Edit tour

Windows Analysis Report
https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Analysis ID:	1428140
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://marketing.dropbox.com/login?referrer=
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Iframe src: https://marketing.dropbox.com/login?referrer=

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: Number of links: 0

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en	HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer=	HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer=	HTTP Parser: No favicon
Source: https://marketing.dropbox.com/login?referrer=	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No favicon

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No <meta name="author".. found

Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_30451_166989&as=XH4shU7f7z6nRnEFJo%2F1NA&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_32097_779809&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_141235_229529&as=i1yydt8UDmbeMeGxKgK9dQ&hl=en	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49926 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz&sm=1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D
Source: global traffic	HTTP traffic detected: GET /login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=login_page_edison&path=%2Flogin&request_id=cad0c4fd075645a4b69f01bf63c15666&time=1713448025 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic	HTTP traffic detected: GET /login?referrer= HTTP/1.1Host: marketing.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.dropbox.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
Source: global traffic	HTTP traffic detected: GET /sso_state HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=f70538b2f3e44e9289150e24c30e8a30&time=1713448030 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /2/account/check_user_with_email_exists HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/main/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/megaphone_chat/get_best_chat_campaigns HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:1$_ss:1$_st:1713449833602$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=dropbox/main/202404171946&cb=1713448034390 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /funcaptcha.js HTTP/1.1Host: dropboxcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dropboxcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
Source: global traffic	HTTP traffic detected: GET /?ci=js/3.8.32&q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==
Source: global traffic	HTTP traffic detected: GET /ajax_register_cmplx HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown

HTTP traffic detected: POST /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveContent-Length: 381sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFWX-Dropbox-Uid: -1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prodsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 13e52a00301e45fe91ad38beb4ccc5b9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 64c6f539902441e1a28582c428b6529fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: fc24553829454b03920899fcf3a4a57fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 13:47:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 7beeb9687edb4fd5980efcfd5bafb40cConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: db4969050c7c46ffa1e95777b5ef7a08Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 51242db77907410ca67d28f5f894476cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e7baf551e4684436b8a48285f874d04fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d10dc7460b3848feada4a27058c56ad2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 1a4b898934bb410cb3391050ff3da2acConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:18 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6c6344d2bd094087b3a96c418eee3646Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:47:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d8e1dafa4f3347c4b3020ab5eb79b5e8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:48:17 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 10d63d90676b43f7a8288f1a2b89b9e2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 13:49:02 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 7aef7f3888ff4567a3e67af042639afaConnection: close

Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_209.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_268.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_268.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_157.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_209.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_209.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_209.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_209.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_268.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_268.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_268.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_240.1.dr	String found in binary or memory: https://dropbox-api.arkoselabs.com/v2/
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/lp/business/distributed-teams
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles?experience=creative
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles?experience=hr
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles?experience=marketing
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles?experience=project-manager
Source: chromecache_157.1.dr	String found in binary or memory: https://experience.dropbox.com/roles?experience=sales
Source: chromecache_209.1.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_268.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_217.1.dr, chromecache_197.1.dr, chromecache_241.1.dr, chromecache_211.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_241.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_268.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_157.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_252.1.dr	String found in binary or memory: https://sourcegraph.pp.dropbox.com/server/-/blob/configs/security/csp/metaserver.yaml#L202
Source: chromecache_268.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_268.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_268.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_268.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_268.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_190.1.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_157.1.dr	String found in binary or memory: https://www.dropbox.com/?_hp=c
Source: chromecache_157.1.dr	String found in binary or memory: https://www.dropbox.com/apps
Source: chromecache_273.1.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_268.1.dr, chromecache_280.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_157.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_tracking_id##
Source: chromecache_268.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_280.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.16:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49926 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/264@46/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://dropboxcaptcha.com/	0%	URL Reputation	safe
https://dropboxcaptcha.com/funcaptcha.js	0%	URL Reputation	safe
https://dropbox-api.arkoselabs.com/v2/	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
consent.dropbox.com	18.64.236.45	true	false	high
stun-anycast.l.google.com	74.125.250.129	true	false	high
play.google.com	74.125.136.113	true	false	high
dropboxcaptcha.com	18.160.48.194	true	false	unknown
www-env.dropbox-dns.com	162.125.9.18	true	false	unknown
marketing.dropbox.com	18.155.1.54	true	false	high
www.google.com	64.233.177.106	true	false	high
dzfq4ouujrxm8.cloudfront.net	3.161.163.65	true	false	high
fp.dropbox.com	18.165.116.121	true	false	high
stun.fpapi.io	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
stun.l.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	false		high
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false		high
https://marketing.dropbox.com/login?referrer=	false		high
https://www.dropbox.com/page_success/end?edison_page_name=login_page_edison&path=%2Flogin&request_id=cad0c4fd075645a4b69f01bf63c15666&time=1713448025	false		high
https://dropboxcaptcha.com/funcaptcha.js	false	URL Reputation: safe	unknown
https://www.dropbox.com/ajax_register_cmplx	false		high
https://www.dropbox.com/log/ux_analytics	false		high
https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://www.dropbox.com/2/client_metrics/record	false		high
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://www.dropbox.com/log/telemetry	false		high
https://www.dropbox.com/2/megaphone_chat/get_best_chat_campaigns	false		high
https://www.dropbox.com/pithos/host%3Amarketing.dropbox.com/marketing_tracker_service	false		high
https://www.dropbox.com/2/pap_event_logging/log_events	false		high
https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik	false		high
https://www.dropbox.com/pithos/marketing_tracker_service	false		high
https://www.dropbox.com/2/udcl/log_timing	false		high
https://dropboxcaptcha.com/	false	URL Reputation: safe	unknown
https://www.dropbox.com/log_js_sw_data	false		high
https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1	false		high
https://www.dropbox.com/pithos_api_helper_validation	false		high
https://www.dropbox.com/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=f70538b2f3e44e9289150e24c30e8a30&time=1713448030	false		high
https://fp.dropbox.com/?ci=js/3.8.32&q=hSrgVEjs3amxLolocQ18	false		high
https://tags.tiqcdn.com/utag/dropbox/main/prod/utag.js	false		high
https://www.dropbox.com/sso_state	false		high
https://www.dropbox.com/web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants	false		high
https://www.dropbox.com/2/account/check_user_with_email_exists	false		high
https://www.dropbox.com/alternate_wtl_browser_performance_info	false		high
https://www.dropbox.com/alternate_wtl	false		high
https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz&sm=1	false		high
https://www.dropbox.com/pithos/api_helper_validation	false		high
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=dropbox/main/202404171946&cb=1713448034390	false		high
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_268.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_268.1.dr	false		high
https://dropbox-api.arkoselabs.com/v2/	chromecache_240.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_268.1.dr	false		high
https://cloud.google.com/contact	chromecache_268.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_209.1.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_241.1.dr	false		high
https://www.dropbox.com/?_hp=c	chromecache_157.1.dr	false		high
https://connect.facebook.net/en_US/fbevents.js	chromecache_157.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_268.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_268.1.dr, chromecache_280.1.dr	false		high
https://support.google.com/recaptcha	chromecache_268.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout	chromecache_209.1.dr	false		high
https://www.dropbox.com	chromecache_190.1.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_217.1.dr, chromecache_197.1.dr, chromecache_241.1.dr, chromecache_211.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_268.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_209.1.dr	false		high
https://recaptcha.net	chromecache_268.1.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_268.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_268.1.dr	false		low
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_268.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_268.1.dr	false		high
https://snap.licdn.com/li.lms-analytics/insight.min.js	chromecache_157.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_268.1.dr	false		high
https://sourcegraph.pp.dropbox.com/server/-/blob/configs/security/csp/metaserver.yaml#L202	chromecache_252.1.dr	false		high
https://www.dropbox.com/apps	chromecache_157.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment	chromecache_209.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.9.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
18.155.1.54	marketing.dropbox.com	United States	16509	AMAZON-02US	false
18.64.236.45	consent.dropbox.com	United States	3	MIT-GATEWAYSUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
18.160.48.194	dropboxcaptcha.com	United States	3	MIT-GATEWAYSUS	false
64.233.177.106	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.165.116.52	unknown	United States	3	MIT-GATEWAYSUS	false
18.165.116.121	fp.dropbox.com	United States	3	MIT-GATEWAYSUS	false
64.233.176.103	unknown	United States	15169	GOOGLEUS	false
3.161.163.65	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.18
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428140
Start date and time:	2024-04-18 15:46:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/264@46/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 108.177.122.94, 64.233.177.84, 142.250.105.102, 142.250.105.139, 142.250.105.100, 142.250.105.138, 142.250.105.113, 142.250.105.101, 34.104.35.123, 104.16.100.29, 104.16.99.29, 74.125.138.84, 142.250.9.84, 142.250.105.95, 172.217.215.95, 74.125.136.95, 64.233.185.95, 172.253.124.95, 64.233.176.95, 64.233.177.95, 173.194.219.95, 142.251.15.95, 108.177.122.95, 142.250.9.95, 74.125.138.95, 64.233.176.94, 142.251.15.94, 172.253.124.94, 74.125.138.113, 74.125.138.101, 74.125.138.138, 74.125.138.102, 74.125.138.100, 74.125.138.139, 74.125.136.139, 74.125.136.102, 74.125.136.138, 74.125.136.113, 74.125.136.101, 74.125.136.100, 172.253.124.102, 172.253.124.101, 172.253.124.139, 172.253.124.138, 172.253.124.113, 172.253.124.100
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, cfl.dropboxstatic.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 12:47:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.981851108302781
Encrypted:	false
SSDEEP:	48:8NdwT0k5HSidAKZdA1FehwiZUklqehpy+3:8wP6Oy
MD5:	A59715639E819AE15F4277BA906C3321
SHA1:	3361E5E52B75FB856C0EBE601BD31F6EF3D35F5F
SHA-256:	EABB0274F027AF84757688C5DDC0B183286D8A0737FCB64ECD7F7F66E514963C
SHA-512:	488AE28B6BA5F0DA08833AA0C3B01DD582D6205BF02AF23BF333D17E138E54CBC0AF0C97A7AC17232CD847E33BCF7739339264F8A3B3F6C6A99FCA31762A3DB6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...._-....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 12:47:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.00119292716682
Encrypted:	false
SSDEEP:	48:8FdwT0k5HSidAKZdA1seh/iZUkAQkqeh+y+2:8YP09QDy
MD5:	5F844A94524CDEB84C3E4E74AA381023
SHA1:	D96214D8B311B5BD2EEE87415FD47D86BAECF50C
SHA-256:	74D2179A3EF156716ADB34877C42E76E7981FEDB750469EA61E71D867ADA4E83
SHA-512:	52DE8B78E2E22DBADA8824E22A284419D699316E2E2C890D2C1AA087ECA4DFB4C5292F26E795A4AAFBB2D1E53F6FA6D6EC35F7B953593E7561C55DABBE7A8D6C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.007843189450045
Encrypted:	false
SSDEEP:	48:87dwT0kAHSidAKZdA14meh7sFiZUkmgqeh7s4y+BX:8SPPnyy
MD5:	5FB7E5B855D2B5B4251AF19F3CA53B52
SHA1:	4411B86334819310DBC4258F2C9B2A6A12F3D462
SHA-256:	83545A6D0CE503108799AEDEA357146330E183F3CDCA0B7513F91461644035B0
SHA-512:	12DAE177B00CB6481BE60A1AC4FAC410ABA063B185C58C8FFDFCF9CBF0374FE607963831D9BDB6B108EEF63CF1F3BC23104948A4B730CFA44140783660D5FCEA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 12:47:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.999245177976936
Encrypted:	false
SSDEEP:	48:87dwT0k5HSidAKZdA1TehDiZUkwqehqy+R:8SPvwy
MD5:	E26A8C44E07CC52E28433D36689C36D6
SHA1:	E324589146A42E70967A9978037B70D41C0DAE3B
SHA-256:	8F4F004D6F9DBAF94D819A59B32493F1D05F335FC5A6DAEF5898D43F0C9C337A
SHA-512:	44AAFFC8EDF4951D062436821C1DFC4AF9DC71CC5329524EA833FF44F4283B161CD6CF8D185C8EF67FEF253DA2C32BD3B45F9788CACDCC7FF789AF24CA570BA1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....BW....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 12:47:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.989335098411938
Encrypted:	false
SSDEEP:	48:88dwT0k5HSidAKZdA1dehBiZUk1W1qehcy+C:87Pv98y
MD5:	48AF2F5144C86521A71BBA1444899DF9
SHA1:	EE2899F5F9A47493F63AD4B934EC7ACBB42414AE
SHA-256:	92D92FC00F0541CDEE819AEDB66E3646E7D6D7E3B6AD7DBAB3BBB219C234C56A
SHA-512:	1CD870912E2C4FC608EC30A7EDD25EBE3E55D7B311055C591408646D9D6301FDB3BB2FF2AAF75D79B9354FC7980D052F29201C2AD0082C72C319821956838365
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 12:47:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9986698381784556
Encrypted:	false
SSDEEP:	48:87dwT0k5HSidAKZdA1duTeehOuTbbiZUk5OjqehOuTbyy+yT+:8SPTTfTbxWOvTbyy7T
MD5:	75BAC33B28BF5BEBBBC4848FB7D45EC3
SHA1:	244BF0257B3E529EB30725239EE0FA9FAB781FA5
SHA-256:	260CBFDB9419740E01AF73C8FEC40401D26A9E6912D1A9E6774587C2D0776A6A
SHA-512:	28573EA1054B20D44419E4F9D810FD72D3317E14EB958896A651ADB31C0ED33413918BD5E16A86FAC43BEBBB268D7E75E12781F71277E6DD5B3582E22BCE5C74
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............>.F.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4720)
Category:	downloaded
Size (bytes):	4768
Entropy (8bit):	4.776680316640226
Encrypted:	false
SSDEEP:	96:sWqPkAQC4nY5Z9IuyDMLoXY8OFKE9lpF56KMBY3MIYiI:seAXqc9IumML38MpFDD3CiI
MD5:	366641E9CB419315F25D1AD2BF70936B
SHA1:	B789F141CB7EA723E10CB6F24428B760977FB9A2
SHA-256:	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
SHA-512:	A38D2E0DE2B87D1A8CEB9D48DEC9191D231E9ADAF675DC70A4790C180D8909BE407E5F8B51A6A4EA65474AAA18D93E3C995D26B90DDD29312E9FC5B144505924
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_viewer-vflNmZB6c.js
Preview:	define(["exports","metaserver/static/js/modules/constants/viewer","./c_core_uri"],(function(e,s,_){"use strict";class t{constructor(e){this.id=e.id,Object.assign(this,e)}toString(){return String(this.id)}}class i{constructor(e,s){this.active_and_paired_user_ids=s,this.users=e}get_users(){return Object.values(this.users).sort(((e,s)=>+e.linked_user_id-+s.linked_user_id))}is_uid_associated(e){return e in this.users}is_paired(){return this.active_and_paired_user_ids.length>1}has_linked_or_paired_users(){return Object.keys(this.users).length>1}get_unauthed_user_by_uid(e){return this.users[e]}}class r{static get_viewer(){return r._cached_viewer}static get_role_title(e){return this.get_viewer().get_title_with_correct_team_name(e)}static get_root_name(e){return this.get_viewer().get_root_name_with_correct_team_name(e)}static get_is_signed_in(e){return e.is_signed_in}constructor(e={}){this.replace_viewer_data(e)}replace_viewer_data(e={}){this._authed_users={},this._active_and_paired_authed_use

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39023)
Category:	downloaded
Size (bytes):	453150
Entropy (8bit):	5.4788425885886936
Encrypted:	false
SSDEEP:	3072:D4JxnbhvJsX82DX4WLzCrOgD8kdJoRlzXU07UQIG4KxvzlTCc9h:8JVbI82DX4FrOqJoTDhUvhKxzZ1L
MD5:	B8731C7008BA65C6918B7DEEC5B9F183
SHA1:	0DD5BAFD7187541A3FA286E2849A21988C888005
SHA-256:	1128AB93E08911AC0228E3E8031FBB02255191CF18BBB41B275D691888459CC1
SHA-512:	9B70E7BC676C02B414EB16D24C1CCD9E523D1395A5AD124C88B631CCE5E4C527F498B5E082A1DB1E7DA9885387C4955C04007906A4024A4FC19EE7B838A5341D
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/main/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202404171947, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{let stormcrowParamData=localStorage.getItem('dbx_metaserverdata')!==null?localStorage.getItem('dbx_metaserverdata'):"";var stormcrowDataProvider={name:"StormcrowParam",version:"1.0.0",provider:function(callback){callback(null,{stormcrowParam:stormcrowParamData});}};window.targetGlobalSettings={dataProviders:[stormcrowDataProvider]};console.log("localStorage stormcrowParamData tealium1 ::"+stormcrowParamData);}catch(e){console.log(e)}}catch(e){console.log(e);}.if(!utag_condload){try{try{window.utag_video_tracking=function(){if(jQuery('iframe[src="youtube.com"]').length>0){var i=0,id;window.iframe_id=[];jQuery('iframe[src="youtube.com"]').each(function(){if(jQuery(this).attr('id')){id=jQuery(this).attr('id');window.iframe_id.push(id);}else{id='tealium_youtube'+i;jQuery(this).attr('id',id);window.iframe_id.push(i

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103908
Entropy (8bit):	4.976892033924162
Encrypted:	false
SSDEEP:	768:sy1BXGYx9fnn5xdL2Glicgy1wWQcOMhh+iev6Lv9+YOY48j0lAewLKB+NoiVvsGD:71BX7fnn5xdLRlW9v8jko+B+OxbMjh
MD5:	D7A3C32094B126EA229D11DF4960ED0C
SHA1:	AB37565FF9EAAECB989D64CE99197486FFB28C67
SHA-256:	973219C3D63CD492A44CE0C43D9C792DA4E82D4EE52D5884E0FE747D3DADC0CA
SHA-512:	5F9864740A0DEB4DF30BCC9D20711369E0FD5CEFC24AEE5C515AF6B5F6698B964468C4B39DA09DAF32151122D138B73E4DB6F204572506564FA722AA43C33040
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/main-vfl16PDIJ.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.8021925847933264
Encrypted:	false
SSDEEP:	6:FHHBsqRW4liwXAzDDKS9XRJfynmDMUc0DdXgP8F:1hHlipD1UnWMUUG
MD5:	3E904D06E56BD470498071EF9F7403BE
SHA1:	F99226A89C61F90A6FA6E3601E7B933DAD057A11
SHA-256:	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
SHA-512:	7D46BEFCC17FB685D228B1D5BA04D242DB3371AE77FAFDBAF242392561EDE24136FF47703DC41A9728E6EF38D12A902498A46A1B94702FA85BE8B39F9B338D2B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_init_edison_page-vflPpBNBu.js
Preview:	define(["exports","./c_init_data_runtime","./e_edison","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison"],(function(i,e,t,_,n,o,r){"use strict";i.initPage=t.initPage,i.initialize_module=t.initFromDws}));.//# sourceMappingURL=e_edison_init_edison_page.js-vfl51Wdck.map.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21670)
Category:	downloaded
Size (bytes):	21723
Entropy (8bit):	5.284100116875908
Encrypted:	false
SSDEEP:	384:mnyLq/Hzuprdhgv8ClMs7MU7e0hZVLdUBbimoj7av+oVaaLOuYMwqDNn:mnwdav86Msr1DVLdUBuQ+oVayOhqDN
MD5:	F06778FDDF68C497CFD51631E6CEFFB0
SHA1:	B37C25379506185B89CCC45D808390E3817DA61F
SHA-256:	6AC888C5B7FDC3A0CCAC4AB557A9BFDF3792A0DF623D4F08295FD12D587C336D
SHA-512:	324F537EA14C9DEE3548964D09AF15D3B8CCC1E30548273CD8988518DBC3D1D8683A493A7119EB7FFEF10F90F998EE866DC5F1CA572074D55B6D0087125848BD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_notify-vfl8Gd4_d.js
Preview:	define(["exports","react-dom","react","./e_edison"],(function(e,t,n,r){"use strict";function i(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var o=i(t),a=i(n);const s=/[^\w@\.\ \-\,\$~%#\[\]\{\}\!\^]/g,c=e=>`&#${e.charCodeAt(0)};`,l=e=>`${e}`.replace(s,c);function u(e){return"object"==typeof e&&"function"==typeof e.toHTML}class d{constructor(e){this._str_DONT_TOUCH=e}toHTML(){return this._str_DONT_TOUCH}toString(){return"[object HTML]"}static tmpl(e,t){if(!/[^\w:.-]/.test(e)){const t=document.getElementById(e);e=t.innerHTML,window.CSP_SCRIPT_NONCE!==(t.nonce\|\|t.getAttribute("nonce"))&&(e="")}const n=e.replace(/[\r\t\n]/g," ").replace(/'(?=[^%]%>)/g,"\t").split("'").join("\\'").split("\t").join("'").replace(/<%=(.?)%>/g,"',__no_conflict_HTML__._raw_escape

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4787)
Category:	downloaded
Size (bytes):	4887
Entropy (8bit):	5.270860802966812
Encrypted:	false
SSDEEP:	96:VONsXQ+FkU3YFgQ+F5UT/nfl2gLNxMdGaBQGjHfQ94XvOH:VmmQ+FkU3YFgQ+F5UT/n92gLHdaBQG7s
MD5:	1DB6D4FD47F26888CB9787D97FC00EC0
SHA1:	7E0F0236E67678426A357D5CDC7F75773F5A4E44
SHA-256:	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
SHA-512:	B40BA785F2D8F10CBDD0ED3252047EDB98259B2A58C9B6F880466F45D76EEFAD5201EF7866090B8242C31EF0E561622BD45E827B5ACEC344808B9E404DEBB813
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_user_centric_perf_metrics_component_visually_complete_ajax-vflHbbU_U.js
Preview:	define(["exports"],(function(e){"use strict";var t,i,s;e.ApiV2HeaderNames=void 0,(t=e.ApiV2HeaderNames\|\|(e.ApiV2HeaderNames={})).DropboxApiArg="Dropbox-API-Arg",t.DropboxApiSelectAdmin="Dropbox-API-Select-Admin",t.DropboxPathRoot="X-Dropbox-Path-Root",t.DropboxUid="X-Dropbox-Uid",t.DropboxTeamId="X-Dropbox-Teamid",t.DropboxTeamAuthorization="X-Dropbox-Team-Authorization",t.CsrfToken="X-CSRF-Token",t.DropboxForceQuic="X-Dropbox-Force-Quic",function(e){e[e.TeamAdminRole=0]="TeamAdminRole",e[e.MTARole=1]="MTARole",e[e.FederationAdminRole=2]="FederationAdminRole"}(i\|\|(i={})),function(e){e[e.AdminAction=0]="AdminAction",e[e.AssumeAction=1]="AssumeAction",e[e.OnBehalfOfAction=2]="OnBehalfOfAction"}(s\|\|(s={}));const n=6e4;class o{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{this.didNetworkTimeOut=!0,t

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (832)
Category:	downloaded
Size (bytes):	897
Entropy (8bit):	4.698664495783305
Encrypted:	false
SSDEEP:	24:1hcAk4VhhWiI1BZ0Xt6zok5jhWiAhWiTkHQz9jru:1hcfiELXzXYkw0
MD5:	D4EE01BF0F1ABC65D6E8AA8C3A0715F2
SHA1:	A9F328E2347DCA7BF6D37C8E9F8BD6A374DE21B4
SHA-256:	73A289FD6103E0748239D0DCD6D57817A2EA3B90361AD93737D505F338F190C2
SHA-512:	64BA74FB8186B17029836C76C7FDC2409C4C2FB3E54090235BEBDE42627AE8931E5DFC9BB5D1393748112069E762DC10D37CDDFA6E9613A9ED2CBA6C9DE3828E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_chat_client_loader-vfl1O4Bvw.js
Preview:	define(["exports","./c_chat_chat_client_loader2","./e_signup_signin_static_login_page_edison","./c_init_data_runtime","./e_core_exception","react","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,_,t,c,s,a,i,n,r,o,l,d,u,m,p,h,g,v,x,y,f,j,k,C,b,q){"use strict";e.default=_.ChatClientLoaderSingleton}));.//# sourceMappingURL=c_chat_chat_client_loader.js-vflwnVX3r.map.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21663)
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	5.286903626672907
Encrypted:	false
SSDEEP:	384:eNChqKqEpDdlbv83lMJ/dp9QW9u0Ivimh07EWVd0ChidNU+MQ9:ndJv8VMJ39j9u0IKmId0Chid1MQ9
MD5:	10F3FA701AF7A3CB6F9E8054D4AEBC62
SHA1:	A18AFB404DC5405CCBB850D4371AAB5119779302
SHA-256:	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
SHA-512:	C6A0D90942BCBB6C0668B4A473187B554EA7D233838DA10727C15832CE353B3F938BE3907BD8173FDE6B4722D66F7675AEC53BF0033F82E2A57BC3045CD774EF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_notify-vflEPP6cB.js
Preview:	define(["exports","react-dom","react","./e_edison"],(function(e,t,n,r){"use strict";function i(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var o=i(t),a=i(n);var s=Object.hasOwnProperty,c=Object.setPrototypeOf,l=Object.isFrozen,u=Object.freeze,d=Object.seal,f=Object.create,p="undefined"!=typeof Reflect&&Reflect,m=p.apply,h=p.construct;m\|\|(m=function(e,t,n){return e.apply(t,n)}),u\|\|(u=function(e){return e}),d\|\|(d=function(e){return e}),h\|\|(h=function(e,t){return new(Function.prototype.bind.apply(e,[null].concat(function(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}(t))))});var y,g=M(Array.prototype.forEach),v=M(Array.prototype.pop),T=M(Array.prototype.push),b=M(String.prototype.toLowerCase),_=M(St

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40551)
Category:	downloaded
Size (bytes):	40609
Entropy (8bit):	5.352022415194041
Encrypted:	false
SSDEEP:	768:eczLuqnKDCQtv6RnKuO2AYSnV7xM6s2ZDqo7C4+P1+0RDPDpnw5FFdOUh2KdeeW6:eHmCVs2G4+r57rK2KcPj63+U
MD5:	AF5D515358FF3291AEBA256F2FA076A2
SHA1:	A7AD2B4959E5FBA98445ECF29A45A1848191650F
SHA-256:	87FB99863091402FF652D4E14803D74D7989BEA51A9B6737BEC7F6BE55EA48A4
SHA-512:	968C8E93C29EFF758DEBF31D768AA462AA96FC775669BB8778AA87AA696B5A8E49815DC51421E4F915FE67C681BB885A50BEECF4CDCBD79446A742A3D970E815
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_chat_client-vflr11RU1.js
Preview:	define(["require","exports","./c_chat_dialogue_dialogue_stone_proto_transformer","./c_chat_chat_constants","./c_core_notify","./e_signup_signin_static_login_page_edison","./c_core_uri","./c_core_i18n","./c_init_data_runtime","react-dom","react","./e_core_exception","./c_src_sink_index"],(function(t,e,i,a,s,n,r,o,h,d,c,p,g){"use strict";function C(t){return t&&t.__esModule?t:{default:t}}function _(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(i){if("default"!==i){var a=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,a.get?a:{enumerable:!0,get:function(){return t[i]}})}})),e.default=t,Object.freeze(e)}var l=_(d),m=C(c);function E(t){return"1508d082-aa3d-468f-9ac3-cfeb7d5a8435"===t\|\|"c0b3fc4d-5e75-4c65-b5c0-db72be2085f7"===t}const S=t=>void 0!==t.campaignId,u=t=>"string"==typeof t,T=(t,e)=>!!t&&(S(t)&&S(e)?t.campaignId===e.campaignId:!(!u(t)\|\|!u(e))&&t===e),O=t=>S(t)?t.systemSettings&&"snapengageChatSystemSettings"===t.s

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	818761
Entropy (8bit):	4.5932073471324655
Encrypted:	false
SSDEEP:	12288:/imqQPgH8T4J2+pTuyfPEWEmUVlHybZeb391Kl4Af7e7:BqQPlT4JVREDSbs9aa
MD5:	9399F55783480DB822CF654BA10EF050
SHA1:	05890E089C22CBF65878D08E5D4F2B7125FD7FFD
SHA-256:	A679E10D76F51E53F19137FEF3DD0D39973DD3CE4C693312C4D316E2059DA52C
SHA-512:	4FA50F429C9C2519DBAAA22439D2D9D74461FD15D2C3257FDC130EC6B5885B909320614135A3D48F725E742DBE6B0859F90CD427B4AAF2E28CD8C1C7FAB3073E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_zxcvbn_lib_main-vflk5n1V4.js
Preview:	define(["exports","./e_core_exception"],(function(e,a){"use strict";function i(e,a){return a.forEach((function(a){a&&"string"!=typeof a&&!Array.isArray(a)&&Object.keys(a).forEach((function(i){if("default"!==i&&!(i in e)){var r=Object.getOwnPropertyDescriptor(a,i);Object.defineProperty(e,i,r.get?r:{enumerable:!0,get:function(){return a[i]}})}}))})),Object.freeze(e)}var r,n,s,o,t={passwords:"123456,password,12345678,qwerty,123456789,12345,1234,111111,1234567,dragon,123123,baseball,abc123,football,monkey,letmein,shadow,master,696969,mustang,666666,qwertyuiop,123321,1234567890,pussy,superman,654321,1qaz2wsx,7777777,fuckyou,qazwsx,jordan,123qwe,000000,killer,trustno1,hunter,harley,zxcvbnm,asdfgh,buster,batman,soccer,tigger,charlie,sunshine,iloveyou,fuckme,ranger,hockey,computer,starwars,asshole,pepper,klaster,112233,zxcvbn,freedom,princess,maggie,pass,ginger,11111111,131313,fuck,love,cheese,159753,summer,chelsea,dallas,biteme,matrix,yankees,6969,corvette,austin,access,thunder,merlin,secret,

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1353)
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	5.004045923311685
Encrypted:	false
SSDEEP:	24:1bmHf9EzCHD0NR9AYM4gsTW6pgDaqDatRRCur+swRFvVGzrem8sH2:1af0XmYMcsa2atcjEzr2sH2
MD5:	4D83CD35A5B3138D895EA13588222C8F
SHA1:	2C86E768E75EB2F2846502D5D20C142A9912A590
SHA-256:	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
SHA-512:	8C364530213F4985A705CC900C34348C263D0AFBFFE8E562A0C49ACC9C8018C73DEB39279C7051078ACE56DC53BC0ECFCECC7FE1AAAB6CC5777C19353E53FDC3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page-vflTYPNNa.js
Preview:	define(["require","exports","react","react-dom","./e_edison","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,o,n,r,d,c,i,a,l){"use strict";function u(e){return e&&e.__esModule?e:{default:e}}var s=u(o),f=u(n);t.render=function(t,o=!1,n="",c=!1){if(!t.RootComponent){const e=function(){const e=d.getInitData().debugPanelInfo;if(e)return e.clone()}();throw new Error(`Module '${null==e?void 0:e.entryPointModuleName}' does not export a React component named RootComponent.`)}let i={};if(n&&n.length>0){const{encodedProto:e}=d.unmarshalProto(n,r.InitProps);i={encodedProto:e}}const a=c?s.default.createElement(s.default.StrictMode,null,s.default.createElement(t.RootComponent,i)):s.default.createElement(t.RootComponent,i),l="root";let u=document.getElementById(l);null===u&&(u=document.createElement("div"),u.id=l,document.body.appendChild(u));const m=r.Edison.getMetrics();m.recordRenderStarted(),s.default.version.start

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	55320
Entropy (8bit):	4.946031865259786
Encrypted:	false
SSDEEP:	768:TAZXM3pHnMxWKZB5HVNN6vMEzJWJd2wtg+3R9/Yo/GrdrYqLZ81A1t/OF+rwbxrO:TAZXapg3R9v/Grd9LBOFZxrnO
MD5:	250DD7BB2E374710798456A4C572D310
SHA1:	9B3D1D22932D5FAFD6DD05FD06D1885FE6CE6691
SHA-256:	F79612EE221ED657AD63B4ED70673AC24DEA5F4027078EF287686F3EDCFE90D2
SHA-512:	E2CF5BEAB1CFAC56DC5830E428F210E1E50ED0DA4C1921B9DED4D8C650E592427C9B5EC96E4184939B0C7FF2140792930DEF56C4C389CE72B059CC08774C0365
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/tokens-vflJQ3Xuy.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16px 32px rgba(30,25,25,.03),0px 8px 24px rgba(

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4870)
Category:	downloaded
Size (bytes):	4936
Entropy (8bit):	5.05362771177128
Encrypted:	false
SSDEEP:	96:VLLX8kduy9D07Imci6K6dullWFUoXcP9Y:9IkYy9A7Im9YuzCUoXcP9Y
MD5:	B063117A96228BD565A11ACB33463ED8
SHA1:	C3151C91915A59AE6EE389A06CD93948D50E9844
SHA-256:	652C45F1ED88C1CEFB2B0C348892D8513B2C11AEC7EC4BCF49FFB3D5DB72674E
SHA-512:	CD67C3969AA3F4C94E124D9D5A1231562195E689B80AECEF75778FFB7FAF546672C972986BAE0A23EF2EA7512FFA500E99FB650FD03169F1A6CEDC8992690722
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_chat_client_loader2-vflsGMRep.js
Preview:	define(["require","exports","./e_signup_signin_static_login_page_edison","./c_init_data_runtime","./e_core_exception","react","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,t,n,i,o,s,a,c,r,_,h,l,u,d,C,p,g,m,A,w,M,P,f,k,y,I){"use strict";function v(e){return e.ns("megaphone_chat")}class L{constructor(){this.loadClient=(e,t)=>{if(e){const n=t.chatStoneToProtoModule.chatStoneToProto(e);t.chatClientModule.ChatClientSingleton.setupChatEnvironment(n)}},this.getBestChat

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2878)
Category:	downloaded
Size (bytes):	2928
Entropy (8bit):	5.136184951857465
Encrypted:	false
SSDEEP:	48:1hwsfGWdFR26sIJEZrTTB35KOjRffFsvBnGb+GbMjPrx7f0KGbnUGR3tXYiYX3t9:QsfGab26WzDsvbtglU23tXhYX3tlcW8a
MD5:	C301B11892D50BFA876E2C17C12FF0BE
SHA1:	FA5BBD1BF21B303DB1ADE40CC1EBF0DEB967F781
SHA-256:	BA10E9A887CEB4F7FC7514B56A268E94354A27C8C8CA31CC383B4FA0A14975AB
SHA-512:	BC6F3B9B0C33F4114BC6C8B1525AA89132868B661553D1DC95AF625B9F23BF36AAD4048544CF0F69DF13AD2BEE0CCCB33AA1999AB196D8CA557F72E18FB7CF1D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_dom-vflwwGxGJ.js
Preview:	define(["exports","./c_Key"],(function(t,e){"use strict";const n="no-scroll",o=t=>null!=t&&(["INPUT","TEXTAREA","SELECT"].includes(t.tagName)&&!(t.type in["submit","button"])\|\|l(t)),l=t=>null!=t&&(t.hasAttribute&&t.hasAttribute("contenteditable")&&"false"!==t.getAttribute("contenteditable").toLowerCase());let c=!1,s=null,i=0,u=null;const f=function(){let t,e;return c\|\|(window.addEventListener("scroll",(()=>s=null)),c=!0),a()?s\|\|(e=document.documentElement.scrollTop,t=document.documentElement.scrollLeft,s={0:t,1:e,left:t,top:e}):(e=u.top,t=u.left,s={0:t,1:e,left:t,top:e}),s},a=()=>!document.documentElement.classList.contains(n),r=function(t,e){const n=Math.max(document.documentElement.scrollHeight,document.documentElement.clientHeight);if(t=Math.max(t,0),(e=Math.max(e,0))>f().top&&(e=Math.min(e,n-document.documentElement.clientHeight)),a())window.scrollTo(t,e),s={0:t,1:e,left:t,top:e};else{u={0:t,1:e,left:t,top:e};const n=-1e+"px",o=-1t+"px",l=document.documentElement;l.style.top=n,l.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2099)
Category:	downloaded
Size (bytes):	2156
Entropy (8bit):	5.2479673187776985
Encrypted:	false
SSDEEP:	48:1aXkK24gCpxPUmizzUI6wKug/sLmxbaUoPLS:WZ24gYYwI6wKug/syxbaXW
MD5:	F77250E0EFE74549BDB944F47C9FCB47
SHA1:	BB9407BB3E11799F95B829271637913AAF1177DD
SHA-256:	B8F5E9440EA0ACE133BC11771970A4D105A24584AD118CD8D73758A58894D0CD
SHA-512:	6EBFFA04F53AFBB7E9A86508C35F0401C92EBC3C294C74281AF0497B5CF31BFFFEFBF28B048616CE3C8CF4915F2E810502858DFF6FC171E43324EA28B20B6CA0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_security_crypto-vfl93JQ4O.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_apex-metrics_src_types"],(function(e,t,n,r){"use strict";function i(e){return String.fromCharCode(...new Uint8Array(e))}function o(e){const t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n);return t}function c(){return n.__awaiter(this,void 0,void 0,(function*(){const t=r.edge&&!r.edgeChromium();if(void 0!==window.crypto.subtle&&!t&&!r.checkBrowserVersion(r.chrome,40,!1))return window.crypto;if(t){const{legacyEdgeWrapper:t}=yield new Promise((function(t,n){e(["./c_security_legacy_edge_shim"],t,n)})),n=t();if(void 0!==n)return n}throw function(e){const t=new Error(e);return t.isBrowserNotSupported=!0,t}("WebCrypto not supported")}))}t.b64urldecode=function(e){return o(atob(e.replace(/_/g,"/").replace(/-/g,"+")))},t.b64urlencode=function(e){return function(e){return btoa(e).replace(/\//g,"_").replace(/\+/g,"-")}(i(e))},t.bytesToString=i,t.encryptWithPublicKey=function(e,t,r){return n.__awaiter(this,void 0,v

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55068)
Category:	downloaded
Size (bytes):	55121
Entropy (8bit):	5.484379353481417
Encrypted:	false
SSDEEP:	1536:dRbEY2zJoG8bXShh7pxOp/8eCNgAXCVTZFm7YEIpWH:DCzP8jShh7pwp/8LUm7zIpg
MD5:	4632024B2FC84AF602164A9BBAB6F0E0
SHA1:	A4DCC96518AB1AD29F5273F26F24F52C10EF15FA
SHA-256:	0A3375D7FD084A72EA22ABAC8828878948C8E0BFFFF76FFADFECF9F028908626
SHA-512:	508F578A3047BBD0171D3EA0B70BBAFF57DD489F8F7C62D48F7B4B5097C8E0B8EE24B9CEAFD553F9F5B5AE94B23B86859100F419D9B663D4B7F98CAF65E7EB31
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_uxa_pagelet-vflRjICSy.js
Preview:	define(["require","exports","./c_init_data_runtime","./e_privacy_consent_static_ccpa_iframe","./c_src_sink_index","./c_viewer","./e_core_exception","./c_core_uri","./c_pap-client_analytics_client","react","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_attribution_header","./c_csrf","./c_browser_browser_detection","./c_core_notify","react-dom","./e_edison","./c_init_data_edison","./c_core_i18n","metaserver/static/js/langpack","./c_core_xhr","metaserver/static/js/modules/constants/viewer"],(function(e,t,n,a,i,o,r,s,l,c,m,u,_,d,E,g,h,p,f,T,N,A,S){"use strict";class I extends n.Message{constructor(e){super(),n.proto3.util.initPartial(e,this)}static fromBinary(e,t){return(new I).fromBinary(e,t)}static fromJson(e,t){return(new I).fromJson(e,t)}static fromJsonString(e,t){return(new I).fromJsonString(e,t)}static equals(e,t){return n.proto3.util.equals(I,e,t)}}var O,v,R,C,y;I.runtime=n.proto3,I.typeName="hql_events.TaxonomyAction",I.fields=

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57485)
Category:	downloaded
Size (bytes):	57536
Entropy (8bit):	5.56289638591114
Encrypted:	false
SSDEEP:	1536:pHN3NpnQ2oY8jG823v+xK3Imhe0nRxzvwN3NpnQ2oY8zG/mPIrlTb2PyUhK03DKh:RN3NpnQ2oY8jG823v+xK3Im40UN3Npnd
MD5:	9344C1ACA08405FF26D245EA6D33379D
SHA1:	ACB6C050B2830F8FC108B5174F6A138D49C9974A
SHA-256:	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
SHA-512:	15A59E9F2F487AC63FFAEAB71D411C82E486A481507C606220324A6626E3E7EF9ADFF0A89C3E23FAA8256866BD4CF2B4ABDB3BC28399F97506743E4D07C24625
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_i18n-vflk0TBrK.js
Preview:	define(["exports","./e_core_exception","./c_src_sink_index","./c_init_data_runtime","metaserver/static/js/langpack","react"],(function(e,t,r,n,i,o){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=a(i),u=a(o),l=function(e,t){return l=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},l(e,t)};var c=function(){return c=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},c.apply(this,arguments)};function f(e,t){var r={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(null!

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4902)
Category:	downloaded
Size (bytes):	4966
Entropy (8bit):	5.378799777460674
Encrypted:	false
SSDEEP:	96:x08OWJUIbLprUZ21FdndrbNgIVllvmo+dkd65ILpQwwcJzOqhY2HV:x0MVprDd1V7d0C9dQwziAY21
MD5:	4A7161D9BD7F87C3242E080BA089CB57
SHA1:	14C3532A04BF311ACB5F1062C5C30AB05AD8AC18
SHA-256:	CC67754EA37776C6FEAF15CB83F52DE95168AB852BDCD5A6926289A7DF6019B6
SHA-512:	1CB82C0FE6E1BFCA1274825766D0545E559228D0DCBDCB27C7E670DB6C02F69A3ED3443442D9153AFC48D676C9663788437B8859F831CD00B465A0EC26315D8C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_apex-metrics_src_types-vflSnFh2b.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,o){"use strict";class n extends o.Message{constructor(e){super(),o.proto3.util.initPartial(e,this)}static fromBinary(e,o){return(new n).fromBinary(e,o)}static fromJson(e,o){return(new n).fromJson(e,o)}static fromJsonString(e,o){return(new n).fromJsonString(e,o)}static equals(e,i){return o.proto3.util.equals(n,e,i)}}n.runtime=o.proto3,n.typeName="google.protobuf.Empty",n.fields=o.proto3.util.newFieldList((()=>[]));const{ipad:i,chrome:t,safari:s,opera:r,msie:w,edge:d,edgeChromium:a,chromium:u,mozilla:c,webkit:m,mac:g,windows:f,windowsInfo:l,iphone:b,ipod:p,iOS:x,facebookWebView:v,browser_name:O,version:A,userAgent:S,plugins:h,pluginNames:N}=function(e=navigator.userAgent){const o=function(e=navigator.userAgent){const o=function(e){const o=e.toLowerCase(),n=/(ipad)/.exec(o)\|\|/(crios)[ \/]([\w.]+)/.exec(o)\|\|/(fxios)[ \/]([\w.]+)/.exec(o)\|\|/(opt\|opr\|opios).*[ \/]([\w.]+)/.exec(o)\|\|/(edge)[ \/]([\w.]+)/.exec(o)\|\|/(edg)[ \/]([\w.]+)/.exec

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4418
Entropy (8bit):	4.550570902126072
Encrypted:	false
SSDEEP:	96:D9zCIF3c3CSTICP18YV8cqkvTy1GyB9W8uNg6WyWCHbI/zbQxapyQUZQvHbQB5xA:D9zCIFsSSTICP18YV8cqkvTcGm9W8uNg
MD5:	D6C32610BC01D28D09392E8CAE4869E6
SHA1:	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5
SHA-256:	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
SHA-512:	1F62F8FC1A3C6165019B7D736E04154D55C5135F83AE3A67E07FE55C00A2714297061C93A79DD5A9B710C6AC00F5286EC4E9992836802C223F5A4AECD518112D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/legacy-token-migration-vfl1sMmEL.css
Preview:	/* .In-Theme-Provider is the generic class we use to say we're inside of DIG's theme provider..we use it here as a way to ensure that the specificity of this selector can beat `0 1 0` assuming.it is loaded after the other dig tokens..*/..In-Theme-Provider {. --color__standard__background: var(--dig-color__background__base);. --color__faint__background: var(--dig-color__background__subtle);. --color__elevated__background: var(--dig-color__background__raised);. --color__standard__text: var(--dig-color__text__base);. --color__faint__text: var(--dig-color__text__subtle);. --color__standard__border: var(--dig-color__border__base);. --color__faint__border: var(--dig-color__border__subtle);. --color__disabled__text: var(--dig-color__disabled__base);. --color__disabled__border: var(--dig-color__disabled__base);. --color__disabled__background: var(--dig-color__disabled__base);. --color__core__accent: var(--dig-color__primary__base);. --color__attention__text: var(--dig-color__pr

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	96
Entropy (8bit):	5.589661719245798
Encrypted:	false
SSDEEP:	3:8z/8awPYvXS2wPKtscUUU5RTb9ymY6c:8YZYvCitqNrbImYN
MD5:	0D3AF8E86CB34FD2022D65F5E81AC580
SHA1:	3C2EC81BC6C41F1DDEEAE71F3537A4450B59BA16
SHA-256:	DCC1CACEBC6A3C61953DE362CAA704AF72452B5C6BFFE5FC7DDFA7D3FEB088C6
SHA-512:	6789B73F6A45D3C66C57610942A05B4843C5EB1DB6209062EDAA4451CD0525E991FB17C328692E16C360C727A8CFF7A204C120345643A3AAF27CD7298044B5C3
Malicious:	false
Reputation:	low
Preview:	aTlBRTpem+QtPSkwELVfhIikzaW6Rt4zfaJryXc7SUjoHsA5yQKxcqqPMCf46on+V4369mI1IzUqd6OCyKku3KOCE7rCRG8=

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.809625401935587
Encrypted:	false
SSDEEP:	6:FHHBsqRW4liwXAzD9Q3B1FuRJfyrucFDMUc0DdXgP8F:1hHlip9+n4Ur/dMUUG
MD5:	D3216D824D821C8026C31566767B57E4
SHA1:	03F460961D787EAB26DDD334BF740332E1113B54
SHA-256:	ED5175A8E6813F9CB849D8E0DAE03CDCBC8F76C8E2C6328135E9AA648F95FA70
SHA-512:	E8A536F8F061B82F48D5255CECD4F926862B8EB5D82327F345874735148221FCF13A31CD68D6DE9E87006F6F1A8DB33BBEFBCB9F65D70F07E43B8895F62F032D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/e_edison_init_edison_page-vfl0yFtgk.js
Preview:	define(["exports","./c_init_data_runtime","./e_edison","./e_core_exception","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison"],(function(i,e,t,_,n,c,o){"use strict";i.initPage=t.initPage,i.initialize_module=t.initFromDws}));.//# sourceMappingURL=e_edison_init_edison_page.js-vfl51Wdck.map.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	2360
Entropy (8bit):	5.218276246222954
Encrypted:	false
SSDEEP:	48:1h4UNOJruZ1jMp1w+7e6sFh5i1W+7TSb5jVr6xuWtmUzAsQ+3j6D03Fsl7i:YUYJrubjMzwqBEh5i19TSb9YuW4UzAs5
MD5:	61444FC69EEE497F28D680EE0C9157E7
SHA1:	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF
SHA-256:	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
SHA-512:	B5480EC396A352E520BCD669692BD76C97442E1BB68CCDA9AF013C300864257DFB26CFB770BFCFF09C4F6D25B59C326919FD8EE6651CC0325239AD7BE1354AEB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_csrf-vflYURPxp.js
Preview:	define(["exports"],(function(e){"use strict";const o=function(e,o){if(!e)throw new Error(o)},t=/^([0-9]{1,3}\.){3}[0-9]{1,3}$/,n=function(e){if(e.match(t))return[e];const o=e.split("."),n=[];for(let e=0;e<o.length;e++)n.push(o.slice(e).join("."));return n},i=function(e){const o=e.split("/"),t=[];for(let e=0;e<o.length;e++){const n=o.slice(0,o.length-e).join("/");""!==n&&t.push(n),t.push(n+"/")}return t},a=["=",";"],s=function(e,t,n=!1){o("string"==typeof e,`${t} must be a string, but was ${typeof e}`),o(n\|\|e.length>0,`${t} must not be empty`),o(!function(e){if(null==e)return!1;for(const o of a)if(-1!==e.indexOf(o))return!0;return!1}(e),`${t} contains illegal characters`)},r=e=>s(e,"Cookie name",!1),c=e=>{return t=e,n="Cookie max age",void o(!isNaN(Number(t)),`${n} must be numeric, but was ${t}`);var t,n},u=function(e,o,t={}){var n,i;r(e),(e=>{s(e,"Cookie value",!0)})(o),t.maxAge&&c(t.maxAge),t.domain&&(n=t.domain,s(n,"Cookie domain",!1)),t.path&&(i=t.path,s(i,"Cookie path",!1));const a

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4828)
Category:	downloaded
Size (bytes):	4895
Entropy (8bit):	5.368982337989415
Encrypted:	false
SSDEEP:	96:x08OWJB+hyYFDTprUZ21FdndrbNgIVllvmo+dkd6kLILP+ewcwohyn:x0MAhprDd1V7d0ChEz+emGy
MD5:	E6C7B1B5B48D9989C48C543C3EA5ABC6
SHA1:	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F
SHA-256:	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
SHA-512:	BC8A9EC6292FF33632979A4BC7EEF9CB7BCAF3905579BFA261C359412BD9EAF066A237E20AD5461EB8D634177D153F5B642B1E026D78FD4A72B82A8A3B92D07D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_browser_browser_detection-vfl5sextb.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,o){"use strict";class n extends o.Message{constructor(e){super(),o.proto3.util.initPartial(e,this)}static fromBinary(e,o){return(new n).fromBinary(e,o)}static fromJson(e,o){return(new n).fromJson(e,o)}static fromJsonString(e,o){return(new n).fromJsonString(e,o)}static equals(e,i){return o.proto3.util.equals(n,e,i)}}var i;n.runtime=o.proto3,n.typeName="google.protobuf.Empty",n.fields=o.proto3.util.newFieldList((()=>[])),e.TimeUnit=void 0,(i=e.TimeUnit\|\|(e.TimeUnit={}))[i.NANOSECONDS=0]="NANOSECONDS",i[i.MILLISECONDS=1]="MILLISECONDS",i[i.SECONDS=2]="SECONDS",i[i.MINUTES=3]="MINUTES",i[i.HOURS=4]="HOURS",i[i.DAYS=5]="DAYS";const{ipad:t,chrome:s,safari:r,opera:w,msie:d,edge:a,edgeChromium:u,chromium:c,mozilla:m,webkit:g,mac:f,windows:l,windowsInfo:b,iphone:p,ipod:x,iOS:O,facebookWebView:v,browser_name:S,version:h,userAgent:A,plugins:C,pluginNames:N}=function(e=navigator.userAgent){const o=function(e=navigator.userAgent){const o=functi

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6013)
Category:	downloaded
Size (bytes):	6014
Entropy (8bit):	4.872198031454265
Encrypted:	false
SSDEEP:	96:T3HjmHwHqGHQwviEjrWajmaD7fllT37IPwfPwgPwpSPwICKCcClCoXe0W6OUEPIi:T3yHwHqGHQwvBjrWajmanfll37IPwfPX
MD5:	5F69F5CFAB5DC5471115B66B3A88697F
SHA1:	91B83DF5F609058505BC5A9878465AA1680A83BC
SHA-256:	7DE9D97B35BE2F83D7243EB08538EF46E9AF20D4F0BC03B5981B18FD85E42630
SHA-512:	D4DD1333F01D6EC1924DB9F32ACB9C9858E05AC9EBF173EBEF074F33DD7FD5BB648C9A755250B64DB939AA2F1FC417614FA2BDD9C35E31F55A58C4269C1A5A1A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/login_or_register-vflX2n1z6.css
Preview:	.magic-link-resend-banner-container{display:flex;justify-content:center;margin-bottom:var(--dwg-spacing__unit--3, 24px);width:100%}.magic-link-resend-banner-container:empty{display:none}.magic-link-resend-banner{display:flex;justify-content:center;padding:var(--dwg-spacing__unit--1_5, 12px) var(--dwg-spacing__unit--4, 32px) var(--dwg-spacing__unit--1_5, 12px) var(--dwg-spacing__unit--3, 24px);background-color:var(--dwg-theme__color__success__background);margin-bottom:var(--dwg-spacing__unit--3, 24px)}.web-magic-link-primary-container{padding-top:var(--dwg-spacing__unit--2, 16px);margin-bottom:calc(var(--dwg-spacing__unit--4, 32px) + var(--dwg-spacing__unit--0_5, 4px))}.hr-label-magic-link-divider-v1{padding:calc(var(--dwg-spacing__unit--2) + 2px) 0}.login-register-magic-link-confirmation{display:flex;justify-content:center;margin-bottom:var(--dwg-spacing__unit--8, 64px)}.magic-link-complete-container{min-width:272px;max-width:788px}@media screen and (min-width: 768px){.login-register-m

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (710)
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	5.201380254654961
Encrypted:	false
SSDEEP:	12:1hRu/DZ0BpNvNUUR4jYLTFFKCc2RvB/4sRXHrx6vCYoN/iGAQIDNF9gqjlzDC:1hR4Z0BpNvmUs6FFKH+vB/4GXMCR9eDW
MD5:	09C0D53AF2879162B43B03734FEC35B2
SHA1:	BC603C2186F1808BE5A7085055F0557F7DF4866B
SHA-256:	CDFD069A981E8373C2F2EC1FEAF286D8273F2A20A0865831DE93592F15F091E2
SHA-512:	03DA7B5EEBF2D7B6C05C3D6BB911887A1D35F318FEAB6C6C54E01E1F5F4F5E4A742736D670CD8DB88D618AD9BFE331EB843085B79A01688FC3C5AF738B1C55D5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_xhr-vflCcDVOv.js
Preview:	define(["exports","./c_csrf","./c_core_attribution_header"],(function(t,e,n){"use strict";const o=function(t){};t.sendXhr=function(t,r,s=o){e.assertDropboxDomain(t),function(t){const n=e.readCsrfToken();t.is_xhr=!0,t.t=n}(r);const i=function(t){const e=[];for(const n in t)t.hasOwnProperty(n)&&void 0!==t[n]&&e.push(`${encodeURIComponent(n)}=${encodeURIComponent(String(t[n]))}`);return e.join("&")}(r),c=new XMLHttpRequest;c.onreadystatechange=function(){c.readyState===XMLHttpRequest.DONE&&s(c.status)},c.open("POST",t),c.setRequestHeader("Content-Type","application/x-www-form-urlencoded");const u=n.getAttributionHeader();return u&&c.setRequestHeader("X-Dropbox-Client-Yaps-Attribution",u),c.send(i),c}}));.//# sourceMappingURL=c_core_xhr.js-vflW3Ov9o.map.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	5.002586826718898
Encrypted:	false
SSDEEP:	3:FHHBsrd6XR6h4H4DMLGRFjQWAF5K0W8LDfekfrRL00DLw9LDkETaGu/YpuB6Qaip:FHHBsqRW4EMybDAFHLNrz8LSG7sB9p
MD5:	A3A2554444A71B125FBF14F91125D2E7
SHA1:	7212DDC0E5552AF5BF29C82351474F88A3C99CB8
SHA-256:	C5D544593946BDB983EADD3A6BA179CBD317C5D98409C3DD00C1D19444FC44EB
SHA-512:	8423B086B1A4EF8142CCA1F19301B19BD59B609778DB3AEF396D117FD35C9D05172E2B77FE5E1461630DF00F461BB3EF6D6A63AA3DC260A1F629884553D5A852
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_init_data_debug_panel-vflo6JVRE.js
Preview:	define(["exports","./c_init_data_runtime"],(function(n,t){"use strict";n.getDebugPanelInfo=function(){const n=t.getInitData().debugPanelInfo;if(n)return n.clone()}}));.//# sourceMappingURL=c_init_data_debug_panel.js-vflvMPM0Z.map.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1327)
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	5.027216870343494
Encrypted:	false
SSDEEP:	24:1bmHfYyD4EzFSjPR9AYM4gETOf7iDilWDiKRRHur4gDRFEOYzremi0PJ9nb:1aB7OpmYMVeTH6j+zrvPJ9nb
MD5:	03EA710579B2A03B4874E2AC684B72F4
SHA1:	1BAA6ACAAB61033E0702993D7BDD1204AA3FBE5A
SHA-256:	67DB7A1710B395F92D3328FF8ABD8AA1C280C577B631D1F4013B975E88E986C4
SHA-512:	9B8430994BF8B97C0941CEB6A7DCA4425E3A16B27D598C7145BEDBB1CE44D0D6407FF4617A0C17741B63440543734FD4B4EBEAD39ED1271C006CD6C8605FF6ED
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/e_edison_edison_react_page-vflA-pxBX.js
Preview:	define(["require","exports","react","react-dom","./e_edison","./c_init_data_runtime","./c_init_data_debug_panel","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./e_core_exception"],(function(e,t,o,n,r,d,c,i,a,l,u){"use strict";function s(e){return e&&e.__esModule?e:{default:e}}var m=s(o),_=s(n);t.render=function(t,o=!1,n="",i=!1){if(!t.RootComponent){const e=c.getDebugPanelInfo();throw new Error(`Module '${null==e?void 0:e.entryPointModuleName}' does not export a React component named RootComponent.`)}let a={};if(n&&n.length>0){const{encodedProto:e}=d.unmarshalProto(n,r.InitProps);a={encodedProto:e}}const l=i?m.default.createElement(m.default.StrictMode,null,m.default.createElement(t.RootComponent,a)):m.default.createElement(t.RootComponent,a),u="root";let s=document.getElementById(u);null===s&&(s=document.createElement("div"),s.id=u,document.body.appendChild(s));const f=r.Edison.getMetrics();f.recordRenderStarted(),m.default.version.startsWith("18")?new Promise((f

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1641)
Category:	downloaded
Size (bytes):	1707
Entropy (8bit):	5.130117622148589
Encrypted:	false
SSDEEP:	24:1bmHSX/O4U/E1B6QoCjHjfV8mTrQEFEOfp6Xi6vIFjm7K60yxWRR19ssizLJNLb8:1aeO/VQ3jDf3FAX3Sk0Mso8
MD5:	F3F1DFEC3A9B5B6876D1657913B4D686
SHA1:	45BA12FAAC43C83EB064304DBABA12832D5C34A8
SHA-256:	55AD65FCF9A00D4ED56374E9F15BD7C51D0E7E4C13CF613F2E6E77E4DC5F85FF
SHA-512:	7BEF206A8CB857DC0DECB7BB8D99EF1FE395C353AB5288AA9D0F8CBD9F54CC89C62EE37EAC9CE6B612F8DA78DE83163242C189BB85AAAAA43BF826AFCDCFEEA5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_toast_toast_on_init-vfl8_Hf7D.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_notify","./c_chat_chat_constants","./c_security_crypto","./c_core_uri","./e_core_exception","react-dom","react","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison"],(function(e,t,n,o,i,r,s,c,u,a,d,l,_){"use strict";const f="toast";function y(e,t){return n.__awaiter(this,void 0,void 0,(function(){const o=yield function(e,t){return n.__awaiter(this,void 0,void 0,(function(){const n=e.split(":");if(3!==n.length)return null;const[o,s,c]=n;if("1"!==o)return null;const u=(new TextEncoder).encode(s);let a=decodeURIComponent(c);try{a=atob(a)}catch(e){return null}const d=r.stringToBytes(a),l=(new TextEncoder).encode(null!=t?t:i.readCsrfToken());return(yield r.verifyMessageHmac(l,u,d))?decodeURIComponent(s):null}))}(e,t);if(null==o)return null;if(o.startsWith("er:"))return[!0,o.substring(3)];if(o.startsWith("ok:"))return[!1,o.substring(3)];throw new Error("unrecognized format of message in toast cookie")}))}t.decodeToas

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4395)
Category:	downloaded
Size (bytes):	4456
Entropy (8bit):	5.522202228664936
Encrypted:	false
SSDEEP:	96:YZjd3oS+FZvK8rrhHQpOoWrg8P2ym7efaCfaK+CxcC/+A+FCcT6:YZKS+hXOAo4gf6+CxcC/+A6Cs6
MD5:	38C7505C67131718CD679011048C3EB9
SHA1:	1AF6F522D4B30B3D58C5A98543575E6A9882BD30
SHA-256:	EB7B015104502C053B66311DDF5A8465FF8B1D7213611FE335E05F7779D67256
SHA-512:	7F310176C81B6EC80857E7FF87CD5D6C83609A3457480885F9923B685CCFF5DBFB9B5537D6DB2623A78997277B94460CC014B9768F9D722C8D347EE7A765A06E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_chat_constants-vflOMdQXG.js
Preview:	define(["exports"],(function(e){"use strict";const t=function(e,t){if(!e)throw new Error(t)},n=/^([0-9]{1,3}\.){3}[0-9]{1,3}$/,o=function(e){if(e.match(n))return[e];const t=e.split("."),o=[];for(let e=0;e<t.length;e++)o.push(t.slice(e).join("."));return o},r=function(e){const t=e.split("/"),n=[];for(let e=0;e<t.length;e++){const o=t.slice(0,t.length-e).join("/");""!==o&&n.push(o),n.push(o+"/")}return n},i=["=",";"],s=function(e,n,o=!1){t("string"==typeof e,`${n} must be a string, but was ${typeof e}`),t(o\|\|e.length>0,`${n} must not be empty`),t(!function(e){if(null==e)return!1;for(const t of i)if(-1!==e.indexOf(t))return!0;return!1}(e),`${n} contains illegal characters`)},a=e=>s(e,"Cookie name",!1),c=e=>{return n=e,o="Cookie max age",void t(!isNaN(Number(n)),`${o} must be numeric, but was ${n}`);var n,o},u=function(e,t,n={}){var o,r;a(e),(e=>{s(e,"Cookie value",!0)})(t),n.maxAge&&c(n.maxAge),n.domain&&(o=n.domain,s(o,"Cookie domain",!1)),n.path&&(r=n.path,s(r,"Cookie path",!1));const i

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.6767668884768048
Encrypted:	false
SSDEEP:	48:wFFFFFFFFFFFFFFFFtJdFdFSFfyFbK9MFDFCFbXFbFexKFdFcFQrDFaFNGCF7sF9:nudyjwG+jeWqQmGDB5
MD5:	F25511F4158C2DFAB6AA11A07D026E4A
SHA1:	99F63CF1694FA5E52F43EB967462EA0D9EEF7513
SHA-256:	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
SHA-512:	0BFB19AEC453A1C4D4B8F39602BF8BBF0A98182A98E29E1E1708EABFD99E3168855994A56061ED462C29B099137C226E25DDD274B46ED2F443C2C515A530B731
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .........%...%............a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...Q...R...`...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...]...P....C...=..T...\...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a..._...T...a...................a...T..._...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...[

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	4.65048843274521
Encrypted:	false
SSDEEP:	384:4W7rIQ6IQCMA0Gat0PBV5cD2EByjqM3ymFTZfVs5rWREOH2PQvQJQAQ+18faRZcK:f7rIQ6IQ5A0G60PBV5cD2EByjqM3ymFa
MD5:	CC89F04A3C567917CA2654569BBFEDA2
SHA1:	D20C7CC740F555828097AB039E5EA9D1270F6FED
SHA-256:	7C42D066BA5E7BD494C398884696E327798480B75032E4B3025494916CAF6107
SHA-512:	26127FF2B2ADB14A3CC01C5C8659223565D4E395571315F088E11135773EDB0E9A0E10ECA5AD5A8E4EA8854485D9F4A13D869BAC4CACF6279865E1D2BFEE77F1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/signup_signin/dwg_refresh_exp-vflzInwSj.css
Preview:	.login-or-register-page-content--dwg-refresh form:not(.two-factor-form),#page-content{padding-bottom:0;min-height:0;flex-grow:1}#root{display:flex;flex-direction:column;min-height:100vh}#login-or-register-page-content.login-or-register-page-content--dwg-refresh .login-register-container{margin-top:0;margin-bottom:0}.login-register-register-part .register-form .auth-google.button-primary{margin-bottom:0}.login-register-container--dwg-refresh.login-register-container--dwg-refresh .login-register-login-part,.login-register-container--dwg-refresh.login-register-container--dwg-refresh .login-register-register-part{margin-bottom:var(--dwg-spacing__unit--8, 64px)}.login-or-register-page-content--dwg-refresh .inner-wrapper,.password-reset-form--dwg-refresh .inner-wrapper{display:flex}.login-or-register-page-content--dwg-refresh .login-register-container-wrapper,.password-reset-form--dwg-refresh .login-register-container-wrapper{width:100%;margin-left:24px;margin-right:24px}.login-or-register-p

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	5.1223448635271
Encrypted:	false
SSDEEP:	6:U2ycV6jI4siXvXJBSU48t1UcA2xkN7w23biE1H5ouSLn8hrK9IVKDd/xWJrr0Q8J:U2eAi/ZBLTUQxkNP371H5ouSA0CVKR/p
MD5:	2FDFFDD1608FE3ED35E7827066DA9FD1
SHA1:	9D6516E47029DEAB1CB5158E9CC9C2D7562280EC
SHA-256:	A6DADDC200534ED549A179751B36B35F63D2AE229CF7191E9623945EABF0604A
SHA-512:	91078DBC23A85A0F77CD22A7E1DD22C4A696AEAB288246765906E0573C799DBDD3D05145AEC4CE8000FAAC3E03B37467407DC0036A6C113AEE4EBA7747E21F58
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/icons-vflL9_90W.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-icons@3.10.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1803)
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	5.235830949555532
Encrypted:	false
SSDEEP:	48:Bq1baQb1TzbtST35ubFuPIXufundDBq6QEzer2c5aQDRb:EamXtapoF+IXEun/4P2c5bdb
MD5:	4ADDF5E9272BD4FE3138862368434369
SHA1:	B9B339BB0495D1346BCFF1180D2D9CA3CD9EB6F6
SHA-256:	BA1EA83AACDFEC164A3161871E51026876A3BD863B46BB494C3EFFAE037B5007
SHA-512:	A0C5A6F026A9CF446EE46FD2FAC6031B011EB5C2D03C5CEC54F0BD3BE6E6636D6501DB2AD5A93E1DF39958EA61489CF7FC4827BF6E838B09927FA88A071765AF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/api_helper_validation.bundle-vflSt316S.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var t={r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);class n{constructor(t){this.dropboxOrigin=t,this.meta_asyncApi=!1}isDropboxDomain(t){const e=document.createElement("a");return e.href=t,e.hostname.endsWith(".dropbox.com")}handleEvent(t,e,n){"function"==typeof t&&t(e,n)}addQueryParameter(t,e){return 0!==e.indexOf("?")&&0!==e.indexOf("&")\|\|(e=e.substring(1)),null===t&&(t=""),-1!==t.indexOf("?")?t+="&"+e:t+="?"+e,t}makeRequest(t,e,n,i,o,a,s,r,d){if(!t)return;t=this.dropboxOrigin+t,n\|\|(n=6e4),i=i\|\|function(){},o=o\|\|function(){},a=a\|\|function(){},s=s\|\|function(){},d=void 0!==d?d:"POST";const c=new XMLHttpRequest;c.addEventListener("load",function(){this.meta_asyncApi=!0,200===c.status?this.handleEvent(i,c,r):this.handleEvent(o,c,r)}.bind(this))

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10533)
Category:	downloaded
Size (bytes):	10591
Entropy (8bit):	5.234934257056051
Encrypted:	false
SSDEEP:	192:ZUXRvotYV2cpTXupFgX8GehjTnNmSkpyTDUOFubQpKTH5+iD32nCoP32m3fcRN6T:ZUXRvotYUyXWFgX8GehjTNN1UOGlT0Cg
MD5:	151644207B52C049454C572377EE3E83
SHA1:	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4
SHA-256:	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
SHA-512:	98EB9930274D2B1C81F7C04736678B4F3DD066E94F29FD111FCA70D742AB82842EE6F49A075464BCB09A27011AB9841FFD578D4E0F6343348648C613927F6E0F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_edison-vflFRZEIH.js
Preview:	define(["exports","./c_init_data_runtime","./c_core_uri"],(function(e,t,n){"use strict";var r,a,o;function i(e){const t=o[e];return"string"!=typeof t?e.toString():t[0].toLowerCase()+t.substring(1).replace(/[A-Z]/g,(e=>"_"+e.toLowerCase()))}e.MethodKind=void 0,(r=e.MethodKind\|\|(e.MethodKind={}))[r.Unary=0]="Unary",r[r.ServerStreaming=1]="ServerStreaming",r[r.ClientStreaming=2]="ClientStreaming",r[r.BiDiStreaming=3]="BiDiStreaming",function(e){e[e.NoSideEffects=1]="NoSideEffects",e[e.Idempotent=2]="Idempotent"}(a\|\|(a={})),function(e){e[e.Canceled=1]="Canceled",e[e.Unknown=2]="Unknown",e[e.InvalidArgument=3]="InvalidArgument",e[e.DeadlineExceeded=4]="DeadlineExceeded",e[e.NotFound=5]="NotFound",e[e.AlreadyExists=6]="AlreadyExists",e[e.PermissionDenied=7]="PermissionDenied",e[e.ResourceExhausted=8]="ResourceExhausted",e[e.FailedPrecondition=9]="FailedPrecondition",e[e.Aborted=10]="Aborted",e[e.OutOfRange=11]="OutOfRange",e[e.Unimplemented=12]="Unimplemented",e[e.Internal=13]="Internal",e[e

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40379)
Category:	downloaded
Size (bytes):	40438
Entropy (8bit):	5.376589973437227
Encrypted:	false
SSDEEP:	768:9pr6EyPKyqwU6Cm3fvLf+YJGLvdVcW+sk4NIMMVgxxxujhmEj+BDGFXGVvi5qlZO:qU6CojhhzXjoQclSl6r8OsimCm
MD5:	45BD73696958F0863F8B7F9265D054A9
SHA1:	1C943197E7CDB6AE422BF8CEFD4602B68EA38E44
SHA-256:	C20C06F0D8A322B788147CF62C0D1DC173C36AF0B113A055BD1F503590606859
SHA-512:	63408DB8CE26A9B5B3D870CE1B88FE26C8C81B70D5E7CC37F50F79C409E9A48CC851241F42AF432AC918A1C98F40FBCF51B3CA570C3E0C2461985F692FAC9143
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_runtime-vflRb1zaW.js
Preview:	define(["exports","./e_core_exception"],(function(e,t){"use strict";function n(e,t){if(!e)throw new Error(t)}const r=34028234663852886e22,i=-34028234663852886e22,s=4294967295,o=2147483647,a=-2147483648;function u(e){if("number"!=typeof e)throw new Error("invalid int 32: "+typeof e);if(!Number.isInteger(e)\|\|e>o\|\|e<a)throw new Error("invalid int 32: "+e)}function c(e){if("number"!=typeof e)throw new Error("invalid uint 32: "+typeof e);if(!Number.isInteger(e)\|\|e>s\|\|e<0)throw new Error("invalid uint 32: "+e)}function l(e){if("number"!=typeof e)throw new Error("invalid float 32: "+typeof e);if(Number.isFinite(e)&&(e>r\|\|e<i))throw new Error("invalid float 32: "+e)}const f=Symbol("@bufbuild/protobuf/enum-type");function d(e){const t=e[f];return n(t,"missing enum type on enum object"),t}function h(e,t,n,r){e[f]=m(t,n.map((t=>({no:t.no,name:t.name,localName:e[t.no]}))))}function m(e,t,n){const r=Object.create(null),i=Object.create(null),s=[];for(const e of t){const t=g(e);s.push(t),r[e.name]=t,

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.6767668884768048
Encrypted:	false
SSDEEP:	48:wFFFFFFFFFFFFFFFFtJdFdFSFfyFbK9MFDFCFbXFbFexKFdFcFQrDFaFNGCF7sF9:nudyjwG+jeWqQmGDB5
MD5:	F25511F4158C2DFAB6AA11A07D026E4A
SHA1:	99F63CF1694FA5E52F43EB967462EA0D9EEF7513
SHA-256:	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
SHA-512:	0BFB19AEC453A1C4D4B8F39602BF8BBF0A98182A98E29E1E1708EABFD99E3168855994A56061ED462C29B099137C226E25DDD274B46ED2F443C2C515A530B731
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/images/favicon.ico
Preview:	...... .... .........(... ...@..... .........%...%............a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...Q...R...`...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...]...P....C...=..T...\...b...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a..._...T...a...................a...T..._...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...b...[

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	58272
Entropy (8bit):	6.087497514749547
Encrypted:	false
SSDEEP:	768:2FHqzyMfHsSmkRc0mt+j6XPNnR4fLpSlZdgz7B8rYgiy/U1BoWSRbUJOtojRbEMW:2jMfHw6mtuU4LMlZG/B8BoxBCd
MD5:	F9ABED3D3D7E0B5A0A5A303B113C53F4
SHA1:	8DEA33D500E929B878CED36C5980745C0BF13DB9
SHA-256:	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
SHA-512:	33E2E61B9EABEB41056D86B34BDDAAD8C2C4F0BED63EB873439AB8FA6B3E154D1486AA7D7BBB46B6226BA3F7D0603D4AE2AE8E7CAECF43BD03E3599AA5B643AE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf
Preview:	............GDEF+......p...XGPOSn....;h..6.GSUB..M........4OS/2f{.k.......`STAT...K.......xcmap...........gasp............glyfm.....q...q.head U-....`...6hhea...*...<...$hmtx.<db...8....loca.-{....\....maxp...%....... nameA.wj........post......'....Kpreph..................................X.....................................R.............................B...X_.<...........X.....3N.R..... .........................X...K...X...^.T.2...............g...k...(....GOOG.............+.7 .............. ...................4..opsz....wght....GRAD....ital.....0.$.....................................................................0.................................................................................................................................................0.2...6.8...C.H.......9.....&...v.v.l.l.^.l.T.J.@.v.v.v.v.v.v.8.0.................[.......i...:.........................M.............F.................Q.......;...>.z.........0.2...6.9...C.H.................^.~...........P..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1563)
Category:	downloaded
Size (bytes):	1564
Entropy (8bit):	4.765867310326991
Encrypted:	false
SSDEEP:	24:veo6TuveluWgjW1RqeMGAurZuuEPdyiBPdy59Pdybf9Zs3PzDzK6:veX6elWW1JMGA4ZlEPdJBPdK9Pdcfu
MD5:	7B08E15668E6293DED274A0E43734BD4
SHA1:	84CC2086318F411FA109744A702B5B04271D7658
SHA-256:	6A8AD86F86D2671FDF62C01740FDC191743F39E124EE7401857E238144329881
SHA-512:	C5FE8390538C05BC59240D73C6813D7D16B63F1FDA3A1C4634FB987B26C9CCA160CF0AE3AB128F0C4CB02610FCC6F1653D4E3D23B2B565FEA28B9E3F95CED206
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/signup_signin/unified_susi-vflewjhVm.css
Preview:	.unified-susi-na .dwg-button2--button-style-transparent.link-na{color:var(--dwg-theme__color__attention__text);text-decoration-color:var(--dwg-theme__color__attention__border)}.unified-susi-na .dwg-button2--button-style-transparent.link-na:hover{text-decoration-color:var(--dwg-theme__color__attention__border--faint)}.link-na>.dwg-text{font-size:14px;line-height:17px}.sig-wrapper--dwg-refresh{position:absolute}.back-button-na .dwg-button2__icon{rotate:180deg;transform-origin:center var(--dwg-spacing__unit--1_5, 12px)}.back-button-na.dwg-button2--button-style-transparent{color:#000;text-decoration-color:var(--dwg-theme__color__attention__border)}.back-button-na:hover.dwg-button2--button-style-transparent{text-decoration-color:var(--dwg-theme__color__attention__border--faint)}.back-button-na.dwg-button2:hover>.dwg-button2__icon.dwg-button2__icon--right,.back-button-na.dwg-button2:focus-visible>.dwg-button2__icon.dwg-button2__icon--right,.js-focus-visible .back-button-na.dwg-button2.focus-

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	964148
Entropy (8bit):	5.490958561649525
Encrypted:	false
SSDEEP:	24576:dvvpjzIz14N7h06jUI9nbph6pUBIDwqFs1:dvvpjzIz14N7h06jUwnbph6po6wqFs1
MD5:	8366B44FB761CD56F5E17006BB3A9FA8
SHA1:	6F491759983C8AC3670F5AE967DD85D448F4809E
SHA-256:	02CA3257BB77914E43E33F7CA3A738573ACE2CA4BC587905D438556CBC9EB512
SHA-512:	51871B1F6D7A1FC19AC39C57BE2834B427E2EDB734CEDB0FF7475BF9EF2063C3DAC00A25D37DFD455CE1BB5F6FCC670827CEBB7830A6ED5B8ABE0CA79157B378
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/e_signup_signin_static_login_page_edison-vflg2a0T7.js
Preview:	define(["require","exports","./c_init_data_runtime","react","./e_edison","./e_core_exception","./c_core_uri","./c_apex-metrics_src_types","./c_src_query_client","./c_src_sink_index","./c_core_xhr","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","./c_chat_chat_constants","./c_core_attribution_header","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash","./c_init_data_edison","metaserver/static/js/modules/constants/viewer","metaserver/static/js/langpack"],(function(e,t,n,o,i,a,r,s,l,c,d,u,m,p,_,g,f,h,v,E,b,y,w,S,T){"use strict";function C(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var o=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,o.get?o:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.360613902337515
Encrypted:	false
SSDEEP:	192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0
MD5:	61699B70CF57ABE63FDF5F4007D36EC1
SHA1:	6C05189CC2D08BB2A7609C002F0675C9C670D362
SHA-256:	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
SHA-512:	AA5CC8794B5383B781A6611A4B5D8D660C73E766186551799B28FCF668C911EB0177FA04F543EC60E5F64005F3BCE019604BD0A2129D718F33284D3689F5C398
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/react-vflYWmbcM.js
Preview:	/** @license React v17.0.2. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=Y&&a[Y]\|\|a["@@iterator"];return"function"===typeof a?a:null}function y(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,e=1;e<arguments.length;e++)b+="&args[]="+encodeURIComponent(arguments[e]);return"Minified React error #"+.a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function v(a,b,e){this.props=a;this.context=b;this.refs=Z;this.updater=e\|\|aa}function ba(){}function K(a,b,e

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.085500657991218
Encrypted:	false
SSDEEP:	3:aoOMmmZNDrPzZl9l:anijBl
MD5:	513F1D1684F5F5F96983E4AFDE6A12A9
SHA1:	9EE5B819E26671328A7B58526C7B5885EE053F1E
SHA-256:	BFC7DC4C0C556175F63B2D19A5BDB021D04A3160EEBFD0DAD90E4B3F019A6C5B
SHA-512:	493FCC0FC9704AB975C3576F2C8C2DD797E46CD6B8FC1CAC795D2BD3C8E9E879C67B9D5D9D4B790FB2061CC19EDDC6C36DDBDEE75DCAE46F3C18D48A53177A00
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnkgLBxhQ1aVhIFDcy-BCUSBQ0Vg6i3?alt=proto
Preview:	CiIKEw3MvgQlGgQICRgBGgQIVhgCIAEKCw0Vg6i3GgQISxgC

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (304)
Category:	downloaded
Size (bytes):	305
Entropy (8bit):	4.931439734894977
Encrypted:	false
SSDEEP:	6:OXCw0UVexRJNZHXWXC+kEybGX9G4l6lm6c2XunG6HoV6HoQ:4CIVqN5GXCxEybGDT7Hw6HR
MD5:	4E2CC091FAC48A36F2EB401FA6ECE06B
SHA1:	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44
SHA-256:	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
SHA-512:	B7E439B7D5A48FB1D52EC78BB0CC72622717F37CCB03AA988741D9757C8CC3AFBE7FE0ECDA12970916CDF484ED9280613E7E1777942CC64A517886516D8E3692
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/fingerprintjs_component-vflTizAkf.css
Preview:	.fingerprintjsComponent{z-index:1000;position:fixed;top:0;left:0;width:100%;height:100%;visibility:hidden}.fingerprintjsDiv{margin-left:auto;margin-right:auto;visibility:hidden}body #one-tap-fpjs-container~iframe[src='about:blank'][style*='visibility: hidden']{top:-100% !important;left:-100% !important}.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (729)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.167258852207224
Encrypted:	false
SSDEEP:	12:N3BhZQgBRqm+Rs0BhZQkyoTLxPrwagTG6pzD9iEUNV0x/pzP5Ls0sd:N3BhWgXqPXhWkdxsJppz40/pzCb
MD5:	75ED595D4A569CF9073CD6EEE308B3B3
SHA1:	13F9416A70CEEA9033A496A6AA5B922B72A6FBE2
SHA-256:	34BA9C679427ACA43C1321759FAE0373E54B68661E8D12FB59BDB1F3D93ED1E8
SHA-512:	7860705ED80A784187CB3303CF06C3FD597121A73C751CAB9059C2E834D0EB689C25018F668C8C5EF11F74C50E29B1D795F92F18E58ECEB697C2B225BC362DA3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/inputs/auth_checkbox.module.out-vflde1ZXU.css
Preview:	._susi-checkbox_1lyd3_3{align-items:center;display:flex}._susi-checkbox_1lyd3_3._two-factor-checkbox_1lyd3_8{border-radius:3px;box-sizing:border-box;display:inline-block;line-height:normal;margin:2px 0 5px;max-width:230px;min-height:34px;padding:25px 0 10px}._susi-checkbox_1lyd3_3._two-factor-checkbox_1lyd3_8 input{cursor:pointer;height:14px;margin:0;padding:0;vertical-align:middle;width:14px}._label_1lyd3_28{font-size:12px;line-height:16px;padding-top:1px}._label_1lyd3_28,._label_1lyd3_28._login_1lyd3_37{font-family:var(--__dwgAtlasGroteskStack);font-weight:400;margin-left:var(--dwg-spacing__unit--1)}._label_1lyd3_28._login_1lyd3_37{font-size:16px;line-height:20px}._icon-container_1lyd3_45{display:flex;margin-left:4px}./# sourceMappingURL=auth_checkbox.module.out.css.map /

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.038924068526502
Encrypted:	false
SSDEEP:	3:7DR5Xw7kMTVaCxNACOTKDtEA6W4Sk/YpPXJqRLGR88A:H+TVGq2FaJRXQsI
MD5:	00E3748EF6EF9B75F69F6AC20471BC85
SHA1:	713BD618ADFC43F6EC695CFE3788D19708666FB1
SHA-256:	5E49FEF385C5BDA41E5FD72F0D0FB2E76722A5C156CAC7AFDBDCD9C6B9B9648A
SHA-512:	0FED16F611FBF747CF393BC51D656527BFE0D313A6A77AD7A8E98F9FEBF147041D52F2D74DE542B222F3ECC02C97EC11839EA63366654ED2816B7726A0F63715
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/susi.module.out-vflAON0jv.css
Preview:	._susi-form-container_vmoxa_1{position:relative;text-align:left;width:100%}._current-form_vmoxa_7{display:block}./# sourceMappingURL=susi.module.out.css.map /

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	downloaded
Size (bytes):	2110
Entropy (8bit):	5.045839121437345
Encrypted:	false
SSDEEP:	24:wx7f7NXF+B2PJQsKMiX0M367ZpQPOQ6NENUoMKs5i+NZnZA7r6Q5+b6npbRb:srh0kFVM3Df6V7iorMr6U/b
MD5:	72F9A26C26C1A681AD75A7E270550788
SHA1:	5579A02442ADFE9980A87BF495B18260927CD146
SHA-256:	F4024DCE9F70735047ADC3A8CF7E8AC9FD2E1D4BFF6ABFC4158A1810EDFCE45F
SHA-512:	0CFAF5CBD337D6D04A6D6AB1B2E86F943A93CC835B20C0DE00A309D69EDD9E6828470D6DA2D8E263A8FADEF6E58C4AD679D88062184A09D4F190CD19427EFB55
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/inputs/auth_text_field.module.out-vflcvmibC.css
Preview:	._susi-auth-field_4srl7_4{display:flex;flex-direction:column;font-family:var(--__dwgAtlasGroteskStack);line-height:normal;margin-bottom:var(--dwg-spacing__unit--2);text-align:left;width:100%}._susi-auth-field_4srl7_4._login_4srl7_14{margin-bottom:var(--dwg-spacing__unit--0_5,4px)}._show-password-button_4srl7_18{bottom:12px;display:flex;position:absolute;right:22px;width:24px}._show-password-button_4srl7_18 ._show-password-icon_4srl7_26{color:var(--color__standard__text)}._password-capslock-warning_4srl7_30{bottom:7px;padding:var(--dwg-spacing__unit--1,8px);position:absolute;right:20px;visibility:hidden}._password-capslock-warning-register_4srl7_38{right:42px}._password-capslock-warning--visible_4srl7_42{visibility:visible}._password-capslock-warning-icon_4srl7_46{width:10px}._field-input-wrapper_4srl7_50{margin-bottom:0;position:relative}._field-input-password_4srl7_55:not(:focus)~._password-capslock-warning_4srl7_30{visibility:hidden}._field-input_4srl7_50{border-color:var(--color__st

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	288173
Entropy (8bit):	5.441377419359384
Encrypted:	false
SSDEEP:	6144:yAlTuAXQWgYJfvty7B/AVxO4w+5IYKf1Wm083Y:u7BIVY4w+5IYGY
MD5:	519CA25E320FAE6824DB30F29A266724
SHA1:	901D3ABFD099B379A634C828B74B5DE1105ED677
SHA-256:	349E6AA7AB8A72A04322F82C3044EABD2828028BCCDB9DBF8D2964E1D462B369
SHA-512:	26865AF6BAFA78586C7108414F54DE5A0743718D3A1A76742950003DBF067F080B7217CCACB2E5C521F7C60914009BA1D25B05DED0B5CB8F987CE1A453CF9DE6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_privacy_consent_static_ccpa_iframe-vflUZyiXj.js
Preview:	define(["require","exports","react","./c_init_data_runtime","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_viewer","./c_src_sink_index","./c_browser_browser_detection","./e_core_exception","./c_core_notify","./c_core_i18n","react-dom","./c_core_xhr","./c_core_uri","./c_csrf","./c_core_attribution_header","./e_edison","metaserver/static/js/modules/constants/viewer","metaserver/static/js/langpack","./c_init_data_edison"],(function(e,t,n,i,o,r,a,s,c,l,d,u,m,p,f,g,h,_,v,b,y){"use strict";function E(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var i=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,i.get?i:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var w,S,C,T,x,N=E(n),k=E(m);class O extends i.Message{constructor(e){super(),this.userAgent="",this.sessionId="",this.anonIp="",this.localeUserSelected="",this.localeBrowserH

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40817)
Category:	downloaded
Size (bytes):	40886
Entropy (8bit):	5.40969868742486
Encrypted:	false
SSDEEP:	768:/jz+z6zKzACntN+Ds4FGxHzMsZ63D4WHE/u00FZ6NROowq5fJLObEGEVHYTUYS3C:/dDsgGxHc3TL5bNJB2UGl192nvSIN
MD5:	5A34B03CB884671743BEEBC13F7C1399
SHA1:	12D69902E44C7661FA1CC50AF7D2D020EAB6F3A0
SHA-256:	1CE473D6A4749E63F8BBFE0EE1B3B591FF6A13C08E71EF01425A716758EB885B
SHA-512:	E05A9DD2B779963F167900796088D17054BC7CA4B60546D04691C55501C3B9631247C6D025F41253BA71A6AA4F021C11C11FD647EE188844ACA5CC6F5011B87C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_pap-client_analytics_client-vflWjSwPL.js
Preview:	define(["exports","./c_viewer","./e_privacy_consent_static_ccpa_iframe","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_browser_browser_detection","./c_src_sink_index","metaserver/static/js/modules/constants/viewer","./c_core_uri","react","./e_core_exception","./c_core_notify","react-dom","./e_edison","./c_init_data_edison","./c_core_i18n","metaserver/static/js/langpack","./c_core_xhr","./c_csrf","./c_core_attribution_header"],(function(e,t,i,n,r,s,o,c,a,d,h,l,u,p,f,v,g,m,y,w,b){"use strict";var _,S={exports:{}};_=S,function(){var e={cipher:{},hash:{},keyexchange:{},mode:{},misc:{},codec:{},exception:{corrupt:function(e){this.toString=function(){return"CORRUPT: "+this.message},this.message=e},invalid:function(e){this.toString=function(){return"INVALID: "+this.message},this.message=e},bug:function(e){this.toString=function(){return"BUG: "+this.message},this.message=e},notReady:function(e){this.toString=function(){r

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28894)
Category:	downloaded
Size (bytes):	28952
Entropy (8bit):	5.129671933512335
Encrypted:	false
SSDEEP:	768:ez4DtYgTucOAyk5+zF6inFc5QhBiEoOjVLX4Paz6v2FsHDfL66Wbxy+Z9T6r6Nx5:e8DtYgacOa5+zFZnS5QhBiEoOjVLX4PI
MD5:	0CCCFB2043691D73CB0B102FFB24D8BC
SHA1:	BCF3319003F4AD3B56F29039B4E8F647198A688E
SHA-256:	0ECE96A21B3FC0F83A242A94ABD4AE0A38EF3433E7CD45801993F0E8DEF7C7E0
SHA-512:	946629C52C8C90FA65D68C3C80AE35EE5224E92A6D59661A36348F28CFCC8D4DED5359BB7D21AB0AAB66A25FB52F07D5FD7079CFE836BE8B117D0CD85214C677
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_mjs_assets_index-vflDMz7IE.js
Preview:	define(["exports","react","./e_signup_signin_static_login_page_edison","./c_ui-icon_line_upload","./c_ui-icon_fill_star","./c_init_data_runtime","./e_core_exception","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,l,n,t,c,r,o,i,a,v,s,f,h,m,E,d,g,L,Z,u,C,p,V,H,k,M,_){"use strict";function w(e){if(e&&e.__esModule)return e;var l=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var t=Object.getOwnPropertyDescriptor(e,n);Object.define

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9512)
Category:	downloaded
Size (bytes):	9576
Entropy (8bit):	5.275001223250551
Encrypted:	false
SSDEEP:	192:kkFQv3wpio1do/UdnAZvnGvHChR0sCanwx41Zv0hX1sy914xoXk7/mBWbE0KmXJU:bSwpio1ucqZvnGvChR0sCWwx41Zv0hXh
MD5:	0EB0F8E49EF9EC2C5C5E5161EC32E334
SHA1:	9D3691D13669E78371EBB7EF37248E150D8885B0
SHA-256:	304153AC1B94B2FC410828BD9AE76A4D2CA92EEF2881BAF838A7804B84482AC4
SHA-512:	00BFBFFF45096F6C376F5F9C846443D589C1798172D4EA12F7ED669C07F8B686DA5DE3032F4C764A69F288FCF9319CCE30221208573EFAD1BD46542D660D7E27
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_abuse_funcaptcha_modal-vflDrD45J.js
Preview:	define(["exports","react","./e_signup_signin_static_login_page_edison","./c_core_uri","./e_core_exception","metaserver/static/js/modules/constants/login_and_register","./c_apex-metrics_src_types","react-dom","./c_core_dom","./c_src_sink_index","./c_init_data_runtime","./e_edison","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","metaserver/static/js/modules/constants/locales","./c_security_crypto","./c_lodash-es_lodash","./c_Key"],(function(e,t,s,i,a,n,r,c,o,h,p,l,d,_,u,f,m,g,y,D,v,w,C,A,P,b,$){"use strict";function k(e){return e&&e.__esModule?e:{default:e}}function E(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(s){if("default"!==s){var i=Object.getOwnPropertyDes

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24716)
Category:	downloaded
Size (bytes):	24769
Entropy (8bit):	5.274065553465331
Encrypted:	false
SSDEEP:	768:HdbTk6CzDp80WtfoNwIC8bLCIfTWoNtzcgFKHvUM81iPg7YnFV2DB7naYvsB1wws:Hy80SQNwICieIXyvYUBaIdm
MD5:	B8B17CF293A9236B5B64611E1A9FD351
SHA1:	98CFA0D68DCF83327DB78B7C2C517375DAD621E1
SHA-256:	807AB5331D13B0ACD6F5568F1564E0C22F4C8C533264156084AD9A5A45DFDBD8
SHA-512:	CE2FAF2130D6240275F4FCE6E8DF91B064BCE3F42CAB0DA12CF4B14CEA09E847F9EA3C548E906994936807395BF8397F9224586711EC85D081D34E419DDAF17B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_uxa_pagelet-vfluLF88p.js
Preview:	define(["require","exports","./e_signup_signin_static_login_page_edison","./e_core_exception","./c_init_data_runtime","react","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,t,n,i,a,s,r,o,l,c,d,u,h,g,m,_,p,f,v,E,y,I,T,w,S,k){"use strict";function b(){try{return window.self!==window.top}catch(e){return!0}}const x=()=>location.hostname.split(".").slice(-2).join("."),O=()=>"dropbox.com"===x(),A=()=>!!O()\|\|("docsend.com"===x()\|\|("dash.ai"===x()\|\|("dropboxforum.com"===

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	639
Entropy (8bit):	5.239448849095377
Encrypted:	false
SSDEEP:	12:U2eAi/ZB5tpUQxkNP371H5ouSA0CVKR/x6rgYaTmokRm2MRTGM6yK3TCz:xeAi/ZBdU7Z371HOu70CViTmBmDKn3Gz
MD5:	98070F1CF7C37AF35E411C1EAE73D5C3
SHA1:	652F4EC37768D55F02BA12617D3058E3A3436761
SHA-256:	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
SHA-512:	849B96385E40A08420CB2337673EC3F07AB828D5ED8F7856BC17C6E0BA1A2B8ECC9BA9CA16606930F02BC4B23E364DC832296C12FE3DB69EBB8948B975245A33
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/content-icons-vflmAcPHP.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-content-icons@4.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-ContentIcon{box-sizing:border-box}.dig-ContentIcon--overSubtle{--dig-color__fileicon__container:var(--dig-color__background__base)}.dig-ContentIcon--hasNoBackground{--dig-color__fileicon__container:transparent;--dig-color__fileicon__shadow:transparent}

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2903)
Category:	downloaded
Size (bytes):	224463
Entropy (8bit):	5.549830536062083
Encrypted:	false
SSDEEP:	6144:EPJzxw5DpwyKfrb5Hcimaaz2xICmKB7pLFx:9SyKfBHpHaCxICmkHx
MD5:	935A57D7B3A664FF798C18C5A490705A
SHA1:	63CD6CC42F98DD53CC45346B772673EC5F628ED1
SHA-256:	7D29FAA43BD29762C126E7C044C9E950D37C1DEDE7E37D5EB5380F20010ADE31
SHA-512:	48FE7A8EDA0F8CE8F36026D46C346CD0DABD968309166D94BE5099121EAE351D7A9E8A9DDB1035FF668EFF32095E4B8B440F909FB95801796C8A73E66BC46191
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1c042400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.199901264020445
Encrypted:	false
SSDEEP:	12:1hHryZO9DPeLv0Pmeagn/Werbb5w5w26PqJT0SwEohXI7:1hHryZOhcvSmjg/Werbb5w56PqJ0Eoy
MD5:	C2591593FFBD92E16276E86068DB913A
SHA1:	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1
SHA-256:	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
SHA-512:	AE5D5BC1C7002E7600197597DD9F97600DA5875A82128105C787AD83439B6F8D59F2272ED4E6D8127C5524A1BC714B0442CF3B87785A98B454326851476171F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_attribution_header-vflwlkVk_.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,t){"use strict";e.getAttributionHeader=function(){if(!window.ensemble)return void 0!==t.getYapsProject()&&void 0!==t.getYapsDeployment()?`${t.getYapsProject()}:${t.getYapsDeployment()}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter((e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project));return 0!==e.length?e.sort(((e,t)=>e.pagelet_name<t.pagelet_name?-1:1)).map((e=>`${e.yaps_project}:${e.yaps_deployment}`)).join(";"):void 0}}));.//# sourceMappingURL=c_core_attribution_header.js-vflts_Mx9.map.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	120585
Entropy (8bit):	5.370923647345209
Encrypted:	false
SSDEEP:	1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs
MD5:	23BFE7E99565EE8F34AFD63C06F4C24B
SHA1:	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07
SHA-256:	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
SHA-512:	F6318DAF93E2C1EF27CCB2D84E4F10AC430F7E3194D29C7CD066332995318BB96609FAC18EDC827355799244B9BF1570C0807B429CDCED4C4B890C5F00DDF477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/react-dom-vflI7_n6Z.js
Preview:	/** @license React v17.0.2. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(M,ha){"object"===typeof exports&&"undefined"!==typeof module?ha(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],ha):(M=M\|\|self,ha(M.ReactDOM={},M.React))})(this,function(M,ha){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function Ta(a,b){gb(a,b);gb(a+"Capture",b)}function gb(a,b){Ib[a]=b;for(a=0;a<b.length;a++)zf.add(b[a])}function li(a){if(Af.call(Bf,a)

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5341)
Category:	downloaded
Size (bytes):	5441
Entropy (8bit):	5.273645972770034
Encrypted:	false
SSDEEP:	96:VOvUSQ+FMU3YFZQ+FvUT/nfl2gLNxMdGazQGjskfQ9C3ewi:VyUSQ+FMU3YFZQ+FvUT/n92gLHdazQGQ
MD5:	757A6AB0DD9C36D34560BA29F8A2E990
SHA1:	FA23336FD64AFC6218933D458A1FEFEDC6F56838
SHA-256:	5A600EA33AB9E0371DB4C3BAE67E8917DF17A05B3D55B1DB58B2B33B6B81258C
SHA-512:	D7E83EB263ECDEA81B34DE45147518F7184714E4E4882F5508DB063B5EF41428CF09A3894C9263CAE2B4E6A4145CB8A354762142A93E1D110C6D2AB4A8FEF822
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_user_centric_perf_metrics_component_visually_complete_ajax-vfldXpqsN.js
Preview:	define(["exports"],(function(e){"use strict";var t,i,s;e.ApiV2HeaderNames=void 0,(t=e.ApiV2HeaderNames\|\|(e.ApiV2HeaderNames={})).DropboxApiArg="Dropbox-API-Arg",t.DropboxApiSelectAdmin="Dropbox-API-Select-Admin",t.DropboxPathRoot="X-Dropbox-Path-Root",t.DropboxUid="X-Dropbox-Uid",t.DropboxTeamId="X-Dropbox-Teamid",t.DropboxTeamAuthorization="X-Dropbox-Team-Authorization",t.CsrfToken="X-CSRF-Token",t.DropboxForceQuic="X-Dropbox-Force-Quic",function(e){e[e.TeamAdminRole=0]="TeamAdminRole",e[e.MTARole=1]="MTARole",e[e.FederationAdminRole=2]="FederationAdminRole"}(i\|\|(i={})),function(e){e[e.AdminAction=0]="AdminAction",e[e.AssumeAction=1]="AssumeAction",e[e.OnBehalfOfAction=2]="OnBehalfOfAction"}(s\|\|(s={}));class n{static parse(e){const t=e[".tag"];return 2===Object.keys(e).length&&null!=e[t]?new o(t,e[t]):new r(t,e)}constructor(e,t,i){this.type=e,this.value=t,this.isScalar=i}}class o extends n{constructor(e,t=null){super(e,t,!0)}toJSON(){const e={".tag":this.type};return null!=this.value&

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57539)
Category:	downloaded
Size (bytes):	57590
Entropy (8bit):	5.562960277957818
Encrypted:	false
SSDEEP:	1536:pEN3NpnQ2oY8LGuA3vD0KUcvt/TRQ+4rN3NpnQ2oY8fGvlPoKpObLyUhXRZhoWf:iN3NpnQ2oY8LGuA3vD0KUcF/8N3NpnQv
MD5:	31B87813F8E376C1275EA68738A70F95
SHA1:	307022FFF0D627CDBD30E6D9926C8196A8C2E74A
SHA-256:	4C915CF857BDB42F16B6D7A46F3762211C9816ED987BFC5725B5CC833E5ADB33
SHA-512:	46FD684CFEB0B09A03FACD1D2833D8650355C766C7E9FF35D1B04B79A4AA11B15CC2E058D7DC597EB81C198F48C5521A1993DE0EE4ABC2B0A255BFD2ECE71586
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_i18n-vflMbh4E_.js
Preview:	define(["exports","./e_core_exception","./c_src_sink_index","./c_init_data_runtime","metaserver/static/js/langpack","react"],(function(e,t,r,n,i,o){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=a(i),u=a(o);function l(e){return e?"zh-TW"===(e=e.replace(/_/gi,"-"))?"zh-Hant-TW":"zh-CN"===e?"zh-Hans-CN":"es"===e?"es-419":"es-ES"===e?"es":e:e}var c=function(e,t){return c=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},c(e,t)};var f=function(){return f=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},f.app

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	222
Entropy (8bit):	5.070216732279745
Encrypted:	false
SSDEEP:	3:JVMBWoJ51GSg4KOrN9ENx8Zp3MEIRIfmX/0TSK9ylWoKJQIsvUGFO/Ype3XRLGRI:JS06jLVKycn8zMEpfguXXs8GFbYBsI
MD5:	4985A0F29951864A832BB9471CF2B43F
SHA1:	B1D80D67A0A506CBB31B459E0A155138E887EC75
SHA-256:	4A644362AC51EC790ADA2283D0762D6F24775F815B7ADAAEFE6F7CA4F9A7AE89
SHA-512:	7CD7373B03C0F118C0274E2E660C181FA15224AFED7659C007E598B314C72D9E905913D9B78B5DBA86821B8F68301674F5B033C806BCCCF192230F9958C3138E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/email.module.out-vflSYWg8p.css
Preview:	._hide-password_1wewp_4{display:none}._email-check-button_1wewp_8{margin-top:var(--dwg-spacing__unit--3,24px)}._submit-container_1wewp_12{display:flex;flex-direction:column}./# sourceMappingURL=email.module.out.css.map /

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9312
Entropy (8bit):	4.937003383694957
Encrypted:	false
SSDEEP:	192:e0zDuAn+eT6X3vRzpedPRPkaFclVERezlf/LX74K+ljkBfgk:ry2+eWXJ1eL4lVEoZf/5+ljCh
MD5:	46CAC945E491B87E2835B2D5E8EC8804
SHA1:	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B
SHA-256:	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
SHA-512:	E30B985F18B6ED70B6B2F50691AB5698412FE4F67D1297F2582D6445DF65971DBC35758C122F9780D8D6306F5AC6B543E82AB2ED24CEF68E94D8178112F7BE9E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/ccpa_iframe/ccpa_iframe-vflRsrJRe.css
Preview:	html,.html.maestro {. display: inline;. background-color: transparent !important;.}..body {. background-color: transparent !important;.}..:root {. /* Colors /. --color__theme__link: #0061ff;. --color_primary--light: #0061fe;. --color_primary--dark: #0057e5;. --color_graphite: #1e1919;. --color_graphite--darker: #312a25;. --color_coconut: #f7f5f2;. --color__utility__focusring: #428bff;. --color__disabled__background: #bfbfbf;. --color__opacity--darken1: #f3f0eb;. --color__opacity--darken2: #e4ddd3;. --color__faint__text: rgba(82, 74, 62, 0.78);. --color__alert__background: rgba(155, 0, 50, 0.1);.. / Animation Speeds /. --motion__time--fastest: 100ms;. --motion__time--faster: 200ms;. --motion__time--slow: 600ms;.. / Fonts */. --type__body--fontfamily: 'Atlas Grotesk Web', 'Atlas Grotesk', 'AtlasGrotesk', -apple-system,. 'BlinkMacSystemFont', 'Segoe UI', 'Helvetica Neue', 'Helvetica', 'Arial', sans-serif,.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8486)
Category:	downloaded
Size (bytes):	8487
Entropy (8bit):	4.9015857124952
Encrypted:	false
SSDEEP:	192:zhw3JmwyswyMwuk6wysw9wy9wiw2CwuXsw/yw4m2/C6Q9d+QBcwLrOxNIqZhBn94:/+2E66ArR6a7gPA6
MD5:	2B550C403E2A5FE12C846A9C2931F7C8
SHA1:	D9D69852E8B9F3F66A5E2CFEF60D40664B368286
SHA-256:	72BDE476747B0BB5613AFFF1C51476F46BA3D1D481994838690C1786A9BD025A
SHA-512:	4E2FBF62FB76DD776618DDCEC9D76D24509391CC8934BE1A96D24D9DA15C2516B17CD5286CAEFDB714CD2643444B3295D64407C5E2F89709DD5D23E04EC81B45
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/google_one_tap-vflK1UMQD.css
Preview:	#credential_picker_iframe{z-index:10002 !important}.shared-link-signup-page #credential_picker_container,.shared-link-signup-page .one-tap-tos-modal-v1{top:var(--ib-preview-toolbar-top-offset, 20px)}.transfer-page #credential_picker_container{top:calc( var(--dwg-nav__height--universal, 48px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.warp-page #credential_picker_container{top:calc( var(--dwg-nav__height--universal, 48px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.shared-link-file-page #credential_picker_container,.shared-link-file-page .one-tap-tos-modal-v1{top:calc(var(--titlebarHeight, 64px) + var(--dwg-spacing__unit--2, 16px) - 6px);right:calc(56px + var(--dwg-spacing__unit--2, 16px) - 6px)}.shared-link-folder-page #credential_picker_container,.shared-link-folder-page .one-tap-tos-modal-v1,.scl-folder-page #credential_picker_container,.scl-folder-page .one-tap-tos-modal-v1{top:calc(var(--titlebarHeight, 64px) + var(--dwg-spacing__unit--2, 16px) - 6px)}.login-or-register-page #cred

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	120585
Entropy (8bit):	5.370923647345209
Encrypted:	false
SSDEEP:	1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs
MD5:	23BFE7E99565EE8F34AFD63C06F4C24B
SHA1:	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07
SHA-256:	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
SHA-512:	F6318DAF93E2C1EF27CCB2D84E4F10AC430F7E3194D29C7CD066332995318BB96609FAC18EDC827355799244B9BF1570C0807B429CDCED4C4B890C5F00DDF477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-dom-vflI7_n6Z.js
Preview:	/** @license React v17.0.2. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(M,ha){"object"===typeof exports&&"undefined"!==typeof module?ha(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],ha):(M=M\|\|self,ha(M.ReactDOM={},M.React))})(this,function(M,ha){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function Ta(a,b){gb(a,b);gb(a+"Capture",b)}function gb(a,b){Ib[a]=b;for(a=0;a<b.length;a++)zf.add(b[a])}function li(a){if(Af.call(Bf,a)

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	151518
Entropy (8bit):	5.478095324796891
Encrypted:	false
SSDEEP:	1536:n/S3uyJ0JMx1Et5v9mez63NjhXjQsF4YM5r717:nKmiq5v9ml3NjhcPY0F
MD5:	DD3A63D89A120D21CAEEF592A6D402F4
SHA1:	8E4FF005C1D1DF7A9A336A6F3AD8B06A5F5BA657
SHA-256:	FC1D7B30F08DF466E74C29408525FD5DD625E2136B48FD5ADB5690DA179928E1
SHA-512:	693B9F0C1361202E8B30583321C144B996D550CE7BA263E6BA54FA8A390092AAC7593E023129D78298C5A48D02E2986E2529B499AA8DB72EF668D28A733E9F3F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_fingerprintjs-pro-static_dist_fp-vfl3Tpj2J.js
Preview:	define(["exports"],(function(n){"use strict";var t=function(){return t=Object.assign\|\|function(n){for(var t,e=1,r=arguments.length;e<r;e++)for(var o in t=arguments[e])Object.prototype.hasOwnProperty.call(t,o)&&(n[o]=t[o]);return n},t.apply(this,arguments)};function e(n,t){var e={};for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&t.indexOf(r)<0&&(e[r]=n[r]);if(null!=n&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(r=Object.getOwnPropertySymbols(n);o<r.length;o++)t.indexOf(r[o])<0&&Object.prototype.propertyIsEnumerable.call(n,r[o])&&(e[r[o]]=n[r[o]])}return e}function r(n,t,e,r){return new(e\|\|(e=Promise))((function(o,i){function u(n){try{c(r.next(n))}catch(n){i(n)}}function a(n){try{c(r.throw(n))}catch(n){i(n)}}function c(n){var t;n.done?o(n.value):(t=n.value,t instanceof e?t:new e((function(n){n(t)}))).then(u,a)}c((r=r.apply(n,t\|\|[])).next())}))}function o(n,t){var e,r,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9586)
Category:	downloaded
Size (bytes):	9587
Entropy (8bit):	5.076530007287422
Encrypted:	false
SSDEEP:	96:0NFNSNw2f7NaawvN5N6KNVV6NF1NljNON/NxUl5NALL9NkNrG:03+zf5aaw1D62mFH7ylxUlDALLvErG
MD5:	53A288476541A8A0E790FC62E77B6FB9
SHA1:	FFB02CE6E09E61EB494BDE86E21A225F01C58EDA
SHA-256:	FB41B7F75A350B961521693271414222486CB98B099D0D68DFF83765F412CA94
SHA-512:	D23D810D2B69F86A3CB082128E405768BFBB8436E67650729072FD33D5B18DB6CAA76FC2E2B50422F83ACBFF273CD807C3274ABEE222AE2D6A0E03581D3E2D31
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_sharp_grotesk-vflU6KIR2.css
Preview:	@font-face{font-family:'SharpGroteskSuperCondensed';font-display:swap;src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIBQIXn.eot");src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIBQIXn.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflIUABa0.woff2") format("woff2"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflyOWHzZ.woff") format("woff"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBBook11-vflzrCLFX.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'SharpGroteskSuperCondensed';font-display:swap;src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-vflVqGBL6.eot");src:url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-vflVqGBL6.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/sharpgrotesk/SharpGroteskDBMedium11-v

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9876)
Category:	downloaded
Size (bytes):	9882
Entropy (8bit):	5.354340353456703
Encrypted:	false
SSDEEP:	192:jJVAWYFWLEdpXXlFUPxguyN2iJQdyZR2cSAcDfVLckkb5Apwk92+46uO4GbQT6:1PfE5huySsccSjDikkbihuOP
MD5:	9FCE6143999208F4699ABD041134D9C4
SHA1:	7DB9FA2C3B152D098D4877D9FAC0AC23BF7905E4
SHA-256:	C81169C2E6FFC04CF8F3364A1528745A8FC5CC8263B83F92C180C4B6E2164F06
SHA-512:	81F26E162FF3DAC8BDB08944FD4A2264058CBB0D1DAA102ED23086FEB2489CD1F7ED050A0520A79336C4F86E2BFB9C03ACD39293521F0A5347433C1B6F789FC4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_service.bundle-vfln85hQ5.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var e={1134:(e,t,o)=>{o.r(t),o.d(t,{CCPA_TOKEN_COOKIE_NAME:()=>i,COOKIE_ATTR_NAME_DOMAIN:()=>s,COOKIE_ATTR_NAME_EXPIRES:()=>l,COOKIE_ATTR_NAME_MAX_AGE:()=>u,COOKIE_ATTR_NAME_PATH:()=>c,COOKIE_ATTR_NAME_SAMESITE:()=>g,COOKIE_ATTR_NAME_SECURE:()=>d,COOKIE_ATTR_VALUE_SAMESITE_NONE:()=>p,ConsentCookieStore:()=>E,CookieCategory:()=>k,DNS_COOKIE_DEV_PREFIX:()=>a,DNS_COOKIE_NAME:()=>r,PRIVACY_CONSENT_COOKIE_NAMES:()=>w,SHADOW_COOKIE_NAME:()=>n,createCookieStr:()=>O,getAllCookiePairs:()=>_,getAllowedCategories:()=>C,getCookieStr:()=>v,isDropboxCookieName:()=>m});const n="__Secure-dbx_consent",i="__Secure-dbx_ccpa_token",r="__Secure-dbx_do_not_sell",a=r+"_dev_",s="Domain",c="Path",l="Expires",u="Max-Age",d="Secure",g="SameSite",p="None",w=new Set([n,r,i]),m=e=>!!w.has(e)\|\|!!e.startsWith(a),h="dropbox.com",f=6;function _(e){try{return String(document.cookie\|\|"").split(";").map((e=>e

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2962)
Category:	downloaded
Size (bytes):	2963
Entropy (8bit):	5.059442814486228
Encrypted:	false
SSDEEP:	48:boD3AFSMrvDpVzueGEKaxOSBaKv0DEq3AbCCLS1BDRLtmfDRcz43V56Y:bg3zU7/ieGEKaxnoKcDEq385mpa3nh
MD5:	4D8313A7B6900F61AE9BFE51DDF4F67B
SHA1:	8B528784DBBE02C32F5F844953563C9B30178600
SHA-256:	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
SHA-512:	9376D23F37B26C95A8DE19B1B104935C521DEE10328629A7B82CAA0FA524C7079DBB9687AA5C270D348FE64DA414C22F8E72DADC23C2FEC9427EB72598DA8263
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflTYMTp7.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=dropbox/main/202404171946&cb=1713448034390
Preview:	//

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65155)
Category:	downloaded
Size (bytes):	148001
Entropy (8bit):	4.906082415856757
Encrypted:	false
SSDEEP:	3072:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2owYDo/xU8RDXQwQvdMUbQF7P/LPMDInAu:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2r
MD5:	369DC6BC585DE3225DD8F7A2E3875AF3
SHA1:	2E316D6E7D6CE9B6BCC76800327EE8F00D0D6536
SHA-256:	4C02ADF2AE56429E877AB87CDFFBBAB270170AD3B4A32D4DCA0E99B96AF614B2
SHA-512:	CA9C0C9FFACA25F5E2652F974909FE01BC53197C4BE79831ADBD61CE62949D33F20585AAAFFEA459A78503A831314E65C68A2A5EBB3C2A30854DFCD6994C0296
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-components-vflNp3GvF.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..._4rjmw90{-webkit-font-smoothing:antialiased;box-sizing:border-box}.js-focus-visible ._4rjmw90:focus:not([data-focus-visible-added]){outline:none}._4rjmw90:after,._4rjmw90:before{box-sizing:border-box}.ekabin0{-webkit-appearance:none;-moz-appearance:none;appearance:none}.ekabin1{-webkit-user-select:none;-moz-user-select:none;user-select:none}.ekabin2{list-style-type:none}.ekabin3{cursor:default}.ekabin4{cursor:pointer}.ekabin5{word-break:break-all}.ekabin6{word-break:break-word}.ekabin7{word-break:inherit}.ekabin8{word-break:keep-all}.ekabin9{white-space:normal}.ekabina{white-space:nowrap}.ekabinb{overflow:hidde

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (667)
Category:	downloaded
Size (bytes):	729
Entropy (8bit):	5.035106610410587
Encrypted:	false
SSDEEP:	12:1hzXZ6ll9+n4K91BAtTk5O/YKDASSEF0Xhk+kZ8T7KC+5XLWOUs/BZzWxKHW5iQb:1hzXkc4A1B0k5OY+Uh/km7KVL0oBZzW7
MD5:	7BB90218E8437CFC9C43E5F19752076C
SHA1:	3E7FE7145418821AC0BB2C88F13F20637441823B
SHA-256:	A4B16611B17C96E74E5FF1C81E0CB60ECBF090623B437B180EDF6518C70BD6A1
SHA-512:	7AAC472F9B8FD4AF363822F76A5BE44BA633D10E26704C9A1D1F6FA8965BF7898298794BC475016DF3C2C77DBE7247CB681BE20AD23D63FA442883F40DD22DE4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_edison_cookies_check-vfle7kCGO.js
Preview:	define(["exports","./c_core_notify","./c_chat_chat_constants","./c_core_i18n","react-dom","react","./e_edison","./c_init_data_runtime","./e_core_exception","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_sink_index","metaserver/static/js/langpack"],(function(e,t,c,s,i,n,r,o,a,_,d,u,f,l){"use strict";e.ensureCookiesAreEnabled=function(){return!!c.Cookies.are_enabled()\|\|(window===window.top&&t.require_css("/static/metaserver/static/css/notify-vfl4oJv2S.css").then((()=>{t.Notify.error(s.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."}))})),!1)}}));.//# sourceMappingURL=c_edison_cookies_check.js-vfltSikrD.map.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8406)
Category:	downloaded
Size (bytes):	8468
Entropy (8bit):	5.115022211851208
Encrypted:	false
SSDEEP:	192:fB6PeH4MBpHXnOQ6C4kpHXiOAq9j2Y9JArOhD4U5/voh2dwD4U5tYa1aK3cs7D7K:J6mYMmQ6C4tOhdN4qG4Y3csWWS
MD5:	EDE8D330FDD7C6CAC54C3214F9CD9880
SHA1:	4D833CBF804C64BEA15EA1B7453AE29230B65224
SHA-256:	776C0E300E03CE2733ABCC7B0AF8920E1067F8D54A4D2F22BFB6BA4FFC7F45FF
SHA-512:	0C6CA7F0AA3E9C30D75CDFD7C20CD62095289FE37A92DFD791C96F159F45029C434D76BA11C4A063B6785931D213C1BCEE52A93857F5FA2F7264C0B96EA9A1FE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_api_v2_noauth_client-vfl7ejTMP.js
Preview:	define(["exports","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_core_uri","./c_core_attribution_header","./c_chat_chat_constants"],(function(e,s,t,o,n,r){"use strict";class a extends Error{static parseResponse(e,s,t,o=null){let n="";null==o&&(o=e in p?p[e]:e>=500?i:a);const r={raw:{status:e,responseBody:t},summary:null,error:{},headers:s};try{const e=JSON.parse(t)\|\|{};r.error=e.error,r.summary=e.error_summary,n=null!=e.user_message?e.user_message.text:""}catch(e){}return Object.assign(new o(n\|\|void 0),r)}}class i extends a{}const p={400:class extends a{},401:class extends a{},409:class extends a{},429:class extends a{}};class d extends Error{constructor(e,s){super(s),this.name="FetchAbortError",this.response=e}}class c extends Error{constructor(e,s){super(s),this.name="FetchFailError",this.response=e}}class l extends Error{constructor(e,s){super(s),this.name="FetchResponseError",this.response=e}}function u(e){return"FetchResponseError"===

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3787)
Category:	downloaded
Size (bytes):	3841
Entropy (8bit):	5.1247698028864885
Encrypted:	false
SSDEEP:	48:1hYhRZgA5jCDd7nn3bv/72RJX7tfvIq/BQiQ33M9j2AB1oDK5GM4jq4ioh6hO1hm:Ajg4Cx7n3T7WX7tfAqy9Hc24ojH3Ejz
MD5:	C6C726A1C5844A672BD3F999A2641C3B
SHA1:	E71F3854E65D04F74A7935A5D86A34FD5203420C
SHA-256:	2BFEAB2C20EEFD5F6E8A8900FB963512CE90970E72F0749B395E1D821E0AAE9E
SHA-512:	3FAE044B8E9839262DED86C6BFFBB5ADA2FF0EBAD9CBCC64D3E557764B0052332CEB3CCA8AACBC90E6FC539221D8239D817556E48D2B2BD46709AB70FDA9C473
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_ui_modal_dig-vflxscmoc.js
Preview:	define(["exports","./e_signup_signin_static_login_page_edison","./c_core_notify","react","./c_components_ui_modal_controller","./c_core_i18n"],(function(e,t,a,l,o,n){"use strict";function s(e){return e&&e.__esModule?e:{default:e}}var d=s(l);t.injectInternalStyle("/static/metaserver/static/js/clean/ui/modal_dig.module.out-vflQZv0TG.css",(e=>"._modal-header_1cj7q_1{overflow-wrap:break-word}"));const i="_modal-header_1cj7q_1",{Header:c,Footer:m,Body:r}=t.Modal;class u extends d.default.Component{constructor(e){super(e),this.state={open:!0},this.modal=d.default.createRef(),this.modalBox=d.default.createRef()}invokeCBThenCloseModal(e,t,a=!1){"function"==typeof e&&e.call(this,t);let l=t.defaultPrevented;"isDefaultPrevented"in t&&(l=t.isDefaultPrevented()),l\|\|(this.props.autoClose\|\|a)&&o.unmountModal()}dismissModal(e){const{onDismiss:t,onDismissCompleted:a}=this.props;this.invokeCBThenCloseModal(t,e,!0),a&&a.call(this,e)}onCancelActionClicked(e){this.dismissModal(e)}onAcceptActionClicked(e){c

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30422)
Category:	downloaded
Size (bytes):	30470
Entropy (8bit):	5.212278467154293
Encrypted:	false
SSDEEP:	768:EY0Yug4/5h150X6FNx8gJ5Nc+xs1T6CevMmRATZyvczXgEynZQPYBxPtiEQ:6YZ4/iTFFWM+v8wvQ
MD5:	43CC9DFF703848C5EC4DED5560DA6DD9
SHA1:	E9F7D74671E37EA0F7161E39518586F629D01A81
SHA-256:	A82524C3A0208F8F53FD611D23DEAEF0A952D83614A452548D73C5FBF919D370
SHA-512:	D07BCC2A62DA2156B376E2EEF2D3321A76094245EACFB3BCBA1BFE44FF7F55088467BD6D4748E1C1C6532F2411A6C02EF2DB9D3371C2EA721074471991788327
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/e_edison-vflQ8yd_3.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./e_core_exception"],(function(e,t,r,n,s,i,o){"use strict";const a=["edison:preloadCss","js:requireCssWithComponent","js:require_css","loadCssWithCache","ensemble","CssEntryPoint","css-modules"],d=["css-modules"];function c(e,t,r){if(r[t].length>0){if(d.includes(t)){const n=r[t];for(let t=0;t<n.length;t++){const{elem:r,path:s}=n[t];if(s>e.path)return[r,t]}}return[r[t][r[t].length-1].elem.nextElementSibling,null]}const n=a.indexOf(t);for(let e=n-1;e>=0;e--){const t=r[a[e]]\|\|[];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=n+1;e<a.length;e++){const t=r[a[e]]\|\|[];if(t.length>0)return[t[0].elem,null]}return[null,null]}function l(e,t,r,n,s){e.elem.setAttribute("data-loader",t),e.elem instanceof HTMLStyleElement&&e.elem.setAttribute("path",e.path);let i=null,o=null;if(!s){if(d.includes(t)&&function(e,t,r){if(r.hasOwnProperty(t)&&null!=r[t]&&r[t]

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8391)
Category:	downloaded
Size (bytes):	8453
Entropy (8bit):	5.113739133759895
Encrypted:	false
SSDEEP:	192:UB6PeH4MBpHXnOQ6C4kpHXiOAq9j2Y9JArOhD4U5/voh2dwD4U5tYa1aK3cs7D7D:K6mYMmQ6C4tOhdN4qG4Y3csWWL
MD5:	CEF3AFAC3BB3869958AE9EADA3A9E2D0
SHA1:	E19153C14CDC86ADDA25922707DEC307D7EAEA18
SHA-256:	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
SHA-512:	960491C44EFC7E80CBA123423E4964C46E657687B061E2D8FAE6D20C6FB60BDDE4D4A1420D165E9CE5995BC90958DC5C69369162E5688F81726781DF95C0B4A2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_api_v2_noauth_client-vflzvOvrD.js
Preview:	define(["exports","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_core_uri","./c_core_attribution_header","./c_csrf"],(function(e,s,t,o,n,r){"use strict";class a extends Error{static parseResponse(e,s,t,o=null){let n="";null==o&&(o=e in p?p[e]:e>=500?i:a);const r={raw:{status:e,responseBody:t},summary:null,error:{},headers:s};try{const e=JSON.parse(t)\|\|{};r.error=e.error,r.summary=e.error_summary,n=null!=e.user_message?e.user_message.text:""}catch(e){}return Object.assign(new o(n\|\|void 0),r)}}class i extends a{}const p={400:class extends a{},401:class extends a{},409:class extends a{},429:class extends a{}};class d extends Error{constructor(e,s){super(s),this.name="FetchAbortError",this.response=e}}class c extends Error{constructor(e,s){super(s),this.name="FetchFailError",this.response=e}}class l extends Error{constructor(e,s){super(s),this.name="FetchResponseError",this.response=e}}function u(e){return"FetchResponseError"===e.name}function

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2334)
Category:	downloaded
Size (bytes):	2400
Entropy (8bit):	5.164664434417214
Encrypted:	false
SSDEEP:	48:1aMEGPUm1zjIBS4gJaUoPepzUJIjk0y6o:d1zME4gJaXWpzwIAN6o
MD5:	D7102E61F8A55FE25337F4C956CCEF24
SHA1:	5B45C74151E3ADB6E9AA71428347060BA2098CA3
SHA-256:	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
SHA-512:	E5BED0B1A87DD2E17D187B6BA6E3F39EDB158AB547FE3C8D85BD090D05B4E659970122C105ECFE5CB4B0497A5D4E9FC3CD5D562C057ECA18A4786B5E0240B43C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_toast_toast_on_init-vfl1xAuYf.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_notify","./c_csrf","./c_browser_browser_detection","./c_core_uri","./e_core_exception","react-dom","react","./e_edison","./c_init_data_edison"],(function(e,t,n,o,r,i,s,c,u,d,l,a){"use strict";function f(){return n.__awaiter(this,void 0,void 0,(function(){const t=i.edge&&!i.edgeChromium();if(void 0!==window.crypto.subtle&&!t&&!i.checkBrowserVersion(i.chrome,40,!1))return window.crypto;if(t){const{legacyEdgeWrapper:t}=yield new Promise((function(t,n){e(["./c_security_legacy_edge_shim"],t,n)})),n=t();if(void 0!==n)return n}throw function(e){const t=new Error(e);return t.isBrowserNotSupported=!0,t}("WebCrypto not supported")}))}function _(e,t){return n.__awaiter(this,void 0,void 0,(function(){const o=e.split(":");if(3!==o.length)return null;const[i,s,c]=o;if("1"!==i)return null;const u=(new TextEncoder).encode(s);let d=decodeURIComponent(c);try{d=atob(d)}catch(e){return null}const l=function(e){const t=new Uint8Array(e.length)

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47981)
Category:	downloaded
Size (bytes):	48037
Entropy (8bit):	5.265897252421922
Encrypted:	false
SSDEEP:	768:JYQq7XTMiYuxEvp1wr8HSktn4rdVbUyXqmHWEYWMhiAcaW9fjaaWlnxDKe4KSADK:NapZbm+1ZWkjiL7oBj
MD5:	AC75D2758BF3E040611814872A174121
SHA1:	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386
SHA-256:	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
SHA-512:	DE40C011C8BDC049AF0774BF5D41C7F98A042C65E300AFD90614A36C1EF3B0A1EC66BBDB938001F688F2DDD13F275F9C48C851CB5BE4977A2E6E00DAE4EB2A05
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_src_sink_index-vflrHXSdY.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_browser_browser_detection","./e_core_exception"],(function(e,t,n,s,i){"use strict";class r extends n.Message{constructor(e){super(),this.seconds=n.protoInt64.zero,this.nanos=0,n.proto3.util.initPartial(e,this)}fromJson(e,t){if("string"!=typeof e)throw new Error(`cannot decode google.protobuf.Timestamp from JSON: ${n.proto3.json.debug(e)}`);const s=e.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z\|\.([0-9]{3,9})Z\|([+-][0-9][0-9]:[0-9][0-9]))$/);if(!s)throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");const i=Date.parse(s[1]+"-"+s[2]+"-"+s[3]+"T"+s[4]+":"+s[5]+":"+s[6]+(s[8]?s[8]:"Z"));if(Number.isNaN(i))throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");if(i<Date.parse("0001-01-01T00:00:00Z")\|\|i>Date.parse("9999-12-31T23:59:59Z"))throw new Error("cannot decode message google.protobuf.Timestamp from JSON: must be from

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2621
Entropy (8bit):	5.209624945856126
Encrypted:	false
SSDEEP:	48:8z/Zo9ROu7oQRyDTEbrkCiTEYLZ0/5SEMuTE4:Uq57XWTEbrkCiTEYLqQEMuTE4
MD5:	F00C4ABE087714B8C5F1C0B8770C36F6
SHA1:	840D8E7D8E47D747B2AC8DFD08504318F6168524
SHA-256:	C9A9DDD2556092FD88F9216C388FDE371F93508492AE029008E89FF435DD4EF0
SHA-512:	2D0E282A2CD5CAEC704C8676F521E3354798263A5D1153E6936509477142B2260DAE15A2B907B07AE4F7ADAF048F18A2D3C8C9AFC2494DB366DFF494CC83F711
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-fonts/sharp_grotesk_23.metaserver-vfl8AxKvg.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-fonts@2.2.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../*. Sharp Grotesk 23 is not a sanctioned DIG font. Usage is solely approved for logged out web. If you find. * yourself needing Sharp Grotesk 23 for any other purpose, please consult #design-systems.. /../. Font: Sharp Grotesk 23 (Cyrillic supported). */.@font-face {. font-family: 'Sharp Grotesk 23';. src: url('/static/metaserver/static/fonts/dig-fonts/sharp_grotesk_23/SharpGroteskDBCyrBook23-vflX-NIwB.woff2'). format('woff2'),. url('/static/metaserver/static/fonts/dig-fonts/sharp_grotesk_23/SharpGroteskDBCyrBook23-vflhLOtUe.woff'). format('woff'),. url('/static/metaserver/static/fonts/dig-fon

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	4.717822099205975
Encrypted:	false
SSDEEP:	6:qF/UGaYkiUN3DkGX98QHAEdJs6Oq5Ss/lAqJmW/XLV/QL:4UvN8jEdiEZ/aqJmWvLV/QL
MD5:	00F53700C90A2EDF60A83C7C3B959710
SHA1:	270A7C333D4BDE912992993FBDB7D2EC579E9B1B
SHA-256:	C23F75F5147BEDB59DE93A0559B52C5303702B063C8D665C27CD8F40FE329B8B
SHA-512:	4F1FF50C5F02508BDF14735AEE6E1121F81120665CF10F2288F1DF344BE79649A4D48EFEE8784618184491E8DF9ACB400280E4C219D121B4057DC42CEEE8C117
Malicious:	false
Reputation:	low
URL:	https://dropboxcaptcha.com/
Preview:	<html>. <head>. <meta charset="utf-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible">. <title>DropboxCaptcha</title>. </head>.. <body style="margin: 0px">. <script type="text/javascript" src="funcaptcha.js"></script></body>.</html>.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8584)
Category:	downloaded
Size (bytes):	8629
Entropy (8bit):	5.101727159583722
Encrypted:	false
SSDEEP:	192:SRjCVFbiwjfUYuQ2Voy4OTK2Zl9WVoY3YH:0YuQ2VoITnwlw
MD5:	64C2981C2FDA477EE64741B1BE3555C2
SHA1:	A03DE237301CB9120F9C878B30AD5DCB0E39ED31
SHA-256:	2572A155E34B577818B22C96C4CEF28BDA04D694B1C18BA98FE6C2487B37CCE5
SHA-512:	4C8331C9D90F3EEF3F085A328AFC08903D590D8AF5EF3BE9D9903AD40482EF4186DC0F304C0DBC1DEAADFE0052EEDE2FBD030FBE9993F12E578B1571A3EBDEFA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_Key-vflZMKYHC.js
Preview:	define(["exports"],(function(e){"use strict";var a={};!function(e){var a;Object.defineProperty(e,"__esModule",{value:!0}),(a=e.Key\|\|(e.Key={})).Unidentified="Unidentified",a.Alt="Alt",a.AltGraph="AltGraph",a.CapsLock="CapsLock",a.Control="Control",a.Fn="Fn",a.FnLock="FnLock",a.Hyper="Hyper",a.Meta="Meta",a.NumLock="NumLock",a.ScrollLock="ScrollLock",a.Shift="Shift",a.Super="Super",a.Symbol="Symbol",a.SymbolLock="SymbolLock",a.Enter="Enter",a.Tab="Tab",a.ArrowDown="ArrowDown",a.ArrowLeft="ArrowLeft",a.ArrowRight="ArrowRight",a.ArrowUp="ArrowUp",a.End="End",a.Home="Home",a.PageDown="PageDown",a.PageUp="PageUp",a.Backspace="Backspace",a.Clear="Clear",a.Copy="Copy",a.CrSel="CrSel",a.Cut="Cut",a.Delete="Delete",a.EraseEof="EraseEof",a.ExSel="ExSel",a.Insert="Insert",a.Paste="Paste",a.Redo="Redo",a.Undo="Undo",a.Accept="Accept",a.Again="Again",a.Attn="Attn",a.Cancel="Cancel",a.ContextMenu="ContextMenu",a.Escape="Escape",a.Execute="Execute",a.Find="Find",a.Finish="Finish",a.Help="Help",a.Paus

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42465)
Category:	downloaded
Size (bytes):	42524
Entropy (8bit):	5.3772733765749985
Encrypted:	false
SSDEEP:	768:QWVh6Ay3MIQcttCKrza3xm2Wn1wWQAOmBV2HdBDGFXGCp9hnCZWi7fsBPx8YrQfi:attCEadgySUxYrj8mGimg7
MD5:	F3D49F049110C0E57FE32FC66D16E1D5
SHA1:	5BD48324F2330008628E1CFA8D85D35405C5E7B3
SHA-256:	85709BFF9D02198651BB3AE778EBDF1F493D87C1907F232D6B611AF4213892A5
SHA-512:	0C5A75412C32698E8AA3B02464C67C1ABECF84003D05072ED78BA3F1E8C20C0B7AFF3426AA159F44235D810B16E08EAF7F744CF364E900E50493DBB9022EF3A9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_init_data_runtime-vfl89SfBJ.js
Preview:	define(["exports","./e_core_exception"],(function(e,t){"use strict";var n=function(e,t){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},n(e,t)};function r(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(e){return this instanceof i?(this.v=e,this):new i(e)}function s(e,t){if(!e)throw new Error(t)}e.__assign=function(){return e.__assign=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},e.__assign.apply(this,arguments)};const a=34028234663852886e22,o=-34028234663852886e22,c=4294967295,u=2147483647,l=-2147

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5082)
Category:	downloaded
Size (bytes):	5083
Entropy (8bit):	4.931498303456814
Encrypted:	false
SSDEEP:	48:sal1qQzFHzjzjGQH7awKT0j5L1QkKvk+yvMdRIRCrHfZ2PMRpe6nMOqOxpOq92Oc:tBfySNKY6kSQwVr/Z2A6Oz9Q3
MD5:	0E80CBB2EF9225FDC2B4DEFA7D321901
SHA1:	BD0862DEAD0CDAD41CC33D88856225717C6B173E
SHA-256:	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
SHA-512:	5BED798924D325326B30C5089EF51E7086D5281B113EDC519A58632528FB95B082ED723813F4C1F4E73D7D05F0DADB70B2BDD478DEFCB5124A2E9A7020271C09
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_paper_atlas_grotesk-vflDoDLsu.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0
Category:	downloaded
Size (bytes):	54666
Entropy (8bit):	7.996310405191114
Encrypted:	true
SSDEEP:	768:mxXl0PgYjIjF4TgXYxK9cESKs97eV05TWW2J1KJzO467QEWDvOWEGOFddkmEbY:N24DkPfs9quTWNIVO46dWDDEDkmOY
MD5:	EBEE194A9B773F166DC16096F8614AAA
SHA1:	9D6A893AF295C90E9E9792D7E54A80034192255B
SHA-256:	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
SHA-512:	B1E67F381C8266FF60E09CCCBA6CB17FE0DF4CC8D373E15F20F14B6E8C2F6BAB4C0E91163E57C3C2F4593AC23512A43B2129CABA1945870BE4493D1DEF2DDCD5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/dig-fonts/sharp_grotesk/SharpGroteskDBCyrBook20-vfl6-4ZSp.woff2
Preview:	wOF2.............KX...c.........................@...2..D.`..@................6.$..f..v.. ..R.....V[.....rW..y.@...=/.%}....W..=7.eA.Z[..m*1....h........'Y.......r.....>...i.~h.\.j...4..M.......Ch.0.@d"........J.......L.4..hdD..`F.=..S.... #.n....9.G...2.t...m..-.M..>,qv.rI.LN............1....{.o......xxD..G.jt.......Y....g'..G......g7.O...c.@6..uuS.C:....:.Z.!......0.u}...;J..%.q$.......... ...........KE...Gt..xw.....x....{...B.9.gvV...;...'s.%.nd:..k...1..z.T.........^..o..{...K@..^@.hc..._..&....g.%.@...E....f...]..[UIuR...:.....f.<g.....$..pj.(]...zF.......cc.o....-..1F.......u.^..yzi....U2.f%...w......:.R.{.lOP[L..r..B`2...s.u.?...)l.P#...!.#>.....Na..Tx./.]..K.....E)..0g..MO..?U.4.1...]..M\..6...............n..'....3rD9....{.{.....d..R5F.@a.6.6b7V"...$...h..J.Y.....'.=.....ga.X.............u.>..Y6P.6..bGB%:%x..e.IB.q............!F%b.......{.w] .6.w....9.~,......u#(.QS...$..n?.......{.$D_...Ht.Q.2.i%.._S`j+.~..~.e...$......L..q`.^.-+.'.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1429)
Category:	downloaded
Size (bytes):	1501
Entropy (8bit):	5.162174709334935
Encrypted:	false
SSDEEP:	24:1h+vnq4BlHqIAelyFaQhd1RR2DvurUTBmsyi2RFpOgazzYAW0m9eGtRQQNkuD+AC:1hKqMlKDFd1ujTBy5FpOgaQAW0mEGLQJ
MD5:	6C213F664C1FCEDBF9D8818CE3D5C838
SHA1:	9FC035882BA31B6DA7BF3EF07B4A62F8F5285D5D
SHA-256:	1DAA0C4A30A65E5D5F72B45F612ED727BDBD29968733B5A0C27D28D890F05222
SHA-512:	190EFA86D47CD26D1DE6F50303EBEA44333B07662405D4CEE9F2E227922BDAA55E23D76299686CA8243DE9A082461A0472F6DE43A2D22B2DE588F8F72E5245E9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_components_ui_modal_controller-vflbCE_Zk.js
Preview:	define(["exports","react-dom","./e_signup_signin_static_login_page_edison","./c_core_i18n"],(function(e,t,n,o){"use strict";function r(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var o=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,o.get?o:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var i=r(t);const c="react-modal-root",a="react-modal-root",d=function(e=!0,t){const n=t\|\|c;let o=document.getElementById(n);return!o&&e&&(o=document.createElement("div"),o.id=n,o.setAttribute("data-testid",a),document.body.insertBefore(o,document.body.firstChild\|\|null)),o};const u=o.intl.formatMessage({id:"PjwOeo",defaultMessage:"Close"});e.CLOSE_BUTTON_TEXT=u,e.MODAL_ROOT_ID=c,e.MODAL_ROOT_TESTID=a,e.isModalDisplayed=function(){return!!d(!1)},e.mountModal=function(e,t=!0,n){const o=d(!0,n);if(t){const e=o;if(e){i.unmountComponentAtNode(e);Array.from(e.parentNode.children).filter((t

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2845)
Category:	downloaded
Size (bytes):	2846
Entropy (8bit):	4.966993863852829
Encrypted:	false
SSDEEP:	24:sP84FvD4FIKN24FrX4FyTk+4Fpf0P84FLD4FcKN24Fx4FZ+4F+ffP8y/Bz+9W7HF:sPb+N5ztPPPKNRPlaPAxNvZ
MD5:	0E3B3B3216D852E1ADEABC8B6E7FC27B
SHA1:	5D2CC55D2D9738CBCBDFE2CC350ABF2A3BF0EFA0
SHA-256:	5585BCC97733AF2B7DC9F697D3BA3B7D4AF58484C38117DECD68F75E8407ADFE
SHA-512:	BBB9EF7CBAF5736E5983E92C358B95AB3F573EFD363DF62F9F837ECC697681F58B50BA28E8E573A6450A4A221E8716A54DBA9B09D9B002AD973CDE78D0143AF9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_atlas_grotesk-vflDjs7Mh.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflKfRQb9.eot");src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflKfRQb9.eot?#iefix") format("embedded-opentype"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vfl5CyyQq.woff") format("woff"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vflVNjX5v.ttf") format("truetype"),url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Light-Web-vfloBJpb4.svg#Atlas Grotesk Web") format("svg");font-weight:300;font-style:normal;font-stretch:normal}.AtlasGrotesk-Light-Web{font-family:'Atlas Grotesk Web';font-weight:300;font-style:normal;font-stretch:normal}@font-face{font-family:'Atlas Grotesk Web';src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web-vfl31qaPE.eot");src:url("/static/metaserver/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web-vfl31qaPE.eot?#iefix"

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10533)
Category:	downloaded
Size (bytes):	10591
Entropy (8bit):	5.234934257056051
Encrypted:	false
SSDEEP:	192:ZUXRvotYV2cpTXupFgX8GehjTnNmSkpyTDUOFubQpKTH5+iD32nCoP32m3fcRN6T:ZUXRvotYUyXWFgX8GehjTNN1UOGlT0Cg
MD5:	151644207B52C049454C572377EE3E83
SHA1:	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4
SHA-256:	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
SHA-512:	98EB9930274D2B1C81F7C04736678B4F3DD066E94F29FD111FCA70D742AB82842EE6F49A075464BCB09A27011AB9841FFD578D4E0F6343348648C613927F6E0F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_init_data_edison-vflFRZEIH.js
Preview:	define(["exports","./c_init_data_runtime","./c_core_uri"],(function(e,t,n){"use strict";var r,a,o;function i(e){const t=o[e];return"string"!=typeof t?e.toString():t[0].toLowerCase()+t.substring(1).replace(/[A-Z]/g,(e=>"_"+e.toLowerCase()))}e.MethodKind=void 0,(r=e.MethodKind\|\|(e.MethodKind={}))[r.Unary=0]="Unary",r[r.ServerStreaming=1]="ServerStreaming",r[r.ClientStreaming=2]="ClientStreaming",r[r.BiDiStreaming=3]="BiDiStreaming",function(e){e[e.NoSideEffects=1]="NoSideEffects",e[e.Idempotent=2]="Idempotent"}(a\|\|(a={})),function(e){e[e.Canceled=1]="Canceled",e[e.Unknown=2]="Unknown",e[e.InvalidArgument=3]="InvalidArgument",e[e.DeadlineExceeded=4]="DeadlineExceeded",e[e.NotFound=5]="NotFound",e[e.AlreadyExists=6]="AlreadyExists",e[e.PermissionDenied=7]="PermissionDenied",e[e.ResourceExhausted=8]="ResourceExhausted",e[e.FailedPrecondition=9]="FailedPrecondition",e[e.Aborted=10]="Aborted",e[e.OutOfRange=11]="OutOfRange",e[e.Unimplemented=12]="Unimplemented",e[e.Internal=13]="Internal",e[e

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2102), with no line terminators
Category:	downloaded
Size (bytes):	2102
Entropy (8bit):	5.140601464364906
Encrypted:	false
SSDEEP:	48:mUX/EuBawjQtsDBhokj2OMwarf+AmhseggQPh7JhR:mUs+T669Arv
MD5:	FFF8E4C34D574BE9AC43718EE5ACCD9E
SHA1:	A88F5AAC146D4726FE7A7DC60BDF6BF3236CF187
SHA-256:	851BAAFA4D75A31942B8D7F752909C9BD63873DD2B2D9E3C5B69439FC1F645A2
SHA-512:	3A19E93545B170067C53EC734DC6314A160EDE0671C2E7A6AC630B34D321D4634052637E51F5D51841D8C83F3CBCAE7ECF648A9E5C2E88C6912B714CAD7D691E
Malicious:	false
Reputation:	low
URL:	https://dropboxcaptcha.com/funcaptcha.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var a=n[o]={i:o,l:!1,exports:{}};return e[o].call(a.exports,a,a.exports,t),a.l=!0,a.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var a in e)t.d(o,a,function(n){return e[n]}.bind(null,a));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=0)}([function(e,n,t){e.exports=t(1)},function(e,n){var t,o={};function a(e){if(/^https:\/\/dr

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.360613902337515
Encrypted:	false
SSDEEP:	192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0
MD5:	61699B70CF57ABE63FDF5F4007D36EC1
SHA1:	6C05189CC2D08BB2A7609C002F0675C9C670D362
SHA-256:	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
SHA-512:	AA5CC8794B5383B781A6611A4B5D8D660C73E766186551799B28FCF668C911EB0177FA04F543EC60E5F64005F3BCE019604BD0A2129D718F33284D3689F5C398
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-vflYWmbcM.js
Preview:	/** @license React v17.0.2. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=Y&&a[Y]\|\|a["@@iterator"];return"function"===typeof a?a:null}function y(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,e=1;e<arguments.length;e++)b+="&args[]="+encodeURIComponent(arguments[e]);return"Minified React error #"+.a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function v(a,b,e){this.props=a;this.context=b;this.refs=Z;this.updater=e\|\|aa}function ba(){}function K(a,b,e

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31230)
Category:	downloaded
Size (bytes):	31611
Entropy (8bit):	4.893111591526175
Encrypted:	false
SSDEEP:	192:EpfCRornDwyfbEd2d2v6+mOoiWP6Vk+6D1iZVop4VmwJNZgEWJ83ptaLcsyxmsHK:EpfCRoGYY0uVGzBGrg6YYFuVZzBZ
MD5:	7C750AAD2B692C1D3E448FD3B3404136
SHA1:	67CE2AB7109B50856F58D42E8BDE38A9D071213F
SHA-256:	53B3A32379965955CC752FEC0C709ED86910370368E9824BCEFEAA731E54C725
SHA-512:	3024D9868DFD1AD01B6F52EBB429257B8D83F588C03566560F197CB0ED2BD459A9E0E3EA82FD72037607525D44CE48162E1F9AD4114A81D8A7D617F0902908DC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-tokens-vflfHUKrS.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..:root{--type__title__medium--lineheight:28px;--type__title__medium--fontweight_strong:500;--type__title__medium--fontweight:400;--type__title__medium--fontsize:22px;--type__title__standard--lineheight:28px;--type__title__standard--fontweight_strong:500;--type__title__standard--fontweight:400;--type__title__standard--fontsize:22px;--type__title__small--lineheight:26px;--type__title__small--fontweight_strong:500;--type__title__small--fontweight:400;--type__title__small--fontsize:16px;--type__title__large--lineheight:36px;--type__title__large--fontweight_strong:500;--type__title__large--fontweight:400;--type__title

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16909)
Category:	downloaded
Size (bytes):	16959
Entropy (8bit):	5.208525427500881
Encrypted:	false
SSDEEP:	384:YdVk7zan08HeCamIafhJc+HMoJ7AJOsJ/z304I31xJVhSE2+A:YdCnc3eCamIchJc+HMoJ7AJ1J/z304Ic
MD5:	313C3A6F8BD31B6BF355EF74CF3F819D
SHA1:	08A271D9551636E72D071433E8EBB0F2975D7A7E
SHA-256:	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
SHA-512:	CD297E57A34DAB753948E41CF1566200E9F577578CE35E2B2311A8F97FE67DF114A570F3D24ADCC0DA4F7C7ADC2BA4C4C44DF12F73EC2B2A1BDC89536512D17F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_uri-vflMTw6b4.js
Preview:	define(["exports"],(function(e){"use strict";const t={DEBUG:!1,IDLE_TIMEOUT:200,NETWORK_TIMEOUT:6e4};class i{static format(...e){return["[ttvc]",...e,"::",performance.now()]}static debug(...e){t.DEBUG&&console.debug(...this.format(...e))}static info(...e){t.DEBUG&&console.info(...this.format(...e))}static warn(...e){t.DEBUG&&console.warn(...this.format(...e))}}class s{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{i.debug("AjaxIdleObservable.next()",e),this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{if(0===t.NETWORK_TIMEOUT)return;this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{i.warn("AjaxIdleObservable","::","Timed out waiting for requests to resolve.","Make sure that incrementAjaxCount() is always matched with decrementAjaxCount().","::","pendingRequests =",this.pendingRequests),this.didNetworkTimeOut=!0,this.pendingRequests=0,this.next("IDLE")}),t.NETWORK_TIMEOUT)},this.abortCleanupTime

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.049075062689685
Encrypted:	false
SSDEEP:	12:1hnc6llD1K91BAtTk5O/YKdSEF0Xhk+kZ8T7KC+5XLWOUs/BZzWxKHW5iQyozQDn:1hnppA1B0k5OZRUh/km7KVL0oBZzWxre
MD5:	9E909F5DC4EB2917A092969CFA8C1C1B
SHA1:	EC5795627579E606612250BE3E30690F3A70E3CF
SHA-256:	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
SHA-512:	4087C4896C10BBE7912E9BF5CB189DE7DFDC9FAF8BE4E6D1B1EFA4917695A3E58E1A452478451CAAE8370B372917558456E2D1302A0166DCCB907991949E143A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_edison_cookies_check-vflnpCfXc.js
Preview:	define(["exports","./c_core_notify","./c_csrf","./c_core_i18n","react-dom","react","./e_edison","./c_init_data_runtime","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./c_src_sink_index","metaserver/static/js/langpack"],(function(e,t,c,s,i,r,o,n,_,a,d,f,u,l){"use strict";e.ensureCookiesAreEnabled=function(){return!!c.Cookies.are_enabled()\|\|(window===window.top&&t.require_css("/static/metaserver/static/css/notify-vfl4oJv2S.css").then((()=>{t.Notify.error(s.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."}))})),!1)}}));.//# sourceMappingURL=c_edison_cookies_check.js-vflb3v8qT.map.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33484)
Category:	downloaded
Size (bytes):	33629
Entropy (8bit):	5.281219042392323
Encrypted:	false
SSDEEP:	768:yofe7X5COk45xSeK+TD4pGuY1m4ydwDVNTJw8p++tMLhY/X3+tWjOVCkkq:SX5hkbVYc4GaPG
MD5:	99EB0DE2B72A849BCAB77B4AB0CA030B
SHA1:	1273CD3F0776E5A43F00065FBFF954FF243C837F
SHA-256:	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
SHA-512:	5712BA5EBB0CDFC698172C203673EE21C94D5B222FBC1DF0241670933660DA45CEB923B382E80CB4D1C7AF334242AC1E5F1BC9C1C4EB392803566FA9E64BA779
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflmesN4r.js
Preview:	/! For license information please see alameda_bundle_chrome_en.js.LICENSE.txt /.(()=>{var e={672:(e,t)=>{(function(){var e,n,r;!function(t,o,i){if(!o)throw new Error("No Promise implementation available");var s,a,c,u,l=e\|\|n,f=Object.prototype.hasOwnProperty,d={},p=[],h={},m={},v={},g={},y=/^\.\//,b=/^\/\|\:\|\?\|\.js$/,w=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/gm,_=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,x=/\.js$/,j=Array.prototype.slice;if("function"!=typeof e){var E=o.resolve(void 0);e=s=function n(r){var s,a,c,u,l,f,h,m,v=Object.create(null),g=Object.create(null),E={waitSeconds:7,baseUrl:"./",paths:{},bundles:{},pkgs:{},shim:{},config:{}},q=Object.create(null),M=[],$=Object.create(null),U=Object.create(null),P={},L=0,R=(new Date).getTime(),D=0,I={},B={},F={},N=o.resolve();function W(e,t,n){var r,o,i,s,a,c,u,l,f,d,p=t&&t.split("/"),h=E.map,m=h&&h["*"];if(e&&(c=(e=e.split("/")).length-1,E.nodeIdCompat&&x.test(e[c])&&(e[c]=e[c].replace(x,"")),"."===e[0].charAt(0)&&p&&(e=p.slice(0,

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16909)
Category:	downloaded
Size (bytes):	16959
Entropy (8bit):	5.208525427500881
Encrypted:	false
SSDEEP:	384:YdVk7zan08HeCamIafhJc+HMoJ7AJOsJ/z304I31xJVhSE2+A:YdCnc3eCamIchJc+HMoJ7AJ1J/z304Ic
MD5:	313C3A6F8BD31B6BF355EF74CF3F819D
SHA1:	08A271D9551636E72D071433E8EBB0F2975D7A7E
SHA-256:	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
SHA-512:	CD297E57A34DAB753948E41CF1566200E9F577578CE35E2B2311A8F97FE67DF114A570F3D24ADCC0DA4F7C7ADC2BA4C4C44DF12F73EC2B2A1BDC89536512D17F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_uri-vflMTw6b4.js
Preview:	define(["exports"],(function(e){"use strict";const t={DEBUG:!1,IDLE_TIMEOUT:200,NETWORK_TIMEOUT:6e4};class i{static format(...e){return["[ttvc]",...e,"::",performance.now()]}static debug(...e){t.DEBUG&&console.debug(...this.format(...e))}static info(...e){t.DEBUG&&console.info(...this.format(...e))}static warn(...e){t.DEBUG&&console.warn(...this.format(...e))}}class s{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{i.debug("AjaxIdleObservable.next()",e),this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{if(0===t.NETWORK_TIMEOUT)return;this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{i.warn("AjaxIdleObservable","::","Timed out waiting for requests to resolve.","Make sure that incrementAjaxCount() is always matched with decrementAjaxCount().","::","pendingRequests =",this.pendingRequests),this.didNetworkTimeOut=!0,this.pendingRequests=0,this.next("IDLE")}),t.NETWORK_TIMEOUT)},this.abortCleanupTime

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (839)
Category:	downloaded
Size (bytes):	890
Entropy (8bit):	4.749791101014234
Encrypted:	false
SSDEEP:	24:1hYzx4VhhWiI1BZ0Xt6zok5jhWiAhWiTkHQzDvPlQJV:1hYdiELXzXYkwfvNY
MD5:	E052CA7EE094889707730654A1406E11
SHA1:	677F0CB096F0A205A0DF12706E683C3EBE833E6B
SHA-256:	D00AC82029E332CAD0F3F50120BB2ED1BD0F524F5A584FE25C310B9F77EC02A6
SHA-512:	9356A347061FBCA13E07957FBD86F31EF3DC9D2A87AF1CD5ACA98D8EA16E4F78F79A62CF6E84D007EF0DA42C67BF22C981CEB253A1785386511786EF0B4C959A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_mjs_index-vfl4FLKfu.js
Preview:	define(["exports","./e_signup_signin_static_login_page_edison","react","./c_init_data_runtime","./e_core_exception","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,c,t,_,s,n,o,i,r,a,d,l,m,u,p,g,x,I,h,v,y,j,f,k,C){"use strict";e.IconContext=c.IconContext,e.PictogramIcon=c.PictogramIcon,e.UIIcon=c.UIIcon}));.//# sourceMappingURL=c_mjs_index.js-vflGWXE6a.map.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4476)
Category:	downloaded
Size (bytes):	4542
Entropy (8bit):	5.199244698004213
Encrypted:	false
SSDEEP:	48:1hNNRJiELXz9kw9MuF008KIm5jmHBT6/GBqiCXdgozB5639UVhu/oJ4z3BMLtK7c:nfLLXhkAMKnYJ6N+P44zSLcSxwfe
MD5:	03BCD6C4CDA4D82CE1EAA628BB29C17E
SHA1:	4BCDC7519B06956DE4FFA29D536EFD4E63D8E9BD
SHA-256:	5C8F06C736D80110E3989B1FB19F10368C9042E2CA1FFC3D06BF2B01540F2B6C
SHA-512:	48E15FF98787416E1B3330F5E0E75C38A463C121D93B773D85F715BED0E44962B0B35173295A664C648C8C75EDAE24EC87752DD619A42C4367A598087883AC05
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_ui_locale_selector_modal-vflA7zWxM.js
Preview:	define(["exports","react","./e_signup_signin_static_login_page_edison","metaserver/static/js/modules/constants/locales","./c_ui_modal_dig","./c_components_ui_modal_controller","./c_core_i18n","./c_core_notify","./c_core_uri","./c_init_data_runtime","./e_core_exception","./e_edison","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","react-dom","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash","metaserver/static/js/langpack"],(function(e,t,a,l,o,s,c,n,r,i,_,d,u,m,h,f,p,g,L,C,T,E,S,N,O,y,I){"use strict";function v(e){return e&&e.__esModule?e:{default:e}}function A(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(a){if("default"!==a)

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.1409828575032925
Encrypted:	false
SSDEEP:	3:bT3+DrOXjiCRnar7TPOQitK5ssAuWhMq//ZUh5KRR:/ebynar7TGQitY7qpUh5g
MD5:	9787D8E52A897B135A9229B55B793894
SHA1:	DC17BDE436C7037472EDDD9DD66008DA8377CA55
SHA-256:	E44007295A1109B3EE9F07737B97B9E1EB58AA578307953F62776069F6DE3BA4
SHA-512:	15DD4C1B3BCF42B1C0518D2716AF45135FFA3385269E46E9536F620C0E0614EBA62B91375417E7E9BCA3731C2FE56296DEAEAD5069395F51C51BF5C05BE08A31
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnimLpvoV4pyxIFDYOoWz0SBQ169gCqEgUNj4-etBIFDc5BTHo=?alt=proto
Preview:	ClQKDQ2DqFs9GgQIVhgCIAEKCw169gCqGgQIAxgBCgsNj4+etBoECAUYAQopDc5BTHoaBAhMGAIqHAgKUhgKDiFAIy4kKl8tPyYlKy8sEAEY/////w8=

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.199901264020445
Encrypted:	false
SSDEEP:	12:1hHryZO9DPeLv0Pmeagn/Werbb5w5w26PqJT0SwEohXI7:1hHryZOhcvSmjg/Werbb5w56PqJ0Eoy
MD5:	C2591593FFBD92E16276E86068DB913A
SHA1:	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1
SHA-256:	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
SHA-512:	AE5D5BC1C7002E7600197597DD9F97600DA5875A82128105C787AD83439B6F8D59F2272ED4E6D8127C5524A1BC714B0442CF3B87785A98B454326851476171F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_attribution_header-vflwlkVk_.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,t){"use strict";e.getAttributionHeader=function(){if(!window.ensemble)return void 0!==t.getYapsProject()&&void 0!==t.getYapsDeployment()?`${t.getYapsProject()}:${t.getYapsDeployment()}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter((e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project));return 0!==e.length?e.sort(((e,t)=>e.pagelet_name<t.pagelet_name?-1:1)).map((e=>`${e.yaps_project}:${e.yaps_deployment}`)).join(";"):void 0}}));.//# sourceMappingURL=c_core_attribution_header.js-vflts_Mx9.map.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.5339848654130215
Encrypted:	false
SSDEEP:	3:pKJyFdvTOOp19DQTFS4pp8xEN0Xnc:pMyFdLzPDGI4kk0s
MD5:	D37658B26453076208AF7436220AF710
SHA1:	AFA8445517755CF178BC9A69ED45E0B8E7BC5669
SHA-256:	6DB32E43A004312D6790F37BACE87D8FB5DDA32F7117E11845A2E0DA8C3949D7
SHA-512:	2EBEC9F26DA5A3113882BA924CC2757DE0BDB85C7A4A7207F80D4486E04DED83A4CABA50BB5270532E079F95A942AD1F60C868033062AF20CF88F747EC688237
Malicious:	false
Reputation:	low
URL:	https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18
Preview:	OkFlakCWI8fSxU+2ZpMoxGR08d/cTGbLP1DU+tYHG619GRJdW87L8qQv5kuNbDs0fykvTWG4qy7sesxiwROCf1QSUBWwbA==

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6809
Entropy (8bit):	5.134657502666523
Encrypted:	false
SSDEEP:	192:PpnN0IBrv9LM4bPfCeBsJi/MLdzyRTTpfjrM:Ppt+oC0mLma
MD5:	771770B5216A3D1C9F385A37AECAC39D
SHA1:	7B699E546508DC550895A35880404F1D76776DF9
SHA-256:	8B2D463FFB119DC44895CB3BADAA55324A46C9D282FC3BE62DD369BD3ABAC744
SHA-512:	2D390F834457117BE8D9ABDF4014AFB4DCEEE2CD9D6D8FF81B21EED4994FB6E981138145F6A2388F51E46B84F76116CAA0C653DFD9A1A98709789D6EA59037ED
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-fonts/index.metaserver-vfldxdwtS.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-fonts@2.2.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../*. This file is needed to comply with metaserver's CSP:.* https://sourcegraph.pp.dropbox.com/server/-/blob/configs/security/csp/metaserver.yaml#L202.* if a way around this can be found, then this can be removed and migrated to the index.css file../../. Font: Atlas Grotesk Grotesk. */.@font-face {. font-family: 'Atlas Grotesk Web';. src: url('/static/metaserver/static/fonts/dig-fonts/atlas_grotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2'). format('woff2'),. url('/static/metaserver/static/fonts/dig-fonts/atlas_grotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff'). format('woff'),. url('/static/meta

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	1036
Entropy (8bit):	5.323673499267288
Encrypted:	false
SSDEEP:	24:xeAi/ZBSqU7Z371HOu70CViTmMM8SMqSq8HiMyH8qyBNkyBDu9Qk8b+y/s2n:8z/Zc79ROu7oMsqSqwVm8qIkODu9QkS1
MD5:	CB1AF7AA187B240DD312106671197878
SHA1:	B2B0F9905B73A81421E694D30BE3ED5153A0D9A0
SHA-256:	BA287E808B159FFC9EF8939ADDD0B8F1D579C5315CEAF25825E6F4DD709635EC
SHA-512:	F3D0AB0BA96DFF692A481E990CC5251C4C5CC46A86A98FA23EBC8BD42B2D5B8E76384A4FA04D83F477FB93FC8901CCCBD0C57E1CA52D451D0DFF695FE9D57F2E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-illustrations/index.web-vflyxr3qh.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-illustrations@2.8.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Theme--bright,:root{--color__illustration__inverse__dynamicline:#f7f5f2;--color__illustration__lightline:#f7f5f2}.dig-Theme--dark{--color__illustration__inverse__dynamicline:#1e1919}.dig-Mode--bright,.dig-Theme--bright,:root{--color__illustration__dynamicline:#1e1919}.dig-Mode--dark,.dig-Theme--dark{--color__illustration__dynamicline:#f7f5f2}.dig-Illustration{color:var(--color__illustration__dynamicline);height:100%;width:100%}.dig-Illustration.dig-Illustration--inverse{color:var(--color__illustration__inverse__dynamicline)}.dig-Illustration-spot{min-height:200px}.dig-Illustration-hero{min-height:338px}.di

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	204175
Entropy (8bit):	5.0432092366541035
Encrypted:	false
SSDEEP:	3072:Tn3R9XGrdhaElM6hQ67PQuXNveZSMRs5rOLf8t+WSvSfNk0Y2yb6TOfAuLlhFN0P:Tnh98dK2LjJxp42Cm3
MD5:	A29E7349DF7F27236744ED6B2BFEE49D
SHA1:	CDF68B71360616D7BC8A0A0790C48AEDD566CB31
SHA-256:	75E7061852C164158192444025245780550CE3AD81C634831EE9128DB0782DE5
SHA-512:	429080B18C42AF69633110282E62997E62E74CC6C3455474DDDFAC655D4425A943BB698CD946C7D12BF27F411AA05B250EB27EAC5ABB6A316902274B8F7C975D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/components-vflop5zSd.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /./* -- tokens.css */..dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2195)
Category:	downloaded
Size (bytes):	2267
Entropy (8bit):	5.1339937350490485
Encrypted:	false
SSDEEP:	48:1hN2iELXzXYkwb4929vdeu5/6ntvt8ZQ7AZo19TK/OXid+h:4LLX8kYCWwP59r00h
MD5:	3BABED2C255B8CD0B225B1D342B0BAB9
SHA1:	1649BC3E1B282B67F7290DE54AC2555D47E77781
SHA-256:	010EBE47E4FFD57252A610D4F086CD2E3AC463FD09BC5352B97DABE411379CFF
SHA-512:	69B99A3D3BA839B743C616F10E3DA7E1BEE7229088392629AB9E88884175EC390BAC4D0252E7FA3A5887DA8E47DB7C4C8C96DB2963D327FC92B869A770B0BB9F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_components_dwg-tooltip_control-vflO6vtLC.js
Preview:	define(["exports","react","./e_signup_signin_static_login_page_edison","./c_init_data_runtime","./e_core_exception","./e_edison","./c_core_uri","./c_apex-metrics_src_types","./c_init_data_edison","./c_src_query_client","metaserver/static/js/modules/constants/viewer","./c_src_sink_index","./c_core_xhr","./c_chat_chat_constants","./c_core_attribution_header","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_i18n","metaserver/static/js/langpack","./c_core_notify","react-dom","metaserver/static/js/modules/constants/locales","metaserver/static/js/modules/constants/login_and_register","./c_security_crypto","./c_lodash-es_lodash"],(function(e,t,a,o,n,r,c,i,s,l,_,d,u,p,m,f,g,h,w,v,x,y,D,N,R){"use strict";function E(e){return e&&e.__esModule?e:{default:e}}var j=E(t);const C=["left","left-start","left-end","right","right-start","right-end"],G=j.default.forwardRef((({tooltipId:e,placement:o,triggerRef:n,open:r,inverse:c=!1,openDelay:i=0,onChange

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	4.730024157907159
Encrypted:	false
SSDEEP:	6:qcSxUVexRJNY6ckJLEaNDUvckJLWQQaeCIxvciEyqDNb6Jv:EiVqNZHJLEVHJLWQQJBvEyqRc
MD5:	E9B97DB6D2E8DA79AA3E750F28E1BF56
SHA1:	1EDD4B6BB950948139840936828FED909BE6B8B8
SHA-256:	A28E9054559B06E3D1520ED9058715B6511F6ADDFF73690FF35C90CB9332BE25
SHA-512:	C2463D1FF243A8092D44A80E717CDF643B64FCD0B00220CF056F121C7CC89483DCD68EB2E7983A4A88B6DFC79CB12882D40625142959F3AD0BD41293CA61D0BE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/funcaptcha_modal-vfl6bl9tt.css
Preview:	.funcaptcha-modal{z-index:1000;position:fixed;top:0;left:0;width:100%;height:100%}.funcaptcha-modal--hidden-firefox{visibility:hidden;z-index:0}.funcaptcha-modal--hidden-non-firefox{display:none;z-index:0}.funcaptcha-div{margin-left:auto;margin-right:auto;height:100vh;width:100%;display:block}.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9253)
Category:	downloaded
Size (bytes):	9314
Entropy (8bit):	5.077098083626601
Encrypted:	false
SSDEEP:	192:bGJnpscHfOeltbJm6ow7dXEmP20FCIYCVvNARo3N1p6D/Hg6ocGkd/N+BRM:yJnac/OelJJm9wJXEmuuVYKVARo3NPUB
MD5:	20028D674F9D173D52A69994407A4F07
SHA1:	F6B06FBDC673AD64D667C40A70533283D2C7A034
SHA-256:	0F6057CE01C9071C7896C6EDF9B5E179330C58B4339C88A08F3BCB4043FFD1EF
SHA-512:	8022CD3B6B34B04C71106CB37B0B711C8987861CE03CB5D05353BE01B5764CF47710A9635C3083174FF3827BABEA6DDBD7DA6FE5F06AD5842975D31390BC8075
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_ui-icon_line_upload-vflIAKNZ0.js
Preview:	define(["exports","react"],(function(e,l){"use strict";function t(e){if(e&&e.__esModule)return e;var l=Object.create(null);return e&&Object.keys(e).forEach((function(t){if("default"!==t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(l,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})}})),l.default=e,Object.freeze(l)}var n=t(l);e.AddLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M11.75 4.5V19M19 11.75H4.5",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-suserng-stroke"})),e.ArrowUpLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M11.75 19V7m-6.5 5.25L11.75 6l6.5 6.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-suserng-stroke"})),e.CopyLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M7 4.5V17h12.5V4.5H7Zm11 11H8.5V6H18v9.5Z",

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (623)
Category:	downloaded
Size (bytes):	683
Entropy (8bit):	4.875457368925568
Encrypted:	false
SSDEEP:	12:voPwYkDjuA9l7uscXYCJFGKNJnS8wBXi8+fzDQi8bk01i8OS+jQPBN:U+3uZNGi4RS8xnl+j+BN
MD5:	B8BE0AEA05D076DD5B710F6DED7565B0
SHA1:	65F0CF4F7D35B7EC22F2E244A11A30E39BEF57BD
SHA-256:	6437CDA00E26052D776AFE662A06DDF8FE9981DD79AB0F9D3F2360D694AC319E
SHA-512:	B2A2678876762FA27E335FEC289E095F239F689690DC21A4BEBDD90D96DA791BBB9CEED3491792FF4ACE318FB0D2B2824CDF2F18FB89C35737CA79B496579BAC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/third_party/third_party_auth.module.out-vfluL4K6g.css
Preview:	:root{--kakao-color:#fee500;--kakao-hover-color:#fada0a;--kakao-active-color:#f2d00f;--kakao-disabled-color:#eee}._sign-in-with-google-button-register_brn4n_8{margin-top:16px}._third-party-container_brn4n_12{display:flex;flex-direction:column;gap:var(--dwg-spacing__unit--2)}._disable-google-button_brn4n_18{opacity:.5;pointer-events:none}._kakao-button_brn4n_23{background-color:var(--kakao-color)}._kakao-button_brn4n_23:hover{background-color:var(--kakao-hover-color)}._kakao-button_brn4n_23:active{background-color:var(--kakao-active-color)}._kakao-button_brn4n_23:disabled{background-color:var(--kakao-disabled-color)}./# sourceMappingURL=third_party_auth.module.out.css.map /

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1025)
Category:	downloaded
Size (bytes):	1026
Entropy (8bit):	4.686137439870003
Encrypted:	false
SSDEEP:	24:QUUl7UUwrNQUUwgopUUwz97UUb26l76wrNQ6wgop6wz976bXwO:Qfl7fIQfBOfO7fb26l76IQ6BO6O76bXJ
MD5:	20DEA3DFDE3B9352F8294408ADC604E9
SHA1:	C21EDD35DB63CD8852790ECE8323957643928648
SHA-256:	0DA537469F646AEA2AB5EAFE2641AA33C329A7D17F2751B63D93D39722BFB21C
SHA-512:	B1B85EBBEC740D86F5FFDF4379B8A905D640C94C34DDA6DB9815FF3302C720E7208D487202877A5783628E03D938DC260510ACC320E85564AC65ACA9EFFBB497
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/recaptcha-vflIN6j39.css
Preview:	.recaptcha-v2-challenge-container{display:none}.recaptcha-v2-challenge-container .text-input-error-wrapper{line-height:normal;color:#e82110;font-size:12px;min-height:17px;margin-top:10px}.recaptcha-v2-challenge-container .text-input-error-wrapper span.error-message{color:#e82110;display:block;font-size:12px}.recaptcha-v2-challenge-container .text-input-error-wrapper br{display:none}.recaptcha-v2-challenge-container .recaptcha_v2_challenge{margin-top:5px}.recaptcha-invisible-challenge-container{display:none}.recaptcha-invisible-challenge-container .text-input-error-wrapper{line-height:normal;color:#e82110;font-size:12px;min-height:17px;margin-top:10px}.recaptcha-invisible-challenge-container .text-input-error-wrapper span.error-message{color:#e82110;display:block;font-size:12px}.recaptcha-invisible-challenge-container .text-input-error-wrapper br{display:none}.recaptcha-invisible-challenge-container .recaptcha_invisible_challenge{margin-top:3px}.recaptcha-terms-text{font-size:12px;font-

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (725)
Category:	downloaded
Size (bytes):	775
Entropy (8bit):	5.176869926910286
Encrypted:	false
SSDEEP:	24:1hBXjZ0BpNvmUs6FGH+vB/4GXgsRGNDNFcpubLb:1hF0pVDrvB/nyDXKqLb
MD5:	EC9EF592D0B5E232F99FA690BE9A72C0
SHA1:	3983B8FF4908FBA9C2FDEA407B94FA2405D82A1D
SHA-256:	649F8832B5A787A2E4A4253584199B30CD24E83119AAA64FBA1D5AD9E436AE9B
SHA-512:	54444E7AC81737F014602C2936883BF3BCD8197A34519968DF3FFADDD91CF9EC1132507ADE599BE8F5DB1F117D90DC2175D030A256BA06A726093A9BDA984590
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_core_xhr-vfl7J71kt.js
Preview:	define(["exports","./c_chat_chat_constants","./c_core_attribution_header"],(function(t,e,n){"use strict";const o=function(t){};t.sendXhr=function(t,r,s=o){e.assertDropboxDomain(t),function(t){const n=e.readCsrfToken();t.is_xhr=!0,t.t=n}(r);const c=function(t){const e=[];for(const n in t)t.hasOwnProperty(n)&&void 0!==t[n]&&e.push(`${encodeURIComponent(n)}=${encodeURIComponent(String(t[n]))}`);return e.join("&")}(r),i=new XMLHttpRequest;i.onreadystatechange=function(){i.readyState===XMLHttpRequest.DONE&&s(i.status)},i.open("POST",t),i.setRequestHeader("Content-Type","application/x-www-form-urlencoded");const a=n.getAttributionHeader();return a&&i.setRequestHeader("X-Dropbox-Client-Yaps-Attribution",a),i.send(c),i}}));.//# sourceMappingURL=c_core_xhr.js-vfldcOlT0.map.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1281)
Category:	downloaded
Size (bytes):	1331
Entropy (8bit):	5.025370189455523
Encrypted:	false
SSDEEP:	24:3UxC/61wk53oIW1I4ub0TXD6+hAupLAfnGGhsyY:3U861wkVxbb0TZAlPPhsyY
MD5:	68B92CF8F7C6D25796C695153614D004
SHA1:	718B985F5FA2A0FB44A5418FAF206B0BCBC07ABA
SHA-256:	432741E746A4433ED39843670574A69AE8724BAB0DE5A8992510B99C34646D12
SHA-512:	61150F5DD9A7DDA8AE528C3A4751580A9CB561F1016363BA2D760EB7C21C87FC9D244632C52551FA75A997173C635289B15C1E9D7A9BA1D2FC5D2C73268D2D62
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/susi/header.module.out-vflaLks-P.css
Preview:	._toggle-link-container_6mkyf_4{align-items:start;display:flex;justify-content:flex-start;padding-top:var(--dwg-spacing__unit--0_5)}._toggle-link-container_6mkyf_4._login_6mkyf_11{margin-bottom:30.5px}._toggle-link-container_6mkyf_4._register_6mkyf_15{margin-bottom:22.5px}._form-header_6mkyf_19{margin-bottom:24px}._form-header_6mkyf_19 strong{font-weight:500}._header-logo-container_6mkyf_27{margin-bottom:8px}._header-logo-image_6mkyf_31{display:block;margin:auto;max-height:64px;padding:24px 0}._header-logo-image-large_6mkyf_38{display:block;margin:auto;max-height:120px;padding:8px 0}._email-as-label_6mkyf_45{margin-bottom:24px}._reduced-bottom-margin_6mkyf_50{margin-bottom:12px}._back-button-wrapper_6mkyf_54{padding-bottom:50px;position:relative}._go-back-button_6mkyf_59{color:var(--dwg-theme__color__core__primary);float:left;text-decoration-color:var(--dwg-theme__color__attention__border)}._left-align_6mkyf_65{text-align:left}._center-align_6mkyf_69{text-align:center}._right-align_6mk

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (345)
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	5.417628934625646
Encrypted:	false
SSDEEP:	12:U2eAi/ZBRiUQxkNP371H5ouSA0CVKR/x6rgYaTmJOnxlEU3wrxhJm9:xeAi/ZBRiU7Z371HOu70CViTmJWV81k
MD5:	A1782CB302D36D94A8F5904841B1F9CD
SHA1:	F489819205A11E879A7CBD37D906B7476040F5D9
SHA-256:	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
SHA-512:	F0BC15CF5DF3959036029298BF03FB3788B3308EA81A44BC26D1CF55F008C5378AC57764784CFEC26836413F8E5D036F66C348B817DBF172FC86C806F5781109
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/logos-vfloXgssw.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-logos@3.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--color__glyph__primary:#1e1919;--color__glyph__accent:#0061fe;--color__inverse__glyph__primary:#696663;--color__inverse__glyph__accent:#3984ff}.dig-Mode--dark,.dig-Theme--dark{--color__glyph__primary:#696663;--color__glyph__accent:#3984ff;--color__inverse__glyph__primary:#1e1919;--color__inverse__glyph__accent:#0061fe}

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66
Category:	downloaded
Size (bytes):	46188
Entropy (8bit):	7.994727284862106
Encrypted:	true
SSDEEP:	768:1NNzV0ynJc0ZFM5VB4R4HFlW3dhjfPlHRGSngzacOTXs4bS8PQefNYYI6xS:MWcx5VB4R4HFlwP1UTacOTXTS8PZfNY5
MD5:	DFC5E24CBC1B134E0C00C61E84EC999A
SHA1:	D3B1A8EF1D0F6F9162986479252570525719F203
SHA-256:	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
SHA-512:	48726CB83BDD0EB6822A73734AE272286483E8AEB6E18F57E635ED9269CA3C6C62E2D900224138DAFE32A79A94C3C7694307FF413505D695A77FE602681DF27B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/dig-fonts/atlas_grotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2
Preview:	wOF2.......l...............B.......................&.......`..\.2..a.....\..M.....6.$..x..~.. .....\|..?[....r.O.tf.$...d.wSc....=.3-=7v=.....`n.u...h.\|.I........d"c.\.%i.@QU...s..b.&n.T..%J..Zj....^(....3....k.vV..{8(..M{J/.C..w<.uV....=u.2t..Y.......`...C3K.'wp.F.R....5C..2w<.N=.+...@..A..:....._....X....y.Zn....DE..`....Yh.82....."..3YM..f.]...?..'.".s5...#.O..P....4....;6W.U.S.....Y.CGD....v...].....&..".....9.X.d.m.g..m...3c..%b...]....<b(....h...,.v...._z........R..z23?.S.?3...Y`...e...qL...m6YJ...h....#l.........B..m.`....KDQq. s...."c9G..\e.U....5....fu...e7...n..kDM...`. 7......OB.&(.R...Y.....Ir.^......Q..V~}.!r!.J[;`.iU@Z........I8.8..b.5...e.Z%%.-t.B[.%...^..R..d....kM.LN...*T..L.a.X[.jd)...F....J.,pN..TE.v.5U.h...J#?M.[./..laM.'.HI....9.^.....\|.....!5%.X... .).~=..t..T...J..!.........Ml...2.Tx......I$.yRi.R.....l.X.$..o\|Oz..[i.1?l...0#.._.......)....I..Q.c......B...0.."...@.k..~)5...\|[!..p..8.6.OL$.(..`.C.e3.L............[4...%

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30425)
Category:	downloaded
Size (bytes):	30473
Entropy (8bit):	5.212175489639093
Encrypted:	false
SSDEEP:	768:UdYEm4/5oG50/6dFx8gX5Nc+xUgDvjOvMmdATZyvEXWhnZgYJjPNiXQQ:2Y54H6d6rmMqvEm5Q
MD5:	69991038140966BA9AD01815DA736FB3
SHA1:	AC46284A7C3AB7DF07EA4CD3EB9F093538AB65D2
SHA-256:	FC593D1C8965D82E5A2800E995F28891E02FBCA92E6CFD143799170C9145A39D
SHA-512:	04A12BEA3AF0984C3414309F00A215D002AAA7D10B642958961F15D5A9D86F36A0ACC3987FD47D6B0DB83B98BEF9904C7173F4295B25D3ED2E078DAEB05CF43F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,r,n,s,i,o){"use strict";function a(e){return n.assert(e.startsWith("/static/"),`'${e}' is not a /static url`),new n.URI({scheme:"https",authority:"cfl.dropboxstatic.com",path:e}).toString()}const d=["edison:preloadCss","js:requireCssWithComponent","js:require_css","loadCssWithCache","ensemble","CssEntryPoint","css-modules"],c=["css-modules"];function l(e,t,r){if(r[t].length>0){if(c.includes(t)){const n=r[t];for(let t=0;t<n.length;t++){const{elem:r,path:s}=n[t];if(s>e.path)return[r,t]}}return[r[t][r[t].length-1].elem.nextElementSibling,null]}const n=d.indexOf(t);for(let e=n-1;e>=0;e--){const t=r[d[e]]\|\|[];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=n+1;e<d.length;e++){const t=r[d[e]]\|\|[];if(t.length>0)return[t[0].elem,null]}return[null,null]}function u(e,t,r,n,s){e.elem.setAttribute("data-loader",t),e

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48054)
Category:	downloaded
Size (bytes):	48110
Entropy (8bit):	5.266117469237999
Encrypted:	false
SSDEEP:	768:zYQW7XTMiYuxEvp1wr8HSktn4zdVbUyXqmHWEYWMhiAEaW9fjCaWlnxDKe4KiAnW:Lm5Zz+KptW4TiL7oSu
MD5:	9A4D33E9F93F1ED9DA898D73B532A9E6
SHA1:	1350A5CBE24B1CB428FA1033DBC9A47EA2E07151
SHA-256:	1C3BD03F8C5D3EB2450C490C1679A36E7CD9488D127A74433BB57DD691E8F8B3
SHA-512:	4B634E558BB68344BEB2AEA4480F4662BF3AC24D8EBE84CFD639B4AAEF6C6779E71571C618779060D330D931937788665C884165F34E755A6899E3B0ACD85B25
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_src_sink_index-vflmk0z6f.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_apex-metrics_src_types","./e_core_exception"],(function(e,t,n,s,i){"use strict";class r extends n.Message{constructor(e){super(),this.seconds=n.protoInt64.zero,this.nanos=0,n.proto3.util.initPartial(e,this)}fromJson(e,t){if("string"!=typeof e)throw new Error(`cannot decode google.protobuf.Timestamp from JSON: ${n.proto3.json.debug(e)}`);const s=e.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z\|\.([0-9]{3,9})Z\|([+-][0-9][0-9]:[0-9][0-9]))$/);if(!s)throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");const i=Date.parse(s[1]+"-"+s[2]+"-"+s[3]+"T"+s[4]+":"+s[5]+":"+s[6]+(s[8]?s[8]:"Z"));if(Number.isNaN(i))throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");if(i<Date.parse("0001-01-01T00:00:00Z")\|\|i>Date.parse("9999-12-31T23:59:59Z"))throw new Error("cannot decode message google.protobuf.Timestamp from JSON: must be from 00

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18766)
Category:	downloaded
Size (bytes):	18824
Entropy (8bit):	5.276164301853035
Encrypted:	false
SSDEEP:	384:3sXy7T5+iKf5gxheHcXRcloXFfJyQ6qG7lynynqdy709IChUenbKEYlR1b:33cgxhScXiloXdUQ6l7lQynV0huedYlj
MD5:	1D103202D73FF340F71AAE4B50102D1E
SHA1:	DD395C20ABBFB1AAAAFF7AEDF62912EAE4164618
SHA-256:	AFA224498C67D8325BBF89B55FDED30A1FF84BEAFA327A5C79F2823B728901D2
SHA-512:	C19054B6BA2DBFF4CDA58B08C18118C43E077F0C415BFCDF5B02F3456817066A40B562ACBD9A8716F11CB03DF10521345CCF3F7487AB95E39DEA5835696AB64A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_lodash-es_lodash-vflHRAyAt.js
Preview:	define(["exports"],(function(t){"use strict";var r="object"==typeof global&&global&&global.Object===Object&&global,e="object"==typeof self&&self&&self.Object===Object&&self,n=r\|\|e\|\|Function("return this")(),o=n.Symbol,u=Object.prototype,i=u.hasOwnProperty,a=u.toString,c=o?o.toStringTag:void 0;var f=Object.prototype.toString;var l="[object Null]",s="[object Undefined]",v=o?o.toStringTag:void 0;function p(t){return null==t?void 0===t?s:l:v&&v in Object(t)?function(t){var r=i.call(t,c),e=t[c];try{t[c]=void 0;var n=!0}catch(t){}var o=a.call(t);return n&&(r?t[c]=e:delete t[c]),o}(t):function(t){return f.call(t)}(t)}function h(t){return null!=t&&"object"==typeof t}var y="[object Symbol]";function b(t){return"symbol"==typeof t\|\|h(t)&&p(t)==y}function d(t,r){for(var e=-1,n=null==t?0:t.length,o=Array(n);++e<n;)o[e]=r(t[e],e,t);return o}var _=Array.isArray,g=1/0,j=o?o.prototype:void 0,O=j?j.toString:void 0;function m(t){if("string"==typeof t)return t;if(_(t))return d(t,m)+"";if(b(t))return O?O.c

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	661
Entropy (8bit):	5.112361370693629
Encrypted:	false
SSDEEP:	12:bRUGa4GYLqGkwaRuEpzbx6PfUI2Fylde9hWKg2JW3dwVxK:urHjL1phyyWK5Y3KVxK
MD5:	8B7FB34E0EC9ECFD6C2523036161EFEF
SHA1:	A241AAB257D9E4B2F606E0AB94E4E8E9333B2369
SHA-256:	092F05A37727D13D22048C83B9928E9A17D878F216C1C2EC2090D0C404D2340B
SHA-512:	8BC8223B14145E2202F33C64ACDD5470CCFDCEFF776F37C3AB054723F944818CD452A0220B7F6BAD5EFE2206061B5A0278668F432A8991917F988C0C34D52E55
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vfli3-zTg.css
Preview:	@import url('./components-vflop5zSd.css');./* This loads after `components.css` because it contains all the legacy color tokens /.@import url('./legacy-token-migration-vfl1sMmEL.css');.@import url('./logos-vfloXgssw.css');.@import url('./icons-vflL9_90W.css');.@import url('./foundations-tokens-vflfHUKrS.css');.@import url('./foundations-components-vflNp3GvF.css');.@import url('./content-icons-vflmAcPHP.css');./ For any images that are circle cropped, scale them up a bit so that they're still cropped as a squircle /..dig-Avatar-image--modern[src='circle_crop=1'],..dig-Avatar-image--modern[srcset*='circle_crop=1'] {. transform: scale(1.075);.}.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12494)
Category:	downloaded
Size (bytes):	12550
Entropy (8bit):	5.391211180435
Encrypted:	false
SSDEEP:	384:9QIdXpDm2qiM6MGGei9/4sw81HXcZFmR3ZkEpsDbIA:9HDmfyk4EHXuFmR3ZkEpsDbIA
MD5:	0CCE36E0D631A9F9391326766FA604CC
SHA1:	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72
SHA-256:	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
SHA-512:	EAB2549C4A048B44FDF9B1AEEACBCB389907945239C95B496327061E32BEDB2302B3F6D9B6CD4807ADC776F19154584F33433383AE75C0F28BDEB21C8DEFE99C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_core_exception-vflDM424N.js
Preview:	define(["exports"],(function(e){"use strict";let n=new Set;if(globalThis.ensemble){const e=globalThis;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function r(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var c,i={exports:{}};c=i,function(e,n){if(e){var t={},r=e.TraceKit,i=[].slice,o="?";t.noConflict=function(){return e.TraceKit=r,t},t.wrap=function(e){return function(){try{return e.apply(this,arguments)}catch(e){throw t.report(e),e}}},t.report=function(){var n,r,c=[],o=null,s=null,u=null;function a(e,n){var r=null;if(!n\|\|t.collectWindowErrors){for(var o in c)if(l(c,o))try{c[o].apply(null,[e].concat(i.call(arguments,2)))}catch(e){r=e}if(r)throw r}}function f(e,r,c,i,o){if(u)t.computeStackTrace.augmentStackTraceWithInitialElement(u,r,c,e),p();else

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15368)
Category:	downloaded
Size (bytes):	15369
Entropy (8bit):	5.068877632418108
Encrypted:	false
SSDEEP:	192:JQNPyw5a9nhYm1lrM3y00hukrmjJPyuu42aGvyRtrMyqHdyb+imipupm2OSFQsG4:Jk9fMimipupm2OSFQsGeR+5ZJ0Fj5AY
MD5:	62E594328005F6A1C6E0EDBCAFA712B0
SHA1:	69404C43961EA5224B6DF433C9424C07679A08BD
SHA-256:	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
SHA-512:	D9001E196A218E7FC69619F03E5FAC65AC3FC02023AA7DDB2A7DD507CF952AADFA5A99A97194B03FBE85F50D7591CC759C544FE861D87A3176FF8B44B9D76C71
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_layout-vflYuWUMo.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflJ3txfq.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflyja8tN.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflbI0jjP.ttf") format("truetype");font-weight:500;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrot

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.8548730495981
Encrypted:	false
SSDEEP:	12:nnwkHFVF6YXukbpPxTEdxk2fKuv6/WbxXBu3J3nWN0j314IQL:nnwWpqkNOYDa6/gXBuNq054j
MD5:	85C876EB10030058F29245148995CC2D
SHA1:	458679E2B02107F6448729AEC844D3BD8283C9ED
SHA-256:	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
SHA-512:	2CA5D147B5630AA540DD241CB8C06429A7072108C2BEADF04ED532FC7F5291BDF1147F6C334293D96397B9402421B1AD52CDF9F1EA39918C95201DB1DBA19DCF
Malicious:	false
Reputation:	low
URL:	https://marketing.dropbox.com/login?referrer=
Preview:	<html>. <head>. [if (gte IE 9) ]>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <![endif]-->. <title>Dropbox</title>. <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-eval'; ">. </head>.<body>.<script>. (function() {. /*. Requesting marketing service to process tealium events. */. document.head.appendChild(Object.assign(document.createElement('script'), {. src: 'https://www.dropbox.com/pithos/marketing_tracker_service',. async: true. }));. })();.</script>.</body>.</html>.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (744)
Category:	downloaded
Size (bytes):	798
Entropy (8bit):	4.83636828949503
Encrypted:	false
SSDEEP:	12:rWEO/XRWEWJ5h5t+xQWs5gOWHIW4FXNuV72Ope:yj/Y5XH0Igr1MC7q
MD5:	FFA4A8CEE985A798CFF48D450F8436AD
SHA1:	0584E9A89D7DCE5DA4AC9084DC91297237BB3B94
SHA-256:	45526D8DCBFAE6EE2E386F518184BC65B459B3F207FF8E82A89C8FBFABB249F4
SHA-512:	BFD66B672D26860B625F468CA615C4EAC2A3DA4F232C24C664FE546C1D7F88DD2D980D43F9D017F6D9C7D73BD5417BC00AAF4E1B4D603E60148A1A2F155C65C7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/auth_error.module.out-vfl_6Sozu.css
Preview:	._text-input-error-wrapper_1nlfs_4,._text-input-success-wrapper_1nlfs_5{margin-top:var(--dwg-spacing__unit--0_5);order:2}._text-input-error-wrapper_1nlfs_4,._text-input-error-wrapper_1nlfs_4 span._error-message_1nlfs_11{color:var(--color__alert__text);font-size:10px;line-height:15px}._text-input-success-wrapper_1nlfs_5,._text-input-success-wrapper_1nlfs_5 span._success-message_1nlfs_18{color:var(--color__success__text);font-size:10px;line-height:15px}._text-input-error-wrapper_1nlfs_4:empty,._text-input-success-wrapper_1nlfs_5:empty{display:none}._text-input-error-wrapper_1nlfs_4:empty+._text-input-wrapper_1nlfs_29 ._password-input_1nlfs_29{margin-bottom:var(--dwg-spacing__unit--0_5,4px)}._text-input-error-hidden_1nlfs_33{font-size:0}./# sourceMappingURL=auth_error.module.out.css.map /

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.837004615391955
Encrypted:	false
SSDEEP:	12:jS5RgWH7oWH79hWH7DR//j+sRueMqcDGuX8s2ZiNHyYSbVe9ofU:GPX7P79g7Dp/K0tMPDGussuOrP
MD5:	A0EF15CB4F52D5F152A361C4A4208C73
SHA1:	62E8A6612C09E571E1266353758F61DC379401B0
SHA-256:	7EB159511D44A621FB5DC9FF210E67E3621EC4000806F3D9255920F8A7B3DBF6
SHA-512:	AA68B22A2003B7EAA605BC3D710103459D68901BCB03E65528ADCB2A5C01018EF8370FD4F7D82E707FD8B9C58441FD395605A33AFBE45AADFD21C1AAE6648ACF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/components/tooltip-vfloO8Vy0.css
Preview:	.tooltip-wrapper{display:inline-block;position:relative}.tooltip-wrapper .tooltip-prompt{position:relative}.tooltip-wrapper .tooltip-prompt .sprite{cursor:pointer}.tooltip-wrapper .tooltip-prompt .sprite:focus{box-shadow:0 0 0 3px #428bff;border-radius:3px}.tooltip-bubble{display:none;font-size:13px;line-height:normal;position:absolute;background:#fff;background-clip:padding-box;border:1px solid rgba(61,70,77,0.1);cursor:default;padding:9px 15px;z-index:9999;border-radius:3px;box-shadow:0px 1px 2px rgba(0,0,0,0.1)}.tooltip-bubble .tooltip-inner{position:relative}.tooltip-bubble ul li{list-style-position:outside;margin-left:2em}.tooltip-target{display:table}.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/dig-fonts/atlas_grotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11920)
Category:	downloaded
Size (bytes):	12008
Entropy (8bit):	5.24854654756629
Encrypted:	false
SSDEEP:	192:6UMFAoyysMGx0unMsPe6Jt45jkiRfotLnjZ1yHZzHgqEDY+pClpps39urhbDn50w:KLnGx0unMsPeYt2jkiRgtLzyHZzHgqE2
MD5:	3580045AF7031440F29C1033A7D1FE71
SHA1:	1F5074C27576ECCFAC6940F9EB835173F905EA70
SHA-256:	548ABD51A95AA6ED34C3DEE710704FEDC8D9A474D070C10A8D98AAF6ABED7C6D
SHA-512:	95CE1848AF748F68C53E7834328CFA2862E3469849EF115CF200930506750BEB855C3217EEF0AF3F78CB9107791DEEBAE5B54FB0220987524B7AF3E7A3B70CC4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_dialogue_dialogue_stone_proto_transformer-vflNYAEWv.js
Preview:	define(["exports","./c_init_data_runtime"],(function(t,e){"use strict";var n,a,r,i,o;t.ChatProviderType=void 0,(n=t.ChatProviderType\|\|(t.ChatProviderType={}))[n.SNAPENGAGE=0]="SNAPENGAGE",n[n.DIALOGUE_CHAT=1]="DIALOGUE_CHAT",n[n.SOLVVY=2]="SOLVVY",e.proto3.util.setEnumType(t.ChatProviderType,"chat.ChatProviderType",[{no:0,name:"SNAPENGAGE"},{no:1,name:"DIALOGUE_CHAT"},{no:2,name:"SOLVVY"}]),t.ProactiveMessageType=void 0,(a=t.ProactiveMessageType\|\|(t.ProactiveMessageType={}))[a.DEFAULT=0]="DEFAULT",a[a.MINIMIZED_PROACTIVE=1]="MINIMIZED_PROACTIVE",e.proto3.util.setEnumType(t.ProactiveMessageType,"chat.ProactiveMessageType",[{no:0,name:"DEFAULT"},{no:1,name:"MINIMIZED_PROACTIVE"}]),t.ChatInitialState=void 0,(r=t.ChatInitialState\|\|(t.ChatInitialState={}))[r.HIDDEN=0]="HIDDEN",r[r.SHOW_PROVIDER_REACTIVE_BUTTON=1]="SHOW_PROVIDER_REACTIVE_BUTTON",e.proto3.util.setEnumType(t.ChatInitialState,"chat.ChatInitialState",[{no:0,name:"HIDDEN"},{no:1,name:"SHOW_PROVIDER_REACTIVE_BUTTON"}]),function(t)

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50818)
Category:	downloaded
Size (bytes):	50876
Entropy (8bit):	5.10368469988507
Encrypted:	false
SSDEEP:	768:Js8EyU+gy5WiUa7zd2fKlXGHrLjceDfWWE/D5r0fskvevhZumil0+Q9K80QtRFbx:C82J4KfDf3iw69z0i+G
MD5:	84443507D17745D02613A5D1D2768120
SHA1:	5ACCAB52B575DE1FDACC9EBEDF93E60A9CCD4ACB
SHA-256:	7FAAEF48B15AED1E572B3FE5EAFC91C78E84547CC704B64ADD5D8F2A77BFA7F9
SHA-512:	5BE05E595B04D0DFA9B4B41F801B0215B7083005810E39E81F41599040F01963EB28EF12FC9FA31303724E0E61F2CF3DD30A061542B4E7C2C87A7369E22FD947
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_src_query_client-vflhEQ1B9.js
Preview:	define(["exports","metaserver/static/js/modules/constants/viewer","./c_core_uri","react"],(function(t,e,r,s){"use strict";function i(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var s=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,s.get?s:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var n=i(s);class o{constructor(t){this.id=t.id,Object.assign(this,t)}toString(){return String(this.id)}}function a(t){return new o(t)}class u{constructor(t,e){this.active_and_paired_user_ids=e,this.users=t}get_users(){return Object.values(this.users).sort(((t,e)=>+t.linked_user_id-+e.linked_user_id))}is_uid_associated(t){return t in this.users}is_paired(){return this.active_and_paired_user_ids.length>1}has_linked_or_paired_users(){return Object.keys(this.users).length>1}get_unauthed_user_by_uid(t){return this.users[t]}}class c{static get_viewer(){return c._cached_viewer}static get_rol

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/langpack/icu-en-vflmZFLky.json
Preview:	{}

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290), with no line terminators
Category:	downloaded
Size (bytes):	1290
Entropy (8bit):	5.802255373393803
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlWr6+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEcieNKonR3evtTA8h1mLrwUnG
MD5:	E7FA60E6D3BC241EE2F254AC7DC7B056
SHA1:	958281D9B3544C39B748E1C042CB44ABE35FC383
SHA-256:	AA177A486023FBFF9070CA75CF28B1B73865C7B8BDB905465A3A50B152F82CF5
SHA-512:	95B5974A4E1DCFD419AEBD3BDE84960733D69DF6BC56DD9E299E248CD5C97F1C5710D1540745ACC6C80A1B61DC3527A7F10A6111AC94469703DAE5E381F3D061
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptchaOnloadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anon

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12980)
Category:	downloaded
Size (bytes):	13036
Entropy (8bit):	5.383303461869738
Encrypted:	false
SSDEEP:	384:9QIdXpDm2qiMGIGG6i9/4oJCYhHXcZFKh3pZkEpsDbIDNq:9HDmfmk4UlHXuFK9pZkEpsDbIk
MD5:	6F60E0C89282DED473D1097E46D7E83F
SHA1:	8ABB36DEB8814FB719F2BAF80A8DFCE0D7B7DA57
SHA-256:	4589A03BB766DAF71F315EED76C218FBE0712FCFEDF2F655009DF6FDE6BFB8EA
SHA-512:	F5717C2E6AC91600ABCC0E86A179A47F5FC1C19B6C962CC94B79E4A539D857728524EE6245316DE602BAB55501CFA9D5AC588E94C095CC70C3FAB4A5E3CEA954
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/e_core_exception-vflb2DgyJ.js
Preview:	define(["exports"],(function(e){"use strict";let n=new Set;if(globalThis.ensemble){const e=globalThis;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function r(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var c,i={exports:{}};c=i,function(e,n){if(e){var t={},r=e.TraceKit,i=[].slice,o="?";t.noConflict=function(){return e.TraceKit=r,t},t.wrap=function(e){return function(){try{return e.apply(this,arguments)}catch(e){throw t.report(e),e}}},t.report=function(){var n,r,c=[],o=null,s=null,u=null;function a(e,n){var r=null;if(!n\|\|t.collectWindowErrors){for(var o in c)if(l(c,o))try{c[o].apply(null,[e].concat(i.call(arguments,2)))}catch(e){r=e}if(r)throw r}}function f(e,r,c,i,o){if(u)t.computeStackTrace.augmentStackTraceWithInitialElement(u,r,c,e),p();else

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21020)
Category:	downloaded
Size (bytes):	403306
Entropy (8bit):	4.881429968346981
Encrypted:	false
SSDEEP:	768:xiLxLWwBFD0D3RF/phVFtDFZtVahF9FchFdrQhFqpyhFHP+hFyIZhFOQrtM/oHyX:x9HDrtM/oHyvjOZOCbDlcl
MD5:	F3FC7E84C200E23061AFBB9EFFEC4EDA
SHA1:	117852AD6C4C8F33FCC7A79A5FB1FC3481E8E50D
SHA-256:	AD461001D7C4618C5CE70C1C9AF1E0C9CF5C85AF48B19CA02E52AE35EE91760E
SHA-512:	6A159C46ABEE870E3D044A23D3DC16056B7732A4AF6C7DFB374B6A51EA1E0C65175CD20617EA1E428946AB97514C186BCE71414D5A7AF9098D1D42C2BA4701C3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/typescript/component_libraries/dwg-components/src/index.web-vfl8_x-hM.css
Preview:	./* -- typescript/component_libraries/dwg-components/src/atoms/dwg-box/index.web.css /..dwg-box{-webkit-tap-highlight-color:transparent;box-sizing:border-box}./ -- typescript/component_libraries/dwg-components/src/atoms/dwg-flex-grid/index.web.css */..dwg-flex-grid{--dwg-flex-grid__columns:var(--dwg-flex-grid__columns--mobile);width:100%}.dwg-flex-grid__cell{--dwg-flex-grid__col-span:var(--dwg-flex-grid__col-span--mobile,1);--dwg-flex-grid__col-pad-left:var(--dwg-flex-grid__col-pad-left--mobile,0);--dwg-flex-grid__col-pad-right:var(--dwg-flex-grid__col-pad-right--mobile,0)}@media (min-width:480px){.dwg-flex-grid{--dwg-flex-grid__columns:var(. --dwg-flex-grid__columns--mobile-lg,var(--dwg-flex-grid__columns--mobile). )}.dwg-flex-grid__cell{--dwg-flex-grid__col-span:var(. --dwg-flex-grid__col-span--mobile-lg,var(--dwg-flex-grid__col-span--mobile). );--dwg-flex-grid__col-pad-left:var(. --dwg-flex-grid__col-pad-left--mobile-lg,var(--dwg-flex

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.147204843039308
Encrypted:	false
SSDEEP:	12:HbKAcDPGqNBPr5P5iE+Sq8/JPb9AHb2E8VSFe6hHvLxVaPbvEaPb98E4:HeAUNjPNPIT8/xxKysRhHTxq1x8E4
MD5:	6D92292A133E794F5C1FADC6361DD5AC
SHA1:	9F9C7C2DB732A64AB4A014E2AFDA0AA446D3A04B
SHA-256:	DC21D296459DD21437B246D4768E05C86DAE1180277C8A5AAC07E241665CF8B5
SHA-512:	A04A657802EAAD3B9047CC20BDF8245FFAC4B79014BE6A0588FA527B245F90ADEE8F4A2DE7F89436FFD9E15D6B37DADA12905D2BED120097226C5A2B78B6AA66
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/common/helpers.module.out-vflbZIpKh.css
Preview:	._hr-label_1rzgs_4{clear:both;margin:var(--dwg-spacing__unit--2,16px) 0;overflow:hidden;position:relative;text-align:center}._hr-label-text_1rzgs_12{color:var(--color__standard__text);font-family:var(--__dwgAtlasGroteskStack);font-size:16px;margin:0 var(--dwg-spacing__unit--2,16px)}._hr-label_1rzgs_4:after,._hr-label_1rzgs_4:before{background-color:hsla(36,10%,61%,.3);content:"";display:inline-block;height:1px;position:relative;vertical-align:middle;width:50%}._hr-label_1rzgs_4:before{margin-left:-50%;right:0}._hr-label_1rzgs_4:after{left:0;margin-right:-50%}./# sourceMappingURL=helpers.module.out.css.map /

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6784)
Category:	downloaded
Size (bytes):	6843
Entropy (8bit):	5.115588186296612
Encrypted:	false
SSDEEP:	192:jXqy8HBsxYs5978H8IusAbZM6s6RWoJ+XfVOa8blRjRxGY3R:uBHBsxYs59IH8IusAbZM6sugVOa8blRb
MD5:	D92942DF3511F31AE05D48D8023C2761
SHA1:	DE61380BAB1D236B3F1FA6A0857F431F6B5B249D
SHA-256:	70BAFD34EA26B7E0112AD1BCEB582F87DFCB69026B11847B1EE2289410993175
SHA-512:	F25AED5D3C5966D85716045E72C7772546497A3EDB8F913E804F70A5D01C963FC17F303B4C9AD9B4A7AB3B3E3D59A59082F68358DFAFF309355A77F6BA03745A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_ui-icon_fill_star-vfl2SlC3z.js
Preview:	define(["exports","react"],(function(e,t){"use strict";function l(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(l){if("default"!==l){var n=Object.getOwnPropertyDescriptor(e,l);Object.defineProperty(t,l,n.get?n:{enumerable:!0,get:function(){return e[l]}})}})),t.default=e,Object.freeze(t)}var n=l(t);e.AddCircleLine=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M12.5 7.5H11V11H7.5v1.5H11V16h1.5v-3.5H16V11h-3.5V7.5Z",fill:"currentColor",vectorEffect:"non-suserng-stroke"}),n.createElement("path",{d:"M11.75 4C6.535 4 4 6.535 4 11.75s2.535 7.75 7.75 7.75 7.75-2.535 7.75-7.75S16.965 4 11.75 4Zm0 14c-4.322 0-6.25-1.927-6.25-6.25 0-4.322 1.928-6.25 6.25-6.25 4.323 0 6.25 1.928 6.25 6.25 0 4.323-1.927 6.25-6.25 6.25Z",fill:"currentColor",vectorEffect:"non-suserng-stroke"})),e.CircleStandardFilledFill=e=>n.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},n.createElement("path",{d:"M12 4c-5.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3422)
Category:	downloaded
Size (bytes):	3488
Entropy (8bit):	5.082220303858196
Encrypted:	false
SSDEEP:	48:1hpsbRm6riRkfuc7gkR/pHRoU3Q9kJ9RaTxhgRapISGANztLMUQajiZRTK6vlRaX:Js86r/fuDE/4UgqsvZ1igaybbDWMuU
MD5:	08BBC87D5D5F57B0A00736045393F3FF
SHA1:	D4434241062A5BC5785F427830058DB462F313CB
SHA-256:	A81EB89A69B18C09ED3F544ED4DC3DAA9EE5904812B58B4D1AA9BECE729F3F62
SHA-512:	2A0F3A311466C88706F6D470F60065E33DE5C87E589BD53F4E771057214149DE78435ED048BE1B39035B80701B443B88E2D5CD89968320D0CE6FB088F8337F4B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/signup_signin/login_page_edison_bundle_amd/dist/c_chat_chat_stone_to_proto-vflCLvIfV.js
Preview:	define(["exports","./c_chat_dialogue_dialogue_stone_proto_transformer","./c_init_data_runtime","./e_core_exception"],(function(e,t,a,i){"use strict";const n=e=>{if(void 0!==e)return new t.ChatMetadata({cookieDomain:e.cookie_domain,cookieCampaignName:e.cookie_campaign_name,legacyCookieCampaignName:e.legacy_cookie_campaign_name})},o=e=>{if(void 0!==e)return new t.UserProperties({chatHmac:e.chat_hmac,email:e.email,firstName:e.first_name,lastName:e.last_name,pageLoadTs:e.page_load_ts,pricings:e.pricings,sessionId:e.session_id,userId:e.user_id,serviceTier:e.service_tier,locale:e.locale,countryCode:e.country_code,authToken:e.auth_token})},r=e=>{const a=e.proactive_type;if(void 0===a)throw new Error("Proactive Message Type undefined");const i=a[".tag"];if("default"===i)return t.ProactiveMessageType.DEFAULT;if("minimized_proactive"===i)return t.ProactiveMessageType.MINIMIZED_PROACTIVE;throw new Error(`Unknown tag for proactive message type ${i}`)},s=e=>{if(void 0!==e)return new t.ProactiveSett

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	5.181110946732397
Encrypted:	false
SSDEEP:	6:FWQDThmWX+L77MRL3B6T2Y3xT3aF7XliARIR8eFWQD8kM/XLKQsI:FWkThXw8RL3B6TLxT3kIARIbWk1YD
MD5:	5CDC20BEC764EEDD4CB5275BF0AAF4D0
SHA1:	A6DF9646C37996C4F8A118621B404925EEA353EE
SHA-256:	05E1FBE4401829DB2CA3ECB53F1F748CA2F47E7907A8D2E90D1641E0FC6CFB7C
SHA-512:	4E7F02CECBA9C7197ABDB0C1338FDC6A06B78FA424658DB3C2D080051E540D37350417A10BCB5107CEAD781D526E58CC56044DAD8CFABC6992A6ED6848EF302F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/signup_signin/unified_susi/unified_susi.module.out-vflXNwgvs.css
Preview:	._unified-susi_s59m6_4{display:inline-block;margin-bottom:0;margin-top:0;max-width:350px;vertical-align:middle;width:350px}@media only screen and (max-width:414px){._unified-susi_s59m6_4{width:100%}}./# sourceMappingURL=unified_susi.module.out.css.map /

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 15:47:00.351273060 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.351325035 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.351376057 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.352077007 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.352124929 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.352179050 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.352240086 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.352257967 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.352714062 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.352731943 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.673659086 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.673943043 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.673964024 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.675009966 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.675074100 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.676048994 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.676162958 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.676223993 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.676232100 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.682365894 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.682590961 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.682616949 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.683845043 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.683907986 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.684730053 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.684794903 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.718329906 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.734249115 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:00.734288931 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:00.781229019 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.037338972 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.037405968 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.037420988 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.037456989 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.037496090 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.037502050 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.037621975 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.037657976 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.039738894 CEST	49700	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.039760113 CEST	443	49700	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:01.040258884 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:01.084125996 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.019785881 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.019818068 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.019881964 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.019913912 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.019944906 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.021305084 CEST	49701	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.021322012 CEST	443	49701	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.022036076 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.022068024 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.022161007 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.022476912 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.022480965 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.096976995 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.097018003 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.097069025 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.097352982 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.097364902 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.314528942 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.314825058 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.314843893 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.315905094 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.316004992 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.317192078 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.317266941 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.338458061 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.338736057 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.338743925 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.339173079 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.339540005 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.339613914 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.339689016 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.339715004 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.357228041 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.357235909 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:05.404238939 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:05.769793987 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.769884109 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.769893885 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.771564007 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.771670103 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.771676064 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.774398088 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.774461031 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.774465084 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.786668062 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.786771059 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.786782026 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.786988974 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.873997927 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.877409935 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.877674103 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.877682924 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.877748966 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.906594992 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:05.906618118 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:05.906692028 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:05.906960964 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:05.906970024 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:05.925997972 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.926012039 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.926040888 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.926129103 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.926129103 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.926141024 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.926234961 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.938994884 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.940128088 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.945516109 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.945605040 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.996902943 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.996989012 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.997081995 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.997081995 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:05.997091055 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:05.997420073 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.001791000 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.001888990 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.011234999 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.011341095 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.016062975 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.016628981 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.020716906 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.020801067 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.025443077 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.025520086 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.037341118 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.037493944 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.046740055 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.046839952 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.051457882 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.051548004 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.056253910 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.056387901 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.056392908 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.070091963 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.070187092 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.070195913 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.070322990 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.078367949 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.078459024 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.082627058 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.082695961 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.082717896 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.082972050 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.083192110 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.083276033 CEST	49704	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:06.083288908 CEST	443	49704	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:06.126250029 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:06.126555920 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:06.126565933 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:06.128058910 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:06.128140926 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:06.129287958 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:06.129369020 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:06.180380106 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:06.180397987 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:06.228308916 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:07.185760021 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.185798883 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.185874939 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.186100960 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.186115026 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.503129959 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.503515959 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.503550053 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.503918886 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.504232883 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.504301071 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.504426003 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.504455090 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.947679043 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.947765112 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:07.947822094 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.948167086 CEST	49726	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:07.948184967 CEST	443	49726	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.242091894 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.242141962 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.242225885 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.242450953 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.242464066 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.558376074 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.558684111 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.558710098 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.559083939 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.559382915 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.559451103 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.559541941 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.559562922 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.559575081 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.581119061 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:09.690702915 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.690732956 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.690838099 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.690964937 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.690973043 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.691060066 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.691303968 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.691317081 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.691461086 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.691471100 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.793987036 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:09.794017076 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:09.794131041 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:09.794302940 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:09.794310093 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:09.840138912 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.840714931 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.840792894 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.841011047 CEST	49753	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.841033936 CEST	443	49753	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.884212971 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:09.951494932 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.951536894 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:09.951740980 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.951824903 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:09.951841116 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.007569075 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.007802963 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.007841110 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.008251905 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.008315086 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.008712053 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.008712053 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.008734941 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.008796930 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.008865118 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.009134054 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.009495020 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.009558916 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.009639978 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.009669065 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.020344973 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.020550013 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.020567894 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.021652937 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.021738052 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.022675037 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.022742033 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.022830009 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.022839069 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.056113005 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.056191921 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.056191921 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.072187901 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.233171940 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.233256102 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.233340025 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.234431982 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.234431982 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.234441042 CEST	443	49760	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.234497070 CEST	49760	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.235132933 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.235167980 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.235228062 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.235538960 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.235553980 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.269349098 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.269617081 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.269629002 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.270591974 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.270673990 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.270979881 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.271053076 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.271087885 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.312482119 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.312763929 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.312839985 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.313292027 CEST	49762	443	192.168.2.16	18.155.1.54
Apr 18, 2024 15:47:10.313308001 CEST	443	49762	18.155.1.54	192.168.2.16
Apr 18, 2024 15:47:10.316127062 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.322079897 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.322124004 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.322202921 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.322587967 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.322607040 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.326178074 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.326198101 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.374216080 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.392676115 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.392690897 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.392757893 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.392842054 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.392842054 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.394882917 CEST	49758	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.394892931 CEST	443	49758	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.395673990 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.395761967 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.395963907 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.396123886 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.396147013 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.396280050 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.396305084 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.396336079 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.396502972 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.396507978 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.400490999 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.400527954 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.400602102 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.400790930 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.400798082 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.451603889 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.451680899 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.451734066 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.452061892 CEST	49763	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.452075005 CEST	443	49763	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.486239910 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:10.550759077 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.551054955 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.551064014 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.551409006 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.551685095 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.551744938 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.551856041 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.596112013 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.640902996 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.641212940 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.641232967 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.641601086 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.642005920 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.642076969 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.642164946 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.642200947 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.704291105 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.704318047 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.704389095 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.704797983 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.704818010 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.713296890 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.713550091 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.713612080 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.714698076 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.714735985 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.714824915 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.714905977 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.714917898 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.715193033 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.715281963 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.715317011 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.715985060 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.716048956 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.716305971 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.716366053 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.716396093 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.716408014 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.716422081 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.716859102 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.717052937 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.717065096 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.718133926 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.718209028 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.718445063 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.718513012 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.718561888 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.718576908 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.718620062 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.718630075 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.756225109 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.756284952 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.756340027 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.756351948 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.772175074 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.802262068 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.802284956 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.888433933 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:10.888467073 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:10.888597965 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:10.888803959 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:10.888813972 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:10.954696894 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.954762936 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.954787016 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.954813957 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.954873085 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.958358049 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958391905 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958425045 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958436966 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.958466053 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958482981 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.958492041 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958512068 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.958539009 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.958797932 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:10.958852053 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.960021973 CEST	49779	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:10.960042953 CEST	443	49779	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.016710997 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.016801119 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.016879082 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.022429943 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.022800922 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.022815943 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.023315907 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.023668051 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.023750067 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.023857117 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.023879051 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.023890018 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.050520897 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.050534964 CEST	443	49780	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.050556898 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.050585032 CEST	49780	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.052275896 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.052290916 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.052356958 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.053029060 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.053035975 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.058196068 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.058252096 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.058259964 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.058475971 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.058918953 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.058938980 CEST	443	49781	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.058964014 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.059005976 CEST	49781	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.076644897 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.076657057 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.076692104 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.076751947 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.076781988 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.076802015 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.076854944 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.083631992 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.083689928 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.083695889 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.083715916 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.083751917 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.103815079 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.103876114 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.103902102 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.103928089 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.104288101 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.104370117 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.104392052 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.104453087 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.104578972 CEST	49782	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.104595900 CEST	443	49782	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.105197906 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.105210066 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.106262922 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.106410980 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.107342958 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.107394934 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.107400894 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.107412100 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.110639095 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.110709906 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.111387968 CEST	49776	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.111407042 CEST	443	49776	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.151277065 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.151290894 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.192045927 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.192095041 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.192194939 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.192440033 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.192456961 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.199215889 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.200704098 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.200745106 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.200823069 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.201041937 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.201059103 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.357788086 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.358104944 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.358180046 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.358628035 CEST	49791	443	192.168.2.16	18.165.116.121
Apr 18, 2024 15:47:11.358656883 CEST	443	49791	18.165.116.121	192.168.2.16
Apr 18, 2024 15:47:11.368192911 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.368504047 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.368520975 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.368925095 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.369479895 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.369548082 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.369667053 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.369693041 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.369709015 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.376092911 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.376199961 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.376209974 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.376293898 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.376343012 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.377300978 CEST	49788	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.377312899 CEST	443	49788	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.467597961 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.467644930 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.467773914 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.468039036 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.468050957 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.508183002 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.508502007 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.508518934 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.509164095 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.509466887 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.509668112 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.509675026 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.509733915 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.515482903 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.515805006 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.515841961 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.517004967 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.517102957 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.517467022 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.517544985 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.517694950 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.517710924 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.517731905 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.517744064 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.556432962 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.559587955 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.678683043 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.678898096 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.678915024 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.679945946 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.680003881 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.680285931 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.680345058 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.680414915 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.680423021 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.700217009 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:11.732192039 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.742242098 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.742320061 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.742335081 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.742393970 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.742877007 CEST	49796	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.742893934 CEST	443	49796	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.746149063 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.746180058 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.746325016 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.746454954 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.746475935 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798753023 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798780918 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798804998 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798820972 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798847914 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.798878908 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.798938990 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.799776077 CEST	49799	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.799813986 CEST	443	49799	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.825201988 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.825272083 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.825280905 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.825321913 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.826054096 CEST	49800	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.826071024 CEST	443	49800	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.905903101 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.906002045 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.906049013 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.906867027 CEST	49805	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:47:11.906883955 CEST	443	49805	18.165.116.52	192.168.2.16
Apr 18, 2024 15:47:11.942819118 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.942862988 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:11.942925930 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.943548918 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:11.943566084 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.062128067 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.062412977 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.062426090 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.062913895 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.063249111 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.063342094 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.063393116 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.108117104 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.170559883 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.170567989 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.170624971 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.171339035 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.171350956 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.173291922 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.173312902 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.173382044 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.174557924 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.174583912 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.262156963 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.262552023 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.262619972 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.263024092 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.263470888 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.263556957 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.263674974 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.263717890 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.290739059 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.290925026 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.291040897 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.291692019 CEST	49810	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.291719913 CEST	443	49810	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.317327976 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.488076925 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.488923073 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.488935947 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.489317894 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.490003109 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.490003109 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.490036964 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.490099907 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.490231991 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.494434118 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.494700909 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.494718075 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.495788097 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.495882034 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.496244907 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.496314049 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.496361017 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.521404982 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.521482944 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.521505117 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.521555901 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.522078037 CEST	49811	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.522110939 CEST	443	49811	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.528086901 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.528130054 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.528191090 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.528362989 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.528378010 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.534401894 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.534426928 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.534495115 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.534802914 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.534816980 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.535212994 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.535224915 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.544121027 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.550230026 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.550290108 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.598750114 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.817531109 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.817620993 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.817714930 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.818279028 CEST	49816	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.818308115 CEST	443	49816	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.820913076 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.820951939 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.821010113 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.821341038 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.821356058 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.822968006 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.822987080 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.823080063 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.823491096 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.823506117 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.836175919 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.836210012 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.836287022 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.836700916 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.836728096 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.844799995 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.845437050 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.845458031 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.845848083 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.846231937 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.846290112 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.846760988 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.848365068 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.848387957 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.848453045 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.848701000 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.848711014 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.850656986 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.850950003 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.850975037 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.851461887 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.852998972 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.853087902 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.853540897 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.853564024 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.853579044 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.866611004 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.866648912 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.866727114 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.867343903 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.867355108 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.888118029 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.916431904 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.916513920 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:12.916591883 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.917390108 CEST	49817	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:12.917407990 CEST	443	49817	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.061021090 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.061084032 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.061175108 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.061364889 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.061398983 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.062227964 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.062299013 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.062361002 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.062654972 CEST	49821	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.062668085 CEST	443	49821	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.080346107 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.080363035 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.080432892 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.080609083 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.080620050 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.136965990 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.137291908 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.137316942 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.137685061 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.138366938 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.138434887 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.138540030 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.138727903 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.139015913 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.139029980 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.139416933 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.139837027 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.139888048 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.139888048 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.139915943 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.151556969 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.151854992 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.151869059 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.152252913 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.152632952 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.152719021 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.152842999 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.152868986 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.152930021 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.152935028 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.164423943 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.164711952 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.164732933 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.166218042 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.166281939 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.166541100 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.166623116 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.166795015 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.166805983 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.166821957 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.166898012 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.182868004 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.183383942 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.183412075 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.183815002 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.184123993 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.184164047 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.184242010 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.184309006 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.184329033 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.184340000 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.184354067 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.185178041 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.217184067 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.217906952 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.220221043 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.220283031 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.220405102 CEST	49823	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.220424891 CEST	443	49823	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.223174095 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.223212004 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.223297119 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.223505974 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.223520041 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.292354107 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.292671919 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.292685986 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.293739080 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.293817043 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.294117928 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.294176102 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.295021057 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.295028925 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.328764915 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.328844070 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.328903913 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.329288960 CEST	49829	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.329308987 CEST	443	49829	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.334232092 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.334270954 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.334351063 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.335139036 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.335151911 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.342212915 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.378173113 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.378432989 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.378453016 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.379534006 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.379592896 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.380167961 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.380228996 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.380867958 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.380868912 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.380878925 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.380917072 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.422256947 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.449978113 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.450006962 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.450102091 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.450320005 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.450330019 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.462762117 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.462821960 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.462841988 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.462877035 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.463371992 CEST	49832	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.463386059 CEST	443	49832	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.471853971 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.471934080 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.471935987 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.471986055 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.472443104 CEST	49833	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.472456932 CEST	443	49833	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.523022890 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.523179054 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.523237944 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.524087906 CEST	49844	443	192.168.2.16	64.233.176.103
Apr 18, 2024 15:47:13.524123907 CEST	443	49844	64.233.176.103	192.168.2.16
Apr 18, 2024 15:47:13.534075022 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.534146070 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.534187078 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.534523964 CEST	49830	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.534542084 CEST	443	49830	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.537245035 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.537282944 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.537352085 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.537641048 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.537651062 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.545496941 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.545700073 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.545711994 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.546753883 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.547039032 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.547127008 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.547220945 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.552819014 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.552875996 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.552880049 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.552912951 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.553375006 CEST	49834	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.553383112 CEST	443	49834	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.588114023 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.653915882 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.654158115 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.654181957 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.654545069 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.654834986 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.654889107 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.655030966 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.655056000 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.655076981 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.655081987 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.668529987 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.668773890 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.668781996 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.669819117 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.669889927 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.670823097 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.670881033 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.670998096 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.671003103 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.723138094 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.858051062 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.858258009 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.858284950 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.858787060 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.859080076 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.859179020 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.859190941 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.860637903 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.860702038 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.860754013 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.860858917 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.860934973 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.860950947 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.860955000 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.860971928 CEST	443	49847	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.860984087 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.861007929 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.861041069 CEST	49847	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.861603022 CEST	49842	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.861644030 CEST	443	49842	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.900118113 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:13.903086901 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.913172007 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:13.916820049 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916830063 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916867971 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916882992 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916893005 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916907072 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.916915894 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.916966915 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.934739113 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.934768915 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.934799910 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.934825897 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.934833050 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:13.934866905 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:13.975173950 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.016860962 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.016892910 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.016953945 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.016978025 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.017019033 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.017034054 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.019722939 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.037121058 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.037147045 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.037198067 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.037213087 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.037242889 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.038845062 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.038949013 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.039004087 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.039320946 CEST	49853	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.039335966 CEST	443	49853	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.057461023 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.057495117 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.057598114 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.057625055 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.057645082 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.102216005 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.103679895 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:14.111659050 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.111677885 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.111737967 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.111787081 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.111802101 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.111881018 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.112302065 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.124041080 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.124069929 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.124165058 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.124180079 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.124226093 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.124265909 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.127731085 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.127814054 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.127950907 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.127950907 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.128633022 CEST	49848	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.128676891 CEST	443	49848	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.138693094 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.138725042 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.138843060 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.138870955 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.138937950 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.143141985 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.143249035 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.156682014 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.156713009 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.156781912 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.156805992 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.156826019 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.173070908 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.173129082 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.173204899 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.173230886 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.173268080 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.173275948 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.184829950 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.184855938 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.184957027 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.184981108 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.185026884 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.197371960 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.197396040 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.197457075 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.197480917 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.197505951 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.197516918 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.210828066 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.210851908 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.210915089 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.210922956 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.210958004 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.210966110 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.221565008 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.221584082 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.221683025 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.221692085 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.221736908 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.231988907 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.232011080 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.232110023 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.232115984 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.232175112 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.239272118 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.239289999 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.239376068 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.239383936 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.239437103 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.247381926 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.247411013 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.247488976 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.247509003 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.247561932 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.255882978 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.255903959 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.255981922 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.255986929 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.256033897 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.260967970 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.261058092 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.261064053 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.269161940 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.269177914 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.269256115 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.269262075 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.269292116 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.276604891 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.276627064 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.276689053 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.276705027 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.276715994 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.285329103 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.285367012 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.285406113 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.285414934 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.285444021 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.292238951 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.292259932 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.292306900 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.292315006 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.292352915 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.293304920 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.293355942 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.300395966 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.300415993 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.300501108 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.300508976 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.306575060 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.306608915 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.306655884 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.306664944 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.306695938 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.312254906 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.312274933 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.312333107 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.312342882 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.312371969 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.318330050 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.318362951 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.318397999 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.318408012 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.318434954 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.320398092 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.320471048 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.320481062 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.320521116 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.320566893 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.320605993 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.330693960 CEST	49850	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:14.330718040 CEST	443	49850	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:14.718228102 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:14.718276978 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:14.718347073 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:14.728966951 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:14.728996038 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:14.869328976 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.869362116 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:14.869424105 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.870196104 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:14.870208025 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.122647047 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.122749090 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.129106998 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.129143000 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.129443884 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.151674032 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.151721954 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.151787043 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.152009010 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.152020931 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.155324936 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.155352116 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.155402899 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.155622005 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.155632973 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.178165913 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.188508034 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.188563108 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.188621998 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.188867092 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.188879967 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.189670086 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.189889908 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.189905882 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.190267086 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.190557957 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.190627098 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.190726042 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.190737963 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.196970940 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.197001934 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.197067976 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.197449923 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.197463989 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.206816912 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.252114058 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.307486057 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:15.307549953 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:15.307594061 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:15.367854118 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.368078947 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.368104935 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.368474960 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.369224072 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.369285107 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.369493008 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.392390013 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.392680883 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.392704964 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.393738985 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.393802881 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.398542881 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.398634911 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.398699999 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.398714066 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.412113905 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.448152065 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.494843960 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.494860888 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.494868994 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.494913101 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.494942904 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.494982958 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.494991064 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.495021105 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.495031118 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.495052099 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.495083094 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.499313116 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.499394894 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.499447107 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.500420094 CEST	49874	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.500437975 CEST	443	49874	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.501269102 CEST	49705	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:47:15.501281977 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.501298904 CEST	443	49705	64.233.177.106	192.168.2.16
Apr 18, 2024 15:47:15.501317024 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.501418114 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.501611948 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.501621962 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.504455090 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.504672050 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.504695892 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.505166054 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.505525112 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.505604029 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.505791903 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.505821943 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.505853891 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.505878925 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.507787943 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.507821083 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.507852077 CEST	49871	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:15.507859945 CEST	443	49871	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:15.513509989 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.513811111 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.513827085 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.514170885 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.514513969 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.514565945 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.514771938 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.514789104 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.603286982 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.603367090 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.603410959 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.603939056 CEST	49878	443	192.168.2.16	3.161.163.65
Apr 18, 2024 15:47:15.603949070 CEST	443	49878	3.161.163.65	192.168.2.16
Apr 18, 2024 15:47:15.620058060 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.620187998 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.620244980 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.622379065 CEST	49877	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.622395992 CEST	443	49877	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.631315947 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.631345987 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.631690025 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.631690025 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.631710052 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.816617012 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.816761971 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.816845894 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.816888094 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.816915035 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.816948891 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.817384958 CEST	49879	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.817399979 CEST	443	49879	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.817986012 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.818063021 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.818386078 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.818449974 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.818571091 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.818579912 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.818603992 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.818656921 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.820987940 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.821027994 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.821121931 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.821316004 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.821331024 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.863168955 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.876135111 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.876543999 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.876554966 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.877237082 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.877569914 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.877681971 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.877846956 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:15.884207010 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.884274960 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.884320974 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.884336948 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.884345055 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.884358883 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.884423971 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.884447098 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.884521008 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.885634899 CEST	49880	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.885648966 CEST	443	49880	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.893002987 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.893044949 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.893161058 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.893368959 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:15.893383026 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:15.920140982 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:15.927213907 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:16.124479055 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:16.124547005 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:16.124608994 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:16.124669075 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:16.124771118 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:16.125569105 CEST	49882	443	192.168.2.16	18.160.48.194
Apr 18, 2024 15:47:16.125591993 CEST	443	49882	18.160.48.194	192.168.2.16
Apr 18, 2024 15:47:16.137933016 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.138292074 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.138329983 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.138737917 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.139242887 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.139345884 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.139417887 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.162631989 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.162709951 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.162715912 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.162765980 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.163543940 CEST	49881	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.163567066 CEST	443	49881	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.182171106 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.182197094 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.212598085 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.213038921 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.213073015 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.213439941 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.213782072 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.213845968 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.213985920 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.214010000 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.357284069 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.357372046 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.358532906 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.358685017 CEST	49883	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.358709097 CEST	443	49883	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.452694893 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.452790976 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.452806950 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.452883959 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.453068972 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.453507900 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.453524113 CEST	443	49884	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.453528881 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.453582048 CEST	49884	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.457901955 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.457950115 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.458085060 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.458312988 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.458327055 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.461661100 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.461704016 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.461772919 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.462043047 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.462061882 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.465651989 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.465688944 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.465820074 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.466051102 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.466062069 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.493230104 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.493259907 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.493387938 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.493655920 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.493669987 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.495723963 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.495754957 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.496282101 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.496570110 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.496577978 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.497353077 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.497371912 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.497489929 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.497803926 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.497817993 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.502582073 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.502619028 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.502748013 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.502996922 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.503011942 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.773658991 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.773983002 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.774007082 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.774353981 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.774676085 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.774739027 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.774852991 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.778441906 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.778727055 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.778753996 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.779273033 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.779597998 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.779695988 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.779810905 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.779827118 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.779846907 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.783766985 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.784049988 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.784074068 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.784447908 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.784765959 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.784830093 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.784959078 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.784959078 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.784986973 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.810576916 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.810966015 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.810992956 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.812254906 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.812345982 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.812778950 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.812865973 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.812995911 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.813045979 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.813083887 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.813092947 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.813129902 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.813169956 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.813324928 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.813343048 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.813438892 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.813457966 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.814450026 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.814526081 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.814845085 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.814915895 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815016985 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815047026 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815048933 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815063953 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815077066 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815088987 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815104961 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815120935 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815128088 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815145016 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815165043 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815205097 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815254927 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815542936 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815629005 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815692902 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815712929 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.815716982 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.815732956 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.817775011 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.818043947 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.818059921 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.819103956 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.819194078 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.819590092 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.819657087 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.819844961 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.819854021 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.819926023 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.819932938 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.820120096 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:16.865159035 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:16.865417004 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.015522003 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.015567064 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.015827894 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.017394066 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.017416954 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.024429083 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.024508953 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.024780035 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.025094986 CEST	49885	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.025111914 CEST	443	49885	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.119474888 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.119573116 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.119597912 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.119635105 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.120388031 CEST	49886	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.120410919 CEST	443	49886	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.120691061 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.120748997 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.120759010 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.120784998 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.120913029 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.121334076 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.121372938 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.121484995 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.122647047 CEST	49888	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.122665882 CEST	443	49888	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.123018980 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.123051882 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.123167038 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.123564005 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.123579979 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.123855114 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.123873949 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.126478910 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.126519918 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.126642942 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.126943111 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.126955986 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.127850056 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.127880096 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.128035069 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.128252029 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.128268003 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.128622055 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.128701925 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.128726006 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.128793001 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.128942966 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.129323959 CEST	49887	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.129338026 CEST	443	49887	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.131037951 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.131104946 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.131122112 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.131146908 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.131638050 CEST	49891	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.131654024 CEST	443	49891	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.160377026 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.160461903 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.160469055 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.160573006 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.161226988 CEST	49890	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.161243916 CEST	443	49890	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.210529089 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.210623980 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.210659027 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.210695982 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.211455107 CEST	49889	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.211477041 CEST	443	49889	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.215318918 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.215353012 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.215548038 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.215759039 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.215778112 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.239547014 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.239705086 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.242624998 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.242645025 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.242921114 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.289032936 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.332124949 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.368243933 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.368295908 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.368453979 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.369865894 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.369884014 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.438824892 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.440120935 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.440145969 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.440512896 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.440776110 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.440905094 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.440962076 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.441306114 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.441325903 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.441524029 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.441549063 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.441607952 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.441613913 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.441714048 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.442130089 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.442203045 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.442305088 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.442331076 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.442358971 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.442367077 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.442792892 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.443130970 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.443156958 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.443490028 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.443519115 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.443691969 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.443713903 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.443897963 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.443963051 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.444008112 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.444766045 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.445180893 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.445257902 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.445369959 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.445492029 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.445671082 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.445730925 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.445799112 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.445812941 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.445826054 CEST	49894	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.445831060 CEST	443	49894	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.484148979 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.485151052 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.488116980 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.491437912 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.491485119 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.491585970 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.491991043 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.491997957 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.532466888 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.532847881 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.532876015 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.533948898 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.534023046 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.534363985 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.534430027 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.534549952 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.580121040 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.581135988 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.581151962 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.629146099 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.679224968 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.679318905 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.679393053 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.679979086 CEST	49897	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.679999113 CEST	443	49897	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.688338041 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.688848019 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.688860893 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.689997911 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.690107107 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.690464973 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.690543890 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.690722942 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.690731049 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.690777063 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.690782070 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.705161095 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.705257893 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.706615925 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.706625938 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.706877947 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.708193064 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.726576090 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.726656914 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.726748943 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.727494001 CEST	49899	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.727509022 CEST	443	49899	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.740184069 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.741003036 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:17.754621029 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.754705906 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.754709005 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.754817009 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.755542994 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.755567074 CEST	443	49896	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.755579948 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.755616903 CEST	49896	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.756108999 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.758080959 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.758116007 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.758197069 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.758548975 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.758563995 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.763277054 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.763355970 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.763358116 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.763433933 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.764085054 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.764106989 CEST	443	49895	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.764122963 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.764167070 CEST	49895	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.807308912 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.807400942 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.807459116 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.808506012 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.808552980 CEST	49898	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.808557987 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.808576107 CEST	443	49898	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.808634996 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.809087038 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:17.809107065 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:17.913685083 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.913789034 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.913851976 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.914702892 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.914719105 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:17.914730072 CEST	49901	443	192.168.2.16	23.46.200.91
Apr 18, 2024 15:47:17.914736032 CEST	443	49901	23.46.200.91	192.168.2.16
Apr 18, 2024 15:47:18.010880947 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.010984898 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.011122942 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.011122942 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.015580893 CEST	49900	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.015605927 CEST	443	49900	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.053155899 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:18.074898005 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.075258017 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.075270891 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.075683117 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.076621056 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.076692104 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.076894045 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.076947927 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.077049017 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.077054024 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.124717951 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.125329018 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.125361919 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.125792027 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.126260042 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.126331091 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.126470089 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.168123007 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.179164886 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.317140102 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.317212105 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.317287922 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.318844080 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.318878889 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.318897009 CEST	49903	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.318907976 CEST	443	49903	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.318941116 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.320154905 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.320168972 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.378086090 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.378170967 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.378220081 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.378345013 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.379173040 CEST	49902	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.379210949 CEST	443	49902	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.635701895 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.636141062 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.636173964 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.636549950 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.636898041 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.636964083 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.637079954 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.657195091 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:18.680118084 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.841169119 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.841262102 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.841322899 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.842600107 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.842638969 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.842645884 CEST	49904	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.842670918 CEST	443	49904	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.842701912 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.843211889 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:18.843239069 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:18.912156105 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:19.157974958 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.158345938 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:19.158366919 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.158729076 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.159113884 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:19.159174919 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.159403086 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:19.204117060 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.357239962 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.357331991 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.357408047 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:19.358051062 CEST	49905	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:19.358083010 CEST	443	49905	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:19.868149042 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:20.188888073 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.188934088 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.189003944 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.189347029 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.189363003 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.505580902 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.507236958 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.507258892 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.507608891 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.509988070 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.510111094 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.510211945 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.510230064 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.510243893 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.960475922 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.960556030 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:20.960572004 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.960614920 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.961412907 CEST	49906	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:20.961436033 CEST	443	49906	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.509157896 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.509188890 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.509253979 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.509495974 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.509509087 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.825562954 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.825982094 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.826000929 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.826370001 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.826680899 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.826741934 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:21.826936007 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.826953888 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:21.826961040 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:22.181400061 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:22.181484938 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:22.181670904 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:22.181716919 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:22.182462931 CEST	49907	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:22.182487965 CEST	443	49907	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:22.205394983 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:22.269169092 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:22.509155035 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:23.119116068 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:24.334287882 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:25.189232111 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.189284086 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.189368010 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.189974070 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.189986944 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.507003069 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.507471085 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.507489920 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.507848978 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.508302927 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.508363962 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.508584023 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.508610010 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.508656979 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.508661985 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.534310102 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.534362078 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.534420013 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.534763098 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.534780025 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.850527048 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.850925922 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.850956917 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.851316929 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.851665020 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.851735115 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.851867914 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.851892948 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.851898909 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.895328045 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.895407915 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.895426035 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.895467043 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.896117926 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:25.896377087 CEST	49913	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:25.896399975 CEST	443	49913	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.260711908 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.260787964 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.260865927 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.260905027 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.261898994 CEST	49914	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.261924982 CEST	443	49914	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.511375904 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.511423111 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.511584044 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.511838913 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.511853933 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.741086006 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:26.827506065 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.827914000 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.827930927 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.828308105 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.828641891 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.828715086 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:26.828872919 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.828872919 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:26.828912020 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.076136112 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:27.177615881 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.177707911 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.177750111 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.177820921 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.178798914 CEST	49915	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.178821087 CEST	443	49915	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.333901882 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.333950043 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.334088087 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.335441113 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.335463047 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.651746035 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.652179956 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.652200937 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.652586937 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.653028965 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.653098106 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.653290033 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.653316975 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:27.653320074 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:27.696130037 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:28.010606050 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:28.010688066 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:28.010700941 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:28.010747910 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:28.011670113 CEST	49916	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:28.011689901 CEST	443	49916	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:28.512089968 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 15:47:30.337060928 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.337121010 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.337235928 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.337543011 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.337567091 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.654119015 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.654578924 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.654603958 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.655139923 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.655464888 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.655520916 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.655661106 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.655678034 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.655698061 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.696127892 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.996696949 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.996794939 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:30.996823072 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.996897936 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.997629881 CEST	49917	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:30.997648001 CEST	443	49917	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:31.549071074 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:35.328484058 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.328531981 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.328641891 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.328924894 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.328938007 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.644893885 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.645212889 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.645245075 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.645615101 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.645935059 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.646003962 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.646148920 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.646174908 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.646208048 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.692121029 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.951952934 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.952055931 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.952080965 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.952200890 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:35.952253103 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.952804089 CEST	49918	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:35.952821016 CEST	443	49918	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:36.113914013 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:36.114015102 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:36.114073038 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:36.424870014 CEST	49714	443	192.168.2.16	18.64.236.45
Apr 18, 2024 15:47:36.424900055 CEST	443	49714	18.64.236.45	192.168.2.16
Apr 18, 2024 15:47:36.678092957 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 15:47:39.653799057 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.653835058 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.654180050 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.654495955 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.654506922 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.969847918 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.970244884 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.970309973 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.970629930 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.970994949 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.971064091 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.971206903 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.971249104 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:39.971265078 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:39.971309900 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.198008060 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.198060036 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.198127985 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.198456049 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.198472977 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.301631927 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.301815033 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.301923037 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.302558899 CEST	49919	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.302576065 CEST	443	49919	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.305998087 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.306035042 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.306113958 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.306600094 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.306627035 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.328649998 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.328732014 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.328823090 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.329474926 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.329511881 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.513739109 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.514341116 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.514410019 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.514786959 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.515268087 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.515342951 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.515516043 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.515557051 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.515574932 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.515588045 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.628388882 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.628760099 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.628771067 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.629139900 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.629461050 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.629528999 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.629658937 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.644926071 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.645292044 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.645351887 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.645713091 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.646064043 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.646130085 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.646308899 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.646337986 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.646337986 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.676114082 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.692114115 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.809879065 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.809956074 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.810029030 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.810862064 CEST	49921	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.810882092 CEST	443	49921	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.973704100 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.973782063 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.973792076 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.973998070 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.974519014 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.974564075 CEST	443	49922	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:40.974591970 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:40.974623919 CEST	49922	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:41.001693010 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:41.001765966 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:41.001800060 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:41.001866102 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:41.002604008 CEST	49920	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:41.002640963 CEST	443	49920	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:41.150995970 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 15:47:44.838740110 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:44.838790894 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:44.838929892 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:44.839164972 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:44.839181900 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.155184031 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.155597925 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.155612946 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.156177998 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.156522989 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.156586885 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.156699896 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.156699896 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.156727076 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.450413942 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.450500965 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.450570107 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.453912020 CEST	49923	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.453931093 CEST	443	49923	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.476705074 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.476736069 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.476824999 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.477070093 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.477085114 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.792396069 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.792764902 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.792789936 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.793152094 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.793452978 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.793526888 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.793593884 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.836122990 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.975815058 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.975894928 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:45.975977898 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.976519108 CEST	49924	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:45.976535082 CEST	443	49924	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.543101072 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.543154955 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.543282032 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.543504953 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.543520927 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.863125086 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.863508940 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.863538027 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.864666939 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.864984989 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.865149975 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.865149975 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:46.865156889 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.865248919 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:46.910229921 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:47.271398067 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:47.271480083 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:47.271503925 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:47.271656990 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:47.272165060 CEST	49925	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:47.272180080 CEST	443	49925	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:50.253222942 CEST	49695	80	192.168.2.16	72.21.81.240
Apr 18, 2024 15:47:50.253277063 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 15:47:50.356956005 CEST	80	49695	72.21.81.240	192.168.2.16
Apr 18, 2024 15:47:50.357065916 CEST	49695	80	192.168.2.16	72.21.81.240
Apr 18, 2024 15:47:50.357330084 CEST	80	49697	72.21.81.240	192.168.2.16
Apr 18, 2024 15:47:50.357393026 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 15:47:52.150680065 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.150717020 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.150810957 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.151431084 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.151453972 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.559818029 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.560122013 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.561968088 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.561978102 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.562249899 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.563767910 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.608114004 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950083017 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950110912 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950131893 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950273991 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.950289011 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950304985 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.950380087 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.958091021 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.958108902 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:52.958122969 CEST	49926	443	192.168.2.16	13.85.23.86
Apr 18, 2024 15:47:52.958131075 CEST	443	49926	13.85.23.86	192.168.2.16
Apr 18, 2024 15:47:55.331537962 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.331582069 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.331672907 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.331887960 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.331898928 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.647736073 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.648097038 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.648123026 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.648483992 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.648792028 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.648859978 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.648967981 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.648967981 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.649000883 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.992109060 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.992208004 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:47:55.992211103 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.992254019 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.993089914 CEST	49927	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:47:55.993098974 CEST	443	49927	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:05.048007011 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:05.048052073 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.048213005 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:05.048477888 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:05.048497915 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.261578083 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.262026072 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:05.262052059 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.262365103 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.262680054 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:05.262746096 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:05.316848993 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:10.301568985 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.301611900 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.301703930 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.302033901 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.302047014 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.619187117 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.619569063 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.619596958 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.619997025 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.620309114 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.620381117 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.620476007 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.620495081 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.620496988 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.620510101 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.922120094 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.922204018 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:10.922324896 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.923059940 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:10.923059940 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:11.229799986 CEST	49930	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:11.229854107 CEST	443	49930	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:11.756890059 CEST	49688	443	192.168.2.16	204.79.197.200
Apr 18, 2024 15:48:13.768570900 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:13.768610954 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:13.768922091 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:13.769186020 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:13.769198895 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.087987900 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.088418961 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.088450909 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.088792086 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.089472055 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.089472055 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.089494944 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.089541912 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.091137886 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.132126093 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.138843060 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.415716887 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.415739059 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.415813923 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.415978909 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.415978909 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.416532993 CEST	49931	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.416549921 CEST	443	49931	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.525913000 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.525950909 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.526041031 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.526266098 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.526278973 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.841686010 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.842116117 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.842137098 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.842514038 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.842972994 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.843035936 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:14.843172073 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:14.888115883 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:15.041424990 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:15.041507959 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:15.041651011 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:15.042582989 CEST	49932	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:15.042606115 CEST	443	49932	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:15.262530088 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:15.262609959 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:15.262693882 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:16.410734892 CEST	49929	443	192.168.2.16	64.233.177.106
Apr 18, 2024 15:48:16.410774946 CEST	443	49929	64.233.177.106	192.168.2.16
Apr 18, 2024 15:48:16.503309011 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.503365993 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.503462076 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.503690958 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.503700972 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.832489967 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.832952023 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.832983971 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.833604097 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.833920002 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.834026098 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:16.834109068 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.834129095 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:16.834146023 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.147838116 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.147963047 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.147999048 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.148030996 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.148083925 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.148788929 CEST	49933	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.148808002 CEST	443	49933	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.151941061 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.151992083 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.152112007 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.152323961 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.152338982 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.472882986 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.473239899 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.473283052 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.473645926 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.473953009 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.474008083 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.474112988 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.520116091 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.677306890 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.677395105 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:17.677455902 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.678224087 CEST	49934	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:17.678242922 CEST	443	49934	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.328676939 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.328737020 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.328916073 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.329124928 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.329137087 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.645879984 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.646251917 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.646282911 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.647289991 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.647623062 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.647790909 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.647825956 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.647865057 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.647881031 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.968405008 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.968583107 CEST	443	49935	162.125.9.18	192.168.2.16
Apr 18, 2024 15:48:25.968689919 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.969254971 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.969254971 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:48:25.969278097 CEST	49935	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.546375036 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.546422958 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.546545029 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.546797991 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.546812057 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.572515011 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.572556019 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.572689056 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.572916031 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.572927952 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.698674917 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.698712111 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.698791027 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.698982954 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.698990107 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.866297960 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.866640091 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.866662025 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.867011070 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.867310047 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.867376089 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.867526054 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.867558956 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.867559910 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.867573977 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.895934105 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.896205902 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.896220922 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.897334099 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.897758961 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.897810936 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.897874117 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.897933960 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:00.910801888 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.911027908 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.911056995 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.912610054 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.912807941 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.913002968 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.913073063 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.913125038 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.913168907 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.913192987 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:00.938558102 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:00.954525948 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:00.954559088 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.002537966 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.204579115 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.204678059 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.204771996 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.205208063 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.205286026 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.205286980 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.205338001 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.206032991 CEST	49937	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.206043005 CEST	443	49937	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.206285000 CEST	49939	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.206326008 CEST	443	49939	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.211802959 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.211896896 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.211910009 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.211977959 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.212481976 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.212481976 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.212524891 CEST	443	49938	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.212589979 CEST	49938	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.246407032 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.246443987 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.246542931 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.246772051 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.246783018 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.317352057 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.317401886 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.317506075 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.317718029 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.317729950 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.531011105 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.531416893 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.531445026 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.531918049 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.532219887 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.532291889 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.532363892 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.562522888 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.562928915 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.562944889 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.563262939 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.563546896 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.563606024 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.563690901 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.563690901 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.563716888 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.580112934 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.652566910 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.652618885 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.652717113 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.652934074 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.652945042 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.808772087 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.808964968 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.809041977 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.809444904 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.809473038 CEST	443	49941	18.165.116.52	192.168.2.16
Apr 18, 2024 15:49:01.809506893 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.809545040 CEST	49941	443	192.168.2.16	18.165.116.52
Apr 18, 2024 15:49:01.969398975 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.969479084 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.969566107 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.969835043 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.970204115 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.970227957 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.970256090 CEST	49940	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.970277071 CEST	443	49940	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.970767021 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.971101999 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.971184015 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.971318007 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.971340895 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.971342087 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.972801924 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.972842932 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.972927094 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.973537922 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.973570108 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.973624945 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.973735094 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.973751068 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:01.973927975 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:01.973939896 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.010031939 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.010082006 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.010266066 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.010879040 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.010890007 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.016118050 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.221007109 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.221312046 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.221329927 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.221823931 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.222162008 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.222243071 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.222392082 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.222407103 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.222419024 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.289649963 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.289926052 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.289948940 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.290312052 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.290606022 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.290673018 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.290750980 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.290780067 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.292325974 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.292517900 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.292536974 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.292954922 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.293333054 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.293404102 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.293515921 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.293550014 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.293553114 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.293574095 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.341485023 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.375423908 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.375516891 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.375520945 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.375574112 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.376168966 CEST	49942	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.376185894 CEST	443	49942	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.512718916 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.512809992 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.512883902 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.513402939 CEST	49943	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.513422012 CEST	443	49943	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.632900953 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.632975101 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.632992983 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.633008003 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.633060932 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.633605957 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.633626938 CEST	443	49945	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.633635998 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.633672953 CEST	49945	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.701663971 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.701745033 CEST	443	49944	162.125.9.18	192.168.2.16
Apr 18, 2024 15:49:02.701740980 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.701805115 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.702364922 CEST	49944	443	192.168.2.16	162.125.9.18
Apr 18, 2024 15:49:02.702382088 CEST	443	49944	162.125.9.18	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 15:47:00.244913101 CEST	52661	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:00.245256901 CEST	62002	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:00.291490078 CEST	53	49767	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:00.350411892 CEST	53	49449	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:00.350431919 CEST	53	62002	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:00.350711107 CEST	53	52661	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:00.952161074 CEST	53	64646	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:04.991111994 CEST	59972	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:04.991296053 CEST	57310	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:05.095760107 CEST	53	57310	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:05.095896006 CEST	53	59972	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:05.796495914 CEST	65196	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:05.796624899 CEST	60503	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:05.800225019 CEST	53227	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:05.800367117 CEST	63905	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:05.904669046 CEST	53	63905	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:05.904891968 CEST	53	63759	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:05.905102968 CEST	53	53227	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:08.748867035 CEST	58288	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:08.749005079 CEST	52737	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:09.685842037 CEST	60834	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:09.686079979 CEST	62835	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:09.791589975 CEST	53	60834	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:09.793512106 CEST	53	62835	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:09.845468044 CEST	55785	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:09.845722914 CEST	55711	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:09.949819088 CEST	53	55785	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:09.951042891 CEST	53	55711	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:10.782414913 CEST	59051	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:10.782675982 CEST	62334	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:10.807357073 CEST	53	49642	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:10.887312889 CEST	53	59051	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:10.887928963 CEST	53	62334	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.043910980 CEST	59872	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.044348955 CEST	52751	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.044831991 CEST	58675	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.045099974 CEST	60400	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.148147106 CEST	53	59872	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.148513079 CEST	53	52751	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.148834944 CEST	63063	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.149116993 CEST	53	58675	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.149250984 CEST	53	60400	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.150176048 CEST	58579	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.152256966 CEST	57059	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.253406048 CEST	53	63063	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.254962921 CEST	53	58579	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.257580996 CEST	53	57059	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.281750917 CEST	53	62253	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.299674034 CEST	55263	19302	192.168.2.16	74.125.250.129
Apr 18, 2024 15:47:11.362051964 CEST	58476	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.362202883 CEST	62982	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:11.403857946 CEST	19302	55263	74.125.250.129	192.168.2.16
Apr 18, 2024 15:47:11.423435926 CEST	53	57720	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.466814041 CEST	53	62982	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:11.466852903 CEST	53	58476	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:12.277961969 CEST	53	52477	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:12.842398882 CEST	50950	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:12.842613935 CEST	57528	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:12.946901083 CEST	53	50950	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:12.947237968 CEST	53	57528	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:12.973920107 CEST	64022	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:12.974102020 CEST	60979	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.078406096 CEST	53	60979	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.079696894 CEST	53	64022	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.228916883 CEST	54360	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.229552984 CEST	58173	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.230017900 CEST	55573	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.255215883 CEST	60980	19302	192.168.2.16	74.125.250.129
Apr 18, 2024 15:47:13.333472967 CEST	53	54360	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.334239960 CEST	53	58173	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.334278107 CEST	53	55573	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.344588041 CEST	62220	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.344786882 CEST	52652	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:13.359525919 CEST	19302	60980	74.125.250.129	192.168.2.16
Apr 18, 2024 15:47:13.449222088 CEST	53	62220	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.449244022 CEST	53	52652	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:13.633224964 CEST	53	51843	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:15.044159889 CEST	52096	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:15.044544935 CEST	56336	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:15.149558067 CEST	53	52096	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:15.151232958 CEST	53	56336	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:17.909015894 CEST	53	63355	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:24.592134953 CEST	62085	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:24.592299938 CEST	50149	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:47:24.696537971 CEST	53	62085	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:24.697094917 CEST	53	50149	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:36.944463015 CEST	53	56103	1.1.1.1	192.168.2.16
Apr 18, 2024 15:47:59.541659117 CEST	53	51070	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:00.294521093 CEST	53	63482	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:10.195661068 CEST	55852	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:48:10.195713997 CEST	50621	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:48:10.299771070 CEST	53	50621	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:10.300877094 CEST	53	55852	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:13.906498909 CEST	138	138	192.168.2.16	192.168.2.255
Apr 18, 2024 15:48:14.419872046 CEST	59671	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:48:14.420340061 CEST	58000	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:48:14.524173975 CEST	53	59671	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:14.525322914 CEST	53	58000	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:28.181106091 CEST	53	56087	1.1.1.1	192.168.2.16
Apr 18, 2024 15:48:34.950283051 CEST	53	54899	1.1.1.1	192.168.2.16
Apr 18, 2024 15:49:00.590369940 CEST	62716	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:49:00.590509892 CEST	56112	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:49:00.695081949 CEST	53	56112	1.1.1.1	192.168.2.16
Apr 18, 2024 15:49:00.698115110 CEST	53	62716	1.1.1.1	192.168.2.16
Apr 18, 2024 15:49:01.209378958 CEST	62014	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:49:01.209379911 CEST	64120	53	192.168.2.16	1.1.1.1
Apr 18, 2024 15:49:01.314403057 CEST	53	64120	1.1.1.1	192.168.2.16
Apr 18, 2024 15:49:01.316664934 CEST	53	62014	1.1.1.1	192.168.2.16
Apr 18, 2024 15:49:02.116792917 CEST	53	56536	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 15:47:00.244913101 CEST	192.168.2.16	1.1.1.1	0x3f18	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:00.245256901 CEST	192.168.2.16	1.1.1.1	0x5ddd	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:04.991111994 CEST	192.168.2.16	1.1.1.1	0xb104	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:04.991296053 CEST	192.168.2.16	1.1.1.1	0x2450	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:05.796495914 CEST	192.168.2.16	1.1.1.1	0x829a	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.796624899 CEST	192.168.2.16	1.1.1.1	0x6a30	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:05.800225019 CEST	192.168.2.16	1.1.1.1	0x2ab4	Standard query (0)	consent.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.800367117 CEST	192.168.2.16	1.1.1.1	0x8384	Standard query (0)	consent.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:08.748867035 CEST	192.168.2.16	1.1.1.1	0x7fd6	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:08.749005079 CEST	192.168.2.16	1.1.1.1	0x3262	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:09.685842037 CEST	192.168.2.16	1.1.1.1	0xc879	Standard query (0)	marketing.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.686079979 CEST	192.168.2.16	1.1.1.1	0xfc07	Standard query (0)	marketing.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:09.845468044 CEST	192.168.2.16	1.1.1.1	0x3e0a	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.845722914 CEST	192.168.2.16	1.1.1.1	0x1ae9	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:10.782414913 CEST	192.168.2.16	1.1.1.1	0x1515	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:10.782675982 CEST	192.168.2.16	1.1.1.1	0x3f30	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:11.043910980 CEST	192.168.2.16	1.1.1.1	0x2394	Standard query (0)	stun.fpapi.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.044348955 CEST	192.168.2.16	1.1.1.1	0x2b5	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.044831991 CEST	192.168.2.16	1.1.1.1	0x2c07	Standard query (0)	stun.fpapi.io	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.045099974 CEST	192.168.2.16	1.1.1.1	0x9d7f	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.148834944 CEST	192.168.2.16	1.1.1.1	0x7e14	Standard query (0)	stun.fpapi.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.150176048 CEST	192.168.2.16	1.1.1.1	0xaae3	Standard query (0)	stun.fpapi.io	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.152256966 CEST	192.168.2.16	1.1.1.1	0xc79f	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.362051964 CEST	192.168.2.16	1.1.1.1	0x6979	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.362202883 CEST	192.168.2.16	1.1.1.1	0x746c	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:12.842398882 CEST	192.168.2.16	1.1.1.1	0xf2fd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.842613935 CEST	192.168.2.16	1.1.1.1	0x2d04	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:12.973920107 CEST	192.168.2.16	1.1.1.1	0x5e95	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.974102020 CEST	192.168.2.16	1.1.1.1	0xd104	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:13.228916883 CEST	192.168.2.16	1.1.1.1	0x7192	Standard query (0)	stun.fpapi.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.229552984 CEST	192.168.2.16	1.1.1.1	0x37f7	Standard query (0)	stun.fpapi.io	28	IN (0x0001)	false
Apr 18, 2024 15:47:13.230017900 CEST	192.168.2.16	1.1.1.1	0xe111	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 18, 2024 15:47:13.344588041 CEST	192.168.2.16	1.1.1.1	0x5b4b	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.344786882 CEST	192.168.2.16	1.1.1.1	0xfc32	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:15.044159889 CEST	192.168.2.16	1.1.1.1	0xe186	Standard query (0)	dropboxcaptcha.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:15.044544935 CEST	192.168.2.16	1.1.1.1	0x8de2	Standard query (0)	dropboxcaptcha.com	65	IN (0x0001)	false
Apr 18, 2024 15:47:24.592134953 CEST	192.168.2.16	1.1.1.1	0x35bf	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.592299938 CEST	192.168.2.16	1.1.1.1	0xdf2e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 15:48:10.195661068 CEST	192.168.2.16	1.1.1.1	0x99cb	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:48:10.195713997 CEST	192.168.2.16	1.1.1.1	0x326f	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:48:14.419872046 CEST	192.168.2.16	1.1.1.1	0x7404	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:48:14.420340061 CEST	192.168.2.16	1.1.1.1	0x33ab	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:49:00.590369940 CEST	192.168.2.16	1.1.1.1	0x6889	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:00.590509892 CEST	192.168.2.16	1.1.1.1	0xe542	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 15:49:01.209378958 CEST	192.168.2.16	1.1.1.1	0x49e0	Standard query (0)	fp.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:01.209379911 CEST	192.168.2.16	1.1.1.1	0xf81b	Standard query (0)	fp.dropbox.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 15:47:00.350431919 CEST	1.1.1.1	192.168.2.16	0x5ddd	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:00.350711107 CEST	1.1.1.1	192.168.2.16	0x3f18	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:00.350711107 CEST	1.1.1.1	192.168.2.16	0x3f18	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095760107 CEST	1.1.1.1	192.168.2.16	0x2450	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.095896006 CEST	1.1.1.1	192.168.2.16	0xb104	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.901226997 CEST	1.1.1.1	192.168.2.16	0x829a	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:05.902549028 CEST	1.1.1.1	192.168.2.16	0x6a30	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:05.905102968 CEST	1.1.1.1	192.168.2.16	0x2ab4	No error (0)	consent.dropbox.com		18.64.236.45	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.905102968 CEST	1.1.1.1	192.168.2.16	0x2ab4	No error (0)	consent.dropbox.com		18.64.236.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.905102968 CEST	1.1.1.1	192.168.2.16	0x2ab4	No error (0)	consent.dropbox.com		18.64.236.79	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:05.905102968 CEST	1.1.1.1	192.168.2.16	0x2ab4	No error (0)	consent.dropbox.com		18.64.236.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:08.853485107 CEST	1.1.1.1	192.168.2.16	0x3262	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:08.854248047 CEST	1.1.1.1	192.168.2.16	0x7fd6	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:09.791589975 CEST	1.1.1.1	192.168.2.16	0xc879	No error (0)	marketing.dropbox.com		18.155.1.54	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.791589975 CEST	1.1.1.1	192.168.2.16	0xc879	No error (0)	marketing.dropbox.com		18.155.1.73	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.791589975 CEST	1.1.1.1	192.168.2.16	0xc879	No error (0)	marketing.dropbox.com		18.155.1.38	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.791589975 CEST	1.1.1.1	192.168.2.16	0xc879	No error (0)	marketing.dropbox.com		18.155.1.79	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.949819088 CEST	1.1.1.1	192.168.2.16	0x3e0a	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:09.949819088 CEST	1.1.1.1	192.168.2.16	0x3e0a	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:09.951042891 CEST	1.1.1.1	192.168.2.16	0x1ae9	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:10.887312889 CEST	1.1.1.1	192.168.2.16	0x1515	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:10.887312889 CEST	1.1.1.1	192.168.2.16	0x1515	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:10.887312889 CEST	1.1.1.1	192.168.2.16	0x1515	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:10.887312889 CEST	1.1.1.1	192.168.2.16	0x1515	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.148147106 CEST	1.1.1.1	192.168.2.16	0x2394	Name error (3)	stun.fpapi.io	none	none	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.148513079 CEST	1.1.1.1	192.168.2.16	0x2b5	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:11.148513079 CEST	1.1.1.1	192.168.2.16	0x2b5	No error (0)	stun-anycast.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.149116993 CEST	1.1.1.1	192.168.2.16	0x2c07	Name error (3)	stun.fpapi.io	none	none	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.149250984 CEST	1.1.1.1	192.168.2.16	0x9d7f	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:11.149250984 CEST	1.1.1.1	192.168.2.16	0x9d7f	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 18, 2024 15:47:11.253406048 CEST	1.1.1.1	192.168.2.16	0x7e14	Name error (3)	stun.fpapi.io	none	none	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.254962921 CEST	1.1.1.1	192.168.2.16	0xaae3	Name error (3)	stun.fpapi.io	none	none	28	IN (0x0001)	false
Apr 18, 2024 15:47:11.257580996 CEST	1.1.1.1	192.168.2.16	0xc79f	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:11.257580996 CEST	1.1.1.1	192.168.2.16	0xc79f	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 18, 2024 15:47:11.466852903 CEST	1.1.1.1	192.168.2.16	0x6979	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.466852903 CEST	1.1.1.1	192.168.2.16	0x6979	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.466852903 CEST	1.1.1.1	192.168.2.16	0x6979	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:11.466852903 CEST	1.1.1.1	192.168.2.16	0x6979	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:12.946901083 CEST	1.1.1.1	192.168.2.16	0xf2fd	No error (0)	play.google.com		74.125.136.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.078406096 CEST	1.1.1.1	192.168.2.16	0xd104	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.079696894 CEST	1.1.1.1	192.168.2.16	0x5e95	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.333472967 CEST	1.1.1.1	192.168.2.16	0x7192	Name error (3)	stun.fpapi.io	none	none	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.334239960 CEST	1.1.1.1	192.168.2.16	0x37f7	Name error (3)	stun.fpapi.io	none	none	28	IN (0x0001)	false
Apr 18, 2024 15:47:13.334278107 CEST	1.1.1.1	192.168.2.16	0xe111	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:13.334278107 CEST	1.1.1.1	192.168.2.16	0xe111	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 18, 2024 15:47:13.449222088 CEST	1.1.1.1	192.168.2.16	0x5b4b	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:13.449222088 CEST	1.1.1.1	192.168.2.16	0x5b4b	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.449222088 CEST	1.1.1.1	192.168.2.16	0x5b4b	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.449222088 CEST	1.1.1.1	192.168.2.16	0x5b4b	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.124	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.449222088 CEST	1.1.1.1	192.168.2.16	0x5b4b	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.76	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:13.449244022 CEST	1.1.1.1	192.168.2.16	0xfc32	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:47:15.149558067 CEST	1.1.1.1	192.168.2.16	0xe186	No error (0)	dropboxcaptcha.com		18.160.48.194	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:47:24.696537971 CEST	1.1.1.1	192.168.2.16	0x35bf	No error (0)	play.google.com		74.125.136.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:48:10.299771070 CEST	1.1.1.1	192.168.2.16	0x326f	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:48:10.300877094 CEST	1.1.1.1	192.168.2.16	0x99cb	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:48:10.300877094 CEST	1.1.1.1	192.168.2.16	0x99cb	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:48:14.524173975 CEST	1.1.1.1	192.168.2.16	0x7404	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:48:14.524173975 CEST	1.1.1.1	192.168.2.16	0x7404	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:48:14.525322914 CEST	1.1.1.1	192.168.2.16	0x33ab	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 15:49:00.698115110 CEST	1.1.1.1	192.168.2.16	0x6889	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:00.698115110 CEST	1.1.1.1	192.168.2.16	0x6889	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:00.698115110 CEST	1.1.1.1	192.168.2.16	0x6889	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:00.698115110 CEST	1.1.1.1	192.168.2.16	0x6889	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:01.316664934 CEST	1.1.1.1	192.168.2.16	0x49e0	No error (0)	fp.dropbox.com		18.165.116.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:01.316664934 CEST	1.1.1.1	192.168.2.16	0x49e0	No error (0)	fp.dropbox.com		18.165.116.121	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:01.316664934 CEST	1.1.1.1	192.168.2.16	0x49e0	No error (0)	fp.dropbox.com		18.165.116.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 15:49:01.316664934 CEST	1.1.1.1	192.168.2.16	0x49e0	No error (0)	fp.dropbox.com		18.165.116.57	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.dropbox.com

https:

marketing.dropbox.com

fp.dropbox.com

www.google.com

tags.tiqcdn.com

dropboxcaptcha.com

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:00 UTC	699	OUT	GET /l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:01 UTC	3973	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Location: /scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz&sm=1 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; expires=Tue, 17 Apr 2029 13:47:00 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; Domain=dropbox.com; expires=Sun, 18 Apr 2027 13:47:00 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; expires=Sun, 18 Apr 2027 13:47:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=XJ56ojJ30c; expires=Sun, 18 Apr 2027 13:47:00 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Tue, 17 Apr 2029 13:47:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; Domain=www.dropbox.com; expires=Thu, 18 Apr 2024 14:47:00 GMT; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Dropbox-Internal-Redirect: 1 X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d956e685ca9e43ddb884a194b53a134e Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:01 UTC	781	IN	Data Raw: 33 30 31 0d 0a 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 2f 73 63 6c 2f 66 69 2f 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 2f 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 3f 64 6c 3d 30 26 6f 72 65 66 3d 65 26 72 3d 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 43 30 76 67 65 72 5f 68 67 70 6e 7a 4d 55 70 38 32 30 76 38 6d 48 78 77 4d 31 32 72 44 59 45 4e 50 54 4b 4e 75 52 47 50 4d 32 70 Data Ascii: 301302 FoundThe resource was found at /scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49701	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:01 UTC	1361	OUT	GET /scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz&sm=1 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D
2024-04-18 13:47:05 UTC	1607	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: /login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; Path=/; HttpOnly; Secure; SameSite=None X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: daeb78a8e126409a97d86e5bcd243a71 Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:05 UTC	863	IN	Data Raw: 33 35 33 0d 0a 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 3f 63 6f 6e 74 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 33 46 64 6c 25 33 44 30 25 32 36 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 43 30 76 67 65 72 5f 68 67 70 6e 7a 4d 55 70 38 32 30 76 38 6d 48 78 77 4d 31 32 72 44 59 45 4e 50 54 4b 4e 75 52 47 Data Ascii: 353<a href="/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49704	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:05 UTC	1961	OUT	GET /login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:05 UTC	2629	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' ; frame-ancestors 'self' ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; default-src 'none' ; img-src https://* data: blob: ; base-uri 'self' ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' 'nonce-1Jp+eaFkChWs3IRvAAux6Rkgemc=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cad0c4fd075645a4b69f01bf63c15666 Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:05 UTC	148	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />
2024-04-18 13:47:05 UTC	172	IN	Data Raw: 32 35 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 6c 6c 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 0a 0d 0a 32 65 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 2f 3e 0a 0d 0a Data Ascii: 25<meta content="all" name="robots" />47<meta content="width=device-width, initial-scale=1" name="viewport" />2e<meta content="website" property="og:type" />
2024-04-18 13:47:05 UTC	57	IN	Data Raw: 33 33 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 72 6f 70 62 6f 78 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 2f 3e 0a 0d 0a Data Ascii: 33<meta content="Dropbox" property="og:site_name" />
2024-04-18 13:47:05 UTC	59	IN	Data Raw: 33 35 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 32 31 30 30 31 39 38 39 33 37 33 30 22 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 2f 3e 0a 0d 0a Data Ascii: 35<meta content="210019893730" property="fb:app_id" />
2024-04-18 13:47:05 UTC	112	IN	Data Raw: 33 32 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 31 32 30 30 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 2f 3e 0a 0d 0a 33 32 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 36 32 38 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 2f 3e 0a 0d 0a Data Ascii: 32<meta content="1200" property="og:image:width" />32<meta content="628" property="og:image:height" />
2024-04-18 13:47:05 UTC	961	IN	Data Raw: 33 61 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 23 66 66 66 66 66 66 22 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 2f 3e 0a 0d 0a 38 39 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 5f 63 61 74 61 6c 6f 67 2f 6c 6f 67 6f 5f 6d 31 2e 70 6e 67 22 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 22 20 2f 3e 0a 0d 0a 62 63 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 7a 38 69 6f 74 6d 6b 2d 70 6b 68 75 69 34 30 36 79 34 31 79 35 62 66 6d 66 78 64 77 Data Ascii: 3a<meta content="#ffffff" name="msapplication-TileColor" />89<meta content="https://cfl.dropboxstatic.com/static/metaserver/static/images/logo_catalog/logo_m1.png" name="msapplication-TileImage" />bc<meta content="tz8iotmk-pkhui406y41y5bfmfxdw
2024-04-18 13:47:05 UTC	1697	IN	Data Raw: 33 63 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 22 2f 3e 0a 0d 0a 33 65 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 22 2f 3e 0a 0d 0a 33 63 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2f 3e 0a 0d 0a 33 65 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f Data Ascii: 3c<link rel="preconnect" href="https://consent.dropbox.com"/>3e<link rel="dns-prefetch" href="https://consent.dropbox.com"/>3c<link rel="preconnect" href="https://accounts.google.com"/>3e<link rel="dns-prefetch" href="https://accounts.goo
2024-04-18 13:47:05 UTC	3540	IN	Data Raw: 33 37 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6f 67 3a 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 6c 6f 67 69 6e 3f 63 6f 6e 74 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 33 46 64 6c 25 33 44 30 25 32 36 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 Data Ascii: 370<link rel="og:url" href="https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PW
2024-04-18 13:47:05 UTC	1356	IN	Data Raw: 33 35 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 3b 6c 65 74 20 61 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 7b 61 3d 5b 5d 2c 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 3d 65 3d 3e 61 2e 70 75 73 68 28 65 29 2c 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: 35f<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">(()=>{"use strict";const e=window;let a;const r=()=>{a=[],e.addRequireLoadCallback=e=>a.push(e),e.configureRequire=function(){const a=arguments;e.addRequireLoadCallback((()=>e.configureRequire.apply(null,a
2024-04-18 13:47:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 52 55 4e 4e 49 4e 47 5f 49 4e 5f 45 44 49 53 4f 4e 20 3d 20 74 72 75 65 3b 0a 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 73 69 67 6e 75 70 5f 73 69 67 6e 69 6e 2f 6c 6f 67 69 6e 5f 70 61 Data Ascii: 1000<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.RUNNING_IN_EDISON = true;window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/signup_signin/login_pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49726	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:07 UTC	1973	OUT	GET /page_success/end?edison_page_name=login_page_edison&path=%2Flogin&request_id=cad0c4fd075645a4b69f01bf63c15666&time=1713448025 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:07 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Thu, 18 Apr 2024 13:47:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3bafed50fe4e4697beff9b6368c0e468 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49753	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:09 UTC	2072	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:09 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-04-18 13:47:09 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 102 X-Webkit-Csp: sandbox Content-Length: 137 Date: Thu, 18 Apr 2024 13:47:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e390aca7b29249bcb7ec85aae438f61c Connection: close
2024-04-18 13:47:09 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49758	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1409	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:10 UTC	5127	IN	HTTP/1.1 302 Found Content-Security-Policy: script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; font-src https://* data: ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; img-src https:// data: blob: ; default-src 'none' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' 'nonce-1Jp+eaFkChWs3IRvAAux6Rkgemc=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e309ac57f39b49b0ad7787722629c191 Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:10 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49760	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1846	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:10 UTC	755	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:09 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4317c88af8774610886591992ed98004 Connection: close
2024-04-18 13:47:10 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49762	18.155.1.54	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	744	OUT	GET /login?referrer= HTTP/1.1 Host: marketing.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
2024-04-18 13:47:10 UTC	437	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 627 Connection: close Last-Modified: Wed, 31 May 2023 19:16:09 GMT Server: AmazonS3 Date: Wed, 17 Apr 2024 17:29:05 GMT ETag: "85c876eb10030058f29245148995cc2d" X-Cache: Error from cloudfront Via: 1.1 9001087a3a66e5ac2fb50791d94765b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 X-Amz-Cf-Id: Ed1QJqMMwvqyIUmJGCvjD0g9cp4KAoubsgaT55EjzX1vjNoxGozMkw== Age: 73086
2024-04-18 13:47:10 UTC	627	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 20 5d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 68 74 74 70 73 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d Data Ascii: <html> <head> ...[if (gte IE 9) ]> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <![endif]--> <title>Dropbox</title> <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49763	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	850	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn
2024-04-18 13:47:10 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 18 Apr 2024 13:47:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8543a2e6035d442aa106dea72224e7cc Connection: close
2024-04-18 13:47:10 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49776	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1434	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:10 UTC	4865	IN	HTTP/1.1 200 OK Content-Security-Policy: worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; media-src https://* blob: ; img-src https://* data: blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' ; font-src https://* data: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; default-src 'none' ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; base-uri 'self' ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ Content-Security-Policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsWcFZbJWA=' 'nonce-1Jp+eaFkChWs3IRvAAux6Rkgemc=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f70538b2f3e44e9289150e24c30e8a30 Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:10 UTC	1789	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-18 13:47:10 UTC	1472	IN	Data Raw: 36 65 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 43 53 50 5f 53 43 52 49 50 54 5f 4e 4f 4e 43 45 20 3d 20 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3c 2f 73 63 72 69 70 74 3e 0d 0a 33 35 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 3b 6c 65 74 20 61 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 7b 61 3d 5b 5d 2c 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 3d 65 3d 3e 61 2e 70 Data Ascii: 6e<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.CSP_SCRIPT_NONCE = "P4e0ZPsWVq/TnDtowwsWcFZbJWA="</script>35f<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">(()=>{"use strict";const e=window;let a;const r=()=>{a=[],e.addRequireLoadCallback=e=>a.p
2024-04-18 13:47:11 UTC	15816	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 52 55 4e 4e 49 4e 47 5f 49 4e 5f 45 44 49 53 4f 4e 20 3d 20 74 72 75 65 3b 0a 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 Data Ascii: 1000<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.RUNNING_IN_EDISON = true;window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/privacy_consent/ccpa_i
2024-04-18 13:47:11 UTC	2034	IN	Data Raw: 37 65 62 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 6d 61 72 6b 53 65 72 76 65 72 53 69 64 65 50 72 65 66 65 74 63 68 53 74 61 72 74 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f Data Ascii: 7eb<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { if (edisonModule.Edison.markServerSidePrefetchStarted) { edisonModule.Ediso
2024-04-18 13:47:11 UTC	545	IN	Data Raw: 32 31 61 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 44 61 74 61 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 73 74 61 6e 74 73 2f Data Ascii: 21a<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedDataModule("metaserver/static/js/modules/constants/
2024-04-18 13:47:11 UTC	1102	IN	Data Raw: 34 34 37 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 76 51 45 43 68 78 77 61 58 52 6f 62 33 4d 75 52 57 52 70 63 32 39 75 55 48 4a 6c 5a 6d 56 30 59 32 68 54 5a 58 4a 32 61 Data Ascii: 447<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EvQEChxwaXRob3MuRWRpc29uUHJlZmV0Y2hTZXJ2a
2024-04-18 13:47:11 UTC	8451	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 6f 41 46 43 69 5a 31 65 46 39 68 62 6d 46 73 65 58 52 70 59 33 4d 75 56 58 68 42 62 6d 46 73 65 58 52 70 59 33 4e 46 Data Ascii: 1000<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EoAFCiZ1eF9hbmFseXRpY3MuVXhBbmFseXRpY3NF
2024-04-18 13:47:11 UTC	293	IN	Data Raw: 65 62 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 34 65 30 5a 50 73 57 56 71 2f 54 6e 44 74 6f 77 77 73 57 63 46 5a 62 4a 57 41 3d 22 20 61 73 79 6e 63 20 73 72 63 3d 22 2f 70 61 67 65 5f 73 75 63 63 65 73 73 2f 65 6e 64 3f 65 64 69 73 6f 6e 5f 70 61 67 65 5f 6e 61 6d 65 3d 63 63 70 61 5f 69 66 72 61 6d 65 26 61 6d 70 3b 70 61 74 68 3d 25 32 46 65 6e 25 32 46 63 63 70 61 5f 69 66 72 61 6d 65 26 61 6d 70 3b 72 65 71 75 65 73 74 5f 69 64 3d 66 37 30 35 33 38 62 32 66 33 65 34 34 65 39 32 38 39 31 35 30 65 32 34 63 33 30 65 38 61 33 30 26 61 6d 70 3b 74 69 6d 65 3d 31 37 31 33 34 34 38 30 33 30 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 37 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 37 0d Data Ascii: eb<script nonce="P4e0ZPsWVq/TnDtowwsWcFZbJWA=" async src="/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=f70538b2f3e44e9289150e24c30e8a30&time=1713448030" crossorigin="anonymous"></script>7</body>7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49779	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1891	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:10 UTC	2654	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 353fd47c4d9b49dbae3fa9d77756f9ee Connection: close
2024-04-18 13:47:10 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49780	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1061	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:11 UTC	765	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.dropbox.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6b20c913616c4525813e30d5dbb9080e Connection: close
2024-04-18 13:47:11 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.dropbox.com/marketing_tracker_service;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49781	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1995	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1739 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryvKOgOHhOnI97xWcn Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:10 UTC	1739	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 4b 4f 67 4f 48 68 4f 6e 49 39 37 78 57 63 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 4b 4f 67 4f 48 68 4f 6e 49 39 37 78 57 63 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 4b 4f 67 4f 48 68 4f 6e 49 39 37 78 57 63 6e 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryvKOgOHhOnI97xWcnContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryvKOgOHhOnI97xWcnContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryvKOgOHhOnI97xWcnCont
2024-04-18 13:47:11 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a4d93ce1bcfa4e54aec7aa9e4906e7a0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49782	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:10 UTC	1995	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1797 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUomKM8otAvChjfZ6 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:10 UTC	1797	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 6f 6d 4b 4d 38 6f 74 41 76 43 68 6a 66 5a 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 6f 6d 4b 4d 38 6f 74 41 76 43 68 6a 66 5a 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 6f 6d 4b 4d 38 6f 74 41 76 43 68 6a 66 5a 36 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryUomKM8otAvChjfZ6Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryUomKM8otAvChjfZ6Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryUomKM8otAvChjfZ6Cont
2024-04-18 13:47:11 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 82 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2d56b7fdfcfc4f2ab43f91475e9481ab Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49788	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	1995	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryPckN66ZiOG2es5wI Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:11 UTC	1683	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 63 6b 4e 36 36 5a 69 4f 47 32 65 73 35 77 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 63 6b 4e 36 36 5a 69 4f 47 32 65 73 35 77 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 63 6b 4e 36 36 5a 69 4f 47 32 65 73 35 77 49 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryPckN66ZiOG2es5wIContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryPckN66ZiOG2es5wIContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryPckN66ZiOG2es5wICont
2024-04-18 13:47:11 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 11d9cbe593d440669c84b08059f3f2d1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49791	18.165.116.121	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	590	OUT	GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:11 UTC	741	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Date: Thu, 18 Apr 2024 13:47:11 GMT Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 b20f3be547a36c380a74055c25804eee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: 5NQ4GiyEc1le8peiZx9UjY2mHgxzatcIHTDw1JAoT9LOyIRdIv5KeA== Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Vary: Origin
2024-04-18 13:47:11 UTC	96	IN	Data Raw: 4f 6b 46 6c 61 6b 43 57 49 38 66 53 78 55 2b 32 5a 70 4d 6f 78 47 52 30 38 64 2f 63 54 47 62 4c 50 31 44 55 2b 74 59 48 47 36 31 39 47 52 4a 64 57 38 37 4c 38 71 51 76 35 6b 75 4e 62 44 73 30 66 79 6b 76 54 57 47 34 71 79 37 73 65 73 78 69 77 52 4f 43 66 31 51 53 55 42 57 77 62 41 3d 3d Data Ascii: OkFlakCWI8fSxU+2ZpMoxGR08d/cTGbLP1DU+tYHG619GRJdW87L8qQv5kuNbDs0fykvTWG4qy7sesxiwROCf1QSUBWwbA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49796	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	2045	OUT	POST /sso_state HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:11 UTC	69	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 26 65 6d 61 69 6c 3d 6e 65 77 73 6c 65 74 74 65 72 25 34 30 62 65 61 6e 74 65 63 68 2e 69 74 Data Ascii: is_xhr=true&t=tor8OcaPJXCBeGnB7vxKNXFW&email=newsletter%40beantech.it
2024-04-18 13:47:11 UTC	1904	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 69 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 26 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4cc20b29e4c744e5a1828b0ec6b3dbd9 Connection: close
2024-04-18 13:47:11 UTC	26	IN	Data Raw: 7b 22 75 73 65 72 5f 73 73 6f 5f 73 74 61 74 65 22 3a 20 22 6e 6f 6e 65 22 7d Data Ascii: {"user_sso_state": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49799	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	1090	OUT	GET /pithos/host%3Amarketing.dropbox.com/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:11 UTC	2654	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7719 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5b23edb818254c92b03c311b7e3c9efb Connection: close
2024-04-18 13:47:11 UTC	7719	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49800	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	1995	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryA83pPIj9v2s51lz5 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:11 UTC	1670	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 38 33 70 50 49 6a 39 76 32 73 35 31 6c 7a 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 38 33 70 50 49 6a 39 76 32 73 35 31 6c 7a 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 38 33 70 50 49 6a 39 76 32 73 35 31 6c 7a 35 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryA83pPIj9v2s51lz5Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryA83pPIj9v2s51lz5Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryA83pPIj9v2s51lz5Cont
2024-04-18 13:47:11 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1a753af3b7c141db8320634c7483fe05 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49805	18.165.116.52	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:11 UTC	434	OUT	GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en
2024-04-18 13:47:11 UTC	647	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Date: Thu, 18 Apr 2024 13:47:11 GMT Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 07cfe37ee446e8a8e197af0679997608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: sQ72UzYMfPTx32sQf7LsNoag1IEVEcDqWZBRPW0M45EhApt0y9QBOA== Vary: Origin
2024-04-18 13:47:11 UTC	96	IN	Data Raw: 61 54 6c 42 52 54 70 65 6d 2b 51 74 50 53 6b 77 45 4c 56 66 68 49 69 6b 7a 61 57 36 52 74 34 7a 66 61 4a 72 79 58 63 37 53 55 6a 6f 48 73 41 35 79 51 4b 78 63 71 71 50 4d 43 66 34 36 6f 6e 2b 56 34 33 36 39 6d 49 31 49 7a 55 71 64 36 4f 43 79 4b 6b 75 33 4b 4f 43 45 37 72 43 52 47 38 3d Data Ascii: aTlBRTpem+QtPSkwELVfhIikzaW6Rt4zfaJryXc7SUjoHsA5yQKxcqqPMCf46on+V4369mI1IzUqd6OCyKku3KOCE7rCRG8=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49810	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	858	OUT	GET /sso_state HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:12 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 13e52a00301e45fe91ad38beb4ccc5b9 Connection: close
2024-04-18 13:47:12 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49811	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	1935	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:12 UTC	2943	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 48fc213cb8c041b4bc4b7affadfc1e6c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49816	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	2077	OUT	POST /2/account/check_user_with_email_exists HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:12 UTC	34	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 6e 65 77 73 6c 65 74 74 65 72 40 62 65 61 6e 74 65 63 68 2e 69 74 22 7d Data Ascii: {"email":"newsletter@beantech.it"}
2024-04-18 13:47:12 UTC	638	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 41 X-Webkit-Csp: sandbox Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 17 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bdba64a8d4294fb18099f044fc390d4b Connection: close
2024-04-18 13:47:12 UTC	17	IN	Data Raw: 7b 22 65 78 69 73 74 73 22 3a 20 66 61 6c 73 65 7d Data Ascii: {"exists": false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49817	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	1431	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=f70538b2f3e44e9289150e24c30e8a30&time=1713448030 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:12 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b8883a6fb31c44bca2bdf41cf3572923 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49821	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	877	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 64c6f539902441e1a28582c428b6529f Connection: close
2024-04-18 13:47:13 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49823	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:12 UTC	3211	OUT	POST /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1689 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept-language: en x-edison-prompt-controller: signup_signin x-edison-atlasservlet: signup_signin x-grpc-web: 1 x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" x-dropbox-browser-id: b5cfeb38cfafe269021fb942a6ea4145 x-user-agent: @bufbuild/connect-web x-dropbox-authority: www.dropbox.com x-edison-page-name: login_page_edison sec-ch-ua-mobile: ?0 x-edison-prompt-action: login_page_edison User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/grpc-web+proto x-edison-original-url: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&email=newsletter%40beantech.it&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:12 UTC	1689	OUT	Data Raw: 00 00 00 06 94 52 c7 06 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 6c 6f 67 69 6e 3f 63 6f 6e 74 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 33 46 64 6c 25 33 44 30 25 32 36 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 43 30 76 67 65 72 5f 68 67 70 6e 7a 4d 55 70 38 32 30 76 38 6d 48 Data Ascii: Rhttps://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mH
2024-04-18 13:47:13 UTC	465	IN	HTTP/1.1 200 OK Content-Type: application/grpc-web+proto Grpc-Accept-Encoding: identity, deflate, gzip Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dc3c127180534a08ba8fa6f2b698215d Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:13 UTC	39	IN	Data Raw: 32 31 0d 0a 00 00 00 00 1c 0a 14 68 53 72 67 56 45 6a 73 33 61 6d 78 4c 6f 6c 6f 63 51 31 38 10 01 1a 02 75 73 0d 0a Data Ascii: 21hSrgVEjs3amxLolocQ18us
2024-04-18 13:47:13 UTC	31	IN	Data Raw: 31 34 0d 0a 80 00 00 00 0f 67 72 70 63 2d 73 74 61 74 75 73 3a 30 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 14grpc-status:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49829	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	887	OUT	GET /2/account/check_user_with_email_exists HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fc24553829454b03920899fcf3a4a57f Connection: close
2024-04-18 13:47:13 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49830	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	2080	OUT	POST /2/megaphone_chat/get_best_chat_campaigns HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 849 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	849	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 6c 6f 67 69 6e 3f 63 6f 6e 74 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 33 46 64 6c 25 33 44 30 25 32 36 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 43 30 76 67 65 72 5f 68 67 70 6e 7a 4d 55 70 38 32 30 76 38 6d 48 Data Ascii: {"url":"https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mH
2024-04-18 13:47:13 UTC	570	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 120 X-Webkit-Csp: sandbox Content-Length: 2 Date: Thu, 18 Apr 2024 13:47:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d062ccc62b214f96b65ea1b6f58882c6 Connection: close
2024-04-18 13:47:13 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49832	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	1964	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarybRxX3AVPcBfYHM40 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	1670	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 52 78 58 33 41 56 50 63 42 66 59 48 4d 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 52 78 58 33 41 56 50 63 42 66 59 48 4d 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 52 78 58 33 41 56 50 63 42 66 59 48 4d 34 30 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarybRxX3AVPcBfYHM40Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarybRxX3AVPcBfYHM40Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundarybRxX3AVPcBfYHM40Cont
2024-04-18 13:47:13 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ca7fb59afce54d5c8de70526b2b3fe46 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49833	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	1964	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1917 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryappn1xBDe78CG2MV Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	1917	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 70 70 6e 31 78 42 44 65 37 38 43 47 32 4d 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 70 70 6e 31 78 42 44 65 37 38 43 47 32 4d 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 70 70 6e 31 78 42 44 65 37 38 43 47 32 4d 56 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryappn1xBDe78CG2MVContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryappn1xBDe78CG2MVContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryappn1xBDe78CG2MVCont
2024-04-18 13:47:13 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 548ed8f4e6344384b7fb22344c796322 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49834	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	1964	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary8dyqBftF2i9NR94Z Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	1658	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 38 64 79 71 42 66 74 46 32 69 39 4e 52 39 34 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 38 64 79 71 42 66 74 46 32 69 39 4e 52 39 34 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 38 64 79 71 42 66 74 46 32 69 39 4e 52 39 34 5a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary8dyqBftF2i9NR94ZContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary8dyqBftF2i9NR94ZContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundary8dyqBftF2i9NR94ZCont
2024-04-18 13:47:13 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 26 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6dd1bbebcbe84b2997a697b88a451b06 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49844	64.233.176.103	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	675	OUT	GET /recaptcha/api.js?hl=en&onload=recaptchaOnloadCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:13 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 18 Apr 2024 13:47:13 GMT Date: Thu, 18 Apr 2024 13:47:13 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 13:47:13 UTC	727	IN	Data Raw: 35 30 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 50a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-18 13:47:13 UTC	570	IN	Data Raw: 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a Data Ascii: ZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.j
2024-04-18 13:47:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49842	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	1964	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1798 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarycXmmlWGfWgeszkbo Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	1798	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 58 6d 6d 6c 57 47 66 57 67 65 73 7a 6b 62 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 58 6d 6d 6c 57 47 66 57 67 65 73 7a 6b 62 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 58 6d 6d 6c 57 47 66 57 67 65 73 7a 6b 62 6f 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarycXmmlWGfWgeszkboContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarycXmmlWGfWgeszkboContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundarycXmmlWGfWgeszkboCont
2024-04-18 13:47:13 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 57dd71ca1ecc4242b2bc7e66fa53aa3f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49847	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	914	OUT	GET /web-grpc/edison/fingerprintjs.FingerPrintJSService/FetchConstants HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	397	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 13:47:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7beeb9687edb4fd5980efcfd5bafb40c Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49848	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	1964	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJIvJzDysuSnhIWgL Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:13 UTC	1676	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 49 76 4a 7a 44 79 73 75 53 6e 68 49 57 67 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 49 76 4a 7a 44 79 73 75 53 6e 68 49 57 67 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 49 76 4a 7a 44 79 73 75 53 6e 68 49 57 67 4c 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryJIvJzDysuSnhIWgLContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryJIvJzDysuSnhIWgLContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryJIvJzDysuSnhIWgLCont
2024-04-18 13:47:14 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 80 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d9143fd929414be0ae36ef1466f4ddc1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49850	3.161.163.65	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	550	OUT	GET /utag/dropbox/main/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:13 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 453150 Connection: close Date: Thu, 18 Apr 2024 13:47:14 GMT Last-Modified: Wed, 17 Apr 2024 19:49:39 GMT ETag: "b8731c7008ba65c6918b7deec5b9f183" x-amz-server-side-encryption: AES256 x-amz-version-id: rFgbZQxrQiaWb.WMwl1aPuxxv0qTI1Gu Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 040805442e27a31aa3f9f01ab2dce57e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: uc2HnKdMB7kvq8TW6RuoXTOoXPthNVHbtlb8AYx3kaP6wDY0IzUfTw== Cache-Control: max-age=300
2024-04-18 13:47:13 UTC	15812	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 34 31 37 31 39 34 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 74 72 79 7b 6c 65 74 20 73 74 6f 72 6d 63 72 6f 77 50 61 72 61 6d 44 61 74 61 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 64 62 78 5f 6d 65 74 61 73 65 72 76 65 72 64 61 74 61 27 29 21 3d 3d 6e 75 6c 6c 3f 6c 6f 63 61 6c Data Ascii: //tealium universal tag - utag.loader ut4.0.202404171947, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{try{let stormcrowParamData=localStorage.getItem('dbx_metaserverdata')!==null?local
2024-04-18 13:47:13 UTC	16384	IN	Data Raw: 29 3b 7d 65 6c 73 65 7b 6a 5b 66 5d 3d 22 22 2b 6a 5b 66 5d 3b 69 66 28 6a 5b 66 5d 2e 6d 61 74 63 68 28 73 29 29 7b 6b 3d 28 52 65 67 45 78 70 2e 24 32 3d 3d 22 73 65 73 73 69 6f 6e 22 29 3f 28 74 79 70 65 6f 66 20 6a 2e 5f 73 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6a 2e 5f 73 74 3a 74 2d 31 29 3a 70 61 72 73 65 49 6e 74 28 52 65 67 45 78 70 2e 24 32 29 3b 6a 5b 66 5d 3d 28 6b 3c 74 29 3f 6e 75 6c 6c 3a 28 78 3d 3d 30 3f 6a 5b 66 5d 3a 52 65 67 45 78 70 2e 24 31 29 3b 7d 7d 0a 69 66 28 6a 5b 66 5d 29 6f 5b 63 6b 5d 5b 66 5d 3d 6a 5b 66 5d 3b 7d 7d 65 6c 73 65 20 69 66 28 75 74 61 67 2e 63 6c 5b 63 6b 5d 7c 7c 75 74 61 67 2e 63 6c 5b 27 5f 61 6c 6c 5f 27 5d 29 7b 6f 5b 63 6b 5d 3d 65 7d 7d 7d 0a 72 65 74 75 72 6e 28 61 29 3f 28 6f 5b 61 5d 3f 6f 5b Data Ascii: );}else{j[f]=""+j[f];if(j[f].match(s)){k=(RegExp.$2=="session")?(typeof j._st!="undefined"?j._st:t-1):parseInt(RegExp.$2);j[f]=(k<t)?null:(x==0?j[f]:RegExp.$1);}}if(j[f])o[ck][f]=j[f];}}else if(utag.cl[ck]\|\|utag.cl['_all_']){o[ck]=e}}}return(a)?(o[a]?o[
2024-04-18 13:47:13 UTC	1024	IN	Data Raw: 3b 63 61 73 65 27 31 31 32 39 27 3a 74 72 79 7b 63 5b 31 31 32 39 5d 7c 3d 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 63 6f 6d 70 72 65 73 73 2d 66 69 6c 65 73 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 31 33 30 27 3a 74 72 79 7b 63 5b 31 31 33 30 5d 7c 3d 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 70 72 6f 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 Data Ascii: ;case'1129':try{c[1129]\|=(d['dom.pathname'].toString().toLowerCase()=='/lp/business/compress-files'.toLowerCase())}catch(e){utag.DB(e)};break;case'1130':try{c[1130]\|=(d['dom.pathname'].toString().toLowerCase()=='/pro'.toLowerCase())}catch(e){utag.DB(e)};b
2024-04-18 13:47:14 UTC	16384	IN	Data Raw: 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 31 33 39 27 3a 74 72 79 7b 63 5b 31 31 33 39 5d 7c 3d 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 74 72 61 6e 73 66 65 72 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 31 34 30 27 3a 74 72 79 7b 63 5b 31 31 34 30 5d 7c 3d 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f Data Ascii: ].toString().toLowerCase()=='/'.toLowerCase())}catch(e){utag.DB(e)};break;case'1139':try{c[1139]\|=(d['dom.pathname'].toString().toLowerCase()=='/transfer'.toLowerCase())}catch(e){utag.DB(e)};break;case'1140':try{c[1140]\|=(d['dom.pathname'].toString().toLo
2024-04-18 13:47:14 UTC	1024	IN	Data Raw: 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 66 74 70 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 70 68 6f 74 6f 2d 73 68 61 72 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 70 68 6f 74 6f 2d 73 68 61 72 65 27 2e 74 6f 4c 6f Data Ascii: erCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/business/ftp'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/business/photo-share'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/business/photo-share'.toLo
2024-04-18 13:47:14 UTC	16384	IN	Data Raw: 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 73 65 6d 2d 73 65 6e 64 2d 6c 61 72 67 65 2d 66 69 6c 65 73 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 73 65 6d 2d 73 68 61 72 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 73 65 6d 2d 66 69 6c 65 2d 74 72 61 6e 73 66 65 72 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 Data Ascii: toString().toLowerCase()=='/lp/sem-send-large-files'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/sem-share'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/sem-file-transfer'.toLowerCase())\|\|(d['dom.pathname'].toStr
2024-04-18 13:47:14 UTC	1024	IN	Data Raw: 65 73 73 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 66 65 61 74 75 72 65 73 2f 63 6c 6f 75 64 2d 73 74 6f 72 61 67 65 2f 66 69 6c 65 2d 72 65 63 6f 76 65 72 79 2d 61 6e 64 2d 68 69 73 74 6f 72 79 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 66 65 61 74 75 72 65 73 2f 73 68 61 72 65 2f 6c 69 6e 6b 2d 73 68 61 72 69 6e 67 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e Data Ascii: ession'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/features/cloud-storage/file-recovery-and-history'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/features/share/link-sharing'.toLowerCase())\|\|(d['dom.pathname'].toStrin
2024-04-18 13:47:14 UTC	16384	IN	Data Raw: 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 63 61 70 74 75 72 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 65 6e 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 6f 6e 6c 69 6e 65 2d 62 61 63 6b 75 70 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 2f 6c 70 2f 62 75 73 69 6e 65 73 73 2f 73 65 6d 2d 66 69 6c 65 2d 62 61 63 6b 75 70 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d Data Ascii: oString().toLowerCase()=='/capture'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/en/lp/business/online-backup'.toLowerCase())\|\|(d['dom.pathname'].toString().toLowerCase()=='/lp/business/sem-file-backup'.toLowerCase())\|\|(d['dom.pathname']
2024-04-18 13:47:14 UTC	16384	IN	Data Raw: 73 68 2d 64 72 6f 70 62 6f 78 2e 77 65 62 66 6c 6f 77 2e 69 6f 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7b 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 22 49 6e 73 69 64 65 20 63 75 73 74 6f 6d 20 63 6f 64 65 20 74 6f 20 61 64 64 20 65 76 69 64 6f 6e 5f 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 6f 6e 73 65 6e 74 43 61 74 65 67 6f 72 79 22 29 3b 63 6f 6e 73 74 20 64 62 78 43 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 3d 75 74 61 67 2e 64 61 74 61 5b 27 63 70 2e 5f 5f 53 65 63 75 72 65 2d 64 62 78 5f 63 6f 6e 73 65 6e 74 27 5d 0a 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 22 49 6e 73 69 64 65 20 63 75 73 74 6f 6d 20 63 6f 64 65 20 74 6f 20 61 64 64 20 65 76 69 64 6f 6e 5f 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 6f 6e 73 65 6e 74 43 61 74 65 67 6f 72 79 Data Ascii: sh-dropbox.webflow.io'.toLowerCase())>-1){console.debug("Inside custom code to add evidon_enabled and consentCategory");const dbxConsentCookie=utag.data['cp.__Secure-dbx_consent']console.debug("Inside custom code to add evidon_enabled and consentCategory
2024-04-18 13:47:14 UTC	16384	IN	Data Raw: 27 26 26 62 5b 27 27 5d 2e 6c 65 6e 67 74 68 3e 30 29 3f 62 5b 27 27 5d 3a 5b 5d 3b 62 2e 5f 63 71 75 61 6e 3d 28 74 79 70 65 6f 66 20 62 5b 27 6c 69 63 65 6e 73 65 73 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 62 5b 27 6c 69 63 65 6e 73 65 73 27 5d 2e 6c 65 6e 67 74 68 3e 30 29 3f 62 5b 27 6c 69 63 65 6e 73 65 73 27 5d 3a 5b 5d 3b 62 2e 5f 63 70 72 69 63 65 3d 28 74 79 70 65 6f 66 20 62 5b 27 70 75 72 63 68 61 73 65 5f 70 72 69 63 65 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 62 5b 27 70 75 72 63 68 61 73 65 5f 70 72 69 63 65 27 5d 2e 6c 65 6e 67 74 68 3e 30 29 3f 62 5b 27 70 75 72 63 68 61 73 65 5f 70 72 69 63 65 27 5d 3a 5b 5d 3b 62 2e 5f 63 73 6b 75 3d 28 74 79 70 65 6f 66 20 62 5b 27 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 Data Ascii: '&&b[''].length>0)?b['']:[];b._cquan=(typeof b['licenses']!='undefined'&&b['licenses'].length>0)?b['licenses']:[];b._cprice=(typeof b['purchase_price']!='undefined'&&b['purchase_price'].length>0)?b['purchase_price']:[];b._csku=(typeof b['']!='undefined'&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49853	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:13 UTC	889	OUT	GET /2/megaphone_chat/get_best_chat_campaigns HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly
2024-04-18 13:47:14 UTC	411	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 133 Date: Thu, 18 Apr 2024 13:47:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ff9ce596bc284f68ae0e6c7d822009f2 Connection: close
2024-04-18 13:47:14 UTC	133	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 6d 65 67 61 70 68 6f 6e 65 5f 63 68 61 74 2f 67 65 74 5f 62 65 73 74 5f 63 68 61 74 5f 63 61 6d 70 61 69 67 6e 73 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "megaphone_chat/get_best_chat_campaigns": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49874	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	1476	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:1$_ss:1$_st:1713449833602$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:15 UTC	755	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 009e03bface44b2dadb39418b128273f Connection: close
2024-04-18 13:47:15 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49871	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 13:47:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: cf2f0934-de76-4df4-99a3-664f36ef327e MS-RequestId: 50a27e5c-81bd-406f-98b6-5051e6564660 MS-CV: u9SzWFrhHE6C3Buq.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 13:47:15 GMT Connection: close Content-Length: 24490
2024-04-18 13:47:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 13:47:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49878	3.161.163.65	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	586	OUT	GET /utag/tiqapp/utag.v.js?a=dropbox/main/202404171946&cb=1713448034390 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:15 UTC	604	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 13:47:16 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 1869eba6fac634e14dd509dcdf0e4554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: sim6Bb7fpTseQK5Nrt9Ja7Nv8-E9lN06SAj11-35lbfwr0z2mtknZA== Cache-Control: max-age=300
2024-04-18 13:47:15 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49877	18.160.48.194	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	680	OUT	GET / HTTP/1.1 Host: dropboxcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:15 UTC	458	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 267 Connection: close Last-Modified: Wed, 04 May 2022 22:21:08 GMT Server: AmazonS3 Date: Wed, 17 Apr 2024 21:49:25 GMT ETag: "00f53700c90a2edf60a83c7c3b959710" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1531d925e2f1f9058974d2e519bbc57e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: eiLsca81eGIYm9MbRhC12cQIaHX8rhon-AD02fIkYQaP_RwpOHGfbA== Age: 57471
2024-04-18 13:47:15 UTC	267	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 70 78 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 66 75 6e 63 61 70 74 63 68 61 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <title>DropboxCaptcha</title> </head> <body style="margin: 0px"> <script type="text/javascript" src="funcaptcha.js"></script></bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49879	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	2438	OUT	POST /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3445 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:15 UTC	3445	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 65 6e 74 72 69 65 73 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 66 69 65 6c 64 73 22 3a 7b 22 62 75 69 6c 64 5f 63 68 61 6e 6e 65 6c 22 3a 7b 22 2e 74 61 67 22 3a 22 73 74 61 62 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6f 72 65 5f 64 72 6f 70 62 6f 78 22 7d 7d 2c 22 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6c 61 74 66 6f 72 6d 5f 66 69 65 6c 64 73 22 3a 7b 22 2e 74 61 67 22 3a 22 63 6c 69 65 6e 74 5f 77 65 62 5f 64 65 76 69 63 65 5f 66 69 65 6c 64 73 22 2c 22 75 61 5f 62 72 6f 77 73 65 72 5f 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 69 73 5f 62 72 5f 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 Data Ascii: {"event_entries":{"application_fields":{"build_channel":{".tag":"stable"},"product_name":{".tag":"core_dropbox"}},"device_fields":{"locale":"en-US","platform_fields":{".tag":"client_web_device_fields","ua_browser_lang":"en-US","is_br_cookies_enabled":true
2024-04-18 13:47:15 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 115 X-Webkit-Csp: sandbox Content-Length: 17 Date: Thu, 18 Apr 2024 13:47:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b5bd2c2ad5a04b589abf4ae82022f883 Connection: close
2024-04-18 13:47:15 UTC	17	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 74 72 75 65 22 7d Data Ascii: {"result":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49880	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	1689	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:15 UTC	2654	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6143b94beb98448da48a53e840cb5341 Connection: close
2024-04-18 13:47:15 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49881	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	2331	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1671 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryS74YntBtNngSSYA5 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:1$_ss:1$_st:1713449833602$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2024-04-18 13:47:15 UTC	1671	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 37 34 59 6e 74 42 74 4e 6e 67 53 53 59 41 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 37 34 59 6e 74 42 74 4e 6e 67 53 53 59 41 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 37 34 59 6e 74 42 74 4e 6e 67 53 53 59 41 35 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryS74YntBtNngSSYA5Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryS74YntBtNngSSYA5Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryS74YntBtNngSSYA5Cont
2024-04-18 13:47:16 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e2b93a5d3bb8422b9f134bb6e88e0f0e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49882	18.160.48.194	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:15 UTC	534	OUT	GET /funcaptcha.js HTTP/1.1 Host: dropboxcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dropboxcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 13:47:16 UTC	470	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2102 Connection: close Last-Modified: Wed, 04 May 2022 22:21:08 GMT Server: AmazonS3 Date: Thu, 18 Apr 2024 13:47:16 GMT ETag: "fff8e4c34d574be9ac43718ee5accd9e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1d6a7a9856899a6462bae2246daa42e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: o_WXrzN7c6bdyM9Zvh_1MeGwGC7aIV8XUroiCnAvpaSDyAKNdxPf0Q== Age: 683
2024-04-18 13:47:16 UTC	2102	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 6e 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 74 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 72 3d 66 75 6e Data Ascii: !function(e){var n={};function t(o){if(n[o])return n[o].exports;var a=n[o]={i:o,l:!1,exports:{}};return e[o].call(a.exports,a,a.exports,t),a.l=!0,a.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49883	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	1246	OUT	GET /2/pap_event_logging/log_events HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 123 Date: Thu, 18 Apr 2024 13:47:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c71bebd43e564fd2aab9aecd945efe2d Connection: close
2024-04-18 13:47:16 UTC	123	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 70 61 70 5f 65 76 65 6e 74 5f 6c 6f 67 67 69 6e 67 2f 6c 6f 67 5f 65 76 65 6e 74 73 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "pap_event_logging/log_events": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49884	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	1764	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	2943	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1eedd11e9f6d48128238eb497df4c302 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49885	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	1244	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: db4969050c7c46ffa1e95777b5ef7a08 Connection: close
2024-04-18 13:47:17 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49886	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2396	OUT	POST /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 714 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	714	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 72 65 66 65 72 72 65 72 3d 26 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 3d 31 37 31 33 34 34 38 30 31 39 33 33 35 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3d 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3d 30 26 72 65 64 69 72 65 63 74 5f 73 74 61 72 74 3d 31 37 31 33 34 34 38 30 31 39 33 36 33 26 72 65 64 69 72 65 63 74 5f 65 6e 64 3d 31 37 31 33 34 34 38 30 32 34 32 35 37 26 66 65 74 63 68 5f 73 74 61 72 74 3d 31 37 31 33 34 34 38 30 32 34 32 35 37 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 73 74 61 72 74 3d 31 37 31 33 34 34 38 30 32 34 32 35 38 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&referrer=&navigation_start=1713448019335&unload_event_start=0&unload_event_end=0&redirect_start=1713448019363&redirect_end=1713448024257&fetch_start=1713448024257&domain_lookup_start=1713448024258&domain_lookup_
2024-04-18 13:47:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0fcd0e4b3ae8435c9956fc7d8a9e46f1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49887	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2373	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	1331	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 33 46 63 6f 6e 74 25 33 44 25 32 35 32 46 73 63 6c 25 32 35 32 46 66 69 25 32 35 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 35 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 32 35 33 46 64 6c 25 32 35 33 44 30 25 32 35 32 36 6f 72 65 66 25 32 35 33 44 65 25 32 35 32 36 72 25 32 35 33 Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&url=https%3A%2F%2Fwww.dropbox.com%2Flogin%3Fcont%3D%252Fscl%252Ffi%252Fs5uzm3l2o0qzv8dhpivcc%252FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%253Fdl%253D0%2526oref%253De%2526r%253
2024-04-18 13:47:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 50748b634b0245b3aa884efa3712eb6c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49888	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2373	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 6713 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	6713	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 33 46 63 6f 6e 74 25 33 44 25 32 35 32 46 73 63 6c 25 32 35 32 46 66 69 25 32 35 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 35 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 32 35 33 46 64 6c 25 32 35 33 44 30 25 32 35 32 36 6f 72 65 66 25 32 35 33 44 65 25 32 35 32 36 72 25 32 35 33 Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&url=https%3A%2F%2Fwww.dropbox.com%2Flogin%3Fcont%3D%252Fscl%252Ffi%252Fs5uzm3l2o0qzv8dhpivcc%252FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%253Fdl%253D0%2526oref%253De%2526r%253
2024-04-18 13:47:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9431d1d925ba42a88516f0c02cf20b11 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49890	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2374	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 32584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	16384	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 33 46 63 6f 6e 74 25 33 44 25 32 35 32 46 73 63 6c 25 32 35 32 46 66 69 25 32 35 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 35 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 32 35 33 46 64 6c 25 32 35 33 44 30 25 32 35 32 36 6f 72 65 66 25 32 35 33 44 65 25 32 35 32 36 72 25 32 35 33 Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&url=https%3A%2F%2Fwww.dropbox.com%2Flogin%3Fcont%3D%252Fscl%252Ffi%252Fs5uzm3l2o0qzv8dhpivcc%252FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%253Fdl%253D0%2526oref%253De%2526r%253
2024-04-18 13:47:16 UTC	16200	OUT	Data Raw: 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 63 72 69 70 74 25 32 32 25 32 43 25 32 32 63 61 63 68 65 64 25 32 32 25 33 41 25 32 32 66 61 6c 73 65 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 32 25 37 44 25 32 43 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 6c 61 6e 67 70 61 63 6b 25 32 46 69 63 75 2d 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 6c 61 6e 67 70 61 63 6b 25 32 46 69 63 75 2d 65 6e 25 32 32 Data Ascii: 22%3A1%2C%22annotations%22%3A%7B%22type%22%3A%22script%22%2C%22cached%22%3A%22false%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A2%7D%2C%22metaserver%2Fstatic%2Fjs%2Flangpack%2Ficu-en%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Flangpack%2Ficu-en%22
2024-04-18 13:47:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dc6e4ab32bce4ff7ab327a76fb41be99 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49889	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2372	OUT	POST /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2615 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	2615	OUT	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 3d 6e 61 76 69 67 61 74 65 26 73 65 72 76 65 72 5f 72 65 71 75 65 73 74 5f 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 31 33 34 34 38 30 32 35 26 65 78 74 72 61 5f 63 6f 6c 75 6d 6e 73 3d 25 37 42 25 32 32 6c 6f 67 5f 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 32 43 25 32 32 73 75 62 74 79 70 65 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 6e 75 6d 50 72 65 66 65 74 63 68 65 73 52 65 71 75 65 73 74 65 64 41 66 74 65 72 44 6f 6e 65 53 74 72 65 61 6d 69 6e 67 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 30 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 6e 75 6d 50 72 65 66 65 74 63 68 65 73 52 65 71 75 65 73 74 65 64 42 65 66 6f 72 65 44 6f 6e 65 53 74 72 65 61 6d 69 6e Data Ascii: navigation_type=navigate&server_request_start_time=1713448025&extra_columns=%7B%22log_source%22%3A%22load_end%22%2C%22subtypes%22%3A%22%7B%5C%22numPrefetchesRequestedAfterDoneStreaming%5C%22%3A%5C%220%5C%22%2C%5C%22numPrefetchesRequestedBeforeDoneStreamin
2024-04-18 13:47:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9811e790352745c790ece17e3f8cd43f Connection: close
2024-04-18 13:47:17 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49891	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:16 UTC	2373	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1968 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:16 UTC	1968	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 33 46 63 6f 6e 74 25 33 44 25 32 35 32 46 73 63 6c 25 32 35 32 46 66 69 25 32 35 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 35 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 32 35 33 46 64 6c 25 32 35 33 44 30 25 32 35 32 36 6f 72 65 66 25 32 35 33 44 65 25 32 35 32 36 72 25 32 35 33 Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&url=https%3A%2F%2Fwww.dropbox.com%2Flogin%3Fcont%3D%252Fscl%252Ffi%252Fs5uzm3l2o0qzv8dhpivcc%252FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%253Fdl%253D0%2526oref%253De%2526r%253
2024-04-18 13:47:17 UTC	2690	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 17eba8ed1d3844298596faaa9cb6f497 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49894	23.46.200.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 13:47:17 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=234951 Date: Thu, 18 Apr 2024 13:47:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49895	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	2331	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1690 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary4KJaewDWijKv8GCj Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	1690	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 4b 4a 61 65 77 44 57 69 6a 4b 76 38 47 43 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 4b 4a 61 65 77 44 57 69 6a 4b 76 38 47 43 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 4b 4a 61 65 77 44 57 69 6a 4b 76 38 47 43 6a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary4KJaewDWijKv8GCjContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary4KJaewDWijKv8GCjContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundary4KJaewDWijKv8GCjCont
2024-04-18 13:47:17 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e58ea32f12df4c03a544a89b87083630 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49896	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	2331	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1651 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryuyPAveJNZC3ZRDpE Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:2$_ss:0$_st:1713449834425$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	1651	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 75 79 50 41 76 65 4a 4e 5a 43 33 5a 52 44 70 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 75 79 50 41 76 65 4a 4e 5a 43 33 5a 52 44 70 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 75 79 50 41 76 65 4a 4e 5a 43 33 5a 52 44 70 45 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryuyPAveJNZC3ZRDpEContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryuyPAveJNZC3ZRDpEContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryuyPAveJNZC3ZRDpECont
2024-04-18 13:47:17 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 515d3850fa504327bf8d38ebc3e52d26 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49897	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	1254	OUT	GET /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 51242db77907410ca67d28f5f894476c Connection: close
2024-04-18 13:47:17 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49898	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	1230	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d10dc7460b3848feada4a27058c56ad2 Connection: close
2024-04-18 13:47:17 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49899	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	1229	OUT	GET /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e7baf551e4684436b8a48285f874d04f Connection: close
2024-04-18 13:47:17 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49900	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	2331	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1767 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryHkhWxsgn9SDgjQFK Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:17 UTC	1767	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 6b 68 57 78 73 67 6e 39 53 44 67 6a 51 46 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 6b 68 57 78 73 67 6e 39 53 44 67 6a 51 46 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 6b 68 57 78 73 67 6e 39 53 44 67 6a 51 46 4b 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryHkhWxsgn9SDgjQFKContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryHkhWxsgn9SDgjQFKContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryHkhWxsgn9SDgjQFKCont
2024-04-18 13:47:18 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 27 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0dbf72e9a10c445e8b1f27f905be5063 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49901	23.46.200.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 13:47:17 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=234953 Date: Thu, 18 Apr 2024 13:47:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 13:47:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49902	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:18 UTC	2331	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1696 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrHpzdjh1BEXACP1F Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:5$_ss:0$_st:1713449836614$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:18 UTC	1696	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 48 70 7a 64 6a 68 31 42 45 58 41 43 50 31 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 48 70 7a 64 6a 68 31 42 45 58 41 43 50 31 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 48 70 7a 64 6a 68 31 42 45 58 41 43 50 31 46 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryrHpzdjh1BEXACP1FContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryrHpzdjh1BEXACP1FContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryrHpzdjh1BEXACP1FCont
2024-04-18 13:47:18 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 15 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:18 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 26cd0966cdf24e2aa2bcdf7b7cd36b44 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49903	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:18 UTC	1230	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:18 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1a4b898934bb410cb3391050ff3da2ac Connection: close
2024-04-18 13:47:18 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49904	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:18 UTC	1230	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:18 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:18 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6c6344d2bd094087b3a96c418eee3646 Connection: close
2024-04-18 13:47:18 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49905	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:19 UTC	1230	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:14.107Z","expireDate":"2024-10-18T13:47:14.107Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:4$_ss:0$_st:1713449835721$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:19 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:47:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d8e1dafa4f3347c4b3020ab5eb79b5e8 Connection: close
2024-04-18 13:47:19 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49906	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:20 UTC	2486	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarySr6skAJmff5o5ATd Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:7$_ss:0$_st:1713449837833$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:20 UTC	1675	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 72 36 73 6b 41 4a 6d 66 66 35 6f 35 41 54 64 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 72 36 73 6b 41 4a 6d 66 66 35 6f 35 41 54 64 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 72 36 73 6b 41 4a 6d 66 66 35 6f 35 41 54 64 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarySr6skAJmff5o5ATdContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarySr6skAJmff5o5ATdContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundarySr6skAJmff5o5ATdCont
2024-04-18 13:47:20 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 34adb1c119224b1eb4db0157d4b07523 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49907	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:21 UTC	2526	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:8$_ss:0$_st:1713449839426$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:21 UTC	860	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-time_to_first_byte%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-time_to_first_byte%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5
2024-04-18 13:47:22 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:21 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: be668c2b120747bc9ad991bd00d8e5a4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49913	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:25 UTC	2486	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarylafs5kEveTQzn6Y4 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:8$_ss:0$_st:1713449839426$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:25 UTC	1675	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 61 66 73 35 6b 45 76 65 54 51 7a 6e 36 59 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 61 66 73 35 6b 45 76 65 54 51 7a 6e 36 59 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 61 66 73 35 6b 45 76 65 54 51 7a 6e 36 59 34 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarylafs5kEveTQzn6Y4Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarylafs5kEveTQzn6Y4Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundarylafs5kEveTQzn6Y4Cont
2024-04-18 13:47:25 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 18d77417eff44f83935d740c73278706 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49914	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:25 UTC	1948	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1256 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarylvosNGOlWT92CII8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:25 UTC	1256	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 76 6f 73 4e 47 4f 6c 57 54 39 32 43 49 49 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 76 6f 73 4e 47 4f 6c 57 54 39 32 43 49 49 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 76 6f 73 4e 47 4f 6c 57 54 39 32 43 49 49 38 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarylvosNGOlWT92CII8Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarylvosNGOlWT92CII8Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundarylvosNGOlWT92CII8Cont
2024-04-18 13:47:26 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c7f50e3f2db34c0898b0fe995559483d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49915	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:26 UTC	2527	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:26 UTC	1495	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-visually_complete%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-visually_complete%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5C%
2024-04-18 13:47:27 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2e50780955a94e7a81ef2ac1bd95ab44 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49916	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:27 UTC	1948	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryaV6DkKJqJ3V0RefL Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:27 UTC	1217	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 56 36 44 6b 4b 4a 71 4a 33 56 30 52 65 66 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 56 36 44 6b 4b 4a 71 4a 33 56 30 52 65 66 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 61 56 36 44 6b 4b 4a 71 4a 33 56 30 52 65 66 4c 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryaV6DkKJqJ3V0RefLContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryaV6DkKJqJ3V0RefLContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryaV6DkKJqJ3V0RefLCont
2024-04-18 13:47:28 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6d77c5ed6c7c4f9f9b1157df9160756f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49917	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:30 UTC	1948	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBZT5CNhAeckxnk2x Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:30 UTC	1217	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 5a 54 35 43 4e 68 41 65 63 6b 78 6e 6b 32 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 5a 54 35 43 4e 68 41 65 63 6b 78 6e 6b 32 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 5a 54 35 43 4e 68 41 65 63 6b 78 6e 6b 32 78 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryBZT5CNhAeckxnk2xContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryBZT5CNhAeckxnk2xContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryBZT5CNhAeckxnk2xCont
2024-04-18 13:47:30 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:30 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e759db7c09f248bcbc7cc6ef3da516d7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49918	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:35 UTC	1948	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary5qpryA1lC9PK5Z4E Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:35 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 70 72 79 41 31 6c 43 39 50 4b 35 5a 34 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 70 72 79 41 31 6c 43 39 50 4b 35 5a 34 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 71 70 72 79 41 31 6c 43 39 50 4b 35 5a 34 45 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary5qpryA1lC9PK5Z4EContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary5qpryA1lC9PK5Z4EContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundary5qpryA1lC9PK5Z4ECont
2024-04-18 13:47:35 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:35 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1a18d18091ca44b5af2c3f60f0ec5394 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49919	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:39 UTC	2581	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 12321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:39 UTC	12321	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 65 74 72 69 63 73 2f 6e 61 76 69 67 61 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 2c 22 69 64 22 3a 22 37 63 34 65 63 31 63 62 2d 38 36 32 65 2d 34 36 33 31 2d 61 30 34 32 2d 39 61 63 38 38 39 30 62 65 35 35 39 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 61 74 6c 61 73 73 65 72 76 6c 65 74 5c 22 3a 5c 22 73 69 67 6e 75 70 5f 73 69 67 6e 69 6e 5c 22 2c 5c 22 70 61 67 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6c 6f 67 69 6e 5f 70 61 67 65 5f 65 64 69 73 6f 6e 5c 22 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 5c 22 3a 30 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 53 Data Ascii: {"events":[{"type":"event","name":"performance_metrics/navigation_timing","id":"7c4ec1cb-862e-4631-a042-9ac8890be559","detail":"{\"atlasservlet\":\"signup_signin\",\"page_name\":\"login_page_edison\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectS
2024-04-18 13:47:40 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 146 X-Webkit-Csp: sandbox Content-Length: 51 Date: Thu, 18 Apr 2024 13:47:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f4389085e84644e681f6ff2780a22c7e Connection: close
2024-04-18 13:47:40 UTC	51	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 39 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 39 22 7d Data Ascii: {"msg":"Measures processed: 9 Events processed: 9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49920	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:40 UTC	2486	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryO56LvOblnIBxCse8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:9$_ss:0$_st:1713449844427$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:40 UTC	1675	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 35 36 4c 76 4f 62 6c 6e 49 42 78 43 73 65 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 35 36 4c 76 4f 62 6c 6e 49 42 78 43 73 65 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4f 35 36 4c 76 4f 62 6c 6e 49 42 78 43 73 65 38 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryO56LvOblnIBxCse8Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryO56LvOblnIBxCse8Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryO56LvOblnIBxCse8Cont
2024-04-18 13:47:40 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 33 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:40 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a2da85b21c7d4b80bc7594cadfedf643 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49921	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:40 UTC	1389	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:40 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Thu, 18 Apr 2024 13:47:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: aaef59b60ff6468d963c8b618e8976e2 Connection: close
2024-04-18 13:47:40 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49922	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:40 UTC	1949	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryl3cPmAnIdLStUHey Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:40 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 33 63 50 6d 41 6e 49 64 4c 53 74 55 48 65 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 33 63 50 6d 41 6e 49 64 4c 53 74 55 48 65 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 33 63 50 6d 41 6e 49 64 4c 53 74 55 48 65 79 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryl3cPmAnIdLStUHeyContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryl3cPmAnIdLStUHeyContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryl3cPmAnIdLStUHeyCont
2024-04-18 13:47:40 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:40 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 355b66ccc3214ef0be0bcde816b8678a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49923	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:45 UTC	2047	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:canary sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:45 UTC	1748	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6d 65 61 73 75 72 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6d 65 61 73 75 72 65 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 65 74 72 69 63 73 2f 6c 63 70 22 2c 22 69 64 22 3a 22 31 32 65 31 30 37 63 37 2d 66 30 34 61 2d 34 36 64 64 2d 61 33 34 63 2d 64 34 61 34 35 33 37 63 32 64 36 63 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 61 74 6c 61 73 73 65 72 76 6c 65 74 5c 22 3a 5c 22 73 69 67 6e 75 70 5f 73 69 67 6e 69 6e 5c 22 2c 5c 22 70 61 67 65 5f 6e 61 6d 65 5c 22 3a 5c 22 6c 6f 67 69 6e 5f 70 61 67 65 5f 65 64 69 73 6f 6e 5c 22 2c 5c 22 64 65 6c 74 61 5c 22 3a 31 32 37 37 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 77 65 62 5f 76 69 74 61 6c 73 5f 69 64 5c 22 3a 5c 22 76 33 2d 31 Data Ascii: {"events":[],"measures":[{"type":"measure","name":"performance_metrics/lcp","id":"12e107c7-f04a-46dd-a34c-d4a4537c2d6c","detail":"{\"atlasservlet\":\"signup_signin\",\"page_name\":\"login_page_edison\",\"delta\":12774.399999999994,\"web_vitals_id\":\"v3-1
2024-04-18 13:47:45 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 112 X-Webkit-Csp: sandbox Content-Length: 51 Date: Thu, 18 Apr 2024 13:47:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c9c11b1494a2484cb1356da40e3c3379 Connection: close
2024-04-18 13:47:45 UTC	51	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 32 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 30 22 7d Data Ascii: {"msg":"Measures processed: 2 Events processed: 0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49924	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:45 UTC	1389	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:45 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Thu, 18 Apr 2024 13:47:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0433523e2a864b7bb7b9e0246754a9ae Connection: close
2024-04-18 13:47:45 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49925	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:46 UTC	2527	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:46 UTC	787	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-largest_contentful_paint%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-largest_contentful_paint%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22
2024-04-18 13:47:47 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:47 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 15a831e2abb84900b75b27327361c82a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49926	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=fWLXykGSg8b+hK+&MD=mO9wVyZp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 13:47:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 35e87a0b-5df6-4fa4-9991-e0111221a625 MS-RequestId: 26fb878a-e618-4e70-bccb-faa3aa89cf82 MS-CV: 12iXifl+M06KWy6D.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 13:47:52 GMT Connection: close Content-Length: 25457
2024-04-18 13:47:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-18 13:47:52 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49927	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:47:55 UTC	1949	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryPM0pAw4fHWAqneMt Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:47:55 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 4d 30 70 41 77 34 66 48 57 41 71 6e 65 4d 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 4d 30 70 41 77 34 66 48 57 41 71 6e 65 4d 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 4d 30 70 41 77 34 66 48 57 41 71 6e 65 4d 74 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryPM0pAw4fHWAqneMtContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryPM0pAw4fHWAqneMtContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryPM0pAw4fHWAqneMtCont
2024-04-18 13:47:55 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 59 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:47:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ae401faf56ed4fa794eb55f7e4ee1081 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49930	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:10 UTC	2487	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBspq3R3DET6KdVBi Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:10$_ss:0$_st:1713449859435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:10 UTC	1675	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 73 70 71 33 52 33 44 45 54 36 4b 64 56 42 69 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 73 70 71 33 52 33 44 45 54 36 4b 64 56 42 69 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 73 70 71 33 52 33 44 45 54 36 4b 64 56 42 69 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryBspq3R3DET6KdVBiContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryBspq3R3DET6KdVBiContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryBspq3R3DET6KdVBiCont
2024-04-18 13:48:10 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:48:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 62bf43c798a443f49055c76863477097 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49931	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:14 UTC	2586	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: tor8OcaPJXCBeGnB7vxKNXFW X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:14 UTC	501	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 61 62 75 73 65 22 2c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 22 2c 22 75 64 63 6c 22 2c 22 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 61 75 74 68 22 2c 22 77 65 62 5f 70 72 6f 64 75 63 74 5f 61 6e 61 6c 79 74 69 63 73 5f 70 69 70 65 6c 69 6e 65 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: {"scopes":[],"known_namespaces":["abuse","privacy_consent","udcl","user_centric_perf","uxa_events","web_auth","web_product_analytics_pipeline","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"000000000000000000000000000
2024-04-18 13:48:14 UTC	596	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 143 X-Webkit-Csp: sandbox Content-Length: 2787 Date: Thu, 18 Apr 2024 13:48:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1fdb36e9280e4d2ead7788ec2378a08a Connection: close
2024-04-18 13:48:14 UTC	2787	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49932	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:14 UTC	1395	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:15 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 18 Apr 2024 13:48:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4481511de76040d799c0ae17a601f3e8 Connection: close
2024-04-18 13:48:15 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49933	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:16 UTC	2529	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:16 UTC	1294	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 63 61 64 30 63 34 66 64 30 37 35 36 34 35 61 34 62 36 39 66 30 31 62 66 36 33 63 31 35 36 36 36 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 33 46 63 6f 6e 74 25 33 44 25 32 35 32 46 73 63 6c 25 32 35 32 46 66 69 25 32 35 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 35 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 32 35 33 46 64 6c 25 32 35 33 44 30 25 32 35 32 36 6f 72 65 66 25 32 35 33 44 65 25 32 35 32 36 72 25 32 35 33 Data Ascii: request_id=cad0c4fd075645a4b69f01bf63c15666&url=https%3A%2F%2Fwww.dropbox.com%2Flogin%3Fcont%3D%252Fscl%252Ffi%252Fs5uzm3l2o0qzv8dhpivcc%252FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%253Fdl%253D0%2526oref%253De%2526r%253
2024-04-18 13:48:17 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:48:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d9541c0829d04af69716c554c501e423 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49934	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:17 UTC	1386	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:17 UTC	460	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:48:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 10d63d90676b43f7a8288f1a2b89b9e2 Connection: close
2024-04-18 13:48:17 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49935	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:48:25 UTC	1949	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUvAqNDWbOAIRE37x Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:48:25 UTC	1219	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 76 41 71 4e 44 57 62 4f 41 49 52 45 33 37 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 76 41 71 4e 44 57 62 4f 41 49 52 45 33 37 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 76 41 71 4e 44 57 62 4f 41 49 52 45 33 37 78 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryUvAqNDWbOAIRE37xContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryUvAqNDWbOAIRE37xContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryUvAqNDWbOAIRE37xCont
2024-04-18 13:48:25 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:48:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 69ca389b134e4efeb069455bd647d3e3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49937	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:00 UTC	2487	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1930 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryDXiDFzrwHKDPleq7 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:11$_ss:0$_st:1713449889435$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:49:00 UTC	1930	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 58 69 44 46 7a 72 77 48 4b 44 50 6c 65 71 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 58 69 44 46 7a 72 77 48 4b 44 50 6c 65 71 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 58 69 44 46 7a 72 77 48 4b 44 50 6c 65 71 37 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryDXiDFzrwHKDPleq7Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryDXiDFzrwHKDPleq7Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryDXiDFzrwHKDPleq7Cont
2024-04-18 13:49:01 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 45 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:49:01 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d566a1b26baa4fbcbf7ff8d25f09380b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49938	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:00 UTC	2487	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAMBQRc6lZWQzfpKk Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:12$_ss:0$_st:1713449939787$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:49:00 UTC	1923	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4d 42 51 52 63 36 6c 5a 57 51 7a 66 70 4b 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4d 42 51 52 63 36 6c 5a 57 51 7a 66 70 4b 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 4d 42 51 52 63 36 6c 5a 57 51 7a 66 70 4b 6b 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryAMBQRc6lZWQzfpKkContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryAMBQRc6lZWQzfpKkContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryAMBQRc6lZWQzfpKkCont
2024-04-18 13:49:01 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:49:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 932e3da08898437a97685ed97220960b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49939	18.165.116.52	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:00 UTC	1196	OUT	POST /?ci=js/3.8.32&q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive Content-Length: 4109 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:49:00 UTC	4109	OUT	Data Raw: 6c 6f 76 6d 12 87 f2 3b 22 ac cf 16 6a a9 42 51 77 77 84 78 d8 17 74 61 b4 5f 0a d6 38 9e 05 16 fa 11 11 40 c0 87 f1 f4 db dc 2c 6a 2c dd 7a d9 f3 7a eb da a5 a8 7c c4 7b 7f 38 0a 8c b0 01 fc 8c 1b 39 3f 0e b6 4f c1 44 a1 16 0a ad 0c b3 33 a9 7a 89 3f ca 87 b4 b2 cc 3c 5d 57 b0 91 d1 01 ee e3 44 e6 2d 16 25 64 7a a1 61 70 fc 25 2f a0 7a 1b 87 03 f7 b0 61 68 5a a8 01 7b 48 5e 67 ed b0 31 12 59 e2 ce ee a5 1b 2c fc 2a 74 eb 6f 01 db d6 62 67 1c f2 30 7c fa df 74 a8 6b 4c 1d 93 22 96 da 46 ef 2c b9 35 80 f5 13 05 39 00 f5 25 2c a3 e1 68 20 c5 ba 5d b0 33 ee bf 83 24 c8 7f a7 a1 c5 3b e8 e1 48 25 f0 47 0b ca c6 fb 63 6c 63 21 b0 91 31 cb 69 3b 4e 45 5d 9f 42 a0 58 4f 08 dd 2c 8e 2b f8 c4 53 3d 47 9e e5 bd bf 2e 1f fa 2b 6c de 5c 70 51 34 5f a2 e5 cf 48 06 19 Data Ascii: lovm;"jBQwwxta_8@,j,zz\|{89?OD3z?<]WD-%dzap%/zahZ{H^g1Y,*tobg0\|tkL"F,59%,h ]3$;H%Gclc!1i;NE]BXO,+S=G.+l\pQ4_H
2024-04-18 13:49:01 UTC	897	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 979 Connection: close Date: Thu, 18 Apr 2024 13:49:01 GMT Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Set-Cookie: _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; Path=/; Domain=dropbox.com; Expires=Fri, 18 Apr 2025 13:49:01 GMT; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Cache: Miss from cloudfront Via: 1.1 eeb3e75a21ad82a69866fe4e29eba58c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: h51VVQdTma9M4Bdm-C7GjNybk9A2NJryu8hGGLcABzqAr34FOOG5Hw== Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Vary: Origin
2024-04-18 13:49:01 UTC	979	IN	Data Raw: 79 7c 80 ca a7 4f af 6e 88 70 b8 36 fc 9a f9 5c 43 b4 b9 df f9 67 ba 30 76 55 09 5c 6a 1a 3d 1b 1c 13 41 cc aa 77 6a db 10 d3 33 da 6f 19 4b 39 77 27 bf 6a f7 cf 7d b3 ab 14 93 0a 12 27 5e 0e eb 68 0a 71 54 1b 23 77 e0 8a a8 a0 a0 97 eb ae df 27 cc 85 bd ef 03 ad dc 5f c8 d2 94 21 db fe 65 ea e0 cd 2f 8f ae 3a b9 a7 8a 70 d9 95 3b ea e8 cd 32 9a ed 6c fc e6 d7 32 99 ed 6f ff e0 c1 32 fe bf 37 9c e7 cd 2f 8f ac 2d a7 b6 9a 60 d9 af 7d f2 a9 cd 6a c9 b9 31 bc bb 89 6a ce bd 2b a1 bd 81 21 97 a7 7d ac b3 9b 62 8f e6 24 ea a4 86 70 c4 a8 30 ba 86 80 68 c8 b2 7d f2 f0 b9 59 c8 9a 2d b1 99 c0 44 c4 88 27 aa 86 96 28 ea 9d 15 90 aa a9 3a 9c e4 26 aa 9d a1 66 cc 8b 0d ba 96 d8 6e fa a9 1c 82 a7 8c 32 f4 b2 68 a6 ab a5 47 c7 b0 66 f9 e1 a3 33 c9 f3 38 9d 9b 8b 33 Data Ascii: y\|Onp6\Cg0vU\j=Awj3oK9w'j}'^hqT#w'_!e/:p;2l2o27/-`}j1j+!}b$p0h}Y-D'(:&fn2hGf383

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49941	18.165.116.52	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:01 UTC	1064	OUT	GET /?ci=js/3.8.32&q=hSrgVEjs3amxLolocQ18 HTTP/1.1 Host: fp.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=tor8OcaPJXCBeGnB7vxKNXFW; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==
2024-04-18 13:49:01 UTC	528	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 18 Apr 2024 13:49:01 GMT Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 b7741ea084ea57c67340e91528ba25b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: RTFkcngjWTLq6vjhYHgrydjK52SyZ2lHUb8oYloWMYqhK6R1nxzeHQ== Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49940	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:01 UTC	2790	OUT	POST /ajax_register_cmplx HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2058 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==
2024-04-18 13:49:01 UTC	2058	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 26 63 6f 6e 74 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 73 35 75 7a 6d 33 6c 32 6f 30 71 7a 76 38 64 68 70 69 76 63 63 25 32 46 4d 61 72 63 6f 2d 50 61 6f 6c 6f 6e 69 2d 68 61 2d 63 6f 6e 64 69 76 69 73 6f 2d 75 6e 2d 64 6f 63 75 6d 65 6e 74 6f 2d 70 64 66 2d 64 65 6c 6c 2d 6f 72 64 69 6e 61 6e 7a 61 2d 64 65 6c 2d 74 72 69 62 75 6e 61 6c 65 2e 70 64 66 25 33 46 64 6c 25 33 44 30 25 32 36 6e 65 77 5f 75 73 65 72 25 33 44 31 25 32 36 6f 72 65 66 25 33 44 65 25 32 36 72 25 33 44 41 43 49 35 51 4b 4d 67 54 53 66 58 59 50 6a 48 32 48 37 67 75 45 43 72 50 4e 67 51 4b 48 48 7a 63 66 4f 58 57 68 2d 35 69 73 6c 4c 65 34 32 50 57 43 30 76 67 65 72 Data Ascii: is_xhr=true&t=tor8OcaPJXCBeGnB7vxKNXFW&cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger
2024-04-18 13:49:01 UTC	567	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 93 Date: Thu, 18 Apr 2024 13:49:01 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 120 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cd3a76ab457e4d67a35cac69a94b83b7 Connection: close
2024-04-18 13:49:01 UTC	120	IN	Data Raw: 65 72 72 3a 7b 22 66 6e 61 6d 65 22 3a 20 7b 22 6d 65 73 73 61 67 65 5f 74 65 78 74 22 3a 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 22 7d 2c 20 22 70 61 73 73 77 6f 72 64 22 3a 20 7b 22 6d 65 73 73 61 67 65 5f 74 65 78 74 22 3a 20 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 70 61 73 73 77 6f 72 64 22 7d 7d Data Ascii: err:{"fname": {"message_text": "Please enter your first name"}, "password": {"message_text": "Please enter a password"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49942	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:01 UTC	2769	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: edison_atlasservlet.signup_signin-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==
2024-04-18 13:49:01 UTC	1187	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 61 62 75 73 65 2d 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 5f 6c 6f 67 73 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 61 62 75 73 65 2d 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 5f 6c 6f 67 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 65 6d 61 69 6c 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 6e 65 77 73 6c 65 74 74 65 72 25 34 30 62 65 61 6e 74 65 63 68 2e 69 74 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 65 76 65 6e 74 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 52 45 47 49 53 54 45 52 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 Data Ascii: data-version=1&batches=%7B%22hive%3Aabuse-fingerprintjs_logs%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22abuse-fingerprintjs_logs%5C%22%2C%5C%22email%5C%22%3A%5C%22newsletter%40beantech.it%5C%22%2C%5C%22event%5C%22%3A%5C%22REGISTER%5C%22%2C%5C%22request_id
2024-04-18 13:49:02 UTC	2675	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:49:02 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a0ff87654a6c4da193180ef5bf6a8f83 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49945	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:02 UTC	2728	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1648 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7ERzhye0gWHDx1e6 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==
2024-04-18 13:49:02 UTC	1648	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 45 52 7a 68 79 65 30 67 57 48 44 78 31 65 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 45 52 7a 68 79 65 30 67 57 48 44 78 31 65 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 45 52 7a 68 79 65 30 67 57 48 44 78 31 65 36 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary7ERzhye0gWHDx1e6Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary7ERzhye0gWHDx1e6Content-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundary7ERzhye0gWHDx1e6Cont
2024-04-18 13:49:02 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 48 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:49:02 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3209c6b6edeb48c2b7df205c18af7c5c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49943	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:02 UTC	1632	OUT	GET /ajax_register_cmplx HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:13$_ss:0$_st:1713449939820$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==
2024-04-18 13:49:02 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 13:49:02 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7aef7f3888ff4567a3e67af042639afa Connection: close
2024-04-18 13:49:02 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49944	162.125.9.18	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 13:49:02 UTC	2728	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1801 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryhrh4jfSvPgZtJZoS Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/login?cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1&ib_redir=1&register_cont=%2Fscl%2Ffi%2Fs5uzm3l2o0qzv8dhpivcc%2FMarco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf%3Fdl%3D0%26new_user%3D1%26oref%3De%26r%3DACI5QKMgTSfXYPjH2H7guECrPNgQKHHzcfOXWh-5islLe42PWC0vger_hgpnzMUp820v8mHxwM12rDYENPTKNuRGPM2pipbMxwdDaNqIDhdrosHfzwc7dwYVgz7ij1hju_NW5FOIJAiImlN41Nb5hphiW9cdpzq50ZecAtB8AetU3g1tLBF46Xlv0PNGHeGUCOmj-RClRZQm80ni8v0Eh4zz%26sm%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjQxNjY5ODQzNTU0MDk2NDY5NDk5Mzg0NzEzNzEyNjAyMDcxMzY1; t=tor8OcaPJXCBeGnB7vxKNXFW; __Host-js_csrf=tor8OcaPJXCBeGnB7vxKNXFW; __Host-ss=XJ56ojJ30c; locale=en; ets=AcWLKf8ayorljxX2cdsxLJVghoYdGlMPW8kwlXM21KRcL%2BTskVWefwuwGJAFNnyXApZ/lQpKE31zfutIHKO2qRB70%2BiwGA2blhUVi%2BSW7RZBxaEG/AyB9TRbPYdpqXDbH8IBjSVcCfC4VMyFI886eIHI%2BI2S2Umygoklrkc48LF8Ew%3D%3D; __Host-logged-out-session=ChDuJAYKbxZ2bdnFDYVCr%2FWFENXIhLEGGi5BSm1EaENydDRCX01SUElDMG96YVZlTnBuNG1jUDM5NF91bEpocE12Z3hHUEVn; billing_cycle=yearly; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T13:47:17.832Z","expireDate":"2024-10-18T13:47:17.832Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":false,"analytics":false,"performance and functionality":false,"social media advertising":false},"userInteracted":true,"numDots":1}; _iidt=VMw24npb/exwemIf2nrLxuO5hUijS7GQrTiAIWh4k6H9CwUNVbVxklBFRiNnVgrf3ojZLLVdE26uAZyVP5YHbJ3b66Q88oZWC91QzzQ+LvE6Wg==; _vid_t=VZeFryK/GiTxbTy+GAJXxF918ybONeaWRrD7mWuCJuc1Yn7nyJDjl913L0d/gUId0HNJXPEjww+7U+sZ6S7t1ybiAzIguNUQEZ6YUyQlVJVWnA==; utag_main=v_id:018ef1761d2f001bf4923599d76b0506f002d06700918$_sn:1$_se:15$_ss:0$_st:1713449941243$ses_id:1713448033602%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:dropbox.com
2024-04-18 13:49:02 UTC	1801	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 72 68 34 6a 66 53 76 50 67 5a 74 4a 5a 6f 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 72 68 34 6a 66 53 76 50 67 5a 74 4a 5a 6f 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 74 6f 72 38 4f 63 61 50 4a 58 43 42 65 47 6e 42 37 76 78 4b 4e 58 46 57 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 72 68 34 6a 66 53 76 50 67 5a 74 4a 5a 6f 53 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryhrh4jfSvPgZtJZoSContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryhrh4jfSvPgZtJZoSContent-Disposition: form-data; name="t"tor8OcaPJXCBeGnB7vxKNXFW------WebKitFormBoundaryhrh4jfSvPgZtJZoSCont
2024-04-18 13:49:02 UTC	3006	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-P4e0ZPsWVq/TnDtowwsW' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-P4e0ZPsWVq/TnDtowwsW' 'nonce-MXetIkrHcxSoQjO4lbgR' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 13:49:02 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 769da581620847d994bab32dbf0298b5 Connection: close

Target ID:	0
Start time:	15:46:58
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:46:59
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:47:10
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4260 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:47:10
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1956,i,4409747880414985711,14517169551770487931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6684c0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Windows Analysis Report
https://www.dropbox.com/l/scl/AACx5Y_1z2aLv711dJbeePCe7GJijw0Gjik