Report - auth.wetransfer.com/lo/reset?ticket=ZmsTF7K9KDRm8h73BNkaGV7uLpG0gcQr

Report Overview

Submitted URL
auth.wetransfer.com/lo/reset?ticket=ZmsTF7K9KDRm8h73BNkaGV7uLpG0gcQr
IP
108.157.214.94
ASN
#16509 AMAZON-02
Submitted
2024-05-06 05:59:44
Access
public
Website Title
Auth Static
Final URL
auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang=
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
auth-static.wetransfer.com	unknown	2007-12-14	2022-04-07	2023-07-19	5.1 kB	431 kB	54.230.111.106
auth.wetransfer.com	32158	2007-12-14	2018-09-18	2024-05-02	522 B	11 kB	108.157.214.94

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	auth-static.wetransfer.com/static/js/main.8e272730.js	342 kB	2024-05-02	2024-05-10
Pretty URL auth-static.wetransfer.com/static/js/main.8e272730.js IP 54.230.111.106 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 19:00:14 Last Seen2024-05-10 10:24:53 Times Seen8 Hash 24bdea15719e54e21a7edd9f378d6058 462a0c94cadf0e0fc9bd7532f8360a1010283bc4 31f55f447594137b99d7717a90175d819baf98e39f16348364609b34989caa2f Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang=	54.230.111.106	200 OK	665 B
URL User Request GET HTTP/2 auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= IP 54.230.111.106:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type HTML document, ASCII text, with very long lines (665), with no line terminators Size 665 B (665 bytes) Hash 7579fd1517aa65c94f4628647e019370 ff12c4fbe5bca337b9510798dc6db6526fb83692 4e2ff1ca4f7a33876062411f60facc3b10583940f6eea77eb88cf73ada5c5056 HTTP Headers GET /errors?error_description=Access%20expired.&lang= HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/html; charset=utf-8 content-length: 665 accept-ranges: bytes cache-control: public, must-revalidate, maxage=0, s-maxage=60 content-disposition: inline; filename="index.html" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Mon, 06 May 2024 05:59:19 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Miss from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: JHnCsP-te5a5UQx6u4m3nsCzRPPrBypi3wvZaPkcHypNV8uKe4N7hg== X-Firefox-Spdy: h2

	auth-static.wetransfer.com/static/css/main.857c57d1.css	54.230.111.106	200 OK	1.4 kB
URL GET HTTP/2 auth-static.wetransfer.com/static/css/main.857c57d1.css IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type ASCII text, with very long lines (1436), with no line terminators Size 1.4 kB (1436 bytes) Hash b78cd9ab20191151223ceede2227d37d b76545213f09fffde31ffaf105484a1a785b46bb 4dd6d8dd989336b17c66e960f291673ca0842d26ebde32f1c1d0693573ec1532 HTTP Headers GET /static/css/main.857c57d1.css HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: text/css; charset=utf-8 content-length: 1436 accept-ranges: bytes cache-control: public, max-age=315360000, s-maxage=31530000 content-disposition: inline; filename="main.857c57d1.css" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Sun, 01 Oct 2023 23:42:59 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: P9ULmoCig6EI3wTPu-yLCQviP_Mq-gQfvyLmEnwPrO_wAGM1se7yaA== age: 18771379 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/static/js/main.8e272730.js	54.230.111.106	200 OK	342 kB
URL GET HTTP/2 auth-static.wetransfer.com/static/js/main.8e272730.js IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (65465) Size 342 kB (342207 bytes) Hash 24bdea15719e54e21a7edd9f378d6058 462a0c94cadf0e0fc9bd7532f8360a1010283bc4 31f55f447594137b99d7717a90175d819baf98e39f16348364609b34989caa2f HTTP Headers `GET /static/js/main.8e272730.js HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: application/javascript; charset=utf-8 content-length: 342207 accept-ranges: bytes cache-control: public, max-age=315360000, s-maxage=31530000 content-disposition: inline; filename="main.8e272730.js" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Tue, 05 Dec 2023 00:07:04 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 9m3TdwLQMi6B_8jbYT6BrUk7FxT9bgvmfB8SnXm1k_cM2X0UWo9RGg== age: 13240335 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/static/media/ActiefGrotesque_W_Regular.1f4378761651f50dd209.woff	54.230.111.106	200 OK	31 kB
URL GET HTTP/2 auth-static.wetransfer.com/static/media/ActiefGrotesque_W_Regular.1f4378761651f50dd209.woff IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type Web Open Font Format, TrueType, length 31120, version 1.6554 Size 31 kB (31120 bytes) Hash 57cbbfdafc43e0deecc75a309dd042c6 b9cc2ff331b8520706de175f5b3fdba6731a9bfc a9117f16bdaa64c953b303bef951dfca6316ef59f1b7ca72d5b946b1d815f6a6 HTTP Headers GET /static/media/ActiefGrotesque_W_Regular.1f4378761651f50dd209.woff HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://auth-static.wetransfer.com/static/css/main.857c57d1.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff content-length: 31120 accept-ranges: bytes access-control-allow-origin: * cache-control: public, max-age=315360000, s-maxage=31530000 content-disposition: inline; filename="ActiefGrotesque_W_Regular.1f4378761651f50dd209.woff" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Wed, 01 May 2024 10:35:43 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: LTY-CiZzK8v2hgoEDv-JKjiMVy6RDJPUv-TF52hyIN04vfTqRTWmSw== age: 415416 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/locales/en.json	54.230.111.106	200 OK	136 B
URL GET HTTP/2 auth-static.wetransfer.com/locales/en.json IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type JSON text data Size 136 B (136 bytes) Hash 6542b6c7c7be70a15bd8b85228f258a0 1f9463c573880c400475cada9167e143193258ee 48e36e5085b72988df2d7468006d37743a2f2ca08dd1e1a8f579045bc26c02c0 HTTP Headers `GET /locales/en.json HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: application/json; charset=utf-8 content-length: 136 accept-ranges: bytes content-disposition: inline; filename="en.json" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Sun, 05 May 2024 11:15:27 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 5C-o2RHrtAHMdeQyXknhQwqfqmfu9_pvcyYgAd63AZ4Vl508kBt2JQ== age: 67432 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/logo192.png	54.230.111.106	200 OK	5.8 kB
URL GET HTTP/2 auth-static.wetransfer.com/logo192.png IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Size 5.8 kB (5792 bytes) Hash 6703684281ff1301ecb52b95eb6f38c6 a203fa01d943d93f99a18fc1d7fac96196080f36 559bead66f479ca434dc8f00d45cc79a1d35a39cd7b0458d0c46a2e512840359 HTTP Headers GET /logo192.png HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Cookie: _dd_s=rum=2&id=fe8ebc68-3fa6-42a0-b87c-631bf210fd13&created=1714975159722&expire=1714976059722 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/png content-length: 5792 accept-ranges: bytes cache-control: public, max-age=315360000, s-maxage=31530000 content-disposition: inline; filename="logo192.png" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Wed, 27 Mar 2024 12:02:42 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: zqVTCD-As7ZiDeijfnPlyw1a3Cz9qAxWBe1ipx5rS4ikkU4_lhf8HA== age: 3434197 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/favicon.ico	54.230.111.106	200 OK	42 kB
URL GET HTTP/2 auth-static.wetransfer.com/favicon.ico IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Size 42 kB (41566 bytes) Hash 692e1c7339c359b6412f059c9c9a0474 e7c1a53dca16b7664880e5b8a92524cf9a47fb62 d12161435ace47c6883360e08466508593325f134c1852b1d0e6e75d5f76adda HTTP Headers GET /favicon.ico HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Cookie: _dd_s=rum=2&id=fe8ebc68-3fa6-42a0-b87c-631bf210fd13&created=1714975159722&expire=1714976059722 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/vnd.microsoft.icon content-length: 41566 accept-ranges: bytes cache-control: public, max-age=315360000, s-maxage=31530000 content-disposition: inline; filename="favicon.ico" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Sun, 05 Nov 2023 17:21:43 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: xNScjAa6VCoe6pZ9qAwkH9MUiPmzNZN5N4k7_mjO0-G1brC7n5HtOQ== age: 15770256 X-Firefox-Spdy: h2

	auth-static.wetransfer.com/locales/en-US.json	54.230.111.106	200 OK	665 B
URL GET HTTP/2 auth-static.wetransfer.com/locales/en-US.json IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type HTML document, ASCII text, with very long lines (665), with no line terminators Size 665 B (665 bytes) Hash 7579fd1517aa65c94f4628647e019370 ff12c4fbe5bca337b9510798dc6db6526fb83692 4e2ff1ca4f7a33876062411f60facc3b10583940f6eea77eb88cf73ada5c5056 HTTP Headers GET /locales/en-US.json HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= DNT: 1 Connection: keep-alive Cookie: _dd_s=rum=2&id=fe8ebc68-3fa6-42a0-b87c-631bf210fd13&created=1714975159722&expire=1714976059722 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: text/html; charset=utf-8 content-length: 665 accept-ranges: bytes cache-control: public, must-revalidate, maxage=0, s-maxage=60 content-disposition: inline; filename="index.html" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Mon, 06 May 2024 05:59:19 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Miss from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: o4tIrvLYw3ZCeW0rXC5WdtwIQQds4e7GJWXfG_BjfLM07khGX0UoCw== X-Firefox-Spdy: h2

	auth-static.wetransfer.com/static/media/arrow--top-right.dd241edb54a6a0e470c6.svg	54.230.111.106	200 OK	266 B
URL GET HTTP/2 auth-static.wetransfer.com/static/media/arrow--top-right.dd241edb54a6a0e470c6.svg IP 54.230.111.106:443 ASN #16509 AMAZON-02 Requested by https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 266 B (266 bytes) Hash 7eed410a41c5a15baf4f733deec662be 716f2897254cf9afc67468431b0f2967a1958a0f 2b4c7414b2301fc411362c6979e74f861112e17f292a8ffdff60cc509634714f HTTP Headers GET /static/media/arrow--top-right.dd241edb54a6a0e470c6.svg HTTP/1.1 Host: auth-static.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://auth-static.wetransfer.com/static/css/main.857c57d1.css DNT: 1 Connection: keep-alive Cookie: _dd_s=rum=2&id=fe8ebc68-3fa6-42a0-b87c-631bf210fd13&created=1714975159722&expire=1714976059722 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: image/svg+xml content-length: 266 accept-ranges: bytes content-disposition: inline; filename="arrow--top-right.dd241edb54a6a0e470c6.svg" content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' date: Sun, 05 May 2024 09:21:00 GMT referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-cache: Hit from cloudfront via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: X4yZbcrEH75V2CbIc0UMHNZNlyiQU5klVAt0xf1M-zLvrZTyZ8H6VQ== age: 74299 X-Firefox-Spdy: h2

	auth.wetransfer.com/lo/reset?ticket=ZmsTF7K9KDRm8h73BNkaGV7uLpG0gcQr	108.157.214.94	302 Found	9.8 kB
URL User Request GET HTTP/2 auth.wetransfer.com/lo/reset?ticket=ZmsTF7K9KDRm8h73BNkaGV7uLpG0gcQr IP 108.157.214.94:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectwetransfer.com FingerprintC1:C6:48:BB:ED:6D:4A:32:B1:CD:74:36:6C:D3:0A:B0:7E:98:D7:2E ValidityFri, 09 Jun 2023 00:00:00 GMT - Sun, 07 Jul 2024 23:59:59 GMT File type data Size 9.8 kB (9766 bytes) Hash f4d4d2a1bff8c10e5420477fe7932166 731396329e9fd9251b34166424f80b76e7b41419 af94e86c4004aad061171028a6c8dc64f1144746a767935c52f1b77857fda18d HTTP Headers GET /lo/reset?ticket=ZmsTF7K9KDRm8h73BNkaGV7uLpG0gcQr HTTP/1.1 Host: auth.wetransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found content-type: text/html; charset=utf-8 location: https://auth-static.wetransfer.com/errors?error_description=Access%20expired.&lang= date: Mon, 06 May 2024 05:59:19 GMT cf-ray: 87f6be584d409f1b-FRA cf-cache-status: DYNAMIC strict-transport-security: max-age=31536000; includeSubDomains x-auth0-requestid: 4e8e220226bc10ca6018 x-content-type-options: nosniff set-cookie: __cf_bm=5szx8npEBHRgJ4EYJGmJPz0VNJGR75H32rlYYfk8cVA-1714975159-1.0.1.1-asI4cxs6ZCeO9nw3loIwMP7ItYzXGvKlwIPwt.q_9katqg52hu.bFUILyEhY0t88; path=/; expires=Mon, 06-May-24 06:29:19 GMT; domain=.eu.auth0.com; HttpOnly; Secure; SameSite=None server: cloudflare vary: Accept,Accept-Encoding x-cache: Miss from cloudfront via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 0U-2EwTuMyKJORCJtWvsCiZpD9l9qehOLoqwSk9krXfmg_R3Pbzk0Q== X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP