Windows Analysis Report
https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik

Overview

General Information

Sample URL: https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Analysis ID: 1428140
Infos:

Detection

Score: 2
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Found iframes
HTML body contains low number of good links
HTML body contains password input but no form action
Stores files to the Windows start menu directory

Classification

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://marketing.dropbox.com/login?referrer=
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Iframe src: https://marketing.dropbox.com/login?referrer=
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: Number of links: 0
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: <input type="password" .../> found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer= HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer= HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer= HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/ HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No favicon
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en HTTP Parser: No <meta name="copyright".. found
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49894 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49901 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49926 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: global traffic HTTP traffic detected: GET /l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz&sm=1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D
Source: global traffic HTTP traffic detected: GET /login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: GET /page_success/end?edison_page_name=login_page_edison&path=%2Flogin&request_id=cad0c4fd075645a4b69f01bf63c15666&time=1713448025 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: GET /login?referrer= HTTP/1.1Host: marketing.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
Source: global traffic HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pithos/host%3Amarketing.dropbox.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
Source: global traffic HTTP traffic detected: GET /sso_state HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=f70538b2f3e44e9289150e24c30e8a30&time=1713448030 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /2/account/check_user_with_email_exists HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /utag/dropbox/main/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /2/megaphone_chat/get_best_chat_campaigns HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:1$_ss:1$_st:1713449833602$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=dropbox/main/202404171946&cb=1713448034390 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /funcaptcha.js HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dropboxcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic HTTP traffic detected: GET /?ci=js/3.8.32&q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==
Source: global traffic HTTP traffic detected: GET /ajax_register_cmplx HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==
Source: unknown DNS traffic detected: queries for: www.dropbox.com
Source: unknown HTTP traffic detected: POST /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveContent-Length: 381sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFWX-Dropbox-Uid: -1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prodsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 13e52a00301e45fe91ad38beb4ccc5b9Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 64c6f539902441e1a28582c428b6529fConnection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: fc24553829454b03920899fcf3a4a57fConnection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 13:47:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 7beeb9687edb4fd5980efcfd5bafb40cConnection: closeContent-Length: 0
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: db4969050c7c46ffa1e95777b5ef7a08Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 51242db77907410ca67d28f5f894476cConnection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e7baf551e4684436b8a48285f874d04fConnection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d10dc7460b3848feada4a27058c56ad2Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 1a4b898934bb410cb3391050ff3da2acConnection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:18 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6c6344d2bd094087b3a96c418eee3646Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d8e1dafa4f3347c4b3020ab5eb79b5e8Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:48:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 10d63d90676b43f7a8288f1a2b89b9e2Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:49:02 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 7aef7f3888ff4567a3e67af042639afaConnection: close
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_209.1.dr String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_268.1.dr String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_268.1.dr String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_157.1.dr String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_209.1.dr String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_209.1.dr String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_209.1.dr String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_209.1.dr String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_268.1.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_268.1.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_268.1.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_240.1.dr String found in binary or memory: https://dropbox-api.arkoselabs.com/v2/
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/lp/business/distributed-teams
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles?experience=creative
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles?experience=hr
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles?experience=marketing
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles?experience=project-manager
Source: chromecache_157.1.dr String found in binary or memory: https://experience.dropbox.com/roles?experience=sales
Source: chromecache_209.1.dr String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_268.1.dr String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_217.1.dr, chromecache_197.1.dr, chromecache_241.1.dr, chromecache_211.1.dr String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_241.1.dr String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_268.1.dr String found in binary or memory: https://recaptcha.net
Source: chromecache_157.1.dr String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_252.1.dr String found in binary or memory: https://sourcegraph.pp.dropbox.com/server/-/blob/configs/security/csp/metaserver.yaml#L202
Source: chromecache_268.1.dr String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_268.1.dr String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_268.1.dr String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_268.1.dr String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_268.1.dr String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_190.1.dr String found in binary or memory: https://www.dropbox.com
Source: chromecache_157.1.dr String found in binary or memory: https://www.dropbox.com/?_hp=c
Source: chromecache_157.1.dr String found in binary or memory: https://www.dropbox.com/apps
Source: chromecache_273.1.dr String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_268.1.dr, chromecache_280.1.dr String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_157.1.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_tracking_id##
Source: chromecache_268.1.dr String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_280.1.dr String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown Network traffic detected: HTTP traffic on port 49888 -> 443
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49894 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49901 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49926 version: TLS 1.2
Source: classification engine Classification label: clean2.win@21/264@46/14
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs