache: false\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":160,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T02:31:02.197527Z","times_seen":19043841,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amarulalodgewau.com/Wetransfer2/clients","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:44:25.128Z","timestamp":1790520265128,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /Wetransfer2/clients HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T02:31:02.197527Z","times_seen":19043841,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"amarulalodgewau.com/Wetransfer2/clients","fqdn":"amarulalodgewau.com","domain":"amarulalodgewau.com","tld":"com"},"ip":{"addr":"173.254.126.115","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:44:25.473Z","timestamp":1790520265473,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Wetransfer2/clients HTTP/1.1\r\nHost: amarulalodgewau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 27 Sep 2026 14:44:25 GMT\r\nServer: nginx/1.29.8\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 295\r\nLocation: http://amarulalodgewau.com/Wetransfer2/clients/\r\nX-Server-Cache: false\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T02:31:02.197527Z","times_seen":19043841,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":4,"connect":155,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}