Edit tour

Windows Analysis Report
https://docsend.com

Overview

General Information

Sample URL:	https://docsend.com
Analysis ID:	1428279
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6168 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6112 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6212 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docsend.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://marketing.docsend.com/
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/	HTTP Parser: Iframe src: https://marketing.docsend.com/
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com#main
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://marketing.docsend.com/
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com#main
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://marketing.docsend.com/
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com#main
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/#main	HTTP Parser: Iframe src: https://marketing.docsend.com/
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://marketing.docsend.com/how-it-works/
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://marketing.docsend.com/how-it-works/
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/how-it-works/	HTTP Parser: Iframe src: https://marketing.docsend.com/how-it-works/
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://marketing.docsend.com/integrations/
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://lp.dropboxbusiness.com/index.php/form/XDFrame
Source: https://www.docsend.com/integrations/	HTTP Parser: Iframe src: https://marketing.docsend.com/integrations/

Source: https://www.g2.com/products/docsend-docsend/reviews

HTTP Parser: Base64 decoded: https://www.g2.com/products/docsend-docsend/reviews

Source: https://www.docsend.com/#main	HTTP Parser: No favicon
Source: https://marketing.docsend.com/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/	HTTP Parser: No favicon
Source: https://lp.dropboxbusiness.com/index.php/form/XDFrame	HTTP Parser: No favicon
Source: https://marketing.docsend.com/how-it-works/	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/pgLV0NmWnJ4	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/982651595?random=1713459565211&cv=11&fst=1713459565211&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/982651595?random=1713459565240&cv=11&fst=1713459565240&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/lvEU8OcKg2k	HTTP Parser: No favicon
Source: https://marketing.docsend.com/integrations/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/integrations/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/integrations/	HTTP Parser: No favicon
Source: https://marketing.docsend.com/integrations/	HTTP Parser: No favicon
Source: https://www.g2.com/products/docsend-docsend/reviews	HTTP Parser: No favicon
Source: https://www.g2.com/products/docsend-docsend/reviews	HTTP Parser: No favicon
Source: https://www.g2.com/products/docsend-docsend/reviews	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/982651595?random=1713459593334&cv=11&fst=1713459593334&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/982651595?random=1713459593238&cv=11&fst=1713459593238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon

Source: https://www.docsend.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/integrations/	HTTP Parser: No <meta name="author".. found
Source: https://www.docsend.com/integrations/	HTTP Parser: No <meta name="author".. found

Source: https://www.docsend.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/#main	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/how-it-works/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/integrations/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.docsend.com/integrations/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49776 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.54
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.54
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /forms/v2.js?ver=2 HTTP/1.1Host: js.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/forms2/js/forms2.min.js?ver=2 HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/lv6lji7h HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37105587580039082392_1713459523353&_=1713459523354 HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=32396d58173c4999bb2fff5ab2d32d36 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.docsend.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/forms2/css/forms2.css HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /js/forms2/css/forms2-theme-simple.css HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en
Source: global traffic	HTTP traffic detected: GET /frame-modern.12a5980e.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-modern.7a9ca9be.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/initialize HTTP/1.1Host: featuregates.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php/form/XDFrame HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /js/forms2/js/forms2.min.js HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lp.dropboxbusiness.com/index.php/form/XDFrameAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: marketing.docsend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubsub/5-Oy6SU1VrIIK8U2elKQ9kIZk2ScpNpeaNkclHgqmYEc-m8xfiGfQx9jBXMT-gfE4Dfoglx1o-vBWhgRjjbTzcBRQ7X-LmSn-j2aSC?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.docsend.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: kRJNbD1qaR83G7r0ofQC1w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37107391334019404765_1713459532369&_=1713459532370 HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=e22dcdc7262f46d297144350d0ee7489&time=1713459531 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.32.js?utv=ut4.48.202403080219 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=718dd162ee90437799f4086be397ab33&time=1713459537 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536327 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=dropbox/docsend/202403080337&cb=1713459536451 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536658 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536327 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68304145449534289530469067022552814867
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=67742175460596105750453226224925927173&ts=1713459536971 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: dropbox.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68304145449534289530469067022552814867
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=03399203033517895891424532205099485311&ts=1713459537163 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536658 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=03242510230966952991372664810416290409
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFRUgAAAGGwyANw HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68304145449534289530469067022552814867
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: dropbox.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=03242510230966952991372664810416290409
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFRUgAAAB5dpgMv HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=03242510230966952991372664810416290409
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=67742175460596105750453226224925927173&ts=1713459536971 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=03399203033517895891424532205099485311&ts=1713459537163 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /vendors~app~tooltips-modern.77e8d419.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s3864202734271?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=329867D088CC7215-5195E06B379548D8&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&h2=marketing.docsend.com&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=f94d9a1a-623f-4586-905c-dec298db1b9c&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36440170823801?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=2598E6178332AFE3-4B8015A8075EBAD8&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=92ec06e5-7cf2-4b6b-a970-de32b64e930a&v13=04%2F18%2F2024&v14=67742175460596105750453226224925927173&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors~app-modern.3733d47a.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&callback=jQuery37102514834265039647_1713459539712&_=1713459539713 HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /app~tooltips-modern.b070189d.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app-modern.1755769f.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFRUgAAAGGwyANw HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dpm=03242510230966952991372664810416290409; demdex=03242510230966952991372664810416290409
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFRUgAAAB5dpgMv HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dpm=03242510230966952991372664810416290409; demdex=03242510230966952991372664810416290409
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /how-it-works/ HTTP/1.1Host: marketing.docsend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656; dbx_js_analytics_id=AACVUOd1jedmfN441-SDrx45N_cZCQOlcqr_6nHPC81FxA; intercom-id-lv6lji7h=a137ebbf-dc09-49f7-86e5-a1d358505a6d; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=36e27699-029a-4cf0-bb93-e42fd544cf2e; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; s_ips=0; s_tp=0; gpv_pgn=marketing.docsend.com%7Chome; s_dur=1713459538903; s_vncm=1714514399906%26vn%3D1; s_ivc=true; s_lv_s=First%20Visit; s_visit=1; s_inv=0; gpv_c51=marketing.docsend.com%2F; s_plt=7.42; gpv_c_pagename=marketing.docsend.com%7Chome; s_pltp=marketing.docsend.com%7Chome; s_ptc=%5B%5BB%5D%5D; s_nr30=1713459538918-New; s_cc=true; s_lv=1713459538920; s_tslv=1713459538941; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=1176715910%7CMCIDTS%7C19832%7CvVersion%7C5.4.0%7CMCMID%7C03399203033517895891424532205099485311%7CMCAAMLH-1714064337%7C7%7CMCAAMB-1714064337%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1713466737s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T16:59:00.980Z","expireDate":"2024-10-18T16:59:00.980Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":2}; utag_main=v_id:018ef225a1b7000b51815568e3370506f001e06700918$_sn:1$_se:5$_ss:0$_st:1713461341012$ses_id:1713459536313%3Bexp-session$_pn:2%3Bexp-session$vapi_domain:docsend.com
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s3864202734271?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=329867D088CC7215-5195E06B379548D8&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&h2=marketing.docsend.com&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=f94d9a1a-623f-4586-905c-dec298db1b9c&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36440170823801?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=2598E6178332AFE3-4B8015A8075EBAD8&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=92ec06e5-7cf2-4b6b-a970-de32b64e930a&v13=04%2F18%2F2024&v14=67742175460596105750453226224925927173&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s35818256649679?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=3243BC8676BB5756-380C39292852D8B9&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=2083&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34999277203671?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=6073A750CB93F372-39DDC72BC3D3AA0B&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=1929&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34999277203671?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=6073A750CB93F372-39DDC72BC3D3AA0B&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=1929&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s35818256649679?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=3243BC8676BB5756-380C39292852D8B9&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=2083&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /embed/pgLV0NmWnJ4 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /s/player/f92087f2/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /s/player/f92087f2/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36399109084315?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A6%204%20-120&sdid=48460D2BB9BD3B8B-2F71EB08861286A5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14%2Cevent11%3D3%2Cevent12%3D9%2Cevent13&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com%3Ahow-it-works&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=df5943e1-a463-4b37-9a45-9029109f6174&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fhow-it-works%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=how-it-works&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=a3a3ae30997648f08697399d5b383709&time=1713459547 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /s/player/f92087f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/f92087f2/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36399109084315?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A6%204%20-120&sdid=48460D2BB9BD3B8B-2F71EB08861286A5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14%2Cevent11%3D3%2Cevent12%3D9%2Cevent13&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com%3Ahow-it-works&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=df5943e1-a463-4b37-9a45-9029109f6174&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fhow-it-works%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=how-it-works&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s39880090925491?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A7%204%20-120&sdid=42976C63264AA87C-16E601D8DA92C8B0&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=487&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /s/player/f92087f2/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/pgLV0NmWnJ4/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s39880090925491?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A7%204%20-120&sdid=42976C63264AA87C-16E601D8DA92C8B0&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=487&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /vi_webp/pgLV0NmWnJ4/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SP5bjmT1BELkpOWyl51KAcOQZym0oxIKK-_0gBTcM0L23chpkrsV8FbaqVwaVl_f5zZw4piZTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SP5bjmT1BELkpOWyl51KAcOQZym0oxIKK-_0gBTcM0L23chpkrsV8FbaqVwaVl_f5zZw4piZTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?vA9NyQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/pgLV0NmWnJ4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /6191183.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /leadflows.js HTTP/1.1Host: js.hsleadflows.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.docsend.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6191183.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1713459300000/6191183.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.35.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.40.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.46.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.47.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.48.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.50.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36297445788951?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A23%204%20-120&sdid=2663114D288F0848-571389B8AE568641&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=536&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.51.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&t=How+Our+Secure+Document+Sharing+Works+-+DocSend&cts=1713459564051&vi=c45e810271b520e7349a9be4a5f70f0a&nc=true&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.1.1713459564046&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.52.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.58.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/dropbox/docsend/prod/utag.63.js?utv=ut4.48.202403080337 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36297445788951?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A23%204%20-120&sdid=2663114D288F0848-571389B8AE568641&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=536&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.js HTTP/1.1Host: i.kissmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.1.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F HTTP/1.1Host: forms.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&t=How+Our+Secure+Document+Sharing+Works+-+DocSend&cts=1713459564051&vi=c45e810271b520e7349a9be4a5f70f0a&nc=true&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.1.1713459564046&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/how-it-works/&e= HTTP/1.1Host: tracking.g2crowd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.1.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F HTTP/1.1Host: forms.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/982651595/?random=1713459565211&cv=11&fst=1713459565211&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/982651595/?random=1713459565240&cv=11&fst=1713459565240&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/982651595?random=1713459565211&cv=11&fst=1713459565211&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/982651595?random=1713459565240&cv=11&fst=1713459565240&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/176175412745322?v=2.9.154&r=stable&domain=marketing.docsend.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://marketing.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459565211&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqP6maxz1Skmkf-yNMFc-bDiPv_83x2w&random=2658280308&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459565240&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqXAsUCwFei-LJI3IaXns33M1Dt6S_lA&random=3446291755&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
Source: global traffic	HTTP traffic detected: GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459565211&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqP6maxz1Skmkf-yNMFc-bDiPv_83x2w&random=2658280308&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459565240&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqXAsUCwFei-LJI3IaXns33M1Dt6S_lA&random=3446291755&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/settings HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/p HTTP/1.1Host: api.segment.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /embed/lvEU8OcKg2k HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi_webp/lvEU8OcKg2k/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /generate_204?Fbsz0w HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/lvEU8OcKg2kAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /vi_webp/lvEU8OcKg2k/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&callback=jQuery37107759753487658225_1713459581265&_=1713459581266 HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /integrations/ HTTP/1.1Host: marketing.docsend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656; dbx_js_analytics_id=AACVUOd1jedmfN441-SDrx45N_cZCQOlcqr_6nHPC81FxA; intercom-id-lv6lji7h=a137ebbf-dc09-49f7-86e5-a1d358505a6d; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=36e27699-029a-4cf0-bb93-e42fd544cf2e; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; s_ips=0; s_tp=0; s_dur=1713459538903; s_vncm=1714514399906%26vn%3D1; s_ivc=true; s_lv_s=First%20Visit; s_visit=1; s_inv=0; s_ptc=%5B%5BB%5D%5D; s_cc=true; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=1176715910%7CMCIDTS%7C19832%7CvVersion%7C5.4.0%7CMCMID%7C03399203033517895891424532205099485311%7CMCAAMLH-1714064337%7C7%7CMCAAMB-1714064337%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1713466737s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_plt=3.65; s_pltp=marketing.docsend.com%7Chow-it-works; gpv_pgn=marketing.docsend.com%7Chow-it-works; gpv_c51=marketing.docsend.com%2Fhow-it-works%2F; gpv_c_pagename=marketing.docsend.com%7Chow-it-works; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T16:59:22.622Z","expireDate":"2024-10-18T16:59:22.622Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":2}; s_nr30=1713459563650-New; s_lv=1713459563652; s_tslv=1713459563655; __hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1; hubspotutk=c45e810271b520e7349a9be4a5f70f0a; __hssrc=1; __hssc=19306791.1.1713459564046; _gcl_au=1.1.2069947327.1713459565; _uetsid=02dbfef0fda511ee91d7db277dad5a16; _uetvid=02dc4d60fda511ee979821cfea6bdf6f; _fbp=fb.1.1713459566299.390803195; ajs_anonymous_id=dc182968-e6a7-4eab-ab4b-09dd1b251052; _ga=GA1.2.1733947432.1713459567; _gid=GA1.2.1042834324.1713459567; utag_main=v_id:018ef225a1b7000b51815568e3370506f001e06700918$_sn:1$_se:19$_ss:0$_st:1713461372312$ses_id:1713459536313%3Bexp-session$_pn:3%3Bexp-session$vapi_domain:docsend.com; s_tps=36; s_pvs=62
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /products/docsend-docsend/reviews HTTP/1.1Host: www.g2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87663508cb54677c HTTP/1.1Host: www.g2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.g2.com/products/docsend-docsend/reviews?__cf_chl_rt_tk=QiD10sYGYmIpDTZ9KxOwvHOvzBMUMuEHZ_QEgJehA88-1713459585-0.0.1.1-1642Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=d83eb17bfb3d41dcb7f64d5628e40157&time=1713459585 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.g2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.g2.com/products/docsend-docsend/reviewsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.g2.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/453692618:1713457615:mDLVUnRUyHwQqLq27-ZukzIgg8qFi3lb2Vv2A2tfpY4/87663508cb54677c/6723587646fe441 HTTP/1.1Host: www.g2.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.g2.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87663518c804138b HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /leadflows.js HTTP/1.1Host: js.hsleadflows.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.docsend.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"d252299cef5b9176cf0435e72e0baeeb"If-Modified-Since: Wed, 03 Apr 2024 09:27:53 UTC
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&t=Integrations+-+DocSend&cts=1713459587974&vi=c45e810271b520e7349a9be4a5f70f0a&nc=false&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.2.1713459564046&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34843923331403?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=525872809AFEB107-71A1B9F231FF0A4D&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2Fhow-it-works%2F&h2=marketing.docsend.com%3Aintegrations&c3=marketing.docsend.com%7Chow-it-works&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chow-it-works&v11=New%20Visitor&c12=e1d8a241-9743-4be3-8234-0a6921058fae&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fintegrations%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=integrations&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.2.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F HTTP/1.1Host: forms.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/integrations/&e= HTTP/1.1Host: tracking.g2crowd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=59621bb1112b965f64d3ecefd5a5f189; __cf_bm=PduoztFxTPb6oz.ZHOIZw6sKKtrKgP42I4fn_.eQPJg-1713459566-1.0.1.1-WfRXndTwxNigsYKrq4GC0j9x76vUt7eiVMTClYXWSPK0.f7fxgcaUQPXQw63wtoThO84JeFBEjrRO1_y2Cicww
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34652137582737?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=70683E4ED03C496D-740A0D7A94DD40E5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&t=Integrations+-+DocSend&cts=1713459587974&vi=c45e810271b520e7349a9be4a5f70f0a&nc=false&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.2.1713459564046&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.2.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F HTTP/1.1Host: forms.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
Source: global traffic	HTTP traffic detected: GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34652137582737?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=70683E4ED03C496D-740A0D7A94DD40E5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34843923331403?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=525872809AFEB107-71A1B9F231FF0A4D&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2Fhow-it-works%2F&h2=marketing.docsend.com%3Aintegrations&c3=marketing.docsend.com%7Chow-it-works&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chow-it-works&v11=New%20Visitor&c12=e1d8a241-9743-4be3-8234-0a6921058fae&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fintegrations%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=integrations&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1Host: dpiprodesntls.112.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /v1/p HTTP/1.1Host: api.segment.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87663518c804138b/1713459591979/ENb54b6QumsEJ6F HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/982651595/?random=1713459593238&cv=11&fst=1713459593238&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/982651595?random=1713459593238&cv=11&fst=1713459593238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/982651595/?random=1713459593334&cv=11&fst=1713459593334&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/982651595?random=1713459593334&cv=11&fst=1713459593334&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/87663518c804138b/1713459591986/53659176bf42da0775cdf5ef10ff249570006ee4a8fa996068c90ad1c878c395/DGMZK89WITWdWca HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=181672041.1713459593&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&dma=0&npa=0&gtm=45be44f0v892451398za200&auid=2069947327.1713459565&did=dYmQxMT&gdid=dYmQxMT HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPi_UXujdmL8e82F7sin1AVN5M1Baaw3-yL8gdrjf6a5QwhkA2wOCxV9OT
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459593238&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqwcszhJW_PuRKZ4GeBijCXT1Yvpm6gmclq8jW7diZtzpGORWh&random=802722143&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459593334&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqUqpXDz2h0Jus_YXDGESDnJ6jT2mmcRhAevBkfF9XZSsawPqI&random=1294648323&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87663518c804138b/1713459591979/ENb54b6QumsEJ6F HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459593238&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqwcszhJW_PuRKZ4GeBijCXT1Yvpm6gmclq8jW7diZtzpGORWh&random=802722143&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/982651595/?random=1713459593334&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqUqpXDz2h0Jus_YXDGESDnJ6jT2mmcRhAevBkfF9XZSsawPqI&random=1294648323&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /pubsub/5-iqTteE0pIeyN6zsurBQLxz_nXj9EtYsDF2qVVpYzfdq3IuVOpwfZdcQUvCuJxLJo7WYPLV_jFxQiuYffg7rRGYwvDFB7qM-eDXGo?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.docsend.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: RFhdOjvQEbevxWzkogKKAg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB

Source: chromecache_521.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_344.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_356.2.dr	String found in binary or memory: (g.Ko(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Ko(c,"www.youtube.com"),d=c.toString()):(c=EBa(d),zJ(c)&&(d=c));c=new g.AP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__sublink" target="_blank" title="Security & Control" href="https://www.youtube.com/embed/lvEU8OcKg2k"> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__sublink" target="_blank" title="See It In Action" href="https://www.youtube.com/embed/pgLV0NmWnJ4"> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__submenu-extra-button" title="Modern Data Rooms with DocSend" target="_blank" href="https://www.youtube.com/embed/0rViz_4Moo8">Modern Data Rooms with DocSend</a> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__submenu-extra-button" title="Security & Control with DocSend" target href="https://www.youtube.com/embed/lvEU8OcKg2k">Security & Control with DocSend</a> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__submenu-extra-image-container navigation-menu__submenu-extra-image-container--purpleplay" title="Modern Data Rooms with DocSend" target="_blank" href="https://www.youtube.com/embed/0rViz_4Moo8"><img class="navigation-menu__submenu-extra-image" src="https://www.docsend.com/wp-content/uploads/2021/12/Spaces-video-thumbnail.png" alt></a> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a class="navigation-menu__submenu-extra-image-container navigation-menu__submenu-extra-image-container--purpleplay" title="Security & Control with DocSend" target href="https://www.youtube.com/embed/lvEU8OcKg2k"><img class="navigation-menu__submenu-extra-image" src="https://www.docsend.com/wp-content/uploads/2021/12/Advanced-sharing-video-thumbnail-1.png" alt></a> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.facebook.com/docsend" target="_blank" aria-label="Visit DocSend on Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.facebook.com/docsend" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/docsend/" target="_blank" aria-label="Visit DocSend on LinkedIn"> equals www.linkedin.com (Linkedin)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/docsend/" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UCJjbvPO1DKueopWeQ7pB65A" target="_blank" aria-label="Visit DocSend on YouTube"> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UCJjbvPO1DKueopWeQ7pB65A" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/docsend/" /> equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr	String found in binary or memory: <script type="3b2accbd2a96e0c81f3dfecb-text/javascript"> var theChampSharingAjaxUrl = 'https://www.docsend.com/wp-admin/admin-ajax.php', heateorSsFbMessengerAPI = 'https://www.facebook.com/dialog/send?app_id=595489497242932&display=popup&link=%encoded_post_url%&redirect_uri=%encoded_post_url%',heateorSsWhatsappShareAPI = 'web', heateorSsUrlCountFetched = [], heateorSsSharesText = 'Shares', heateorSsShareText = 'Share', theChampPluginIconPath = 'https://www.docsend.com/wp-content/plugins/super-socializer/images/logo.png', theChampSaveSharesLocally = 0, theChampHorizontalSharingCountEnable = 0, theChampVerticalSharingCountEnable = 0, theChampSharingOffset = -10, theChampCounterOffset = -10, theChampMobileStickySharingEnabled = 0, heateorSsCopyLinkMessage = "Link copied."; equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr	String found in binary or memory: <script type="3b2accbd2a96e0c81f3dfecb-text/javascript">var theChampFBCommentUrl = 'https://www.docsend.com/'; var theChampFBCommentColor = ''; var theChampFBCommentNumPosts = ''; var theChampFBCommentWidth = '100%'; var theChampFBCommentOrderby = ''; var theChampCommentingTabs = "wordpress,facebook,disqus", theChampGpCommentsUrl = 'https://www.docsend.com/', theChampDisqusShortname = '', theChampScEnabledTabs = 'wordpress,fb', theChampScLabel = 'Leave a reply', theChampScTabLabels = {"wordpress":"Default Comments (0)","fb":"Facebook Comments","disqus":"Disqus Comments"}, theChampGpCommentsWidth = 0, theChampCommentingId = 'respond'</script> equals www.facebook.com (Facebook)
Source: chromecache_500.2.dr	String found in binary or memory: <script type="8e322e7b46ebc3a814bc1372-text/javascript"> var theChampSharingAjaxUrl = 'https://www.docsend.com/wp-admin/admin-ajax.php', heateorSsFbMessengerAPI = 'https://www.facebook.com/dialog/send?app_id=595489497242932&display=popup&link=%encoded_post_url%&redirect_uri=%encoded_post_url%',heateorSsWhatsappShareAPI = 'web', heateorSsUrlCountFetched = [], heateorSsSharesText = 'Shares', heateorSsShareText = 'Share', theChampPluginIconPath = 'https://www.docsend.com/wp-content/plugins/super-socializer/images/logo.png', theChampSaveSharesLocally = 0, theChampHorizontalSharingCountEnable = 0, theChampVerticalSharingCountEnable = 0, theChampSharingOffset = -10, theChampCounterOffset = -10, theChampMobileStickySharingEnabled = 0, heateorSsCopyLinkMessage = "Link copied."; equals www.facebook.com (Facebook)
Source: chromecache_500.2.dr	String found in binary or memory: <script type="8e322e7b46ebc3a814bc1372-text/javascript">var theChampFBCommentUrl = 'https://www.docsend.com/how-it-works/'; var theChampFBCommentColor = ''; var theChampFBCommentNumPosts = ''; var theChampFBCommentWidth = '100%'; var theChampFBCommentOrderby = ''; var theChampCommentingTabs = "wordpress,facebook,disqus", theChampGpCommentsUrl = 'https://www.docsend.com/how-it-works/', theChampDisqusShortname = '', theChampScEnabledTabs = 'wordpress,fb', theChampScLabel = 'Leave a reply', theChampScTabLabels = {"wordpress":"Default Comments (0)","fb":"Facebook Comments","disqus":"Disqus Comments"}, theChampGpCommentsWidth = 0, theChampCommentingId = 'respond'</script> equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/","url":"https://www.docsend.com/","name":"Secure Document Sharing & Analytics, eSignature, Data Rooms - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"about":{"@id":"https://www.docsend.com/#organization"},"primaryImageOfPage":{"@id":"https://www.docsend.com/#primaryimage"},"image":{"@id":"https://www.docsend.com/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:43:29+00:00","dateModified":"2024-02-01T13:23:24+00:00","description":"Try our secure document sharing platform for free. Instantly know when documents are opened & what pages are read. Easy-to-use eSignatures.","breadcrumb":{"@id":"https://www.docsend.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/","url":"https://www.docsend.com/","name":"Secure Document Sharing & Analytics, eSignature, Data Rooms - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"about":{"@id":"https://www.docsend.com/#organization"},"primaryImageOfPage":{"@id":"https://www.docsend.com/#primaryimage"},"image":{"@id":"https://www.docsend.com/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:43:29+00:00","dateModified":"2024-02-01T13:23:24+00:00","description":"Try our secure document sharing platform for free. Instantly know when documents are opened & what pages are read. Easy-to-use eSignatures.","breadcrumb":{"@id":"https://www.docsend.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_496.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/","url":"https://www.docsend.com/","name":"Secure Document Sharing & Analytics, eSignature, Data Rooms - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"about":{"@id":"https://www.docsend.com/#organization"},"primaryImageOfPage":{"@id":"https://www.docsend.com/#primaryimage"},"image":{"@id":"https://www.docsend.com/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:43:29+00:00","dateModified":"2024-02-01T13:23:24+00:00","description":"Try our secure document sharing platform for free. Instantly know when documents are opened & what pages are read. Easy-to-use eSignatures.","breadcrumb":{"@id":"https://www.docsend.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.twitter.com (Twitter)
Source: chromecache_500.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/how-it-works/","url":"https://www.docsend.com/how-it-works/","name":"How Our Secure Document Sharing Works - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"image":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:56:40+00:00","dateModified":"2023-07-11T21:04:19+00:00","description":"Learn about how easy it is to securely share documents through DocSend. Explore our features, such as tracking and analytics, and see how DocSend works.","breadcrumb":{"@id":"https://www.docsend.com/how-it-works/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/how-it-works/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/how-it-works/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/how-it-works/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"How It Works"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_500.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/how-it-works/","url":"https://www.docsend.com/how-it-works/","name":"How Our Secure Document Sharing Works - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"image":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:56:40+00:00","dateModified":"2023-07-11T21:04:19+00:00","description":"Learn about how easy it is to securely share documents through DocSend. Explore our features, such as tracking and analytics, and see how DocSend works.","breadcrumb":{"@id":"https://www.docsend.com/how-it-works/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/how-it-works/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/how-it-works/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/how-it-works/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"How It Works"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_500.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/how-it-works/","url":"https://www.docsend.com/how-it-works/","name":"How Our Secure Document Sharing Works - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"image":{"@id":"https://www.docsend.com/how-it-works/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-03-22T13:56:40+00:00","dateModified":"2023-07-11T21:04:19+00:00","description":"Learn about how easy it is to securely share documents through DocSend. Explore our features, such as tracking and analytics, and see how DocSend works.","breadcrumb":{"@id":"https://www.docsend.com/how-it-works/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/how-it-works/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/how-it-works/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403,"caption":"DBX feature image"},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/how-it-works/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"How It Works"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.twitter.com (Twitter)
Source: chromecache_308.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/integrations/","url":"https://www.docsend.com/integrations/","name":"Integrations - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"image":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-05-21T16:09:23+00:00","dateModified":"2022-06-22T19:02:40+00:00","description":"DocSend secure document sharing platform integrations with Dropbox, Gmail, Outlook, Salesforce, and more.","breadcrumb":{"@id":"https://www.docsend.com/integrations/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/integrations/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/integrations/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/integrations/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"Integrations"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_308.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/integrations/","url":"https://www.docsend.com/integrations/","name":"Integrations - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"image":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-05-21T16:09:23+00:00","dateModified":"2022-06-22T19:02:40+00:00","description":"DocSend secure document sharing platform integrations with Dropbox, Gmail, Outlook, Salesforce, and more.","breadcrumb":{"@id":"https://www.docsend.com/integrations/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/integrations/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/integrations/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/integrations/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"Integrations"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_308.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.docsend.com/integrations/","url":"https://www.docsend.com/integrations/","name":"Integrations - DocSend","isPartOf":{"@id":"https://www.docsend.com/#website"},"primaryImageOfPage":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"image":{"@id":"https://www.docsend.com/integrations/#primaryimage"},"thumbnailUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","datePublished":"2019-05-21T16:09:23+00:00","dateModified":"2022-06-22T19:02:40+00:00","description":"DocSend secure document sharing platform integrations with Dropbox, Gmail, Outlook, Salesforce, and more.","breadcrumb":{"@id":"https://www.docsend.com/integrations/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.docsend.com/integrations/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/integrations/#primaryimage","url":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg","width":403,"height":403},{"@type":"BreadcrumbList","@id":"https://www.docsend.com/integrations/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.docsend.com/"},{"@type":"ListItem","position":2,"name":"Integrations"}]},{"@type":"WebSite","@id":"https://www.docsend.com/#website","url":"https://www.docsend.com/","name":"DocSend","description":"","publisher":{"@id":"https://www.docsend.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.docsend.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.docsend.com/#organization","name":"DocSend","url":"https://www.docsend.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.docsend.com/#/schema/logo/image/","url":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","contentUrl":"https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png","width":1400,"height":139,"caption":"DocSend"},"image":{"@id":"https://www.docsend.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/docsend/","https://twitter.com/DocSend","https://www.instagram.com/docsend/","https://www.linkedin.com/company/docsend/"]}]}</script> equals www.twitter.com (Twitter)
Source: chromecache_308.2.dr	String found in binary or memory: <script type="d62ebd87669bfeeb8b4b318d-text/javascript"> var theChampSharingAjaxUrl = 'https://www.docsend.com/wp-admin/admin-ajax.php', heateorSsFbMessengerAPI = 'https://www.facebook.com/dialog/send?app_id=595489497242932&display=popup&link=%encoded_post_url%&redirect_uri=%encoded_post_url%',heateorSsWhatsappShareAPI = 'web', heateorSsUrlCountFetched = [], heateorSsSharesText = 'Shares', heateorSsShareText = 'Share', theChampPluginIconPath = 'https://www.docsend.com/wp-content/plugins/super-socializer/images/logo.png', theChampSaveSharesLocally = 0, theChampHorizontalSharingCountEnable = 0, theChampVerticalSharingCountEnable = 0, theChampSharingOffset = -10, theChampCounterOffset = -10, theChampMobileStickySharingEnabled = 0, heateorSsCopyLinkMessage = "Link copied."; equals www.facebook.com (Facebook)
Source: chromecache_308.2.dr	String found in binary or memory: <script type="d62ebd87669bfeeb8b4b318d-text/javascript">var theChampFBCommentUrl = 'https://www.docsend.com/integrations/'; var theChampFBCommentColor = ''; var theChampFBCommentNumPosts = ''; var theChampFBCommentWidth = '100%'; var theChampFBCommentOrderby = ''; var theChampCommentingTabs = "wordpress,facebook,disqus", theChampGpCommentsUrl = 'https://www.docsend.com/integrations/', theChampDisqusShortname = '', theChampScEnabledTabs = 'wordpress,fb', theChampScLabel = 'Leave a reply', theChampScTabLabels = {"wordpress":"Default Comments (0)","fb":"Facebook Comments","disqus":"Disqus Comments"}, theChampGpCommentsWidth = 0, theChampCommentingId = 'respond'</script> equals www.facebook.com (Facebook)
Source: chromecache_356.2.dr	String found in binary or memory: XQa=function(a,b){if(!a.j["0"]){var c=new CK("0","fakesb",{video:new yK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new DQ(new g.AP("http://www.youtube.com/videoplayback"),c,"fake"):new OQ(new g.AP("http://www.youtube.com/videoplayback"),c,new nQ(0,0),new nQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_521.2.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_356.2.dr	String found in binary or memory: a))):this.Od(g.PV(a.errorMessage)):this.Od(RV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.hn(c,{hl:a})),this.Od(RV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.uc&&!d.D&&LYa(this,function(e){if(g.vU(e,b.api,!YR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.zc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|vBa(this.Ef)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=UB(d,h,YRa):h&&(d="embedded");this.La=d;dua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb(ZRa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.oa=(this.K=g.Fb(ZRa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Wo=!this.oa;this.Qa=TB(!1,a.disableplaybackui);this.disablePaidContentOverlay=TB(!1, equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: a.severity,e,nK(a.details),f)}else this.qa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Be(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.XC)(),HX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.Be(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_525.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Ez(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!kI(q, equals www.facebook.com (Facebook)
Source: chromecache_356.2.dr	String found in binary or memory: g.VR=function(a){a=TR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",tjb);var nBa=oa(["//tpc.googlesyndication.com/sodar/",""]);var bNa={C5a:0,z5a:1,w5a:2,x5a:3,y5a:4,B5a:5,A5a:6};var vpa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.x(Uu,g.Kd);Uu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Rn.Sj(this.G);delete Uu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: g.gS=function(a){var b=g.VR(a);nSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.VR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.PR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),mD&&(a=kpa())&&(b.ebc=a));return g.hn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: r;this.lj=b?b.hl\|\|"en_US":WB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":WB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":WB("en",a.host_language);this.Qo=!this.Gc&&Math.random()<g.VI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Gc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Ld=VB(this.Ld,a.ismb);this.Wo?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=TR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Ym= equals www.youtube.com (Youtube)
Source: chromecache_366.2.dr, chromecache_396.2.dr, chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(qR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.oa=!1);b="";g.jR(this.B)?iR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: var G3={};var wfb=/[&\?]action_proxy=1/,vfb=/[&\?]token=([\w-])/,xfb=/[&\?]video_id=([\w-])/,yfb=/[&\?]index=([\d-])/,zfb=/[&\?]m_pos_ms=([\d-])/,Bfb=/[&\?]vvt=([\w-]*)/,nfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Afb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),qfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_521.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1012878118","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: docsend.com

Source: unknown

HTTP traffic detected: POST /v1/initialize HTTP/1.1Host: featuregates.orgConnection: keep-aliveContent-Length: 304STATSIG-CLIENT-TIME: 1713459523552sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxuSTATSIG-SDK-VERSION: 4.50.2sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/json; charset=UTF-8STATSIG-ENCODED: 1STATSIG-SDK-TYPE: js-clientsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docsend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-statsig-region: gke-us-east1Content-Length: 19content-type: text/plaindate: Thu, 18 Apr 2024 16:58:48 GMTvia: 1.1 googlecontent-security-policy: frame-ancestors *.statsig.comreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniff;Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f4f0cbfc4d4a4a4ca1ee627e0927d407Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:56 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 16bdc392be3f4c5ea6fc0da57015f47cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:56 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: bab16b989cda410e83abaeda0100e26fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:57 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 0433448dfdb548228b178b3e8f8a8549Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:57 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d065170881364308af200467cec9bc0eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e59318b72338465e959e0d5f0604fd66Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:58:59 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 928ea3eb66e2465e8c7748a6d0c6db2aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:03 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6de1760f13ab4311a434afb95ec710c8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:06 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8ad8c4d90ffa43b9a0271aedeef9ed84Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:06 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 053534f661f947be96959bc9859e8738Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:07 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: adb3881097cb404da3beba117943f9ceConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:07 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 40ee59a2532345af9fbda453ce68f104Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:08 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4600f3b4aee6408fa3d3b1ff60372d47Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:08 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 2056ae11ef2b4bd9855a81db3615a3b6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:08 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: cb024faf8a4445fd832bd800e2f5ec2cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:09 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 30e107c7a70c44789928c3070bc841efConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:09 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: ff1fa3f5a7d84943b6e8fb12b42c19e4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:10 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 997fea37a3414d1388695dd0b53509c5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 067f1c6d8a9547bcb7db7c40914b1717Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:14 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3ea5eaa4ae5e4c56bcb6ec48ab560a84Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:20 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c7da79c03d074820852df28526c3623cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:20 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: cd5f5d2a3fe54228a6ef72ab64c4802eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:27 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4455b190e4bb47988ec2b63b25f134f5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:34 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 9850ed5729ef469a84e81d009a074fefConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 18 Apr 2024 16:59:45 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16716Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: u9XrU2ciN8C8N/Okh71iuv7Uipe8g77aXvF8BSX16Vy1R+WPz8fimxl8xoR+Bj4C+SgTs1ORWzJsf5FcdVjqnvj9kDzMd+PznrvAKChB1AYVu+KPDW0Aw8pC7c3mLPwAioBgNHjQbJgP+iPqPHaz5A==$D+od3pVPjsbZV4PvM3qtLg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:44 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: ed761fb2d52a4237bf5178fe5264293eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:47 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b80ea0eea9474624801e474b94f4e918Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: fd3b816be7a24426a150855f47709b93Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8f6a73a2b2f4469d89590fcefee11706Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f2a701832f82442fb892c7870495aaf2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: dfe881257bcc472e8182d1941f77c87bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:57 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d81f4508f8f44b458da1c20fe165c4c7Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 16:59:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 2dfa9e4b3abf474680a45633b42b86f9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 17:00:00 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c1541b5dd28c48f4a4366d06519c98baConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Thu, 18 Apr 2024 17:00:04 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 052aed8312b14c8ea7ebc469a643e2e3Connection: close

Source: chromecache_503.2.dr, chromecache_562.2.dr	String found in binary or memory: http://commercialtype.com/licenseAtlas
Source: chromecache_429.2.dr	String found in binary or memory: http://ct.capterra.com
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_391.2.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_504.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_403.2.dr	String found in binary or memory: http://sharptype.co/licensing/desktop/Alternate
Source: chromecache_403.2.dr	String found in binary or memory: http://sharptype.co/licensing/desktop/Sharp
Source: chromecache_403.2.dr	String found in binary or memory: http://sharptype.coSee
Source: chromecache_356.2.dr, chromecache_314.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_503.2.dr, chromecache_562.2.dr	String found in binary or memory: http://www.commercialtype.comNot
Source: chromecache_382.2.dr, chromecache_359.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_356.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_356.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_356.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_356.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_356.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_561.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_356.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_477.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_547.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_481.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=33654
Source: chromecache_366.2.dr, chromecache_396.2.dr, chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_476.2.dr	String found in binary or memory: https://cdn.segment.com/analytics.js/v1/
Source: chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/docsend-extension-for-chr/nmkphfcebcpicnakipcmgapcckkbhppd
Source: chromecache_346.2.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_544.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_429.2.dr	String found in binary or memory: https://ct.capterra.com
Source: chromecache_356.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_308.2.dr	String found in binary or memory: https://docsend.com/login/
Source: chromecache_308.2.dr	String found in binary or memory: https://docsend.com/signup/marketing
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://experience.dropbox.com/form/docsend/funding-divide-report
Source: chromecache_308.2.dr	String found in binary or memory: https://experience.dropbox.com/form/docsend/fundraising-report
Source: chromecache_356.2.dr, chromecache_314.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_427.2.dr	String found in binary or memory: https://google.com
Source: chromecache_427.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_308.2.dr	String found in binary or memory: https://help.docsend.com/hc/en-us
Source: chromecache_308.2.dr	String found in binary or memory: https://help.docsend.com/hc/en-us/articles/216949018-Mail-Merge-Links-Explained
Source: chromecache_356.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_308.2.dr	String found in binary or memory: https://instagram.com/docsend/
Source: chromecache_521.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_356.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_359.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/6191183.js
Source: chromecache_391.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1713459300000/6191183.js
Source: chromecache_391.2.dr	String found in binary or memory: https://js.hs-banner.com/6191183.js
Source: chromecache_382.2.dr	String found in binary or memory: https://js.hs-banner.com/cookie-banner-public/v1
Source: chromecache_391.2.dr	String found in binary or memory: https://js.hsleadflows.net/leadflows.js
Source: chromecache_382.2.dr	String found in binary or memory: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#advertise
Source: chromecache_382.2.dr	String found in binary or memory: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#analytics
Source: chromecache_382.2.dr	String found in binary or memory: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#functiona
Source: chromecache_382.2.dr	String found in binary or memory: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#necessary
Source: chromecache_346.2.dr	String found in binary or memory: https://mastodon.social
Source: chromecache_427.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_364.2.dr, chromecache_335.2.dr, chromecache_376.2.dr, chromecache_419.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_366.2.dr, chromecache_396.2.dr, chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_314.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_521.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://polyfill.io/v3/polyfill.min.js?features=NodeList.prototype.forEach%2CArray.prototype.forEach
Source: chromecache_350.2.dr, chromecache_439.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_350.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_356.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_356.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_356.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_356.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_316.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_459.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_522.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_522.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_477.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_356.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_356.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_356.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_356.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_477.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_364.2.dr, chromecache_335.2.dr, chromecache_376.2.dr, chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j597481942
Source: chromecache_364.2.dr, chromecache_335.2.dr, chromecache_376.2.dr, chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j768907168
Source: chromecache_364.2.dr, chromecache_335.2.dr, chromecache_376.2.dr, chromecache_419.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j8307377499
Source: chromecache_419.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551
Source: chromecache_385.2.dr	String found in binary or memory: https://tracking.g2crowd.com/attribution_tracking/conversions/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/2021-vc-fundraising-report
Source: chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/board-meeting-minutes-template
Source: chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/investor-report-template
Source: chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/nda-template
Source: chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/newsletter-registration
Source: chromecache_308.2.dr	String found in binary or memory: https://try.docsend.com/pitch-deck-template
Source: chromecache_308.2.dr	String found in binary or memory: https://twitter.com/docsend/
Source: chromecache_308.2.dr	String found in binary or memory: https://us-partner-integrations.egnyte.com/appstore/#/apps/DocSend
Source: chromecache_356.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/#/schema/logo/image/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/#breadcrumb
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/#organization
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/#primaryimage
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/#website
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/?p=164
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/?p=4750
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/?s=
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/blog/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/blog/docsend-for-salesforce-integration/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/blog/docsend-ifttt-integration/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/blog/docsend-zapier-workflow-automation-bliss/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/br/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/br/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/br/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/careers/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/client-portals/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/cn/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/cn/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/cn/integrations/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/comments/feed/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/contributor-program/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/copyright-and-ip-policy/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/customers/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/de/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/de/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/de/integrations/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/dk/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/dk/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/dk/integrations/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/docsend-champions-program/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/es-LA/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/es-LA/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/es-LA/integrations/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/es/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/es/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/es/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/analytics-video/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/analytics/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/dynamic-watermarking/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/esignature/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/one-click-nda/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/sharing/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/features/spaces/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/features/virtual-data-room/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/feed/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/fr/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/fr/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/fr/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/funded/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/fundraising-network/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/how-it-works/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/how-it-works/#breadcrumb
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/how-it-works/#primaryimage
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/active-vc-list/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/pitch-deck-metrics/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/selling-remote-with-analytics/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/startup-fundraising-score/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/startup-fundraising-survey/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/startup-fundraising/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/index/the-funding-divide
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/integrations/#breadcrumb
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/integrations/#primaryimage
Source: chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/integrations/dropbox/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/it/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/it/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/it/integrations/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/jp/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/jp/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/jp/integrations/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/kr/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/kr/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/kr/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/letschat/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/nl/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/nl/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/nl/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/partners/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/pitch-deck-analyzer/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/pl/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/pl/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/pl/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/pricing/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/privacy-policy/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/proposal-software/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/se/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/se/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/se/integrations/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/board-management/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/solutions/customer-success/
Source: chromecache_496.2.dr, chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/solutions/fundraising-pitch-decks/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/investment-management/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/solutions/investor-relations-and-fund-reporting/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/investor-relations-software/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/media-sales/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/nonprofit/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/professional-services/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/solutions/sales-engagement/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/solutions/sales-marketing/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/startup-fundraising/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/tech-sales/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/solutions/venture-capitalist/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/terms-of-service/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/trust-center/security/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/tw/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/tw/how-it-works/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/tw/integrations/
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-admin/admin-ajax.php
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/adbff051f65c0f8e126dcdec504117f3.js
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/better-click-to-tweet/assets/css/s
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/dbx-ccpa-dns/public/css/dbx-ccpa-d
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/heroic-table-of-contents/dist/bloc
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/super-socializer/css/front.css?ver
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/wordpress-popular-posts/assets/css
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/cache/min/1/wp-content/themes/marketing-site-theme/dist/css/app.c
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/plugins/marketing-site-gutenberg/css/style.css?ver=6.4.3
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/AtlasGrotesk-Medium-Web.tt
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/AtlasGrotesk-Regular-Web.t
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBook23-vf
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBookItali
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/images/video-icon.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/buzzfeed.svg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/custlogos-airtable.svg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/custlogos-onemedical.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-gmail
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-ifttt
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-outlook
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-salesforce
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-zapier
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/AICPA-SOC-logo.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-108x108.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-120x120.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-127x127.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-150x150.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-158x158.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-187x187.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-25x25.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-275x275.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-32x32.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-50x50.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-54x54.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-60x60.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-108x108.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-120x120.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-127x127.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-150x150.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-158x158.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-187x187.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-25x25.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-275x275.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-32x32.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-50x50.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-54x54.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-60x60.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275.jpeg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2019/10/integrations-page-dropbox.png
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/icon-facebook.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/icon-instagram.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/icon-linkedin.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/icon-twitter.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/icon-youtube.svg
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/01/logo-docsend.svg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-108x108.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-120x120.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-127x127.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-150x150.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-158x158.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-187x187.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-25x25.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-32x32.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-50x50.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-54x54.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7-60x60.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7.jpg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/icon-podcast.svg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-108x108.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-150x150.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-187x187.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-275x275.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-54x54.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-100x100.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-108x108.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-120x120.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-127x127.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-150x150.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-158x158.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-187x187.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-200x200.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-25x25.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-275x275.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-300x300.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-32x32.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-403x403.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-50x50.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-54x54.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-60x60.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz.jpeg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/03/Egnyte-logo.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-1024x1024.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-1080x1080.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-108x108.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-120x120.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-127x127.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-150x150.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-1536x1536.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-158x158.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-1646x1646.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-187x187.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-2048x2048.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-25x25.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-275x275.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-300x300.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-32x32.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-403x403.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-50x50.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-54x54.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-60x60.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-768x768.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-823x823.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-108x108.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-120x120.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-127x127.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-150x150.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-158x158.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-187x187.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-25x25.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-275x275.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-300x300.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-32x32.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-403x403.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-50x50.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-54x54.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-60x60.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst-768x768.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/09/gerst.jpeg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/23-Goodbye-attachments-hello-links-1.mp4
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/23-Goodbye-attachments-hello-links.webm
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/24-Get-instant-actionable-feedback-2.webm
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/24-Get-instant-actionable-feedback.mp4
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/25-Latest-version-always-1.mp4
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/25-Latest-version-always.webm
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Advanced-sharing-video-thumbnail-1.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_3_Analytics.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_4_Spaces.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_5_One_Click_NDA.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_6_Solutions.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v7_1_uploading.png
Source: chromecache_496.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX100_in_Situ_View_Metrics_2.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/DBX_docsend-og-image-ex1_Square-403x403-1.jpg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Docsend-Logo_Full-Color_RGB-1.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-1024x247.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-104x25.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-120x29.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-127x31.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-133x32.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-158x38.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-207x50.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-300x72.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-60x14.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-768x185.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-823x198.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-120x102.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-127x108.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-158x135.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-29x25.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-300x256.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-37x32.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-59x50.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-60x51.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-768x656.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-823x703.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo.png
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Salesloft_logos_panel.png
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/Spaces-video-thumbnail.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2021/12/meet-Jessica.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/DBX_docsend-og-image-ex1_Square-403x403-1.jpg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-1022x1024.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-1078x1080.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-108x108.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-120x120.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-127x127.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-150x150.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-158x158.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-187x187.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-25x25.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-275x275.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-300x300.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-32x32.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-403x403.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-50x50.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-54x54.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-60x60.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-768x770.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-823x825.png
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500.png
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/04/Docsend-Glyph_FAvicon_50x50_RGB-32x32.png
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/04/Docsend-Glyph_FAvicon_50x50_RGB.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/09/DBX100_How_It_Works_v5_2_Security_2.png
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2022/09/how-docsend-works.svg
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/04/DS_placeholder_logo_on_BLK.svg
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/06/23-Goodbye-attachments-hello-links_homepage-anima
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/06/24-Get-instant-actionable-feedback_homepage-anima
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/06/25-Latest-version-always_homepage-animation_en-US
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/06/Product_Analytics_screen_dbx_en-US.jpg
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-content/uploads/2023/11/preseed-refresh-2.png
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.docsend.com%2F
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.docsend.com%2F&format=xm
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F
Source: chromecache_496.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/wp/v2/pages/145
Source: chromecache_500.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/wp/v2/pages/164
Source: chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/wp-json/wp/v2/pages/4750
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/xmlrpc.php
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.docsend.com/xmlrpc.php?rsd
Source: chromecache_398.2.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.dropbox.com/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.dropbox.com/lp/about/impressum
Source: chromecache_502.2.dr, chromecache_425.2.dr, chromecache_361.2.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_508.2.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: chromecache_308.2.dr	String found in binary or memory: https://www.g2.com/products/docsend-docsend/reviews
Source: chromecache_366.2.dr, chromecache_396.2.dr, chromecache_525.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_477.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_477.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_477.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_427.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_477.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_485.2.dr, chromecache_351.2.dr, chromecache_360.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/982651595/?random
Source: chromecache_427.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_356.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_366.2.dr, chromecache_396.2.dr, chromecache_522.2.dr, chromecache_370.2.dr, chromecache_525.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_530.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_477.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_407.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_tracking_id##
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-THK58L
Source: chromecache_299.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_356.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_521.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_308.2.dr	String found in binary or memory: https://www.linkedin.com/company/docsend/
Source: chromecache_522.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_356.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_308.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCJjbvPO1DKueopWeQ7pB65A
Source: chromecache_308.2.dr	String found in binary or memory: https://www.youtube.com/embed/0rViz_4Moo8
Source: chromecache_308.2.dr	String found in binary or memory: https://www.youtube.com/embed/lvEU8OcKg2k
Source: chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.youtube.com/embed/pgLV0NmWnJ4
Source: chromecache_356.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_356.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_356.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_356.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_356.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49776 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@33/470@216/58

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docsend.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6112 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6212 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6112 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6212 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
forms.hubspot.com	104.16.117.116	true	false	high
featuregates.org	34.128.128.0	true	false	unknown
i.ytimg.com	172.253.124.119	true	false	high
js.hs-analytics.net	104.17.175.201	true	false	unknown
platform.twitter.map.fastly.net	146.75.40.157	true	false	unknown
sj01.mktossl.com	104.17.73.206	true	false	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.197.186.181	true	false	high
scontent.xx.fbcdn.net	31.13.65.7	true	false	high
d296je7bbdd650.cloudfront.net	3.163.113.148	true	false	high
track.hubspot.com	104.16.117.116	true	false	high
t.co	104.244.42.133	true	false	high
js.hsforms.net	104.18.142.119	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
js.hs-scripts.com	104.16.141.209	true	false	high
photos-ugc.l.googleusercontent.com	142.250.105.132	true	false	high
www.google.com	142.250.105.105	true	false	high
tracking.g2crowd.com	104.18.43.31	true	false	high
api.segment.io	44.234.198.184	true	false	high
nexus-websocket-a.intercom.io	34.237.73.95	true	false	high
dpiprodesntls.112.2o7.net	63.140.38.210	true	false	high
js.intercomcdn.com	18.164.78.19	true	false	high
js.hs-banner.com	104.18.34.229	true	false	unknown
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
www.g2.com	104.16.188.41	true	false	high
plus.l.google.com	173.194.219.100	true	false	high
s.twitter.com	104.244.42.67	true	false	high
widget.intercom.io	108.138.64.56	true	false	high
api-iam.intercom.io	52.55.103.136	true	false	high
d3gwed3etk0v2d.cloudfront.net	3.163.80.122	true	false	high
static.doubleclick.net	142.250.105.149	true	false	high
js.hsleadflows.net	104.18.140.17	true	false	unknown
i.kissmetrics.io	45.55.99.106	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	108.177.122.91	true	false	high
googleads.g.doubleclick.net	173.194.219.157	true	false	high
play.google.com	142.250.105.138	true	false	high
challenges.cloudflare.com	104.17.3.184	true	false	high
www-env.dropbox-dns.com	162.125.9.18	true	false	unknown
events.statsigapi.net	34.128.128.0	true	false	unknown
td.doubleclick.net	172.253.124.154	true	false	high
docsend.com	13.33.4.11	true	false	high
dzfq4ouujrxm8.cloudfront.net	3.161.163.124	true	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	high
dropbox.demdex.net	unknown	unknown	false	high
polyfill.io	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
hsleadflows.net	unknown	unknown	false	unknown
www.docsend.com	unknown	unknown	false	high
hsforms.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
doug1izaerwt3.cloudfront.net	unknown	unknown	false	high
lp.dropboxbusiness.com	unknown	unknown	false	unknown
tags.tiqcdn.com	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
a.quora.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
marketing.docsend.com	unknown	unknown	false	high
cdn.segment.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
hs-scripts.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
i.kissmetrics.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://js.hs-scripts.com/6191183.js	false	high
https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.35.js?utv=ut4.48.202403080337	false	high
about:blank	false	low
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false	high
https://www.youtube.com/favicon.ico	false	high
https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.4/s34843923331403?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=525872809AFEB107-71A1B9F231FF0A4D&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2Fhow-it-works%2F&h2=marketing.docsend.com%3Aintegrations&c3=marketing.docsend.com%7Chow-it-works&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chow-it-works&v11=New%20Visitor&c12=e1d8a241-9743-4be3-8234-0a6921058fae&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fintegrations%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=integrations&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1	false	high
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com	false	high
https://js.intercomcdn.com/vendors~app~tooltips-modern.77e8d419.js	false	high
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30	false	high
https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.4/s36297445788951?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A23%204%20-120&sdid=2663114D288F0848-571389B8AE568641&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=536&AQE=1	false	high
https://www.youtube.com/generate_204?Fbsz0w	false	high
https://marketing.docsend.com/how-it-works/	false	high
https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.51.js?utv=ut4.48.202403080337	false	high
https://api-iam.intercom.io/messenger/web/ping	false	high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=FGET	false	high
https://marketing.docsend.com/	false	high
https://www.youtube.com/s/player/f92087f2/www-player.css	false	high
https://dpiprodesntls.112.2o7.net/id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=03399203033517895891424532205099485311&ts=1713459537163	false	high
https://www.dropbox.com/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=e22dcdc7262f46d297144350d0ee7489&time=1713459531	false	high
https://www.google.com/pagead/1p-user-list/982651595/?random=1713459593238&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqwcszhJW_PuRKZ4GeBijCXT1Yvpm6gmclq8jW7diZtzpGORWh&random=802722143&rmt_tld=0&ipr=y	false	high
https://js.intercomcdn.com/app~tooltips-modern.b070189d.js	false	high
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&t=Integrations+-+DocSend&cts=1713459587974&vi=c45e810271b520e7349a9be4a5f70f0a&nc=false&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.2.1713459564046&cc=15	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87663518c804138b	false	high
https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.4/s36399109084315?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A6%204%20-120&sdid=48460D2BB9BD3B8B-2F71EB08861286A5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14%2Cevent11%3D3%2Cevent12%3D9%2Cevent13&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com%3Ahow-it-works&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=df5943e1-a463-4b37-9a45-9029109f6174&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fhow-it-works%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=how-it-works&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1	false	high
https://www.youtube.com/generate_204?vA9NyQ	false	high
https://lp.dropboxbusiness.com/index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&callback=jQuery37102514834265039647_1713459539712&_=1713459539713	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	high
https://lp.dropboxbusiness.com/js/forms2/css/forms2-theme-simple.css	false	unknown
https://connect.facebook.net/en_US/sdk.js?hash=32396d58173c4999bb2fff5ab2d32d36	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.docsend.com/nl/how-it-works/	chromecache_500.2.dr	false		high
https://www.docsend.com/fr/how-it-works/	chromecache_500.2.dr	false		high
https://mastodon.social	chromecache_346.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-1080x1080.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-158x38.png	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275.jpeg	chromecache_496.2.dr	false		high
https://instagram.com/docsend/	chromecache_308.2.dr	false		high
https://www.docsend.com/es/how-it-works/	chromecache_500.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_477.2.dr	false		high
https://www.dropbox.com/	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/integrations/#primaryimage	chromecache_308.2.dr	false		high
https://www.docsend.com/dk/	chromecache_496.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_521.2.dr	false	URL Reputation: safe	unknown
http://ct.capterra.com	chromecache_429.2.dr	false		high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_521.2.dr	false		high
https://www.docsend.com/wp-json/	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-127x127.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/pricing/	chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-outlook	chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-768x656.png	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-300x300.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-60x14.png	chromecache_496.2.dr	false		high
https://www.docsend.com/pl/integrations/	chromecache_308.2.dr	false		high
https://www.docsend.com/it/	chromecache_496.2.dr	false		high
https://www.dropbox.com	chromecache_398.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_356.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/23-Goodbye-attachments-hello-links.webm	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/better-click-to-tweet/assets/css/s	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/features/analytics/	chromecache_308.2.dr	false		high
http://gmpg.org/xfn/11	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-50x50.jpg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/dbx-ccpa-dns/public/css/dbx-ccpa-d	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275-150x150.jpg	chromecache_496.2.dr	false		high
https://www.docsend.com/features/esignature/	chromecache_308.2.dr	false		high
https://www.docsend.com/how-it-works/#breadcrumb	chromecache_500.2.dr	false		high
https://www.docsend.com/blog/docsend-zapier-workflow-automation-bliss/	chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-ifttt	chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/09/gerst-108x108.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/heroic-table-of-contents/dist/bloc	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-127x127.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-275x275.png	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-108x108.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-300x300.png	chromecache_496.2.dr	false		high
https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#necessary	chromecache_382.2.dr	false		high
http://www.hubspot.com	chromecache_382.2.dr, chromecache_359.2.dr	false		high
https://www.docsend.com/cn/	chromecache_496.2.dr	false		high
https://polyfill.io/v3/polyfill.min.js?features=NodeList.prototype.forEach%2CArray.prototype.forEach	chromecache_496.2.dr, chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.docsend.com/blog/docsend-for-salesforce-integration/	chromecache_308.2.dr	false		high
https://www.docsend.com/features/one-click-nda/	chromecache_308.2.dr	false		high
https://www.docsend.com/integrations/dropbox/	chromecache_500.2.dr, chromecache_308.2.dr	false		high
https://www.youtube.com/embed/0rViz_4Moo8	chromecache_308.2.dr	false		high
https://www.docsend.com/es/	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-2048x2048.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-150x150.jpeg	chromecache_496.2.dr	false		high
https://ct.capterra.com	chromecache_429.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_350.2.dr	false		high
https://youtu.be/	chromecache_356.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-60x51.png	chromecache_496.2.dr	false		high
https://www.docsend.com/jp/how-it-works/	chromecache_500.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-54x54.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275-108x108.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-120x29.png	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-1078x1080.png	chromecache_496.2.dr	false		high
https://www.docsend.com/#primaryimage	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-25x25.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/solutions/fundraising-pitch-decks/	chromecache_496.2.dr, chromecache_500.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-108x108.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2019/05/custlogos-airtable.svg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/09/gerst-300x300.jpeg	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-158x158.png	chromecache_496.2.dr	false		high
https://www.docsend.com/wp-content/uploads/2021/09/gerst-25x25.jpeg	chromecache_496.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.161.163.124	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.188.41	www.g2.com	United States	13335	CLOUDFLARENETUS	false
63.140.38.189	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
173.194.219.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.105.132	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.105.138	play.google.com	United States	15169	GOOGLEUS	false
35.174.127.31	unknown	United States	14618	AMAZON-AESUS	false
162.125.9.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
34.237.73.95	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
104.17.73.206	sj01.mktossl.com	United States	13335	CLOUDFLARENETUS	false
104.17.74.206	unknown	United States	13335	CLOUDFLARENETUS	false
74.125.138.99	unknown	United States	15169	GOOGLEUS	false
74.125.138.147	unknown	United States	15169	GOOGLEUS	false
54.197.93.190	unknown	United States	14618	AMAZON-AESUS	false
34.196.172.205	unknown	United States	14618	AMAZON-AESUS	false
104.244.42.133	t.co	United States	13414	TWITTERUS	false
172.253.124.136	unknown	United States	15169	GOOGLEUS	false
13.33.4.11	docsend.com	United States	7018	ATT-INTERNET4US	false
34.128.128.0	featuregates.org	United States	2686	ATGS-MMD-ASUS	false
142.250.105.119	unknown	United States	15169	GOOGLEUS	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
146.75.40.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
108.177.122.91	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
104.16.141.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false
34.225.139.162	unknown	United States	14618	AMAZON-AESUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.16.186.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.105.155	unknown	United States	15169	GOOGLEUS	false
34.197.186.181	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
45.55.99.106	i.kissmetrics.io	United States	14061	DIGITALOCEAN-ASNUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
44.240.52.117	unknown	United States	16509	AMAZON-02US	false
108.177.122.156	unknown	United States	15169	GOOGLEUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
104.18.140.17	js.hsleadflows.net	United States	13335	CLOUDFLARENETUS	false
52.55.103.136	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
172.253.124.154	td.doubleclick.net	United States	15169	GOOGLEUS	false
63.140.38.210	dpiprodesntls.112.2o7.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.18.34.229	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
3.163.80.122	d3gwed3etk0v2d.cloudfront.net	United States	16509	AMAZON-02US	false
172.253.124.119	i.ytimg.com	United States	15169	GOOGLEUS	false
3.163.113.148	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
104.244.42.197	unknown	United States	13414	TWITTERUS	false
142.250.105.105	www.google.com	United States	15169	GOOGLEUS	false
142.250.105.149	static.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
31.13.65.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
18.164.78.19	js.intercomcdn.com	United States	3	MIT-GATEWAYSUS	false
44.234.198.184	api.segment.io	United States	16509	AMAZON-02US	false
108.138.64.56	widget.intercom.io	United States	16509	AMAZON-02US	false
104.18.43.31	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
104.16.117.116	forms.hubspot.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.23
192.168.2.15

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428279
Start date and time:	2024-04-18 18:57:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docsend.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@33/470@216/58
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.docsend.com/#main Browse: https://www.docsend.com/how-it-works/ Browse: https://www.youtube.com/embed/pgLV0NmWnJ4 Browse: https://www.youtube.com/embed/lvEU8OcKg2k Browse: https://www.docsend.com/integrations/ Browse: https://www.g2.com/products/docsend-docsend/reviews

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 64.233.177.102, 64.233.177.113, 64.233.177.100, 64.233.177.138, 64.233.177.139, 64.233.177.101, 64.233.185.84, 34.104.35.123, 104.20.123.102, 104.20.124.102, 64.233.176.95, 74.125.136.106, 74.125.136.99, 74.125.136.105, 74.125.136.147, 74.125.136.103, 74.125.136.104, 173.194.219.97, 104.18.51.3, 104.18.52.27, 172.253.124.97, 104.16.100.29, 104.16.99.29, 142.250.9.95, 142.250.105.95, 74.125.136.95, 64.233.177.95, 172.253.124.95, 142.251.15.95, 74.125.138.95, 173.194.219.95, 172.217.215.95, 108.177.122.95, 64.233.185.95, 13.85.23.86, 20.242.39.171, 3.226.143.241, 44.194.74.108, 52.206.38.125, 107.22.246.47, 18.235.62.181, 44.207.11.65, 52.165.164.15, 13.95.31.18, 64.233.177.94, 74.125.138.94, 199.232.210.172, 162.159.152.17, 162.159.153.247, 23.219.163.32, 23.219.163.73, 13.107.21.237, 204.79.197.237, 13.107.42.14, 172.253.124.139, 172.253.124.100, 172.253.124.113, 172.253.124.101, 172.253.124.102, 172.253.124.138, 74.125.138.113, 74.125.138.102, 74.125.1
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, cfl.dropboxstatic.com.cdn.cloudflare.net, a.quora.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, cm.everesttech.net.akadns.net, ctldl.windowsupdate.com, jnn-pa.googleapis.com, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, google-analytics.com, ssl.google-analytics.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, www.docsend.com.cdn.cloudflare.net, dual-a-0034.a-msedge.net, clients.l.google.com, polyfill.io.cdn.cloudfla
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://docsend.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19968
Entropy (8bit):	7.988594852725817
Encrypted:	false
SSDEEP:	384:2fkws46BslmWqIOGYPjREx55hYOG/sqS/VSHCuKdfptgQENrERdjvH6:2swR6CTfYNEffYP/sLNzuK/0NQva
MD5:	3567358B035CC7B25B6209932B5C755F
SHA1:	47F0C5CED1C83A425155821F205D219AF579878B
SHA-256:	1B257A910FC7A620E3AB74BB7999173E4E55877533717EDF589C5F235849522A
SHA-512:	6297BB12EFB57511B567E46033059F06BEBF2123896ED30D417ED4713ED716BF4B4B9CD753C4A5BD9FEFF744F42D9EB98C4F3039DB064777822E699F15872A7F
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2023/11/preseed-refresh-2.png
Preview:	RIFF.M..WEBPVP8 .M...q...X.T.>Q$.F#..)$uk. ..en..v......dfA.}...>........-..s<..7.....................w...?...........j.i.#.......O..?....g.....g._..../.G.?g?......._......................gM?,....?p?z.t..o......................QO...........+).K................_./K...........w...?...x.G..........,>............_......8...K...o......c.....z...7.,.88........R..s.....+H...X....r...T{C..m3.......4K.I.;.p........s.2,tPj^qG...)U.Z...\|../..4..}`..x.(.O\|.......A....t-,r\|]...{.QG...zT..I:1....d..u.&...p=.......u.....F...).Z..?.C...;_....0.He/..\|..........)o...!{..R....G.3..^.........%X...O..xv..V...C.h....:.z....K.l_..l..c~...9Y.t...^.Ft..1$.E%.......\..n...N.='.E1~N..e.Bxz..3+.=.....x....]..+x..FW..w.j..47A$;.{e....P...R.....^.%... ..5.B.Oo(....<42...M.....-..}q.l..j....c.4..XoL....KH..Y..'......2'da^..v.5iX.&~..S.5@%....&\b6j.5fU...'...S]..Pe`t..X.5..e.u..a....z...cU..z..J\|.<.t..#.R......]F....Ll"....D....]os.y.8.hx..K.>...........T8Qe.9..U..../.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6810
Entropy (8bit):	7.96374123963954
Encrypted:	false
SSDEEP:	192:VPjCgUG/AAiNOdQqFgszg5N2VTXmf6rOVM6IS+XKl:NWgUjl1qFRjyG63+XM
MD5:	0CB3CE853EF7E9EE9EF016EF2D695785
SHA1:	1A557326BA9B644E7DAEA8369DBFD4A2789BEF3A
SHA-256:	0F5BEE121F241FD58B6A6C5B52A7D4E7179DB25ED325C9DBB535C276D7CF40AD
SHA-512:	4FA3E92505C312921E0DFFE63FDC8B43D0B113BA4B41117B2975B7F4D1C4D539BB80735898402D2A516BC56FBDA3EC24648A24936A69B3F24DC3A29B0A8EE615
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/images/video-icon.png
Preview:	RIFF....WEBPVP8X...........]..ALPH......Fm..6..O.O...Y.....-;....p.0.L.P..y..6.efNJ...4.w..4;......vR?..1..am..]..J:. ......YG4a..^]...1...m..^.}}Z.&..2.r."......,?...u=a...bZ.u=.oykK..i....wBLX..W..<..'.^....~..i.2.<^S..6.5..:>0..Y#1x....zM...1../.{d...a.W.3z....a&..$vm..r.?.m...2...=...7..A...^...Q.K.^....;..A...P,..X..;..y.&7.9(..r..ZG..3['.#e=Gg...35......T.8H.).C..q.{.\....!.,4p.f./=y'..R.Q.Cv.TR?.r...J.g9..@..,......r...@I\|3......4..;..o5....=.!..g,.!~.....q.............@........\|....o..;..q..A..:?........{..:.]...=^].!=..&L.x.....\T...B..?.E...I/b.....k.........n.9...j.V.[.U.......s#..fw.........nTqx?..b\|.s#....d.....A.....u..a..2.+:.r.....{.I.c....X.......\..F...B.L{o.l....l.^.e.-..\|.....v...d;..l..6...s.g.;...v..q....b."-d...UY.....F..V]H.g5..n...VE..V...2....X..~.......]...D5X{V.$.D.X[$z.k....u..c..8..E.X...X.8......r*.d....B&...C.V.%h{.T..i...EM..m.IC['..m.4.mq.\|.....`.6n....p......7.(..?..(..'...8...5...r..Ix{.H.h\..^".

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12494)
Category:	downloaded
Size (bytes):	12550
Entropy (8bit):	5.391211180435
Encrypted:	false
SSDEEP:	384:9QIdXpDm2qiM6MGGei9/4sw81HXcZFmR3ZkEpsDbIA:9HDmfyk4EHXuFmR3ZkEpsDbIA
MD5:	0CCE36E0D631A9F9391326766FA604CC
SHA1:	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72
SHA-256:	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
SHA-512:	EAB2549C4A048B44FDF9B1AEEACBCB389907945239C95B496327061E32BEDB2302B3F6D9B6CD4807ADC776F19154584F33433383AE75C0F28BDEB21C8DEFE99C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_core_exception-vflDM424N.js
Preview:	define(["exports"],(function(e){"use strict";let n=new Set;if(globalThis.ensemble){const e=globalThis;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function r(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var c,i={exports:{}};c=i,function(e,n){if(e){var t={},r=e.TraceKit,i=[].slice,o="?";t.noConflict=function(){return e.TraceKit=r,t},t.wrap=function(e){return function(){try{return e.apply(this,arguments)}catch(e){throw t.report(e),e}}},t.report=function(){var n,r,c=[],o=null,s=null,u=null;function a(e,n){var r=null;if(!n\|\|t.collectWindowErrors){for(var o in c)if(l(c,o))try{c[o].apply(null,[e].concat(i.call(arguments,2)))}catch(e){r=e}if(r)throw r}}function f(e,r,c,i,o){if(u)t.computeStackTrace.augmentStackTraceWithInitialElement(u,r,c,e),p();else

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120953
Entropy (8bit):	5.475686532328704
Encrypted:	false
SSDEEP:	3072:bbYvk6TdKBcxDjKEpq4EUyfwJiBj1uXesNa0/RcW:nYHTdK2xDjKEpq4EUyfwJiBj1uXesNay
MD5:	462A38DE456C9BF85D5FBF305AD911AA
SHA1:	21C5B449394B4F4E1CE291307E01DB301405D0E0
SHA-256:	308F0E0C362D5CC2A3852A351A7C12929A4601A120D7BACBF3F72D984B694C83
SHA-512:	6A4D89670AC60E7E0D0306CD85D227CAC3EBB12AB5BE9BA4B2EAD1D3C60207C76A91818ACADE270DE5F718AA45580F604942FCD43B228BBC1B55EDE0FBB7780B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Dga(a.B,b,c)},IAb=function(a){if(a instanceof g.xt)return a;.if("function"==typeof a.Jk)return a.Jk(!1);if(g.ab(a)){var b=0,c=new g.xt;c.next=function(){for(;;){if(b>=a.length)return g.u2;if(b in a)return g.zt(a[b++]);b++}};.return c}throw Error("Not implemented");},JAb=function(a,b,c){if(g.ab(a))g.$b(a,b,c);.else for(a=IAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},KAb=function(a,b){var c=[];.JAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.tla(e)&&c.push(d)},a);.return c},LAb=function(a,b){KAb(a,b).forEach(function(c){g.Ov.prototype.remove.call(this,c)},a)},MAb=function(a){if(a.oa){if(a.oa.locationOverri

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.199901264020445
Encrypted:	false
SSDEEP:	12:1hHryZO9DPeLv0Pmeagn/Werbb5w5w26PqJT0SwEohXI7:1hHryZOhcvSmjg/Werbb5w56PqJ0Eoy
MD5:	C2591593FFBD92E16276E86068DB913A
SHA1:	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1
SHA-256:	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
SHA-512:	AE5D5BC1C7002E7600197597DD9F97600DA5875A82128105C787AD83439B6F8D59F2272ED4E6D8127C5524A1BC714B0442CF3B87785A98B454326851476171F0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_attribution_header-vflwlkVk_.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,t){"use strict";e.getAttributionHeader=function(){if(!window.ensemble)return void 0!==t.getYapsProject()&&void 0!==t.getYapsDeployment()?`${t.getYapsProject()}:${t.getYapsDeployment()}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter((e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project));return 0!==e.length?e.sort(((e,t)=>e.pagelet_name<t.pagelet_name?-1:1)).map((e=>`${e.yaps_project}:${e.yaps_deployment}`)).join(";"):void 0}}));.//# sourceMappingURL=c_core_attribution_header.js-vflts_Mx9.map.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17871
Entropy (8bit):	7.687579113436698
Encrypted:	false
SSDEEP:	384:LRM7Vpb1bSYXxGlG9ujro2qt7AZElTNRDhPS5waW:yVbPxGXrPqdztpYwaW
MD5:	3455524EE1FD67FE91DBB16C1B2B69E0
SHA1:	52B3043B0B9DCDEB7749225DA4FC4173986C0C4F
SHA-256:	A0D29A1EA15F50D9348FB0CBE85045A69611072A12470B256483B686CF78BBFC
SHA-512:	D363BC458C1FDD71F63030F5ED99CD2DCC309CC57E5B82453F31EE3878C20081C6464FFC5BBBC6EB52833EF23C5AAD14B87BA90A184207CAD7B1A35BF5031B34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...0.....~..G....pHYs...%...%.IR$... .IDATx......WY/.^g..d&..d...$......E...(.J..r5.!"bbP.(...E.qa..L.0$.e.L2.e.^...=.'..tz....3.....]]..W.U59....v.....(......b.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....c.....................n..........U]..KF..........^pFuA...~.s~.~c\|..n.>}?...N.7.....T.. ....../#.?...]yMu...G.........(F.....).x...dQs..I.q...F..\\{`..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.679654809417182
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfy0GaLuXilhq7HokSF2Hqg9LJ6EXcc9gQ4HxOXIR+aeTJ3P/:2diO4NlfPGMy0F+ilhq7m2KZzpQYkAeh
MD5:	FF289EBF3CB43D93EC5D51B7E34BB1A4
SHA1:	EB154044FC7B524ED00BEC830064BB7A99B13640
SHA-256:	62236438DF840266263ACEF5164687DE7618FDD063CD77F375749C541E906FA8
SHA-512:	3E5277BAE5DF71AB7B62A6A9AC6A1F10A822D98EE052D6A06FC1C356B3835A7A653F53319C3E90318DBBD0D7EBC2E212C8751394314770E6BCCEC630BAD6C784
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/icon-youtube.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M14.438 4.666c1.8.009 8.612.074 10.502.556 1.204.307 2.153 1.21 2.475 2.358.537 1.906.581 5.712.585 6.333v.173c-.004.62-.048 4.426-.585 6.332-.322 1.148-1.27 2.051-2.475 2.358-2.1.536-10.276.557-10.902.557h-.076c-.626 0-8.803-.021-10.902-.557-1.205-.307-2.154-1.21-2.476-2.358C.064 18.57.006 14.935 0 14.151v-.304c.006-.784.064-4.418.584-6.267.322-1.148 1.27-2.051 2.476-2.358 1.89-.482 8.701-.547 10.501-.556zm-3.063 5.09v8.486l7-4.243-7-4.243z"></path></svg>

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40379)
Category:	downloaded
Size (bytes):	40438
Entropy (8bit):	5.376589973437227
Encrypted:	false
SSDEEP:	768:9pr6EyPKyqwU6Cm3fvLf+YJGLvdVcW+sk4NIMMVgxxxujhmEj+BDGFXGVvi5qlZO:qU6CojhhzXjoQclSl6r8OsimCm
MD5:	45BD73696958F0863F8B7F9265D054A9
SHA1:	1C943197E7CDB6AE422BF8CEFD4602B68EA38E44
SHA-256:	C20C06F0D8A322B788147CF62C0D1DC173C36AF0B113A055BD1F503590606859
SHA-512:	63408DB8CE26A9B5B3D870CE1B88FE26C8C81B70D5E7CC37F50F79C409E9A48CC851241F42AF432AC918A1C98F40FBCF51B3CA570C3E0C2461985F692FAC9143
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_runtime-vflRb1zaW.js
Preview:	define(["exports","./e_core_exception"],(function(e,t){"use strict";function n(e,t){if(!e)throw new Error(t)}const r=34028234663852886e22,i=-34028234663852886e22,s=4294967295,o=2147483647,a=-2147483648;function u(e){if("number"!=typeof e)throw new Error("invalid int 32: "+typeof e);if(!Number.isInteger(e)\|\|e>o\|\|e<a)throw new Error("invalid int 32: "+e)}function c(e){if("number"!=typeof e)throw new Error("invalid uint 32: "+typeof e);if(!Number.isInteger(e)\|\|e>s\|\|e<0)throw new Error("invalid uint 32: "+e)}function l(e){if("number"!=typeof e)throw new Error("invalid float 32: "+typeof e);if(Number.isFinite(e)&&(e>r\|\|e<i))throw new Error("invalid float 32: "+e)}const f=Symbol("@bufbuild/protobuf/enum-type");function d(e){const t=e[f];return n(t,"missing enum type on enum object"),t}function h(e,t,n,r){e[f]=m(t,n.map((t=>({no:t.no,name:t.name,localName:e[t.no]}))))}function m(e,t,n){const r=Object.create(null),i=Object.create(null),s=[];for(const e of t){const t=g(e);s.push(t),r[e.name]=t,

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.590690360733923
Encrypted:	false
SSDEEP:	48:C+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwRDuExjGx:C+5AQHAray48f5JMYHIqRDu9
MD5:	D155D7C9D015F0417249146A444FB797
SHA1:	EBF0C91AE2557459255D52DE1FADABE8AC9CAA1F
SHA-256:	CD0E600DF9A9BFA802CED7821DF868D21B5593A1F337AE591E0A9CD3B5FFE4B8
SHA-512:	6D63C484F811E1E63104AFC24EFA7576F2A7BEA33B2E78B8A2EC6DB16C3DCF18C4226C513FE1015B97527CE92E689DB66A4291E079E3885BD59B69EF4CC4E116
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1713459077,,JIT Construction: v1012878118,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 108, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1533
Entropy (8bit):	7.771126154019369
Encrypted:	false
SSDEEP:	24:MAhDjuxqKpgJBUYOzNt4HsoYtC0YDYiIvjWmfgBoBmrZYhAVbbTUk8SJ0iMkepK8:MAF6xq+gJZuH4HsntC0M4gBoBmr5VXTm
MD5:	19CB036D0CEBE6FA583F63FC2EBDBE4C
SHA1:	506CC3EB78EB1509A099DBECF98E4D521D2B45A1
SHA-256:	5A8C7B127C2B2E531F6B8EA1093E3FFD62A1CF6B3ADB2E0E05F5AA71BE34364A
SHA-512:	7A0821580946A44D58E0FC51EAB08B6762F17FE4AC183C9B14A2B1ED51E5F238F93DAEF0B6023EBB00683B5F1AD280195FAF4BB24C5D059750EBB64D08FC8871
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l...l.....%o.F....IDATx..[l.U....t..).RJ."."..Q\|..+.Db.....H...^^}.A.L..c./h4D...`C...A.I@`k.-.-...}......v;....<.....?.m..H.vO4O....9...,Q...v...8[8.......#6..}x.....#._d,.G.{.1t.}f`.\|M..Z...c.&`.&`.&`.&`.&`.&`.&`.&`.&`.&`.&`.v.....'y..T.....PM-...c...H0B... .YH..TM=G&N.[..3....?.TG...2.z4.R..u..p.q&I.&.?2...c....w.<...C.$EFI.I....l'X...h...t.b~....N>.../>.^g).1.."..AaZ.%.<.T.%.;>.)2u.....b.....x....U..y..n.....&F...<l..v.Y.o..h.B<....v.jg...:2.Z..,..(!u...QS....#K...V.[.t.k...T.Q.9.A.?>...z...\|..`..S.pl....T....^.R!...T.Y.<J...'.%.I...J....Kn.b..%...i..El..S...Q.Z.H."}.[....E6'+6..\|/I...T.1I.Q~......hZ...K..B..6.In.L]k.[.z.M0.F.e..0...G. ..j`.D.c.....P...&R...Rx.;`^.V..ti..k/.&..G.&mt..,.....i.Ls...\.....-E'i.=6.a.6.-S..S..[......V=..Zv.,c.FIT.....<wL1J...&..$....Z...aQ...'fY..^....:...j..[..&.xi.+...h%;..h3..Kr.K\|G=A........G.Q...D..P.Kp...]U.y\....a...-..i.d.F-.O)..9..4.YC..n.X..H8.Q..].TUI.C.,D.-./...q2.....p...z...\|.....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	203512
Entropy (8bit):	5.508215712897086
Encrypted:	false
SSDEEP:	3072:7i/bgBBN4g7dje7r98kSUR148OldwwgL2u3DDU8CuqjmMtZ:GkBc6jkrydUKCKu3DDU8CuqjmQ
MD5:	67A33585A071DA3BEFBFE5E8BE12F5F0
SHA1:	DD56F991F078B7DE4D957B779A37CE5AA7CDF272
SHA-256:	B9649E0E9E5790F8D6B5E69AA4FF9969E8F7D72A84F8501FF9379078005124D8
SHA-512:	72C3ED32872EF0A7752F0BF1E772BBDEE68E87D71D13B0D180FF96069462BA81C854502E2E18DFA0B55828E0420446A71D586D69FCB05EF66E55973A039B15B6
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/js/forms2/js/forms2.min.js
Preview:	/! forms2 2024-01-29 See forms2.js for license info /.!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){var c=b[g][1][a];return e(c?c:a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}({1:[function(a,b,c){var d="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";!function(a){"use strict";function b(a){var b=a.charCodeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var k=a.length;i="="===a.charAt(k-2)?2:"="===a.charAt(k-1)?1:0,j=new f(3*a.length/4-i),g=i>0?a.length-4:a.length;var l=0

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6100
Entropy (8bit):	4.060158016416888
Encrypted:	false
SSDEEP:	96:nytdNehspMgia+/1PPpi5diCiScKjFVmtStZl6gHOOvj+bJFIP7PeuxaHRjrk:iNeXa+/1PB0FtbxnL+b2b6Rjrk
MD5:	4193A6FFCC35BA34C00C30363E96F4EC
SHA1:	0729FD0B38C6966947FC64EBC7BAD7761DC925FE
SHA-256:	931AC8A75B2177D3E7CF8B143BEDFBD73F3909E271177B76675D9E36F6E677C7
SHA-512:	A2F533CC72B8F98D0CF81168FDC2C11CD778BC858CFE8FA26FB3CCC60DC0F9B2D09EDC94600DAD6D7DEE624E8CB27A19F0AC61810C7A3FEC216E625ED0B74E4B
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/logo-docsend.svg
Preview:	<svg width="1242" height="121" viewBox="0 0 1242 121" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M703.612 95.9707H733.746C755.462 95.9707 771.566 82.5507 771.566 55.7107V49.6107C771.566 22.5267 754.12 9.2287 733.014 9.2287H703.612V95.9707ZM732.526 19.5987C748.142 19.5987 759.61 30.0907 759.61 50.4647V54.8567C759.61 75.2307 748.63 85.4787 733.258 85.4787H715.446V19.5987H732.526Z" fill="#0061FE"/>.<path d="M817.642 97.8007C838.748 97.8007 852.534 84.6247 852.534 62.2987V60.7127C852.534 37.8987 838.016 24.3567 817.642 24.3567C797.512 24.3567 782.75 37.5327 782.75 60.7127V62.2987C782.75 84.6247 795.438 97.8007 817.642 97.8007ZM817.642 87.1867C803.246 87.1867 794.828 77.7927 794.828 62.0547V60.7127C794.828 43.9987 804.344 34.6047 817.642 34.6047C831.184 34.6047 840.456 44.6087 840.456 60.7127V62.0547C840.456 77.7927 832.038 87.1867 817.642 87.1867Z" fill="#0061FE"/>.<path d="M897.831 97.8007C916.375 97.8007 929.429 88.8947 931.503 69.1307V68.8867H919.181V69.0087C917.107 81.330

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13778), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90365
Entropy (8bit):	5.3026305919684775
Encrypted:	false
SSDEEP:	1536:ksIoVapl8mPKP6OOOtOOOzl/zm95iyiLOk:dJET8Shzm9u1
MD5:	9A41BD792531FAFA5797D1BF2110C0C3
SHA1:	61493F6C1FA5F42AB30A63739AAA46BA59970F04
SHA-256:	83FC452D3CFBCEBEDF7F9DFEC19E8AD3CC711DD46975ED69627FFEBD9AAE1696
SHA-512:	ADBE8C763E8EB62554DEA0EC7AB794BC0E5392B771B27CD64443BFE7804CB2F604EF1D7FF92F5D5BA2F1643A390F9BCB89F66612247D28B7F650517FE205AED7
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/integrations/
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>.<meta name="facebook-domain-verification" content="2bhap9efl4twcb9o5dmi2yrcwjreiq" /> <script type="d62ebd87669bfeeb8b4b318d-text/javascript">...window.dataLayer=window.dataLayer\|\|[];...dataLayer.push({....'dimension1': '',....'dimension2': ''...});...window.utag_data=window.utag_data\|\|{};...window.utag_data.dimension1 = '';...window.utag_data.dimension2 = '';..</script>..<script data-cfasync="false" data-load="norocketlazyloadscript">(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-THK58L');</script>..<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<link rel="profile" href="http://gmpg.org/xfn/11">.<link rel="pingback"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5082)
Category:	downloaded
Size (bytes):	5083
Entropy (8bit):	4.931498303456814
Encrypted:	false
SSDEEP:	48:sal1qQzFHzjzjGQH7awKT0j5L1QkKvk+yvMdRIRCrHfZ2PMRpe6nMOqOxpOq92Oc:tBfySNKY6kSQwVr/Z2A6Oz9Q3
MD5:	0E80CBB2EF9225FDC2B4DEFA7D321901
SHA1:	BD0862DEAD0CDAD41CC33D88856225717C6B173E
SHA-256:	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
SHA-512:	5BED798924D325326B30C5089EF51E7086D5281B113EDC519A58632528FB95B082ED723813F4C1F4E73D7D05F0DADB70B2BDD478DEFCB5124A2E9A7020271C09
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_paper_atlas_grotesk-vflDoDLsu.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 78211, version 1.0
Category:	downloaded
Size (bytes):	78211
Entropy (8bit):	7.994972896866387
Encrypted:	true
SSDEEP:	1536:GSk4mGpwdN2l6dXnfswB6W7sn05JJrWNC0EEmQ4mY03cCVEoRwbnv:GSkkOso5vBFW05JLvQ4m/cCVdRwbnv
MD5:	84B3AD51EAD0A36BDD6ABE37863337BC
SHA1:	EB5BD454F0AAC88C69F34F1482B1826755E3CCF2
SHA-256:	EDC148B6D3B77EB2F721370E77358BCDB09573C2A78BB2DD61ABF2E5659D001A
SHA-512:	58FEC2D42EAEC267FCEDC4020E7D5ADB8EEA5E6051F9986E7F17026269D2B9F6F097FCD08FB02AAF988BA8CC5754512EFF9B4C2A746F10372F9E7875B78BB940
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBook23-vflhLOtUe.woff
Preview:	wOFF......1........H......0x................BASE.......@...@.4..GPOS......%...R.....GSUB..&........D...}OS/2.......X...`oE..cmap.......w.....n..cvt .......R.....P..fpgm...X.........6..gasp................glyf.............&.head.......6...6..j.hhea.......!...$...thmtx...T........+..loca...X...v...v_(.Rmaxp....... ... ...sname...........R.x.2post...h...i.......Xprep...L...................As%z._.<..........ovz.....o.......A..............x.c`d``~..-..{.........".i'....M..........{...m.....<.r............x.c`a..8.......).....B3.1.1z.E.Y.Y...X.lv.<#...{..0:0(.p2.............t...:.Y .....'T.!x..}L.U....B(/".\...Hy...Rp,..j......,lZ...7&.\|Y.?J...1_.t.:jP...e...K..!e..XsS...{.}.GZI..~.9..;..^.........HT)..FT.JD.e...W.y!"...2........}..%-.I...l....\|.....A..dk.R..X.....i...X....s...*h..;.....7.(.(.....;>.(..K.gr...w.].rw\|...U.y..6'v..S...(&.ca.G1..':Gn.+.]0ow........}..c.../.D.G.O.1.E..........X.N..cC..3..j9.s..9.._..:..{Z...D.7.L....../........w...(.5..S.......,.\|...8.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 210938
Category:	downloaded
Size (bytes):	54058
Entropy (8bit):	7.995302937615491
Encrypted:	true
SSDEEP:	1536:bT55TbWc2iOwt9DHzVWPjKzlpOxaFOww8BSJEOW+:Z1r2etVzVWPjcro7jqSz
MD5:	E3F42890FD479DD5F9E7CE2B13595746
SHA1:	BF417574CEF96258C8B80637AFD7C4C843288653
SHA-256:	3EF5E13ABA749410B0144B37E79C5D8475E2BB565F7D92671490A5036AB81C5A
SHA-512:	C6F035D05A04DCD9A82EBA207A9CAAF80547DB26FB60A06BD59B8D103A518DE5CE59388D8AD51CCFCE6C2AE1DA048D24A2904EBF3BBA32CB3E72F9659A26DDC8
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app~tooltips-modern.b070189d.js
Preview:	...........z.F.(..6...&.(.V...3.m....dS...4.Jb(..g......q..$3.s.... .....{Y....$.&.uR....{.s..Kwr}>_..^..h...?......`;.U<...?.....f..t..:g.........9....U...7Q.Z.%0...[...j.(...{..<x..s.f..m.:m...x..t.6..q.?nwl..c..k..'.0...dTo..9[.ukL.Yl....O..ou........x.....8..<...w.8..i.b..m.J.j.b...F..,....{..z..w.C/.7.~8.>Y...\...m{yw2YE14..i....;.Vq:.F.].a...d..a..5.v...{W.p..e.{.....n...........z.7..$\6\|>KT_]hN~..0.E...b.s.L\|7._....m.v.._..Ch6iL.?.......@...W.\:...M..W..M.../..>.$\|:..2..>L.pB...oaf.0H.....o6a.....6....l.0.e...'.8g.{./.7.....;...i..p.uk.`.5....{k.z..e.......@x.@..79...Y0..p..7c.,W...i...o.F:..;A.......f..D{%.$P...&.Y..{.~U.Y....$........&..Aik=.3w.''....3...a..&...%...8K.$`F.%.h.p...h..@Cc.6.jWH.t....^ ..0..>r..G......8...+.... ....v8..S..P_.hw....F.R....}o.{qzk.........rz'!..%.a..FwB....o.x....L.Z..%.#A...3ZM.0.;...M.Zr..;.$....>?......rQg....6a.ae.3.m...vD..Q..O"..^eko....G..w.....xx....24....j...i.L".....P.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (710)
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	5.201380254654961
Encrypted:	false
SSDEEP:	12:1hRu/DZ0BpNvNUUR4jYLTFFKCc2RvB/4sRXHrx6vCYoN/iGAQIDNF9gqjlzDC:1hR4Z0BpNvmUs6FFKH+vB/4GXMCR9eDW
MD5:	09C0D53AF2879162B43B03734FEC35B2
SHA1:	BC603C2186F1808BE5A7085055F0557F7DF4866B
SHA-256:	CDFD069A981E8373C2F2EC1FEAF286D8273F2A20A0865831DE93592F15F091E2
SHA-512:	03DA7B5EEBF2D7B6C05C3D6BB911887A1D35F318FEAB6C6C54E01E1F5F4F5E4A742736D670CD8DB88D618AD9BFE331EB843085B79A01688FC3C5AF738B1C55D5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_xhr-vflCcDVOv.js
Preview:	define(["exports","./c_csrf","./c_core_attribution_header"],(function(t,e,n){"use strict";const o=function(t){};t.sendXhr=function(t,r,s=o){e.assertDropboxDomain(t),function(t){const n=e.readCsrfToken();t.is_xhr=!0,t.t=n}(r);const i=function(t){const e=[];for(const n in t)t.hasOwnProperty(n)&&void 0!==t[n]&&e.push(`${encodeURIComponent(n)}=${encodeURIComponent(String(t[n]))}`);return e.join("&")}(r),c=new XMLHttpRequest;c.onreadystatechange=function(){c.readyState===XMLHttpRequest.DONE&&s(c.status)},c.open("POST",t),c.setRequestHeader("Content-Type","application/x-www-form-urlencoded");const u=n.getAttributionHeader();return u&&c.setRequestHeader("X-Dropbox-Client-Yaps-Attribution",u),c.send(i),c}}));.//# sourceMappingURL=c_core_xhr.js-vflW3Ov9o.map.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	327827
Entropy (8bit):	5.589671396088019
Encrypted:	false
SSDEEP:	3072:GWo02tPPLdCYIiJAPqcj5RUmzhWEt/WkCiMORd9qTH/CkMw3taGoQHOaPhXKh:ANPLdC3t6mzhJt/EiMOzUTfChw9aPYpC
MD5:	B1882B5E3EDACA0885F674750FE7BD88
SHA1:	B1C29C838ECE05563E2EF1EB10CF7A986C588301
SHA-256:	5A1B22F96BAB9384DF7827C7710B6477229500A6D2C0F6D8F9CFF3D33D428894
SHA-512:	79D7E67A38A3335DF4413EAEE8619B327FCBA1862B1B63FA178A39737E8EB97CDE01F3202CAC3C0127A678908B4B3C00421C7AC2D411D4DC0ED51E401BC753EE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/f92087f2/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4016
Entropy (8bit):	4.567529144946003
Encrypted:	false
SSDEEP:	96:9t+w3AYdkh+4bk9Pdg6wiqdAKChsSSsbpn5b:z+w3ApdYXQiqdAK9SHn5b
MD5:	04E9FE320018B452E7019CD961021F42
SHA1:	FAB4D9CA8F3CB182117F8C20C1CA8C0E69ACC767
SHA-256:	47E5799EA427740581D13BAE0C414C7C46FC1BF7A17392B1332B94837732A878
SHA-512:	6E329A8D3A9DD9931679D8EA1159CB311DBC9156F56C235E01C0C0E5B66228A0F8520CE2FA34F0509D8ED5712B6C312726C2610128A0310EFF2F69D9EE16C4F5
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2023/04/DS_placeholder_logo_on_BLK.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 1242 121" style="enable-background:new 0 0 1242 121;" xml:space="preserve"> <style type="text/css"> .st0{fill:#0061FE;} .st1{fill:#FFFFFF;} .st2{fill:#53514F;} </style> <path class="st0" d="M703.6,96h30.1c21.7,0,37.8-13.4,37.8-40.3v-6.1c0-27.1-17.4-40.4-38.6-40.4h-29.4V96z M732.5,19.6 c15.6,0,27.1,10.5,27.1,30.9v4.4c0,20.4-11,30.6-26.4,30.6h-17.8V19.6H732.5z"></path> <path class="st0" d="M817.6,97.8c21.1,0,34.9-13.2,34.9-35.5v-1.6c0-22.8-14.5-36.4-34.9-36.4c-20.1,0-34.9,13.2-34.9,36.4v1.6 C782.8,84.6,795.4,97.8,817.6,97.8z M817.6,87.2c-14.4,0-22.8-9.4-22.8-25.1v-1.3c0-16.7,9.5-26.1,22.8-26.1 c13.5,0,22.8,10,22.8,26.1v1.3C840.5,77.8,832,87.2,817.6,87.2z"></path> <path class="st0" d="M897.8,97.8c18.5,0,31.6-8.9,33.7-28.7v-0.2h-12.3V69c-2.1,12.3-9.3,18.2-21.2,18.2c-14.2,0-22.7-9.4-22.7-25.1 v-1.3c0-16.7,9.5-26.1,2

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	3850
Entropy (8bit):	5.29596831327022
Encrypted:	false
SSDEEP:	96:KkMnWiqR1QEnN5ejImVB/b1y5XlUEmEqeh8PJ1PNZmSjLTE69XOTic0nu7:KkamFnNojImVVM5XsE9WPJBNZmSjNOT3
MD5:	B83FFDB979C228710D12A5F93F82F389
SHA1:	7B74FBA3903328902F37D4CD1523617786E9C147
SHA-256:	EE4A42026875A4EA104162B421C1106EDDD284560452AC2278DC91E886D94CB0
SHA-512:	21A6F1B8D95C038638BB6ACB960FBAD134CF37FE7729422A69BE16EEAACB1F7288062E88620EA3DC8D5D661963D5B3ECEB40AC38DA48319489EC1A7276BBD7F7
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.40.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.40 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x275, components 1
Category:	dropped
Size (bytes):	8361
Entropy (8bit):	7.954844309655526
Encrypted:	false
SSDEEP:	192:JA+J68kguekLkMcpjzVB9UbE3CAZzWsVDP6mzeNC38BQ/9eo/n36X+KNjrF:94guFbc5xB9UbE351wC38qBPGjrF
MD5:	5DF75D1F014CE3EDB5855B041CC36D24
SHA1:	56B82154BDF5669255B238B35912FC91A4735866
SHA-256:	005FDCE2B890928F72FB62779B6922ECFCC6DB9BD06EF5C6298C4AA674AFFB3E
SHA-512:	D6DEC15A306E9263413E01D8C7A0FEBFDF58EB317F20A011ABB3E07F3F4041860EC047E13CC196230EC18C93F306E654B702C025BFF200FC07CF00B1FF28FDE0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$..............................................C..........................!1AQ.."aq.2BR..b.....#$3Cr...DSc......4........?..J..!.B.M....~.....B\y..7Id..9...6.JP..w.N..`..;.J.!.B..!.B.. ....\|..i..q$..".$.Id.M)....N......;.#%l..).B..!.B..!5.......E...'Y-.d.I.....(.2H....H.c...Bz....j.f.. .VYQm.....pn..!.B..!....j.:..%B.O...lC.....s2&.n<W<..CIM1."a..gl.F.\.0..ds..#3.6.a..Xj..1.X...!s..d- &...;...OU...8.\.....j5.....N..A.......Y[.X.+....'....C.]>..,B.......XNo.Z..Ucu..?$..t..v...R.V.i.tOB..!.B..A'`.g..p...brQ..M).k..>a9..I_!.d.(..\.K.....^y..2H.......y.....SWU.}6..n6.l.lS.&...6..S......I..-..>.RC7.k.......o....gnX,.....0!%.T.h...J..a....g.Y#..x.,h.B.(6..Ug6.#.S..P....<..,..}..9.B.. ...SLeu..?40l.bz.t]4...Y.....Y!k........\|.?1W......6..Yqa..,.H.h... ....k.....W..........hx.e....Hn.-zN..KL7...*..+":.#..y....(..m..-g3.<G....\.[.d;..Pc..E..........Y....M..d..4r+#+.E.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 275x275, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6048
Entropy (8bit):	7.966562770522141
Encrypted:	false
SSDEEP:	96:jaqtPCXf28c8shDHuBGceqFAVpZLt+MJYPPRsAFVa6h4xhJBEQMWmC5zEwjPApe7:9PCXtK7uBGcUpZJN6HRDFHh4xhJBxmzO
MD5:	A8DEC234A3A15F5F4F0FC64D377B238C
SHA1:	4EBF68FD7BEC63B67BB49FDDACDE8C2063E0957E
SHA-256:	D3BC548DC3B12B92E99F0A963435D53FE7810475ED83C3CC64DF61E5FE1DAC61
SHA-512:	7EE06851E534974599231B714EF6E0E88619907FE5CD156435E3CB44F3F7EC033D7C45C103A76A5CD4F9D586C4577C06227A6F0CE793C76E0640279D243CFEC0
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/08/Dave-Whelan-min-275x275.jpeg
Preview:	RIFF....WEBPVP8 .....s.......>Q(.F#...!.. p..in.BYq.....[...?S?6.....O..............?.=....g.`.........C..._T.X..{;...I.;`Fu..%..$T..z....i..2....Z.0k.7....&....V..~=.~....J9P..F...!...c,.../.!.o.M\|....V.(...y...n..=.f:m8.3LY....CT.4..9.Ab.$.[9..O?.t.eK._s..C...r......-!..W...N..i...a..GUMEZ..T .....P.@.......U.:.+/.8L..!..A.nY..,8..QXsS.%.w.F+.u.4.....p6v..#.%..{./a..,....^'....H\|..$....!..f......P+..CaH<..._VTj.T.O...KT..........t..I.../...oX..!.].H.?+..v....8'.q.+?..G..{}.G'NN..cc......k!S..,zjR.._[.Z..OY..b.S.m..{6.i..O .........y.:...m....].......`...?.+y!........#z..Na.[...`...J#P.4V.>...~Z..4=...[...o.v........e...G..m1.@7...\|.4.>.}L...".su..$C/..?Rc.e.p..H.s..~n.#.uh......p.Q..Vv/.8.G.2[c.X..@.(...U....5.,.{../k;..."g.........r.w....O\|...N)......pT...B..G....w>....I.%....A...>.;.P.....di./GN....w...^f..jR..R28..w..`......p.0..... ...+..o.......(.....\.RZ.c..4..~.....8S.....V...V{i..S..6.......~.....\.....~....^.0.1

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	493059
Entropy (8bit):	5.8212371143237425
Encrypted:	false
SSDEEP:	6144:Z/Tpp9EfYJ9HWLXC8bMJHKqHAw/pdcpgzGbPFfWu6lezdSBySSyizdrx:9J84JHKqHAmpapgsPhWLezdSBydtx
MD5:	B0047A8901D8ED9F81DB3DCB5982114E
SHA1:	C8FDF3933CB067D1C2AEB1DD4919A4BC9FFC8E8B
SHA-256:	F171DB8DC0EB7CEC86C84CEAC278DBF2FBE33770334635A2703186D14F4828B2
SHA-512:	EE2E249DE446371C2D6C5C1EBFC7A23743503033BE0168665AF5345F27DFF149D269CBB6E6655016BD91558F3E32D690235034CDE396D600C69DCF60127AD0CA
Malicious:	false
Reputation:	low
URL:	https://js.hsforms.net/forms/v2.js?ver=2
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.5064/";n(n.s="bxrb")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	27581
Entropy (8bit):	7.602850562436784
Encrypted:	false
SSDEEP:	384:QXQH4P8ixWikRWQ42IcoCc4zav/7+CmsWNeHIc5Iz8zCT+pXK7bBfvvbswiqe0r:QbP8iYTRWwxchv/0aIc5Iz8zU7bNh2a
MD5:	9BD04DC9BEE39DC895478B9DABB5A4DA
SHA1:	B4A1F0E92C65D90F308693A7800A361AF97D45B4
SHA-256:	479A168F4574E61CBC99AD18B46FAB6B8DD54B5E78DDC10069E3EC700C3371D2
SHA-512:	14075FDA42261AC23F2DEB8B3F75C1BAD6C14A2F9980D9019D84B877725AF817934DD8AA6DF6EFC00F9C6EDC0A61E37C7796C57130FDB88EB2B653AF7533001E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......U...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:3227B9EB583911ECB6E3EB0B3A7346C0" xmpMM:DocumentID="xmp.did:3227B9EC583911ECB6E3EB0B3A7346C0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:278757EE582411ECB6E3EB0B3A7346C0" stRef:documentID="xmp.did:3227B9EA583911ECB6E3EB0B3A7346C0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	288173
Entropy (8bit):	5.441377419359384
Encrypted:	false
SSDEEP:	6144:yAlTuAXQWgYJfvty7B/AVxO4w+5IYKf1Wm083Y:u7BIVY4w+5IYGY
MD5:	519CA25E320FAE6824DB30F29A266724
SHA1:	901D3ABFD099B379A634C828B74B5DE1105ED677
SHA-256:	349E6AA7AB8A72A04322F82C3044EABD2828028BCCDB9DBF8D2964E1D462B369
SHA-512:	26865AF6BAFA78586C7108414F54DE5A0743718D3A1A76742950003DBF067F080B7217CCACB2E5C521F7C60914009BA1D25B05DED0B5CB8F987CE1A453CF9DE6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_privacy_consent_static_ccpa_iframe-vflUZyiXj.js
Preview:	define(["require","exports","react","./c_init_data_runtime","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_viewer","./c_src_sink_index","./c_browser_browser_detection","./e_core_exception","./c_core_notify","./c_core_i18n","react-dom","./c_core_xhr","./c_core_uri","./c_csrf","./c_core_attribution_header","./e_edison","metaserver/static/js/modules/constants/viewer","metaserver/static/js/langpack","./c_init_data_edison"],(function(e,t,n,i,o,r,a,s,c,l,d,u,m,p,f,g,h,_,v,b,y){"use strict";function E(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var i=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,i.get?i:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var w,S,C,T,x,N=E(n),k=E(m);class O extends i.Message{constructor(e){super(),this.userAgent="",this.sessionId="",this.anonIp="",this.localeUserSelected="",this.localeBrowserH

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 359 x 357, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11789
Entropy (8bit):	7.90944417737379
Encrypted:	false
SSDEEP:	192:CV/TVfaCW+/Li8Nzlr00BspSL/RjbMOipzMizATTKUbd5lrXx:C9T8CnhzvMSL/Rk3zMikFd5P
MD5:	79ABAE40BE48D7233FCEA00DCC816CE5
SHA1:	743A13716B86AEECD4B5F13524CA1D551EBA1CDA
SHA-256:	0B0DC1A6CA86BC18551B40C9BF1DE0303427FE85D10F95EFBDCC1DEE909CAC34
SHA-512:	58FECD5281F7B43B74F7899C7B1F222F0019BDE2DB012F466C28881DB6B35419CF4D17BB663DFF48A86DC8BBE08AF45DB4773BEAD240933CDBBE450C7A93BF40
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...g...e............gAMA......a.....sRGB.........PLTEGp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{yy......ljj^[[VWYOS_OLM.....#.!VVXVWYWXZ...wwx................%"#......_`aaacXY[llm...............XY[___UVXEEG[Z\>;<...ZWX...WXZ...hhi^]_......utu...........~.rqr...ede...TSTVTU.......JGIXWX...................!.!". ...RPRPNO...POPQNP.......r......tRNS.@P.`.................`...... ......P ...........0p...p..............................@..@......0......0.....``............................................

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43435)
Category:	downloaded
Size (bytes):	43602
Entropy (8bit):	5.290075583406493
Encrypted:	false
SSDEEP:	768:lUiSXiGJ+/191iie+vbTmB58qegWhw5BB4wwsGSZ/cK2tJn7LjRHaoAv5r7V98Rn:lBy6w5BewwsGSpco8UDh5AHBlnmNG8sn
MD5:	5C67563237C8701B9DBBE83558EB3C02
SHA1:	1B0F246766414F64F43DD808FCF8BDFE186DF24A
SHA-256:	68F6C5E61A421E1F0E51F3B40D7190B5A64C01E96A7BD1DB3D4DECE3C8D5E645
SHA-512:	BB41837DFB3A749AB5FAAA0671A0F40C6B49076FE1026CD737CDEBF4E99952E84D1A5EE5E5F276C0D68939FE7E5E1FFA1D7EA7D54A1C1E05A550E50BB2A4411C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ux_analytics.bundle-vflXGdWMj.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; /! For license information please see ux_analytics.bundle.js.LICENSE.txt /.define((()=>(()=>{"use strict";var e={},t={},n;function i(n){var r=t[n];if(void 0!==r)return r.exports;var o=t[n]={id:n,exports:{}};return e[n](o,o.exports,i),o.exports}i.m=e,i.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return i.d(t,{a:t}),t},i.d=(e,t)=>{for(var n in t)i.o(t,n)&&!i.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},i.f={},i.e=e=>Promise.all(Object.keys(i.f).reduce(((t,n)=>(i.f[n](e,t),t)),[])),i.u=e=>e+".bundle.js",i.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n={},i.l=(e,t,r,o)=>{if(n[e])n[e].push(t);else{var a,s;if(void 0!==r)for(var l=document.getElementsByTagName("script"),c=0;c<l.length;c++){var u=l[c];if(u.getAttribute("src")==e){a=u;break}}a\|\|(s=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=e),n[e]=[t];var d=(t,i)=>{a.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	826
Entropy (8bit):	4.713751963688756
Encrypted:	false
SSDEEP:	12:cYJwH894+LaNyj94+LaNy1CJHv/0c4Doz0Nr0EUpY:rJwgDfCJX2D0CUpY
MD5:	2B284FDD03DFA5CC9998DEC2320C6626
SHA1:	7066B6CFC1DB11CA2A58BCD1D91A77EA4AEDDA98
SHA-256:	14C8C62DC692FD8FAA04434E3FED25E7C23D596B732F9DB88F6E9F9FF5DFA61C
SHA-512:	BA8A97E95A40B984DF9F57ABEBBAFC6B9706FC156A603E6D94005BB2F09D3E7BA513E2194C0EF0AE767A56752EBB4E431CADB37A7B31A4F8AE63FE82731CE4B8
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/js/forms2/css/forms2-theme-simple.css
Preview:	#mktoStyleLoaded {. /* css load detection, do not remove */. color:#123456;.}..mktoForm fieldset {}..mktoForm fieldset legend{}..mktoForm input[type=text],..mktoForm input[type=url],..mktoForm input[type=email],..mktoForm input[type=tel],..mktoForm input[type=number],..mktoForm input[type=date]{}...mktoForm input[type=text],..mktoForm input[type=url],..mktoForm input[type=email],..mktoForm input[type=tel],..mktoForm input[type=number],..mktoForm input[type=date],..mktoForm textarea.mktoField,..mktoForm select.mktoField {. padding:2px 3px;.}...mktoForm input[type=text]:focus,..mktoForm input[type=url]:focus,..mktoForm input[type=email]:focus,..mktoForm input[type=tel]:focus,..mktoForm input[type=number]:focus,..mktoForm input[type=date]:focus,..mktoForm select.mktoField:focus,..mktoForm textarea.mktoField:focus{}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21663)
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	5.286903626672907
Encrypted:	false
SSDEEP:	384:eNChqKqEpDdlbv83lMJ/dp9QW9u0Ivimh07EWVd0ChidNU+MQ9:ndJv8VMJ39j9u0IKmId0Chid1MQ9
MD5:	10F3FA701AF7A3CB6F9E8054D4AEBC62
SHA1:	A18AFB404DC5405CCBB850D4371AAB5119779302
SHA-256:	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
SHA-512:	C6A0D90942BCBB6C0668B4A473187B554EA7D233838DA10727C15832CE353B3F938BE3907BD8173FDE6B4722D66F7675AEC53BF0033F82E2A57BC3045CD774EF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_notify-vflEPP6cB.js
Preview:	define(["exports","react-dom","react","./e_edison"],(function(e,t,n,r){"use strict";function i(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)}var o=i(t),a=i(n);var s=Object.hasOwnProperty,c=Object.setPrototypeOf,l=Object.isFrozen,u=Object.freeze,d=Object.seal,f=Object.create,p="undefined"!=typeof Reflect&&Reflect,m=p.apply,h=p.construct;m\|\|(m=function(e,t,n){return e.apply(t,n)}),u\|\|(u=function(e){return e}),d\|\|(d=function(e){return e}),h\|\|(h=function(e,t){return new(Function.prototype.bind.apply(e,[null].concat(function(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}(t))))});var y,g=M(Array.prototype.forEach),v=M(Array.prototype.pop),T=M(Array.prototype.push),b=M(String.prototype.toLowerCase),_=M(St

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20404
Entropy (8bit):	7.979494276465698
Encrypted:	false
SSDEEP:	384:+0dYRzZ7c5ljgS9WPSPwf5iR75DWzGJt6MixeOB8YOkr+EuE:szpc5ljXf9mGBikWOkSk
MD5:	18DB5580DD7907013C6CB8A22F152E58
SHA1:	0FB209489BBB2D50516514ECA10ACC0B5B3CC795
SHA-256:	CCC194BCAE7CF7BD475D288996D90709FF4C309695375CE85510721A00F8CA28
SHA-512:	C542AC99327CAFE82D6D068DAE5F0A924ED91D139016C5EB7C4C90124DDCCF18E99EED213B811A680FBF300E4687E3BB6357BC0C282661AA0A1A8A6D706F5A5B
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/10/integrations-page-dropbox.png
Preview:	RIFF.O..WEBPVP8X.........../..ALPH.......m.r)..]..5Lw..t..CJ.-m".KZ....$...5H.4...8.L...k.Z....<u...+VDL.x......^.{......^.{......^.{......^.{......^.{...........E.........A..?..OB.....G[...i....zg3._.x,...ln$.4Q........$..cm/.....X..#.....;X....T.p.k_.u....v..9...K.....\|.E#......9..F-..7.>..........VF.J.i..w...<G.-(...F:.._."...m...Bq...S..(n.j.....P%.^0.N m.2....._..R..<.h...s.Q...1.E..(..9...%lB..:..S...G...3.%..b...DnB;..J.dw..&.G....V....U.(.....14.....9.h....HEY.i.....\....y..I(..q...8.rM{..3.fg...=K..u.(.]M..C._.Q.e.Fhh`.....O.\|..e.....4.\|V.r..kn....v."n.z..o..f.....}W..Y.0X....R.y.+.^....{..9..F.,....h..U..Z.I..N.^)nT..l\|@.BT...>j.....wCs....-..c}....g}Y_.."T......m7...LO..2w..Z..L.D..ZeevB......3.U......s......=.....A.b....,.eq..@5t.o.x.WP.S^..6.....>.pQ[.P.kv4ej.6I5..e;b..e~1..3s.....p....W(}...TS.Om-lL..(..N..2...m..P..x..U8.u..>.j\|z....q...{.........`..m...U....r..e.z........Q.3.."~...g.YU.u...*..S.Q.3...(.5yH...f.%.E....t.g...#..y9>.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/how-it-works/&e=
Preview:	// Tracking File

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.8021925847933264
Encrypted:	false
SSDEEP:	6:FHHBsqRW4liwXAzDDKS9XRJfynmDMUc0DdXgP8F:1hHlipD1UnWMUUG
MD5:	3E904D06E56BD470498071EF9F7403BE
SHA1:	F99226A89C61F90A6FA6E3601E7B933DAD057A11
SHA-256:	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
SHA-512:	7D46BEFCC17FB685D228B1D5BA04D242DB3371AE77FAFDBAF242392561EDE24136FF47703DC41A9728E6EF38D12A902498A46A1B94702FA85BE8B39F9B338D2B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_init_edison_page-vflPpBNBu.js
Preview:	define(["exports","./c_init_data_runtime","./e_edison","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison"],(function(i,e,t,_,n,o,r){"use strict";i.initPage=t.initPage,i.initialize_module=t.initFromDws}));.//# sourceMappingURL=e_edison_init_edison_page.js-vfl51Wdck.map.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=dropbox/docsend/202403080337&cb=1713459536451
Preview:	//

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 275x275, components 1
Category:	dropped
Size (bytes):	8688
Entropy (8bit):	7.944164404491359
Encrypted:	false
SSDEEP:	192:2eTQzmMinFcWnpZIxNgBajgpslv2+OL/nkXJEPS/CYg3bNWS:pTQzmNFcLNMajFR2c3YLNWS
MD5:	5D30FA4DD6D5D91870FB05638956816D
SHA1:	3A260E87C475D3664E7ECB010E4BD2858F630CCA
SHA-256:	9028CD81ECA4DA4A5F24D695E2EB79E21F26ED3BA9A42F23E1504D7761248E1F
SHA-512:	6569459A73393BBB3B38F93ED551C1CAA8FC7DD57D7E3303F6194A1BD730E1CB1062CCC190F9FC90CD870FC4A43829CA41AEDD6E58027D65ECE26901FD3099A6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................!........'.."#%%%..),($+!$%$.......................................................IyB^RH^RHH...LIR. .f-[)$..$.....<..y.Q.^.z=t.I$.....#..z.X.v{{)$.B&...).v..}../#.w..$..5.......ay.(.yZ...I$!Oy...6nX..E.Q....>..BI.Oxm6.n.....`...+_.BS...Y.V...U...Y.}.I$%=..!P.4..0A.5..c.<.!).60F].k.`._.)...I..Om.b.......-./...6.....`.hbw[..6.-......I J{C.....z...<.....!Oa...9b.r..C...e4 .5.0.^..<tg.......@..q....]....n..].@.)...fl..ot.3..u...D.1......b<m.Z.c.....(....8.%...)........1.%..W....1....61.$..IV...\.T...g3..4[..>..Iy.G..W....Z.>]........R.mz.^....&..fA.%.y..iX.k...s8....&.n..$......X..z.&.0.....#.J.C..K.fk7.<...uFyb..o[.`y.y.W......d.bs.@...6...g..).d.%.=/.94 .#........=.\|...l.."..$.`^.......'......CB..........{.5k.......... .+.A.&....&'......g)....\:,X.\|....4;..I..w.<..>.0<..<.....+..........................01 !."2.#.$3@AP..............\r.$..n.+$N..k..U.f.......=q;..3.'...:.BRF..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8391)
Category:	downloaded
Size (bytes):	8453
Entropy (8bit):	5.113739133759895
Encrypted:	false
SSDEEP:	192:UB6PeH4MBpHXnOQ6C4kpHXiOAq9j2Y9JArOhD4U5/voh2dwD4U5tYa1aK3cs7D7D:K6mYMmQ6C4tOhdN4qG4Y3csWWL
MD5:	CEF3AFAC3BB3869958AE9EADA3A9E2D0
SHA1:	E19153C14CDC86ADDA25922707DEC307D7EAEA18
SHA-256:	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
SHA-512:	960491C44EFC7E80CBA123423E4964C46E657687B061E2D8FAE6D20C6FB60BDDE4D4A1420D165E9CE5995BC90958DC5C69369162E5688F81726781DF95C0B4A2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_api_v2_noauth_client-vflzvOvrD.js
Preview:	define(["exports","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_core_uri","./c_core_attribution_header","./c_csrf"],(function(e,s,t,o,n,r){"use strict";class a extends Error{static parseResponse(e,s,t,o=null){let n="";null==o&&(o=e in p?p[e]:e>=500?i:a);const r={raw:{status:e,responseBody:t},summary:null,error:{},headers:s};try{const e=JSON.parse(t)\|\|{};r.error=e.error,r.summary=e.error_summary,n=null!=e.user_message?e.user_message.text:""}catch(e){}return Object.assign(new o(n\|\|void 0),r)}}class i extends a{}const p={400:class extends a{},401:class extends a{},409:class extends a{},429:class extends a{}};class d extends Error{constructor(e,s){super(s),this.name="FetchAbortError",this.response=e}}class c extends Error{constructor(e,s){super(s),this.name="FetchFailError",this.response=e}}class l extends Error{constructor(e,s){super(s),this.name="FetchResponseError",this.response=e}}function u(e){return"FetchResponseError"===e.name}function

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (991)
Category:	downloaded
Size (bytes):	6355
Entropy (8bit):	5.113776104012258
Encrypted:	false
SSDEEP:	192:EaGO4Cfqr3zNzmoIQ6gx2xqjsqFoHE8SuiASb2Yz0zSVyiWvy6RTG:EaH4Cfqr35zy6
MD5:	C14FF8FD589F4A81B678402DA478328F
SHA1:	5D1310373A34D4F99F8E7DAAB38508606552492D
SHA-256:	F87F69015CD23048D6E32C0B07DCF62708CBBDD5ADDD06F8E65EC19262D498A4
SHA-512:	9545114E7BD41664E78AEBE86F95EA2083441382EC217E6172E29B1B781DE562FF546C6827CC7FD4FF3C7486BA63ED6834137C621A96120A03F2E022CBA1BA83
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.50.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.50 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..var _kmq=_kmq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3814), with no line terminators
Category:	downloaded
Size (bytes):	3814
Entropy (8bit):	5.647447748914766
Encrypted:	false
SSDEEP:	96:YyRkcCyXgjv6B8Z/ZqYy4gSs6B8ZeZqYyiyg3jK6B8ZhZqdnb3:yZyXgjv6B0/ZqYy4gSs6B0eZqYyiyg3B
MD5:	1424A70C87F4FC84D77E18C669B460F8
SHA1:	40E26387CA8B3A7FCACDF12F77A419331DFE2372
SHA-256:	89979013E32FBA57D066232126447CD55F87EABDC0012E5695494EE44BA36E01
SHA-512:	32F3D33A92978E380F3F3954C21E09C7B4891EE6A0AEFCA11484712E18082917B612AE503C751923FCAAB28FCD3F8819699C8CBB99EA97580386F870C6B2D371
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/982651595?random=1713459593334&cv=11&fst=1713459593334&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8307377499","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j8307377499\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBHlmog!2sZw6fig!3sAAptDV5UvX1f"],"userBiddingSignals":[["768907168","597481942"],null,1713459594836546],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	4.890654810206789
Encrypted:	false
SSDEEP:	12:Yyt1Hzc6wg4IFFQbSJN1Kvu6exBA9QmA9abcA9FXQEBaeo4czgD+:YybTcq4SJLKcxBYQmY7YFBoV5
MD5:	BC775A8A3CD1B92C6C2066E255AF778A
SHA1:	DEC6A3E0AF17B50A719F937559F0953246F3ECE7
SHA-256:	7323C2251A688328967EA9CB5E799661489380701505CDD64C8AE3439A4607C2
SHA-512:	A02DA0EF1BC20DAE623A6FCEEF248B72A5B77112A0442790662647F46C5DBA91CD425F6FF00598FD8359D53402FF3365A739FC4F3292A7966E9F0364A4538ADB
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/v1/projects/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/settings
Preview:	{"integrations":{"Segment.io":{"apiKey":"pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]},"retryQueue":false}},"plan":{"track":{"__default":{"enabled":true,"integrations":{}}},"identify":{"__default":{"enabled":true}},"group":{"__default":{"enabled":true}}},"edgeFunction":{},"analyticsNextEnabled":true,"middlewareSettings":{},"enabledMiddleware":{},"metrics":{"sampleRate":0.1},"legacyVideoPluginsEnabled":false,"remotePlugins":[]}

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14944
Entropy (8bit):	7.949826542856148
Encrypted:	false
SSDEEP:	384:qCIU11noP8fD+6YvLIEWvLmVg4rAqQ3ExTAgZ7jbl:qNw1I8S6Yv/kyVg4EPgZHB
MD5:	A79EC0CD5A1FF3B5B3E294F3ECBF8DE3
SHA1:	DE1B0615D4FFD4FF4A7DD90DBD347475EA1A44B4
SHA-256:	FECB5EF40D69D4CB295C9C69F556669C0AF0DC00FEE9F8F409E957C822230134
SHA-512:	B2C707BAC5CB7A4CA60395808D2758773432D507E0778453D83FEEE90EC1775C22EAD4F429C3E9F42BF871D8EE6A37EC8BB1C6C30661DD6ACF17CEB5BA0EF779
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/03/Egnyte-logo.png
Preview:	RIFFX:..WEBPVP8X..............ALPH.......m....={&.L..1.!..%.-.......4..-P.)o...Xh!Aj1<..B.q....AJf...J:3..D.......[.o.....[.o.....[.o.....[.o.....[.o.....[.o......J......Q=G.Y...{/.-.....f}..!.a.f}\..$w.....Y.g.....Y.g.....Y.g..........`..g..j....}.}....[.sN.9....x..5..@0....T.".....n]..#brx...k..3.`.i[\|.9.i..X...f6..........\Qg.[.W..%....7...uq....v9.?... .....a9.li...&Dby.....ph....-F.w.......1.../..&.X>..{r..?5h.....s..?.@.....4..{e.....`........,D.0Xzs........../.4[.B.a..."b..z..r.p.%...\m.....J}...&...(..I?.y.Oo......G.../9.T.{.......oa..I\|..-s...j...CC..%@..<.I..K..uc..p..$5.+.s..U.Hp.h....^."..K.(.G.n{.'.3....kr..I....\....t$<+b.5......A.......q.e.;.1.)3................,u...i..>.1..xgW3....(.......Q...f..u.:-..e.}....@-a....o..v...^>...m...Q#G...mhh.6.Tq...]..e.q...H.(. .C...8.e....[......z...&...x....Gc.IL\|.u..c'...={B....7.w..h..8Y.r...S.)..'.?.q/{..........cSA.r.*.+k.....m...=J.t...]j..X+....R..)....>..R0}..R.u....-..3..Hc54.i.9.0.^.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	381443
Entropy (8bit):	5.18697771120859
Encrypted:	false
SSDEEP:	1536:Ioi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDCAY6+:Ioi8ZiSgKBjSoyJuf8tcTgo3N
MD5:	EFF7AFAC8F7AC0ED881F37FFD3EEBCBE
SHA1:	21ACF841F4603DBFAED62DECEF15175B5D68F20F
SHA-256:	FF1235E0E6C896931D1F31F618B35E68A469BEFD8C90D7A0DA22F1D988B0BBC2
SHA-512:	24E363D03E898E7347877DC159EBFB1D446C481D0BAEAFF5049BC401A424DC2B0C602ADEE28CF10C142838C334C7109EAAD879BD793366B3DADCEEC5EA86376A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/f92087f2/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16086
Entropy (8bit):	7.975851993858161
Encrypted:	false
SSDEEP:	384:4ECqybITG58UpiU+yjk3wDeaPBdVa18XZe:4ECqyEO0yamtBX0
MD5:	20BD4B3B651716D1EDC8F6E1E8A14F53
SHA1:	F5F30C067DC20790C8B809D1156177AE623389A2
SHA-256:	2D63F13605CCE3E298914FDDE41884A293C9A0CE7C254AF9945612373D4A01B0
SHA-512:	F39FB783D4A71452A0BF111EFAB54C100EA470A3875C04C66E5DDB0D2D624BDCA239CC0A290F0EC9554DAB344BCF11AFAF01DBD334322F33384C35E5B80A0CD7
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_4_Spaces.png
Preview:	RIFF.>..WEBPVP8X........~.....ALPH.!.....m.......N.."b...!U[.ky..+.=........KJ.....r..[.e.e.mK."...D0...@.#...D ......@.k_=...;"&.V.0U.E .....F ....D0."...D./.........?.n...<~k.9.#~dl..].....s..........k.....e.bV.....m\.L..I......>$.{....].G..m..B..}...d............../........./..........Au.P..L...Mr.0s$.F....G.....9.G.U.C...*>...`..:m......<.%.<exx..}f.h.gy...Z.'.>v....6.1dp...-<S@.-....7-2..L.h..?.=7'..<.yD..a ..D33s.....( .U.8...2..8Q.e<.3.LD.......[.u.%.....D4!..m.!.2....D...E7vq...M.fND....ZD.\|#G.#yt.a...d...q....<Z...pc."...S.;._8.G....1-"R..t>.._8...@...........m`?.)...-....J..O.G....S....L.9.@..m.C...4....E......2......G..#....k...48..i..(.p>1.,.&D.T. ./.....<.G.e...DY.%.\|. Go...a...u.p.7}.[.L...L.....Q\|.\|.(..7.s^.d_.h..wa..=.M...........M.!...M..Sw.?.m.....Z0w.....I.D.l.5.eJ_...$6&.A\|-....".5.K^c...PG..$..=....[^... u..M.....tD......N...O.M...&Bk..EJ...&72I.(F.e.N.5<.m1..{.y&4..t.l.5....>"...fN.d..l.=..H...,nD

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 62378, version 1.0
Category:	downloaded
Size (bytes):	62378
Entropy (8bit):	7.995862968367327
Encrypted:	true
SSDEEP:	1536:AH1u6sEjDEgtCC0s+ZlL28iiqsIQ0povUHzsXcfk4mAdLAFH0:Ou6fPEgU1hbiiqs1lvUTsMfLAy
MD5:	D0261AE8F93399962D33B5B17E514544
SHA1:	07B1F37ECB81E145F66ADD9300F0C7216705F6F5
SHA-256:	91A22F704BE462AB9B53C0BE8FF88BCE83C1DD253A8500865514DE7EDBF827B8
SHA-512:	1AB5C66C26B9AE769BDB3B3260EEB9D2412D23E138847983840BACC599480EE2F4A63C8BC182DCDB428EBADFBBD5F8394BBB4CA35F9B00C1BBD41C71252F8F12
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBookItalic23-vfl0CYa6P.woff2
Preview:	wOF2...........................................@........`..2...........h..G.6.$..R..X.. ..g..M..V[7....b.n....Bd%..)&......<...o{..0..M..N.0..8z...............,d.f7a6...AZO=i..... ...&.QD[.W..3..u.QSR.-F..bML.6.2...N..'.r.s.Y..,.C".E.q...-a....O=z....)\|....7..u...N..W%.iFj./e..........F.M.P.E..:.Ald]Ng%u~Qj........!J.Ye...7wq...H.pF.....P"...NM.m...!.....Bj.M....X.O..>.R...m.N..........f..hAaU9.Yc...H~..Aq.g8.}..P.t.......v..JW6.o.........IJR\|.az../....0..MR2..6..i..W....F.F.....t.[.2.)i..U!~q...n..I#....E....M2..(..>rm.Tm...R.."......~..../...!.~...\|.. ~.j.P...>.\q...\....XE.....Z[.h.c...zl.U.F...s..........73..J.A..\..%{U.#.`vcE.........$.o..#...e...F...Q.y..wg\..y....^../...$m..{..u..0.....E..X~..Z.Z..]^....5.a.Q!.7{i....!..C.I0h@..J.....+......x..{...8$.A..J..-.M...\|<.~n..C...#1.!}.HiP.P.ZY.=7{..0.F\|4..b...8.a...U.f.p._.,W..=....C&.....-.......i....VPk..\.8..<Jo.c.T..P......N.....M.%.z.....;.#...H....u..e...T......b...`.9?.\|.5.......9D;bw...@a

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1007
Entropy (8bit):	4.387377561206794
Encrypted:	false
SSDEEP:	24:2diO4NlfPGMy0ka4j00WM+4KU36WDQA6T0FIuLLV4nQAzypp2:c3iGz5f136WE7T0RLZ4QA+n2
MD5:	8768BABE393DB0F3332617541DD5D41C
SHA1:	51064AA02411AA5337CB549974D0168B015DF131
SHA-256:	43A6D78F7DC5E1685FD18F385B4DD0B572DD65D9FB210F2B1FF541B492BFF398
SHA-512:	10F8E0EC69CC95EDDA2DBDF83267CC312352D20D9F6BB0C9B1C9EA691829BE8D855A30C95A95D6AF481D8163726077729BA6E3ADEBC7FD25338A059B83CEC364
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/icon-twitter.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M13.663 9.36l.05.857-.842-.105C9.802 9.71 7.12 8.344 4.845 6.05L3.733 4.913l-.287.84c-.607 1.873-.22 3.851 1.045 5.182.675.735.523.84-.64.403-.405-.14-.759-.245-.793-.193-.118.123.287 1.716.607 2.346.439.875 1.332 1.733 2.31 2.24l.826.404-.978.017c-.944 0-.978.018-.876.385.337 1.138 1.669 2.346 3.152 2.871l1.046.368-.91.56a9.294 9.294 0 0 1-4.52 1.296c-.758.017-1.382.087-1.382.14 0 .175 2.057 1.155 3.254 1.54 3.591 1.138 7.857.648 11.06-1.295 2.276-1.383 4.552-4.132 5.614-6.793.574-1.418 1.147-4.009 1.147-5.252 0-.805.05-.91.995-1.873.556-.56 1.079-1.173 1.18-1.348.168-.333.151-.333-.708-.035-1.433.525-1.636.455-.928-.333.523-.56 1.147-1.576 1.147-1.873 0-.053-.253.035-.54.192-.303.175-.978.438-1.483.596l-.91.297-.827-.577c-.455-.316-1.096-.666-1.433-.77-.86-.246-2.175-.21-2.95.07-2.108.787-3.44 2.818-3.288 5.041z"></path>

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11257
Entropy (8bit):	3.9756907871971565
Encrypted:	false
SSDEEP:	192:q308IxZiETYOhsT6o3vQY+2kWyiHNORpKNapoWfBqTd1BqnrUNxCYLhEMfm:qPeZNWTQbtWyM8Leap7f0mrUNoY1EMu
MD5:	01C6863BD36DD699039A1725D779FDFA
SHA1:	65D95055F7088E22B2E5693AA0D0CF866692ADBD
SHA-256:	DB15FC6392DC7EDEEB0059E446CCCC5E91128DA4D8B79F552961438552CE64BA
SHA-512:	102272D9508E2E9FDBC983976C13DDD62325E01D8D734737A8AD6505A2EF62792BED95F02B0D516114FB9EB16F5AF576ADF02A1B7F8645A0944D8214492A0C68
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136" height="30" viewBox="0 0 136 30"><g fill="none" fill-rule="evenodd"><path fill="#333" fill-rule="nonzero" d="M54.4224138,16.993567 L52.0618111,10.6290151 C51.9652727,10.3687205 51.59727,10.3687205 51.5007316,10.6290151 L49.1399295,16.993567 C49.0675257,17.1890372 49.2121338,17.396874 49.4205689,17.396874 L54.1419738,17.396874 C54.3504089,17.396874 54.4948176,17.1890372 54.4224138,16.993567 Z M55.5130581,20.5706729 L48.0494846,20.5706729 C47.9242241,20.5706729 47.8123273,20.6484621 47.7688451,20.7657443 L46.2994273,24.7258124 C46.2559451,24.8430945 46.1440484,24.9208837 46.0189873,24.9208837 L42.7843532,24.9208837 C42.5725273,24.9208837 42.4277197,24.7068637 42.5067057,24.5103962 L49.9547214,5.95627832 C50.0001981,5.84298535 50.1101003,5.76858697 50.2323689,5.76858697 L53.3299743,5.76858697 C53.4520435,5.76858697 53.5621451,5.84298535 53.6076219,5.95627832 L61.0556376,24.5101967 C61.1346235,24.706

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454814460294955
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:ttlWBZ7O0bvQQGArHu5GKn8
MD5:	ED4FA4EB31641234901881C752E61024
SHA1:	DBD32C0D8D3E063329D7A27E24499E63804A94FB
SHA-256:	85F407912384186334577F65BF6BB88045BD96F5222D7C696CC71303D65C826A
SHA-512:	E3ABF742E5AC3175A0DCD9799FB29EFFCFCB1B6BE294D10449421A77C9EC6A0FC12855566E9761150E38BDD0CEA1D369E4984C9EF618D9F7B212CBCE88EC4A8B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 275x275, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14046
Entropy (8bit):	7.987285281826846
Encrypted:	false
SSDEEP:	384:sQCPth0UpN4aUle32NFpmV5eG9gB2jPDy6w:sQCT0UptgFpK5v9kR
MD5:	C33B85A5A8D1D8FDD7AC0452AEA9438C
SHA1:	95C5740F8085960A62163E48AD06F422E01CB22C
SHA-256:	56EB943035C7DD5330692B5932474735D5DF03591CDEC24563DE7C56BE08F10C
SHA-512:	5FB9EB53D95E52C535F9C1F8514A167861367EF43E3D1EAE6B6A075C2AECBC350DB58D2525FDB06DC1C1D6E8347BCF51EDD7F62BD72497F95A5E0D4548C04995
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/07/Sahil_Mansuri-275x275.jpeg
Preview:	RIFF.6..WEBPVP8 .6..P........>Q".D#.!.J.88....v.e.......!.~.....u.a...l\.....b...n-.E.w..K.D.......{...#;....v............!8..^0.^..."[.J.:...E.......8...WN..l.F.^...(N..x$......2..11..{.]....B\|........qM?;.3...u..z..X..)..L.,!{.t..A.(&...w..hG.v.....g&...t.-..b.Y.../X..,.....E{...[..&..B..qF.[.1...7)M3.....?\|.,r.r.b.K`$.p.&%......N..d...6......oMI%......I...g...B..av:S.r....h.W6.,.a.K..KM.......O.......U.^...x..y.).h..By.uSk2.[L.Ve.......7;..9^D.^.].a...c..!F/4M.EUi..$K.0...t..'.V.a{...U5'.\|,..w.:},.`...m.<@2..[.z^..=.w..l;.g...J..K....A.1....\...nk-..ohE.C.8g).6..N...v...Z.Dn.....3k....y.....C%....?b..9.&d...T...Ep0..\|...3.ps4*s...,.........z;.....u..B..V.;I.j.A..P_..ae.[wYo.r....m...L-...Y.I5...-rc......n..ky..;.#14YG...........:..........(.M.\+;..q....k._..T.(.....Smy..c...<n....-'....Z....,..o.='.$^....c..q.5E4............i.........._].8.....b1".X5J...!.B._....C.k7V..4.....`\]....k{....e...t...G.L.8......oQ...].3.....f.r.D.G._..e.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	526004
Entropy (8bit):	5.523304143328934
Encrypted:	false
SSDEEP:	6144:sHWK9VC78UBQ47GKrrPU+wpp+0hS+em9S0iN6HGqHLyeRN2JGRbuYO1g6:TK9Y4UNP+Q+ZS0iNMiAh6
MD5:	19583BB0DA5177B797A0924D82CCD627
SHA1:	8FD6883B325C0980192D2ADE3DE29066178031CD
SHA-256:	D7281CB3DF18E152F559EF5DFF57C038FE3BF12EA687133B277DB0A5D52FA375
SHA-512:	B8FD515969F130FDB54112925C3911678C40717740C6BE2E66C745DCED826FCCFD1F8068A20820B77C5C3FA884A9FE55CAC191E43CECEF89E7335009D0E8F5EE
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/adbff051f65c0f8e126dcdec504117f3.js
Preview:	window.docsend=window.docsend\|\|{};window.docsend.region=!0;(()=>{function n(n,t){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typeof Symbol&&n[Symbol.iterator]\|\|n["@@iterator"];if(null==t)return;var o,r,a=[],i=!0,c=!1;try{for(t=t.call(n);!(i=(o=t.next()).done)&&(a.push(o.value),!e\|\|a.length!==e);i=!0);}catch(n){c=!0,r=n}finally{try{i\|\|null==t.return\|\|t.return()}finally{if(c)throw r}}return a}(n,t)\|\|function(n,t){if(!n)return;if("string"==typeof n)return e(n,t);var o=Object.prototype.toString.call(n).slice(8,-1);"Object"===o&&n.constructor&&(o=n.constructor.name);if("Map"===o\|\|"Set"===o)return Array.from(n);if("Arguments"===o\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(o))return e(n,t)}(n,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function e(n,e){(null==e\|\|e>n.length)&&(e=n.length);for(var t=0,o

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	203512
Entropy (8bit):	5.508215712897086
Encrypted:	false
SSDEEP:	3072:7i/bgBBN4g7dje7r98kSUR148OldwwgL2u3DDU8CuqjmMtZ:GkBc6jkrydUKCKu3DDU8CuqjmQ
MD5:	67A33585A071DA3BEFBFE5E8BE12F5F0
SHA1:	DD56F991F078B7DE4D957B779A37CE5AA7CDF272
SHA-256:	B9649E0E9E5790F8D6B5E69AA4FF9969E8F7D72A84F8501FF9379078005124D8
SHA-512:	72C3ED32872EF0A7752F0BF1E772BBDEE68E87D71D13B0D180FF96069462BA81C854502E2E18DFA0B55828E0420446A71D586D69FCB05EF66E55973A039B15B6
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/js/forms2/js/forms2.min.js?ver=2
Preview:	/! forms2 2024-01-29 See forms2.js for license info /.!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){var c=b[g][1][a];return e(c?c:a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}({1:[function(a,b,c){var d="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";!function(a){"use strict";function b(a){var b=a.charCodeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var k=a.length;i="="===a.charAt(k-2)?2:"="===a.charAt(k-1)?1:0,j=new f(3*a.length/4-i),g=i>0?a.length-4:a.length;var l=0

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4524
Entropy (8bit):	7.893947843833817
Encrypted:	false
SSDEEP:	96:VbihgJ54xqzWFDWJayjXZnO2xJGzR0YtFau7UrSp5FtQ:ti9xq+DWJay9nbGz1tQSp5nQ
MD5:	C8A01312D4BAA7AB5129EA9523F0450F
SHA1:	C85A8193C53A076AE9D6BC225F8579129A2ACDC7
SHA-256:	9FBA685E5D4A7328E326D39D516F36B9461FF9966B3AA5965F5F6CBCD5A26DF5
SHA-512:	ADD847D6712F553776FB7355652456D314A26B61D0CA8C2CD58CEB9801E8161522B01722EEBED0DB181A7F5391CD6BD410C7EA2698BAF53AB81CDCCFB52CE052
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/Gartner_logo-300x72.png
Preview:	.PNG........IHDR...,...H.....Lo....sIDATx....L.u.../...$.....H......n......tQK...?....rrM..V.2....~.GnN..e3...0..@.o..o.?>l7v..w...8..~m.?.w.........E.H$..D".8%.[?q..,..6.b=.r...X.\d..$M".Hl.$xQ.r...8...a.......s8.&<.{.....D".b...24.(.0..t...B'.......M".H"(.\....!..f.8...b.&.H$a.*.E..0.}.L.O4...h..D.Q..2P.........+.<.D..Q..r\|..8).....vd.jK"I....;q)N...L.[. Y.H$......0.'edT.....M".87.z.[..<,...xE......B.A..Z...`...8).HM`?.k....m.i.&9XHbQV7.._..0.~\.?....Ee.C...-..L....p.&.......i....mh..X..(.2,..-x.....v.c?.5....Q........t..5X.......L..p..0epe.XVVRX..G.E.z..0..X.TX.].(D-:..SV.de%.%I.......M.......-h@7.Ae...`..$@.../`.z...5."...Ux.}h.....$A.....(..>...{..C.&..8?....ru5..R...),......Q....<.$!".%.._.Ey...Y..............D.2_F.......~...l.......x./.m.B.r.o...(F6..y..sa..<..x.{.!..7.4V.z...'..P..q...A....`....?.k..@...j.O.....{..~G?.0.=...0.K.........an...$..@7....^.....m...c.\|.4.2.....A..x...`7..q.C\|^...Y.A.....9[........a..0.d.b..q.{Q....f.g.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1002x657, components 3
Category:	dropped
Size (bytes):	118516
Entropy (8bit):	7.584814050722315
Encrypted:	false
SSDEEP:	1536:9R5ODBtq8CcjRZTgDxJ+mRXJCDMMR6Xo8empXMp7ddddTcgagngLB:75bb+mlJCLR6XNeQMBddddVuB
MD5:	60D965983747C3FD120006D5674B2E6B
SHA1:	4265260678458C59061CB70A408C21B53F50685A
SHA-256:	691C02ECBAAEBF5F5B4F5B2DEF4CEEDC7CABB758701A477A744056DEC5B94022
SHA-512:	7072B97140E7ACEF8307C8E4560A8B11BD6670BAA322DC3E9278C5DEBF6B92095809535012F552C43A75669167235BFADF33EA5E2370B84286BAF20C6C0EB8DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...w....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.........7....h..=..O..x..?.......

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.360613902337515
Encrypted:	false
SSDEEP:	192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0
MD5:	61699B70CF57ABE63FDF5F4007D36EC1
SHA1:	6C05189CC2D08BB2A7609C002F0675C9C670D362
SHA-256:	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
SHA-512:	AA5CC8794B5383B781A6611A4B5D8D660C73E766186551799B28FCF668C911EB0177FA04F543EC60E5F64005F3BCE019604BD0A2129D718F33284D3689F5C398
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-vflYWmbcM.js
Preview:	/** @license React v17.0.2. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=Y&&a[Y]\|\|a["@@iterator"];return"function"===typeof a?a:null}function y(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,e=1;e<arguments.length;e++)b+="&args[]="+encodeURIComponent(arguments[e]);return"Minified React error #"+.a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function v(a,b,e){this.props=a;this.context=b;this.refs=Z;this.updater=e\|\|aa}function ba(){}function K(a,b,e

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2239), with no line terminators
Category:	downloaded
Size (bytes):	2239
Entropy (8bit):	5.8305959086587
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08LcSSOQbgaH6:wsbSUtJfxrqLWWWdV6j13ccNF
MD5:	7AE7E03910E4A04A0E363304225FBFD3
SHA1:	4CCC9B16A71B315287A701E2846B926A4C0E84AB
SHA-256:	E04BC55DBF8A7470DB5DA04CFB64801F7EE4AB6212170EE0699E95802F5EEAB5
SHA-512:	8B9F8784A711031DDA03735AE88659C76C54AA9DBBE38A5D9D314366E2BB837B7A7119C92990F6E76CE2FE11F34FD02FC66010B49DBAD69D0FB30363B94B26F1
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/982651595/?random=1713459565240&cv=11&fst=1713459565240&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4828)
Category:	downloaded
Size (bytes):	4895
Entropy (8bit):	5.368982337989415
Encrypted:	false
SSDEEP:	96:x08OWJB+hyYFDTprUZ21FdndrbNgIVllvmo+dkd6kLILP+ewcwohyn:x0MAhprDd1V7d0ChEz+emGy
MD5:	E6C7B1B5B48D9989C48C543C3EA5ABC6
SHA1:	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F
SHA-256:	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
SHA-512:	BC8A9EC6292FF33632979A4BC7EEF9CB7BCAF3905579BFA261C359412BD9EAF066A237E20AD5461EB8D634177D153F5B642B1E026D78FD4A72B82A8A3B92D07D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_browser_browser_detection-vfl5sextb.js
Preview:	define(["exports","./c_init_data_runtime"],(function(e,o){"use strict";class n extends o.Message{constructor(e){super(),o.proto3.util.initPartial(e,this)}static fromBinary(e,o){return(new n).fromBinary(e,o)}static fromJson(e,o){return(new n).fromJson(e,o)}static fromJsonString(e,o){return(new n).fromJsonString(e,o)}static equals(e,i){return o.proto3.util.equals(n,e,i)}}var i;n.runtime=o.proto3,n.typeName="google.protobuf.Empty",n.fields=o.proto3.util.newFieldList((()=>[])),e.TimeUnit=void 0,(i=e.TimeUnit\|\|(e.TimeUnit={}))[i.NANOSECONDS=0]="NANOSECONDS",i[i.MILLISECONDS=1]="MILLISECONDS",i[i.SECONDS=2]="SECONDS",i[i.MINUTES=3]="MINUTES",i[i.HOURS=4]="HOURS",i[i.DAYS=5]="DAYS";const{ipad:t,chrome:s,safari:r,opera:w,msie:d,edge:a,edgeChromium:u,chromium:c,mozilla:m,webkit:g,mac:f,windows:l,windowsInfo:b,iphone:p,ipod:x,iOS:O,facebookWebView:v,browser_name:S,version:h,userAgent:A,plugins:C,pluginNames:N}=function(e=navigator.userAgent){const o=function(e=navigator.userAgent){const o=functi

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	4.804252944516369
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfy0UGei5iuOGXY1a0xa7OWoBvZwsV5UAGFtpt7ZY:2diO4NlfPGMy0UGsaoYb7w/ejpt7S
MD5:	FA605C234D37022FA5F7FE181DA548F7
SHA1:	629B384D562F45084F390996447294E94EC2574E
SHA-256:	57FC4672D5FA82F08312B849270C6898164F2CC7793A5F3FC0C8C1D453D2525C
SHA-512:	9F7595DDD56062894EF77AC8A62762C785E3CF75D3EEC3AFAE4659952BBFEE3F588C1DC9959DD44A1BC3F2DB99C36199565FA7307C280C7C0DB326FB22D910F6
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/icon-linkedin.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M7.63 9.543V24.5h-5V9.543h5zm.33-4.626c0 1.436-1.086 2.585-2.83 2.585h-.032c-1.68 0-2.765-1.15-2.765-2.585 0-1.467 1.119-2.584 2.83-2.584 1.71 0 2.764 1.117 2.797 2.584zm17.707 11.007V24.5h-5.002v-8.002c0-2.01-.723-3.381-2.534-3.381-1.381 0-2.204.924-2.566 1.817-.132.32-.165.766-.165 1.213V24.5H10.4s.066-13.553 0-14.956H15.4v2.118c.664-1.018 1.853-2.47 4.508-2.47 3.291 0 5.759 2.138 5.759 6.732z"></path></svg>

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 255x255, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6520
Entropy (8bit):	7.970361271550718
Encrypted:	false
SSDEEP:	192:XQvXgMx/1xzpVWrQeijDH1VBaDJFdC1HbwJeQq57:gIC/Pz7uaH1kU7wAQq57
MD5:	83427AD4A7923CEC35F0D62E79CF5ED0
SHA1:	077B6D5B7D6A54EBF323F87A4E32A740F86CA719
SHA-256:	069E20DC4BDABDEA2508CE8332695E342595FA05893D40494654E10131B5E776
SHA-512:	07B157121AE563B629941A89052F4AD754EC974E5CF1F66EE4747EDED9F8588B1A444CBA977141EC08616AB15A3B6F6919E8C2C7427B02C221A5C4DA84CC799A
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/05/265b92bd-2235-4fff-acc7-007cec4306a7.jpg
Preview:	RIFFp...WEBPVP8 d....t.......>Q$.E..!.)M\|8....o\.).`.s..9.9n.K.>...\|.......t..}...>.xw...2.8..........q\|.}....:.5..G..w+.....k........+.V...<...S..'...6..u..ML......i.y..N..?.......8..i.0.#..0......d.L.w.........J..S..>2....>)..[.."..d9O.J.\|h..4/Z..vr....Q.Y....#e..%(.=dY..%Z9.\...8.........T<5..........\....H.G..^...d..d.,...K..4.....!.........@.1..I.M..F.A.q.~.0...V...o...p...pD.5W...G.JF.3F......3um<..i...u`.<`._.Z...1Y..d.....l..SP..Q.g7.g..&.{..B............z.ZN......_Hz..nf..f.8c]a.DX.E...#..._..0.'.S.`.!%.......fe.I...va..kI.....}.4.1..o..fp...e..\.*.4......&.......P....y{;..a.5.....[AK.f.a....."V9l..d4.r.a.............Y..F.".HH..P.....5....R!......EN..)...M..[\|.bf......M.&Prca.W.,.....q.O{..r.."...b...\|..%......^.4Z..?g.....+<(.\|52.t....E...........M..[..4.....r......n.%}..>.>-...w..D+.J...@.....f..c........(..A.........n.J..i.A.X...5...=...S.u...B.)=.{..,.n...-..d..bP.e~>.. ...\|MS.......a.D.GjW.sLHm...8Y.........r..~q..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1353)
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	5.004045923311685
Encrypted:	false
SSDEEP:	24:1bmHf9EzCHD0NR9AYM4gsTW6pgDaqDatRRCur+swRFvVGzrem8sH2:1af0XmYMcsa2atcjEzr2sH2
MD5:	4D83CD35A5B3138D895EA13588222C8F
SHA1:	2C86E768E75EB2F2846502D5D20C142A9912A590
SHA-256:	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
SHA-512:	8C364530213F4985A705CC900C34348C263D0AFBFFE8E562A0C49ACC9C8018C73DEB39279C7051078ACE56DC53BC0ECFCECC7FE1AAAB6CC5777C19353E53FDC3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page-vflTYPNNa.js
Preview:	define(["require","exports","react","react-dom","./e_edison","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,o,n,r,d,c,i,a,l){"use strict";function u(e){return e&&e.__esModule?e:{default:e}}var s=u(o),f=u(n);t.render=function(t,o=!1,n="",c=!1){if(!t.RootComponent){const e=function(){const e=d.getInitData().debugPanelInfo;if(e)return e.clone()}();throw new Error(`Module '${null==e?void 0:e.entryPointModuleName}' does not export a React component named RootComponent.`)}let i={};if(n&&n.length>0){const{encodedProto:e}=d.unmarshalProto(n,r.InitProps);i={encodedProto:e}}const a=c?s.default.createElement(s.default.StrictMode,null,s.default.createElement(t.RootComponent,i)):s.default.createElement(t.RootComponent,i),l="root";let u=document.getElementById(l);null===u&&(u=document.createElement("div"),u.id=l,document.body.appendChild(u));const m=r.Edison.getMetrics();m.recordRenderStarted(),s.default.version.start

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2544526
Entropy (8bit):	5.661662443276567
Encrypted:	false
SSDEEP:	24576:5OR6xwIFKw20veUTK7A3viKzniCpySQJPqAFWG7WhsMVjZN:O6xPFKwdbiCpySAqAFWBVL
MD5:	0D2406F6A79BDE4D11AD5F70B18BA433
SHA1:	699A5D887B0557A5F788FEA125E4260CF41FDB55
SHA-256:	001B4C1ED0CCCE6C39372A81FC4E9464950F77C72FD53AEA1F78F999C0DD9BD3
SHA-512:	B418F01E73CD8E6B9185FDB7A0940A15BBD2FB810066B4CCEB72D5558466CA3ABC8AFA4B2299E7B93E780159C77126FCCE96BA9701F6287BFD045CE2DA3FD6BE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1068
Entropy (8bit):	7.745813524846422
Encrypted:	false
SSDEEP:	24:UhFSt18pKF6i58B4RruVeoulMmw6hSzw6T9D/3:oF15i58B4RruVeoubupTN/3
MD5:	9AF168CE6102207C92A36E589D1AABDC
SHA1:	D052837A4409B3DE0AD5E9898FEBDCC586EB180B
SHA-256:	1A42FD199C5A7BBD50FBA46EA927CB77611C85D90AECD98F0963807C17BAB536
SHA-512:	F92495CC0D44B29F742B1185C940E93532B14D1AEB28AC70E1FB3B6EB562599DAE042AD3326CF724D31FAC5E0E5CE0461C21476D1A72455D6786E65164EBB20E
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2022/01/Logo_GRY_Logo_500-108x108.png
Preview:	RIFF$...WEBPVP8X........k..k..ALPH.........!I.U..v.c.m.gjm[5{.9..m[u{..c.3..t...:..93"&..(n.....f}.....Y.....S....k....~.o._..r+.G$...2q....)#.......M....:}..7T.........o.......P.g}.\.........D.!..z....b.N..tk%.......C>.Y.1.%k.i.D...4..d..Nj#T.W.G.N..vb.#..\...O....'...D)mz_..-.S\|.>.M.<.o...q.T....oI..s....r..<.R......Q.........R....e(..H].(...3...F....Z.R...n..j."....`r.,....[...2Hd..>......AucERPV.....4M;..V...{..S.............x)..;..q...x..D2Pt...".m.......]5E....x.LF.....H....p,..&...2..4;..Ug&.9}>..Zpu............h......".v..3../=..s...\|]......;.9.".@.......y5.U..~....1....yQj.8\..w..l..z......zT.N.....\C.#....5N.(.RJ....FMs.x..P..)...\|w....8...B..Y...;.g)*..2}.xCz...$V.\..F .A.........NA......W.4.C/..I.@....q...qY i1..I.O.>}...h..6.d.r.S[A.\D.2qn...K..=.qn...............:..UL.p.#\...`P..Y...\|c.O.#v..YS./y....3R\|..n........[.......^.h..l.K.k.v...{.........O6......?....W.`. Y.......Wr..t8.v..mq...p9.........r.5..~" M.........F].k.Q[....VP8

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	7.970545471234719
Encrypted:	false
SSDEEP:	192:2plhwluLzWjMgYQbeK9sjyLFZmr9T8R2HZTXEj0THRRUxflYRLP:2pHmuWYQqwLFZg98RS1YE7OK1
MD5:	F1934336AAC072C425567E93097AE52C
SHA1:	69C163AD57ECE9BD8F7476D48F9EC80D21D8AAF0
SHA-256:	73A9C098D8DAC375A0A6EDC388A1D9B502C2E2C07DA1037F361CF97FA5F0F719
SHA-512:	345F35408CD85D3C98F449E5CB2DADB58ACE2A6204EDBEF949A27D5958CB28437B1692C80CA6D6ECCDCC5CB12BDA70C5584B82CB1C10551CB87BC1CE3D2B0DD8
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/Spaces-video-thumbnail.png
Preview:	RIFF....WEBPVP8 .........*X...>Q(.F#.....z0p..in.4./.fOU....O..s...oF.b.......\|.{../]..\|...?............^....'.../.....w.0_[...G...............?.oa\|....;..................~...\|H.J...}\Q...8.....d...E..q#.((...qF....1XC+.ea..!..2..V.....-...............K...V.h.ZMCj".$Y...#.._.././<.T.C..g.q#.((...UT..K8..@..Q2#<.PP-..o..JI.!.........w....d...&.'.'.Xf.4...n.B(.)..Q.....0...a.N4,.4_EqF.H,.E.Nc.O..n...V....@ .....2.P7.(..{.)%.u..?..D......>.0..\..d.-.s2..B...k..C... WG. <..:.i].v%.Ei^...[".h`..I..~...!..H..J#0.bJk..+..N...8...+.z."..R......v......h.5.VX.1.I0..-Y"T.0Q....?%.MG.^.."`B86....R.i....."'.....6te;...K\........M}....%.63..4...8......u1_..[...z..#J.x...K...A...E.......O........Mb...E+...n......F.T.a..x...9Q....&._..q..................a...B...e+.@.u.Y.j0.\...Lz"...+..-. .+ S5.2j:..fvw.K^Y)7.. ~...dw.W.....6#<...{.....3..S$.d......#....Y.$..[.gSw-.d..Up..v....1.....R8...n.....I.uT..P..$a%...>.(.i....p.2..4ZAg.0...j.5...u./.5.....vd..g......M.(

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64463)
Category:	downloaded
Size (bytes):	68518
Entropy (8bit):	5.299811440730022
Encrypted:	false
SSDEEP:	1536:MCI9kCKt5CUuTaErVcnZXPNtWGqscVDXXl6lzlIgEXETjX80uoEFfOpDw6usi5Tb:5NPqYlzlIgEX+Z7e
MD5:	CB84D302567E4EC61E1B28AC3B716748
SHA1:	D1D2B287ED663EDD29D980E922AA27AA3FF5FD4B
SHA-256:	3A9C740D4E2A184E02820D7520B98C7BC19E4386BF325354C7D68EE3DF06602D
SHA-512:	1F890FC1AAA0077041970472C52F1C2E8240E4041855F7DC4B12B725F0F8E6CE193790DE7DBBF94CB0BF11F65FA756EF6F47AD1732D25C92890A88182280ACAD
Malicious:	false
Reputation:	low
URL:	https://js.hs-analytics.net/analytics/1713459300000/6191183.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.639. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.var _hsq = _hsq \|\| [];.var _paq = _paq \|\| [];._hsq.push(['setTrackingGate', 'AnalyticsTracking:UseHashedDomains']);._hsq.push(['setPortalId', 6191183]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addCookieDomain', '.hs-sites.com']);._hsq.push(['addCookieDomain', '.docsend.com']);._hsq.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsq.push(['addCookieDomain', '.hubspot.com']);._hsq.push(['addCookieDomain', '.hsforms.com']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '19306791']);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/6191183.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrac

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258), with no line terminators
Category:	downloaded
Size (bytes):	2258
Entropy (8bit):	5.845671771318686
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08HcSSPnKv6:wsbSUtJfxrqLWWWdV6j17cB
MD5:	18FCA55157BF23676D027A9669E3DEA9
SHA1:	68C50CE67AF2832E184D2EF470CCFAFC24BD604B
SHA-256:	0569313C7E703C4EB541553648063ED475E98F462B9B4A5C019B7188887CBE77
SHA-512:	A82405740095205591F999DD0E113FBE1A4856E31351950D2D5049C7D91E385FA73826860AB5880FB5A1C0E1AADF21F059970218126D96947F37C2BD9CA8736F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/982651595/?random=1713459593238&cv=11&fst=1713459593238&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.8548730495981
Encrypted:	false
SSDEEP:	12:nnwkHFVF6YXukbpPxTEdxk2fKuv6/WbxXBu3J3nWN0j314IQL:nnwWpqkNOYDa6/gXBuNq054j
MD5:	85C876EB10030058F29245148995CC2D
SHA1:	458679E2B02107F6448729AEC844D3BD8283C9ED
SHA-256:	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
SHA-512:	2CA5D147B5630AA540DD241CB8C06429A7072108C2BEADF04ED532FC7F5291BDF1147F6C334293D96397B9402421B1AD52CDF9F1EA39918C95201DB1DBA19DCF
Malicious:	false
Reputation:	low
URL:	https://marketing.docsend.com/integrations/
Preview:	<html>. <head>. [if (gte IE 9) ]>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <![endif]-->. <title>Dropbox</title>. <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-eval'; ">. </head>.<body>.<script>. (function() {. /*. Requesting marketing service to process tealium events. */. document.head.appendChild(Object.assign(document.createElement('script'), {. src: 'https://www.dropbox.com/pithos/marketing_tracker_service',. async: true. }));. })();.</script>.</body>.</html>.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	2360
Entropy (8bit):	5.218276246222954
Encrypted:	false
SSDEEP:	48:1h4UNOJruZ1jMp1w+7e6sFh5i1W+7TSb5jVr6xuWtmUzAsQ+3j6D03Fsl7i:YUYJrubjMzwqBEh5i19TSb9YuW4UzAs5
MD5:	61444FC69EEE497F28D680EE0C9157E7
SHA1:	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF
SHA-256:	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
SHA-512:	B5480EC396A352E520BCD669692BD76C97442E1BB68CCDA9AF013C300864257DFB26CFB770BFCFF09C4F6D25B59C326919FD8EE6651CC0325239AD7BE1354AEB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_csrf-vflYURPxp.js
Preview:	define(["exports"],(function(e){"use strict";const o=function(e,o){if(!e)throw new Error(o)},t=/^([0-9]{1,3}\.){3}[0-9]{1,3}$/,n=function(e){if(e.match(t))return[e];const o=e.split("."),n=[];for(let e=0;e<o.length;e++)n.push(o.slice(e).join("."));return n},i=function(e){const o=e.split("/"),t=[];for(let e=0;e<o.length;e++){const n=o.slice(0,o.length-e).join("/");""!==n&&t.push(n),t.push(n+"/")}return t},a=["=",";"],s=function(e,t,n=!1){o("string"==typeof e,`${t} must be a string, but was ${typeof e}`),o(n\|\|e.length>0,`${t} must not be empty`),o(!function(e){if(null==e)return!1;for(const o of a)if(-1!==e.indexOf(o))return!0;return!1}(e),`${t} contains illegal characters`)},r=e=>s(e,"Cookie name",!1),c=e=>{return t=e,n="Cookie max age",void o(!isNaN(Number(t)),`${n} must be numeric, but was ${t}`);var t,n},u=function(e,o,t={}){var n,i;r(e),(e=>{s(e,"Cookie value",!0)})(o),t.maxAge&&c(t.maxAge),t.domain&&(n=t.domain,s(n,"Cookie domain",!1)),t.path&&(i=t.path,s(i,"Cookie path",!1));const a

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3814), with no line terminators
Category:	downloaded
Size (bytes):	3814
Entropy (8bit):	5.646422466721835
Encrypted:	false
SSDEEP:	96:YyRkckyiyg1j+c6B8ZhZqYy4g4o6B8ZeZquyXgJc6B8Z/Zqdnb3:yhyiyg1L6B0hZqYy4g4o6B0eZquyXgJb
MD5:	969EA11D7DCA3A3FF40A635618D56B5F
SHA1:	589BF35F6A505C5DDCB997F3535B993DEF0FEA4D
SHA-256:	4DBDE3B8C1FBE192C5E35F022109A75109D1126412134CADB11A8DCD9A22ABE3
SHA-512:	1A411B29889AD6D917BC315D3AF3205ACBB95AF5AC8A466A3AAE44A53D5CC03B3C67967F4445437475895F0038B3F322F2E803E7525850257CD1E9771610C7AF
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/982651595?random=1713459565211&cv=11&fst=1713459565211&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597481942","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j597481942\u0026tag_eid=44805655","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sLah0Bw!2sZkjebg!3sAAptDV6X1PCG"],"userBiddingSignals":[["8307377499","768907168"],null,1713459566850113],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rd

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 26, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl+lt/e867syxl/k4E08up:6v/lhPC2117Tp
MD5:	979B65078E378F1FB6799B7C72B74083
SHA1:	E8328432942D9E8FBF650969D3006F76B57ED37D
SHA-256:	190CD2250710218FE8D964A488BE11807CB653497ABD880A3F25593733A854F4
SHA-512:	63A1E7A0D5ECD6D10238F648FB1E830C8A2A52A8FDE3BFBC805DBA4D4B4FEEEE39309E5B4B6814C08836F31BF32D7EE037EF9A72087370FFCD0E44C0D49348EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+...........2.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	201580
Entropy (8bit):	5.535678171996171
Encrypted:	false
SSDEEP:	3072:ujq+71vbzwHnHeF8nnp2LUF1eKPyUF722gY8pv1HkreiJ:6q8wHjzZ722v8pNHtc
MD5:	2AA4DA749CF25EE8675DC32BC1BC735C
SHA1:	3CB72BC54861472DBE5FDE05CE7A3B26B482D8AC
SHA-256:	D1E43C1ACAFD6C3961CA2533AF9F750374A21A8896C5CC1DEAB126D9A16C14D5
SHA-512:	82E44A24C176EE3977D7FE173FE8B338246C8856760FE774589CBC76A15FC4A218B07E907F776444CA88224563BADC487455AB5301A9B06514BD09B3E4D40CD5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-40340055-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-40340055-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-40340055-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-JPP8SP2PRX"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-40340055-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_e

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2673), with no line terminators
Category:	downloaded
Size (bytes):	2673
Entropy (8bit):	4.761984159465682
Encrypted:	false
SSDEEP:	24:oWkLaWLJdKpp/8yf3+lMzqvwK0qgab8WhJ0r1COVPLSNmO3LrJNluOp9Fo6oWxY:HkWWNk/8yf6MMwKU1Z1rQL5p/1je
MD5:	4AB443453FD306C1256E7097566E53B4
SHA1:	02458BE9088E8986FB977481B4C007FBE60A3CE0
SHA-256:	E5392DA989F9722699BA910926DA1B3C33E6D9C2BE7C010474B861C9F211B604
SHA-512:	DF6221516EE7CD4075CC200C4FAA6D539C397EDAA5526FB9DCC4CC21BFF967CFFBACE11CE6318F0D7EE0021D045B7EF2780F6521F372707D6D8BDB6A71E70015
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.build.css?ver=1711053212
Preview:	.wp-block-ht-block-toc .ht_toc_placeholder{font-size:18px}.wp-block-ht-block-toc[data-htoc-state=expanded] .htoc__itemswrap{margin-top:1em;opacity:1;max-height:9999px}.wp-block-ht-block-toc[data-htoc-state=closed] .htoc__itemswrap{opacity:0;max-height:0;display:none}.wp-block-ht-block-toc.is-style-outline,.wp-block-ht-block-toc.is-style-gray,.wp-block-ht-block-toc.is-style-rounded,.wp-block-ht-block-toc.is-style-contrasted{-webkit-transition:all 1s ease-in-out;-o-transition:all 1s ease-in-out;transition:all 1s ease-in-out}.wp-block-ht-block-toc.is-style-outline{border:1px solid #ccc;padding:2em}.wp-block-ht-block-toc.is-style-outline .htoc__toggle{border:1px solid #ccc}.wp-block-ht-block-toc.is-style-gray{background:#dde2eb;padding:2em}.wp-block-ht-block-toc.is-style-rounded{background-color:#fafafa;border:1px solid #dfdfdf;border-radius:10px;padding:1.5em;margin-top:20px;margin-bottom:20px}.wp-block-ht-block-toc.is-style-contrasted{background-color:#fafafa;border:1px solid #eee;border

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	4.660020080139181
Encrypted:	false
SSDEEP:	6:RvPEsitqiJwDAtuGNXKJYaLVY2ZCsiM3Pc+:VP6pmAtuGNAYa5tZCqPP
MD5:	C7E5C4E67DAC56504B88B2E85B7F83CD
SHA1:	FF8A0E76353476329545AEBCD7CF886817229AD4
SHA-256:	6B67B2995F11A31D6C53E0B447C49C7DB7E40A771A18EADEB8F8F5720FA78327
SHA-512:	8D5F1AEF50B7C251FB1F9437EF0246EF875DDEFF694F0F367266AA5A9015CD45B8F96E47B2D5DDE4F16B7072412053F8A1229123E9C886433BCCDCC45F3E1CF8
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=1711053212
Preview:	.wpp-list{}.wpp-list li{overflow:hidden;float:none;clear:both;margin-bottom:1rem}.wpp-list li:last-of-type{margin-bottom:0}.wpp-thumbnail{display:inline;float:left;margin:0 1rem 0 0;border:none}.wpp-meta,.post-stats{display:block;font-size:.8em}.wpp-meta:empty,.post-stats:empty{display:none}

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (345)
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	5.417628934625646
Encrypted:	false
SSDEEP:	12:U2eAi/ZBRiUQxkNP371H5ouSA0CVKR/x6rgYaTmJOnxlEU3wrxhJm9:xeAi/ZBRiU7Z371HOu70CViTmJWV81k
MD5:	A1782CB302D36D94A8F5904841B1F9CD
SHA1:	F489819205A11E879A7CBD37D906B7476040F5D9
SHA-256:	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
SHA-512:	F0BC15CF5DF3959036029298BF03FB3788B3308EA81A44BC26D1CF55F008C5378AC57764784CFEC26836413F8E5D036F66C348B817DBF172FC86C806F5781109
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/logos-vfloXgssw.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-logos@3.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--color__glyph__primary:#1e1919;--color__glyph__accent:#0061fe;--color__inverse__glyph__primary:#696663;--color__inverse__glyph__accent:#3984ff}.dig-Mode--dark,.dig-Theme--dark{--color__glyph__primary:#696663;--color__glyph__accent:#3984ff;--color__inverse__glyph__primary:#1e1919;--color__inverse__glyph__accent:#0061fe}

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226116
Entropy (8bit):	5.543272755915368
Encrypted:	false
SSDEEP:	3072:ECq+71vbzwHnHVKi8Fvp2LUF1er5yyXatvFv522gY8pv1H9iL:Jq8wH1Yf7tvx522v8pNH9E
MD5:	3B104491087D7C0E6269EB4C9FCFDA62
SHA1:	F42699AE31B142DFE2773724575F386ACD84D7AA
SHA-256:	2CFCC6159A8DE97EA2BD238C446DC9A8193B6A853ECB64D6D348A17F365E38A9
SHA-512:	D4E3545991BFD126577F6FF977A496E7098F054368732151581EE773FFA0D3D9994ADB90763E70425E114A399A2C98887465649B7CCC2FC4FE3CD85D6C0E03A5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-982651595&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-982651595","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2241), with no line terminators
Category:	downloaded
Size (bytes):	2241
Entropy (8bit):	5.823234432747374
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08ccYLSOQLP6:wsbSUtJfxrqLWWWdV6j1wcSV
MD5:	41C58D0E9EBA10DED8D1AD721B28C627
SHA1:	E199AE7E913F7C9913A88A08FB41FED2FEE0439D
SHA-256:	C78C637B9DF562E7E06582784D7DAC6D56307795AC07C56FA6BD9C1296D96663
SHA-512:	302D8371B5E0C693A4A93725A2209D2174E0D03A0616C18E9DC257E6BEC079BA63122605781D08C78846449A1AD530D1527416728E76A491624DD2354F06A6F5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/982651595/?random=1713459565211&cv=11&fst=1713459565211&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1300 x 420, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25835
Entropy (8bit):	7.783937899951852
Encrypted:	false
SSDEEP:	384:kh8PALP3/WFlzJgl0uYG7FRoNVJhXEhplXiQOfXtYX8EinAeC5mFi2ENBiDO:kh8PAT/WvzJ0bboNVJuzXrMsUiZNL
MD5:	806B5FBB2D4AFAB6E7EE9FC632A28F52
SHA1:	ED12FDFDBF5EC15E0E3AA772F815CC4339EA16E9
SHA-256:	694F444E60B221C28B7CEFAFE5D7B195301E18B3470988CD5E991610390DF45F
SHA-512:	5FDA96C5E7BE761DC35F40212EF8E840F262FA247508F4D392030DF731A936B915E2485BFB385207D953CED032200E593A0F4ACF41C1DCE71D155892BE6C8939
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............@c......sRGB.........pHYs.........g..R..d.IDATx...!N3A.....)B*....3.......r..."8.......0.8....m.....<....+..........................................................................................................................................................................................................................................................................................................................................................................................................................a...;..q...Sn..-w...~...C.W.$I..1G.$IR.z.n.R1...z..iN../4......n.Q..1I.$Gh\.$I....X\.T~..O....Wn.S.}Vit^u.ZuA.$i.s.I.$5...x+.."...7^>.W.g.}...ov.....aP..q..%.."..P...... ...@(...E......B...."..P....B..@(...P...... ...."...E.......B..@(...P...... ...."...E........"..P...... ...@(...E......B....."..P...... ...@(...E......B.....E......B..@(...P...... ...."....E......B..@(...P...... ...."..\....B...."..P...... ...@(...E.......B...."..P...... .

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1007
Entropy (8bit):	4.387377561206794
Encrypted:	false
SSDEEP:	24:2diO4NlfPGMy0ka4j00WM+4KU36WDQA6T0FIuLLV4nQAzypp2:c3iGz5f136WE7T0RLZ4QA+n2
MD5:	8768BABE393DB0F3332617541DD5D41C
SHA1:	51064AA02411AA5337CB549974D0168B015DF131
SHA-256:	43A6D78F7DC5E1685FD18F385B4DD0B572DD65D9FB210F2B1FF541B492BFF398
SHA-512:	10F8E0EC69CC95EDDA2DBDF83267CC312352D20D9F6BB0C9B1C9EA691829BE8D855A30C95A95D6AF481D8163726077729BA6E3ADEBC7FD25338A059B83CEC364
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M13.663 9.36l.05.857-.842-.105C9.802 9.71 7.12 8.344 4.845 6.05L3.733 4.913l-.287.84c-.607 1.873-.22 3.851 1.045 5.182.675.735.523.84-.64.403-.405-.14-.759-.245-.793-.193-.118.123.287 1.716.607 2.346.439.875 1.332 1.733 2.31 2.24l.826.404-.978.017c-.944 0-.978.018-.876.385.337 1.138 1.669 2.346 3.152 2.871l1.046.368-.91.56a9.294 9.294 0 0 1-4.52 1.296c-.758.017-1.382.087-1.382.14 0 .175 2.057 1.155 3.254 1.54 3.591 1.138 7.857.648 11.06-1.295 2.276-1.383 4.552-4.132 5.614-6.793.574-1.418 1.147-4.009 1.147-5.252 0-.805.05-.91.995-1.873.556-.56 1.079-1.173 1.18-1.348.168-.333.151-.333-.708-.035-1.433.525-1.636.455-.928-.333.523-.56 1.147-1.576 1.147-1.873 0-.053-.253.035-.54.192-.303.175-.978.438-1.483.596l-.91.297-.827-.577c-.455-.316-1.096-.666-1.433-.77-.86-.246-2.175-.21-2.95.07-2.108.787-3.44 2.818-3.288 5.041z"></path>

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.383594884337988
Encrypted:	false
SSDEEP:	3:qGGAW6yIA6qENKAQpnDTLTrAWRgn:kAYIZYpDHTRg
MD5:	2ECE426E3900FA6EBAD39380AEAA2539
SHA1:	24C4E875361BC77874B005F816D160223DC68B46
SHA-256:	E4CE65C3A33FDF0AD73B34857BFF62AF3A6187509551AFBFECBA345FEA02BF55
SHA-512:	66A11A88F239BC8AD325671B2EADDFE0F88CC1EFDD4FA08E83D2FCA2E615DB4A101B935AD89F274B606F0C6DFF41BE575708268E8FB34F897EC28F7D8024BC65
Malicious:	false
Reputation:	low
Preview:	{. "success": false,. "message": "malformed JSON",. "code": "invalid_request".}

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4787)
Category:	downloaded
Size (bytes):	4887
Entropy (8bit):	5.270860802966812
Encrypted:	false
SSDEEP:	96:VONsXQ+FkU3YFgQ+F5UT/nfl2gLNxMdGaBQGjHfQ94XvOH:VmmQ+FkU3YFgQ+F5UT/n92gLHdaBQG7s
MD5:	1DB6D4FD47F26888CB9787D97FC00EC0
SHA1:	7E0F0236E67678426A357D5CDC7F75773F5A4E44
SHA-256:	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
SHA-512:	B40BA785F2D8F10CBDD0ED3252047EDB98259B2A58C9B6F880466F45D76EEFAD5201EF7866090B8242C31EF0E561622BD45E827B5ACEC344808B9E404DEBB813
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_user_centric_perf_metrics_component_visually_complete_ajax-vflHbbU_U.js
Preview:	define(["exports"],(function(e){"use strict";var t,i,s;e.ApiV2HeaderNames=void 0,(t=e.ApiV2HeaderNames\|\|(e.ApiV2HeaderNames={})).DropboxApiArg="Dropbox-API-Arg",t.DropboxApiSelectAdmin="Dropbox-API-Select-Admin",t.DropboxPathRoot="X-Dropbox-Path-Root",t.DropboxUid="X-Dropbox-Uid",t.DropboxTeamId="X-Dropbox-Teamid",t.DropboxTeamAuthorization="X-Dropbox-Team-Authorization",t.CsrfToken="X-CSRF-Token",t.DropboxForceQuic="X-Dropbox-Force-Quic",function(e){e[e.TeamAdminRole=0]="TeamAdminRole",e[e.MTARole=1]="MTARole",e[e.FederationAdminRole=2]="FederationAdminRole"}(i\|\|(i={})),function(e){e[e.AdminAction=0]="AdminAction",e[e.AssumeAction=1]="AssumeAction",e[e.OnBehalfOfAction=2]="OnBehalfOfAction"}(s\|\|(s={}));const n=6e4;class o{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{this.didNetworkTimeOut=!0,t

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3814), with no line terminators
Category:	downloaded
Size (bytes):	3814
Entropy (8bit):	5.646785046347336
Encrypted:	false
SSDEEP:	96:YyRkckyiygfjj6B8ZhZqYy4gqt6B8ZeZquyXgbS6B8Z/Zqdnb3:yhyiygf36B0hZqYy4gqt6B0eZquyXgbZ
MD5:	DB2E94E103EDBE05217853B07D357EED
SHA1:	8665D6D5AF08A4BE3FDF227DC006258FEE195E14
SHA-256:	EF7ABA1210E21A8D07DA56D6E4E4E3F7E0F8CEEC5BAA5F949A9CFCB8457A74F9
SHA-512:	459156F812532A90242BE9CB61DFEFCAE673ED29A817E7BDCD490C0ABFE721C3B8141FD5B8C7178B30B6A8E58BE53F4FFD722FCA6BF1A46ECCFB9090B18783FA
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/982651595?random=1713459593238&cv=11&fst=1713459593238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597481942","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j597481942\u0026tag_eid=44801598","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sLah0Bw!2sZkjeig!3sAAptDV4OCmOh"],"userBiddingSignals":[["8307377499","768907168"],null,1713459594809859],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rd

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20486
Entropy (8bit):	7.9780113430527475
Encrypted:	false
SSDEEP:	384:dOM9oOmnB5pBtfxJ4Bsh7CVr88qUAargHfNVK8y2RHAdaLeVxg/Z:dO7TFzxJUGasHfqu
MD5:	C8D962BE8F55E83A2178E082DC7555F6
SHA1:	C563E78CB73841456FE276525158E5449B70FD06
SHA-256:	C374FF3305A41146F63172684A1017CE225377D9E56ABC3587B117A283BFECEA
SHA-512:	2EC915AFE3E46495F450901EF65C8C589D254A6762B6B5AE237FA35C662B7BB7AB4B99F7FE743BA6DD599C03866BB48073504ECFC15911D5190A2EE0D9C52A75
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-zapier@2x.png
Preview:	RIFF.O..WEBPVP8X.........../..ALPHS#.....m.9../{...DL.~..B.A.r.."45..:...e_..._..D.wf..a.....5.!..X....{.W...........J..QzY....h.A.A..!.5.^s..)...k#..l[Q.k.7..... ...........ob..Hp..6l.F..sp......................................................aD...x....h'U...z+.6.X..YR..T...u.a0L..x#.E.u..TU.4......x^...'...<.K...4.T,.\|T...j..z.8...:o.~.].Dh4:..o .k..@..O....K.b.5h#....S_%.<...~X... +k.bi).....5j.T.ex>.?....C.:..R.....r%m...7.C.dx..uW.^........f../ ...'.9D5.Y.c..o1..ZUAQ.........Z..._..B.z..o.Z.i...o?...\|...u.n...\|.c...-.\{....Bo<...o?....{..k.........-..+........{.I...:....m.%[...W..@.....W...V.1h.....Ph#.C>...M......A...`....0..rn!l...h..#...?E.....1...?p..'..X_.Jv..j..d@.....f..~...i....I....w.0..G.la.X....L*.J.....t..q..B.2M..z...]x..5..zJ.N.....Z.2.@...M..4./F:}.0.yJ.i.PE.T.McgE?2..-.6.AR\.x...1...b..d..c......#DI'.........e.#....@U!......I>Y.._.B?7"a,.a+.L`E...9{......2.o..+$.V.g.h4M[ .]>d.B...=.H.J..?^...g.T..9..J........o

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.049075062689685
Encrypted:	false
SSDEEP:	12:1hnc6llD1K91BAtTk5O/YKdSEF0Xhk+kZ8T7KC+5XLWOUs/BZzWxKHW5iQyozQDn:1hnppA1B0k5OZRUh/km7KVL0oBZzWxre
MD5:	9E909F5DC4EB2917A092969CFA8C1C1B
SHA1:	EC5795627579E606612250BE3E30690F3A70E3CF
SHA-256:	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
SHA-512:	4087C4896C10BBE7912E9BF5CB189DE7DFDC9FAF8BE4E6D1B1EFA4917695A3E58E1A452478451CAAE8370B372917558456E2D1302A0166DCCB907991949E143A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_edison_cookies_check-vflnpCfXc.js
Preview:	define(["exports","./c_core_notify","./c_csrf","./c_core_i18n","react-dom","react","./e_edison","./c_init_data_runtime","./e_core_exception","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./c_src_sink_index","metaserver/static/js/langpack"],(function(e,t,c,s,i,r,o,n,_,a,d,f,u,l){"use strict";e.ensureCookiesAreEnabled=function(){return!!c.Cookies.are_enabled()\|\|(window===window.top&&t.require_css("/static/metaserver/static/css/notify-vfl4oJv2S.css").then((()=>{t.Notify.error(s.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."}))})),!1)}}));.//# sourceMappingURL=c_edison_cookies_check.js-vflb3v8qT.map.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	627
Entropy (8bit):	4.679654809417182
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfy0GaLuXilhq7HokSF2Hqg9LJ6EXcc9gQ4HxOXIR+aeTJ3P/:2diO4NlfPGMy0F+ilhq7m2KZzpQYkAeh
MD5:	FF289EBF3CB43D93EC5D51B7E34BB1A4
SHA1:	EB154044FC7B524ED00BEC830064BB7A99B13640
SHA-256:	62236438DF840266263ACEF5164687DE7618FDD063CD77F375749C541E906FA8
SHA-512:	3E5277BAE5DF71AB7B62A6A9AC6A1F10A822D98EE052D6A06FC1C356B3835A7A653F53319C3E90318DBBD0D7EBC2E212C8751394314770E6BCCEC630BAD6C784
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M14.438 4.666c1.8.009 8.612.074 10.502.556 1.204.307 2.153 1.21 2.475 2.358.537 1.906.581 5.712.585 6.333v.173c-.004.62-.048 4.426-.585 6.332-.322 1.148-1.27 2.051-2.475 2.358-2.1.536-10.276.557-10.902.557h-.076c-.626 0-8.803-.021-10.902-.557-1.205-.307-2.154-1.21-2.476-2.358C.064 18.57.006 14.935 0 14.151v-.304c.006-.784.064-4.418.584-6.267.322-1.148 1.27-2.051 2.476-2.358 1.89-.482 8.701-.547 10.501-.556zm-3.063 5.09v8.486l7-4.243-7-4.243z"></path></svg>

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	204175
Entropy (8bit):	5.0432092366541035
Encrypted:	false
SSDEEP:	3072:Tn3R9XGrdhaElM6hQ67PQuXNveZSMRs5rOLf8t+WSvSfNk0Y2yb6TOfAuLlhFN0P:Tnh98dK2LjJxp42Cm3
MD5:	A29E7349DF7F27236744ED6B2BFEE49D
SHA1:	CDF68B71360616D7BC8A0A0790C48AEDD566CB31
SHA-256:	75E7061852C164158192444025245780550CE3AD81C634831EE9128DB0782DE5
SHA-512:	429080B18C42AF69633110282E62997E62E74CC6C3455474DDDFAC655D4425A943BB698CD946C7D12BF27F411AA05B250EB27EAC5ABB6A316902274B8F7C975D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/components-vflop5zSd.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /./* -- tokens.css */..dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (56089)
Category:	downloaded
Size (bytes):	70742
Entropy (8bit):	5.385480841397889
Encrypted:	false
SSDEEP:	768:zf/am/ajRbbg0jhqsMAflThgnO5AEC09hgjWSQlImb5xthOE8pQPJJ3J7rfrLEoJ:zSbbg0jhq9o5Xai0mb5xFhpS2lVr54a
MD5:	23641B232F78D034B3780943727244E4
SHA1:	3818AAD5238585BD1CF21BCE0BDF04E9DCC77389
SHA-256:	B1399C89C24D632A740C2B527F8C588B82C108D693C67120A320BBB23C2ADA22
SHA-512:	456EA50AAB46C61157E00003BC958718945455DE8FB3FDC4986664898D7D5B7810E6203E33BC76BB4BBFA1267A09A49F3345059DB039982A4470C0EA5F0B0A31
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/6191183.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setCookiePolicy', [{"portalId":6191183,"id":21560384,"domain":"try.docsend.com","path":null,"label":"Landing Page Cookie Policy","enabled":true,"privacyPolicy":3,"privacyHideDecline":false,"privacyDefault":false,"privacyPolicyWording":"<p>This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy</p>","privacyAcceptWording":"Accept All","privacyDismissWording":"Decline All","privacyDisclaimerWording":"If you decline, your information won.t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.","privacyBannerAccent

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34731
Entropy (8bit):	7.964718998547377
Encrypted:	false
SSDEEP:	768:4vSq1qQDfjS8HcSsTudqhOAEDC8MplD+qDsBTewfc7P5BInTMl0V:kSqgQDe4cHuotEDbqzIByjLbUTMl0V
MD5:	17A622EEF58BC33922FD68E0F09009EF
SHA1:	02863AC2756E168EDD39FC7F8B753873A3AD4DD5
SHA-256:	BC579DF9462E66672B452A31726427AE7D0E1AE021D848DE4F594BE81EA6CAF6
SHA-512:	E5386A905AEB3C6982D7817F7E714070E310C81435D1B620BBAFBB1BA0D711C63E9532DE0CC23CC0D94AEF86C6F9FF41DEAD5EE2AE7442444BD15C0CEE2B56E3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<...MIDATx....T..y.A...B..0$...-hJj.. .....)b.{V-...xb.&Z..m..rx5...r.=16%.w....pC.....p......^+.`.R.....z...<'...{3.....dVV.y..y......!.!..B.!..B.!...+p.s..M..".: .>._......B.!$..'E.H.j}.Q......2.....B.!$...K..... ...K.$..B....I.K.-Z..j.. .;.C...w1!..B...gI_w...%..B.!./...]H...G%.R..rw.B.!....!..K.6.[.(...JaB.!.P..>..vQ..o9lc...B.!.....mZ......N.e=...B.!..W..%..n..4o1..&..B........_.@..H.!..._...H.!..._...H.!........W.{._1.r..E ..B..2.%._[...$..$..B......W..C....<,.!...K..".U.$c.M6..K.!..B"GC...8..c.]0.o)...B.!$j4.........on...3M,..,.6...?.\|C..6...._...."..<D.!...%\m.....i....Z.m..nx\..'.(......y..B.!$..wBd._=.....1G.........{......'%...!..B"+.~E. ~{~o.J.z.R.]...[...9.C..B.!Q...w../...<.?....E.~o.Gy..B.!$*.D.t...^..SR.0..........kc........&...>.}}.......#..BH$p..<.r!..?.rf.....W..>..y.T.~..5...g.,.yJ...._.s;u.e+..B.!...l.WO..ys.?.yz.....w>."~6..u.9......2a..B.!.??...q

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	20608
Entropy (8bit):	7.980386462401763
Encrypted:	false
SSDEEP:	384:uO51y9UNI7OXGvlMT8/+LeZzs7JXxnkVCRtci1QeHtR1DFo/gpL6aI3n:951WUm7OXGvlY8m2sdhuCQPKtR1ROULS
MD5:	04ECF942D47815613A9D50F61671BC16
SHA1:	38CEB7B984701B05312BC6AD80CCBDC1C5052A4B
SHA-256:	EE0C1C72C276B04387269AD0373D82B584D72867C7D43C10AF706FD65DF4C899
SHA-512:	94DCD163E9B2420FDDF9A38F07B8907BF4694E45801072096C2ED55680668D1702DB3D0A635D2300ED7327A844A2CB3F4B47428949CA697CB74104ABD4E546E0
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/pgLV0NmWnJ4/maxresdefault.webp
Preview:	RIFFxP..WEBPVP8 lP..0........>m6.I$#%(.QX....gn.u>.zQ.m-.G.}._...q......a.....w.....\|_..O.\|.\|.._...'>j.....G.../....@..................;.../..w.._.~............_.G....B...Wo.?.............<.M......R>6...?.7..X..._...o.??.....?........?._........=.?&.a.+........@...o.....S.<......w..~/.Z.....o..........).u..._..u..._..u..._..u..._.T..fZ]..>.Z]....._eS..-8.....-..i..-..i..-..i..-..m.a...6......#....W.....^kx.\|4....\|4....\|4....\|4....^.+V'.sIx.."5;.sh.)V..D......G..1.L!..S_+.[}.h..g.KK..g.KK..g.KK..g.K...u}....sh.wO.Y6.).m........\|4....\|4....\|4....\|4.............sh.v..MD..7t...n...:...-..i..-..i..-..i.......Q.Lk.S.F.W....Q.P.....W..'.k.$T...................t\0.":.......1.I...#....SO..G.m.kt.4Z.e..`P.w..t4...t4...t4...Y....p..eN...H.!q.1"{.u#.(.,...?..sC.f.4.....D..p.j...3...3...3...3./...)...5..g...]....+\|_@....W.H.......q\|..._C$..........wl.................D.^.&..J..=-9~G....X,'.........?.{o..%...".j..i.Z.E.....Vp..Q5.4....\|4....\|4....\|4.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1357)
Category:	downloaded
Size (bytes):	1825
Entropy (8bit):	5.2131054182394685
Encrypted:	false
SSDEEP:	48:cMn2SoD4wzCvaz2WNX6IMj5wB/tOQ5oQJUG6sB:cMn2jzCv74XejuB/1oQJUG6sB
MD5:	4F4A4D6CB38AF0978E283CCD8EB6E693
SHA1:	83AEF6393F1F81BF3FDA5239F15CD84E25AC7FE9
SHA-256:	3B67C2F1769558FCC4B0E91BC11FB87F4BC329112997B78FD3EC80BE99C086A3
SHA-512:	D06675FEE2EA0C6560432D8C69947144D82B52D91B4D2FE3FA93D8AC6EE2F827AA0F9B6AC8B56F428F078112ABA86C6879105CF2D33CDD13D877E329E3830599
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.58.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.58 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..(function(c,p,d,u,id,i){id='';u='https://tracking.g2crowd.com/attribution_tracking/conversions/'+c+'.js?p='+encodeURI(p)+'&e='+id;i=document.createElement('script');i.type='application/javascript';i.async=true;i.src=u;d.getElementsByTagName('head')[0].appendChild(i);}("958",document.location.href,document));try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11257
Entropy (8bit):	3.9756907871971565
Encrypted:	false
SSDEEP:	192:q308IxZiETYOhsT6o3vQY+2kWyiHNORpKNapoWfBqTd1BqnrUNxCYLhEMfm:qPeZNWTQbtWyM8Leap7f0mrUNoY1EMu
MD5:	01C6863BD36DD699039A1725D779FDFA
SHA1:	65D95055F7088E22B2E5693AA0D0CF866692ADBD
SHA-256:	DB15FC6392DC7EDEEB0059E446CCCC5E91128DA4D8B79F552961438552CE64BA
SHA-512:	102272D9508E2E9FDBC983976C13DDD62325E01D8D734737A8AD6505A2EF62792BED95F02B0D516114FB9EB16F5AF576ADF02A1B7F8645A0944D8214492A0C68
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/custlogos-airtable.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136" height="30" viewBox="0 0 136 30"><g fill="none" fill-rule="evenodd"><path fill="#333" fill-rule="nonzero" d="M54.4224138,16.993567 L52.0618111,10.6290151 C51.9652727,10.3687205 51.59727,10.3687205 51.5007316,10.6290151 L49.1399295,16.993567 C49.0675257,17.1890372 49.2121338,17.396874 49.4205689,17.396874 L54.1419738,17.396874 C54.3504089,17.396874 54.4948176,17.1890372 54.4224138,16.993567 Z M55.5130581,20.5706729 L48.0494846,20.5706729 C47.9242241,20.5706729 47.8123273,20.6484621 47.7688451,20.7657443 L46.2994273,24.7258124 C46.2559451,24.8430945 46.1440484,24.9208837 46.0189873,24.9208837 L42.7843532,24.9208837 C42.5725273,24.9208837 42.4277197,24.7068637 42.5067057,24.5103962 L49.9547214,5.95627832 C50.0001981,5.84298535 50.1101003,5.76858697 50.2323689,5.76858697 L53.3299743,5.76858697 C53.4520435,5.76858697 53.5621451,5.84298535 53.6076219,5.95627832 L61.0556376,24.5101967 C61.1346235,24.706

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 506477
Category:	downloaded
Size (bytes):	136658
Entropy (8bit):	7.997192882163854
Encrypted:	true
SSDEEP:	3072:xDPxWEcT0bI4LrN4Njud1+aN3v5hwtQ7AJtkuzfe1KVluuNpoyA3u:nWLILd4A7Vv5uxbfe+lZA3u
MD5:	D973959C12CF835966F79AA4BB2FC28C
SHA1:	5F066CADD200E8DA758AFCA04E6D77155ED6D4DD
SHA-256:	8488309CA4458E2EF87B5793F61B8E521F1B12A59F7A0959171060465B420424
SHA-512:	C453A4B8AE272326395DB970F655B51F43BFEC702CF60814801B20F78D8E7E550879812B8CC29F8B1658E6E71A3110ABE6A638D8E8F0D822CA2386E5A1F4A56E
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app-modern.1755769f.js
Preview:	............r.. .+d............EI%UI%]Q....RI @..dB....a..m6m=.m6oc6..6..>.._0.0..{. KU..==}.........{x..ody..s..8.&g...$.+~6....E\|..9O....S6.......~0_d.....n{..[..w..^.......e...9[>.5.]...._..F:........&q.oD.N.%.F......B.-.0=.y.....4iz+x1...4..E.4....4.^.'<:.@K.1o~..F...j6..?....d...-u....L..w)...\|.mlF.y..a...z...>..?\.i.gQ.%q/.N7.......\|;............j.I......#.....I.og...ku.5.y%z.....N...2..........~gw..QG.AOfa4=..[..9.v.`....Y.?www:..v.~vZ;>..Wgwww.g....-..i.e.n..0Q....48N....d.r.i._.,/...8..K~..9..,..%)...^........9.%..I...!-..$.c>.M....l..yx6.!....I2.~z#.x..G.9.i../......M...b?..$.].&L..O.W....<M.Y?..".a^...O.\|.skD...3r...g..e?...za..i..[.J.&..Q."<...'...7."....qPO.q...0N...[..,x;...'a~J.O..(.&...gq~:M....(.)"1 ..Z.....8\L......rIP..f.<...j.Z..^.............\|ou....[..........;p........./.!.....Zb.p......... ..._.Y...~O}...r....&...._......`...\|...>...>..w...}.Y...../..$....`.f..b\W..7..HU#f............$.\|.A8..k .3=...s...+P.p..&.9..qC>.Bn.{r3

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/integrations/&e=
Preview:	// Tracking File

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	235735
Entropy (8bit):	7.983442540361464
Encrypted:	false
SSDEEP:	6144:CBWTYUi+MOtooRpMOF0E69xEbNHp3Y59e/VSQcqhCcw9:cwjM+VN0ebJpo5g9nchL9
MD5:	29B3FEF089E0E27F325388939DDA3652
SHA1:	61BC884BE842FBDE17897D5CAB3661BEAD95109E
SHA-256:	61F988ED9FE27A2041F490B3FCE7974901F487A36460C6107752103DBF946CC3
SHA-512:	9603F4B9E06330D1A1321B1DFF10DCD971AA618D889BBAF1F944093B8B4190B045189A9F80D837427D3070399183FBC1EF09ECBE5F65C1598ACAE88E7B211648
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............M.......tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Macintosh)" xmpMM:InstanceID="xmp.iid:C3F42F81272A11ED9963ED767FC75670" xmpMM:DocumentID="xmp.did:C3F42F82272A11ED9963ED767FC75670"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C3F42F7F272A11ED9963ED767FC75670" stRef:documentID="xmp.did:C3F42F80272A11ED9963ED767FC75670"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......FIDATx..y...u.y..^kW..^.n.....$R.iK.....,..E.....<.g._.3...[1...D.8.,.$.......\|.s..\|.P.. Hqy~....\|.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23466
Entropy (8bit):	4.01177498072687
Encrypted:	false
SSDEEP:	384:hB9blHOzYij4tyQdBDmR0v1CXsj3Bz7lsUrGRdzo0oxp/QhN9OXiNH3Jt7mXz2Uo:79btrb7v1CXy3WKEdzuiXOQH3JNmhr8
MD5:	FBD89CF8E059168618C6BB9D3DAEA5FE
SHA1:	0B3505902DB5F386DEB4BCA6337A3A4762A6CF01
SHA-256:	019BFFEE16DD774BF8D3B2C33DFDB2B999B7353129C1AA2091FC0ECDF9646A77
SHA-512:	11E01891CB5C880983AD53591D0F1CF1ACDF2063AFA0E25A98EB64F41869C3940991FCDC71EA60CA14BE21F64CFD55FFB981B167561EAE01B77B902553F2633C
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_in_Situ_View_Metrics_2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1645 1400" style="enable-background:new 0 0 1645 1400;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#B06330;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#6F4328;}...st2{fill-rule:evenodd;clip-rule:evenodd;fill:#14C8EB;}...st3{fill-rule:evenodd;clip-rule:evenodd;fill:#1E1919;}...st4{fill:#14C8EB;stroke:#231F20;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M922.2,581.7c-3.5,5.8-7.5,13.1-8.9,16.2c-1.4,3.1-3.6,6.7-4.8,8c-2,2.1-9.1,15.9-12.6,24.6...c-10.3,25.2-28.6,55.4-32.7,53.8c-1.2-0.5-2.2-0.1-2.2,0.8c0,3.1-10.3,7.8-19.1,8.8c-4.8,0.5-10.9,1.3-13.5,1.7...c-15.5,2.5-28.5,2.8-37.7,0.9c-8.4-1.7-11-3.2-16.4-8.8c-10.6-11.1-20.5-23.3-20.9-25.7c-0.4-2.9-16.1-20.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	1524
Entropy (8bit):	5.274596214638512
Encrypted:	false
SSDEEP:	24:4Qqu2OEXWz7RRquHN78lFepRWZFpUBevRZRR94uHstvYlbuRWZ0fpURRquHNstlf:4QqubYWPjIkpwRJnpcdYlawmpU0rkpwZ
MD5:	125558EF6F3910DFB237A2921AC16D6E
SHA1:	C6146D81B623D7EDD5F6BE3A475DF7B5CE170805
SHA-256:	368AC8E3FACAF1AEB078E0EE735D1F3B2BE9E637AD6E5817A860B30E22579BB2
SHA-512:	48ABD826C4F401C2061DFD7BCE7CAA623135115DFD33870DF617EBACDFDDECB40131EA0A131536E577E33FAF343D5A3B57864BE5998B5C1DDB1878F31584C946
Malicious:	false
Reputation:	low
URL:	https://js.hs-scripts.com/6191183.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['useV2Wildcard', true]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/6191183.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-6191183",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":6191183,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});.!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1713459300000/6191183.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374316408837108
Encrypted:	false
SSDEEP:	768:JC9//LuIHdibSt3JocMjX1yj8S7dYdxoqmNdbyBVnPNAZASyXY1eO4mH19B59:OuIHdibSt3aFyjX1PNd6+9
MD5:	374FEC8B5E50CD6AB980F3FEF21A5AA0
SHA1:	7F474607991A19B6F1B78CC32E0F75B501B60774
SHA-256:	8AF2DA74872F03E058AB79A584176D2086AFC01BBD42DD2ED14259179341BE6A
SHA-512:	3420E0DEF4FA49BD8B67DA80F1C3F56A08B4892BC0373D7BB824F8126713B209116147D4B1E1D5E7B07C6DBC58B1AD411AEB2F5A0DAE99FFC220246311E3808E
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	74372
Entropy (8bit):	7.987054115315018
Encrypted:	false
SSDEEP:	1536:f38FpxY8+90dzluJSMM8B5zOLlNtkA1w9wqRpQ73Q/pqI3NSQ6H0FpFm:0FIBGoJSFghWUMw9a7A/pqI38H0FpFm
MD5:	3182BBF946D494B71856338F1A2AF2D9
SHA1:	4A0F0959641D2571C91E3B5C63BEA1D0C21ABA3B
SHA-256:	5181493DA7E9E7E457FD05024EC732E42EC4B6EFEE31A8224936D098B475FC6E
SHA-512:	0788DB523219B6E999B52F53B6E34839A49CA5BF371AA48F1E720CE4136354D5F8D1AB7EBB41044B3B87715C3A7E318A585590B501255818D8A362D3833A080A
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/meet-Jessica.png
Preview:	RIFF\|"..WEBPVP8X..............ALPH......Hn.I. g....2c.G.....m4..km.-...\t...KJp.N!..r..-..s.r:H...).6]\|`.,;.5.d.2.........)......+.<....m#Gt.moNw.....a....\.$Z..[k.....(...$.V.j....'..G.Y.....I..L..m..G.$..\|......2"....y...k..g..!+3.#.......>.&.9...v........../............_......./............_......./............_...........<[.9kY9.:....ZV....\|.ti..Y.>.........S5#._.R.....2..\...F].8.#.V_O...}....Gf.pi...b...\|...{_.^5.a.Z..a7<..Q...].0...Q..4.C.\.......`..........}....M..{...?......^V.8.:i...=...\|9..%z.?.]..YF..O..{.J=....../....s..U...bJx.I.O.M<P.....7.>.........)..yq....._.i/.'.......yv.....(.>..$?...y..,..%....r...W..vZ............I..\|.=..=......C.z......sJ...\.[..'/.{M*j}....\|..i..1......\|..u{n.1....b.=..c.$...j.S?.....FH.g..i,+];.!.......>....5.e2.ZRYW....D.M....me.......f......T.Bv.V..".>...D..L..cei5.$.d.\C...C\..i.."..4.]......S5V..r"t+.z.M.R....e."J......dy...}...t....f.X-<.....d..0.#=a....u..x.~S.J].?..{.D.."2n...'.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	210
Entropy (8bit):	4.967540864429918
Encrypted:	false
SSDEEP:	6:tnrZ8mc4slmvSao9mBQ8FSEYLOBRNcyKME:trZ8IqmQASEYgNgME
MD5:	E105F4F8A06EC51EFB491D530058ADA6
SHA1:	3BE642FE5793651094AB68193B55749A14B6F6AB
SHA-256:	9BDB7C863AC9F446D6005EF5F9C9B8DD83ED01D89F69437B830D489B1BA57BA3
SHA-512:	9582465A0A3C47736855DA0233D3E8DAED121F07E148869026A57FC3E7EE9CBA55F4226FF928DE3560610D5FE718EDB7961758AD69BCEE9A9378546D0102A2C6
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/images/svg/icon-arrow-right-dbx.svg
Preview:	<svg width="16" height="17" xmlns="http://www.w3.org/2000/svg"><path d="M6 12.793V5.207a.5.5 0 01.854-.353l3.792 3.792a.5.5 0 010 .708l-3.792 3.792A.5.5 0 016 12.793z" fill="#0061fe" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with no line terminators
Category:	downloaded
Size (bytes):	19112
Entropy (8bit):	4.925659045405357
Encrypted:	false
SSDEEP:	384:LuMyZYAlowcIXeCcT+Cn2vQSREsqfSSeZSHmfY6k4r:tyZ/xcT+Cn2vQSRYfak4r
MD5:	791EBB20159B508FA49CF91038879847
SHA1:	78CD966C891A0B92E60A834DE83F1DCE7F4F99A3
SHA-256:	5B73A8EFC096670231D49C43F18B07450FF9985A530AA42A7173DB94A2E84433
SHA-512:	C2B820B8AABC64DC6BD41BA59A93774A56765EDB02F2EC18E03E976B190300188D0672174C1867004F319E0C968FC0444AA90FA3D1E5DB61320DC572C8215665
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&callback=jQuery37102514834265039647_1713459539712&_=1713459539713
Preview:	jQuery37102514834265039647_1713459539712({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"120","LabelWidth":100,"FieldWidth":150,"ToolTipType":"none","FontFamily":"Helvetica, Arial, sans-serif","FontSize":"13px","FontColor":"#333","FontUrl":null,"LineMargin":10,"ProcessorVersion":2,"CreatedByUserid":666,"ProcessOptions":{"language":"English","locale":"en_US","profiling":{"isEnabled":false,"numberOfProfilingFields":3,"alwaysShowFields":[]},"socialSignOn":{"isEnabled":false,"enabledNetworks":[],"cfId":null,"codeSnippet":""}},"EnableDeferredMode":0,"EnableCaptcha":0,"EnableGlobalFormValidationRule":1,"ButtonType":null,"ButtonImageUrl":null,"ButtonText":null,"ButtonSubmissionText":"Please Wait","ButtonStyle":{"id":11,"className":"mktoSimple","css":".mktoForm .mktoButtonWrap.mktoSimple .mkto

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	201606
Entropy (8bit):	5.535706918196567
Encrypted:	false
SSDEEP:	3072:ujq+71vbzwHnHIF8nvp2LUF1eKPyUF722gY8pv1Hrreil:6q8wHBzZ722v8pNHGE
MD5:	EA8F4199D3CC8B04F5A09FBD531328F4
SHA1:	FF62633CB443CEA45441FF29B44D230B4C0FC733
SHA-256:	A3CC9FB89D3E4E21E1E16E0C5E157D2FA2D9D1703737BE8582488C8CAF72DF65
SHA-512:	5F8F6BD8651990332CAA94BA0AFE91F59CCE04387B153AC916B1361CBD0D16469B6118CCD83600490987E46D354D3192D6D6C4A16435B0EFAEF8F54B5B1E9E22
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-40340055-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-40340055-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-40340055-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-JPP8SP2PRX"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-40340055-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_e

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40817)
Category:	downloaded
Size (bytes):	40886
Entropy (8bit):	5.40969868742486
Encrypted:	false
SSDEEP:	768:/jz+z6zKzACntN+Ds4FGxHzMsZ63D4WHE/u00FZ6NROowq5fJLObEGEVHYTUYS3C:/dDsgGxHc3TL5bNJB2UGl192nvSIN
MD5:	5A34B03CB884671743BEEBC13F7C1399
SHA1:	12D69902E44C7661FA1CC50AF7D2D020EAB6F3A0
SHA-256:	1CE473D6A4749E63F8BBFE0EE1B3B591FF6A13C08E71EF01425A716758EB885B
SHA-512:	E05A9DD2B779963F167900796088D17054BC7CA4B60546D04691C55501C3B9631247C6D025F41253BA71A6AA4F021C11C11FD647EE188844ACA5CC6F5011B87C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_pap-client_analytics_client-vflWjSwPL.js
Preview:	define(["exports","./c_viewer","./e_privacy_consent_static_ccpa_iframe","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_init_data_runtime","./c_browser_browser_detection","./c_src_sink_index","metaserver/static/js/modules/constants/viewer","./c_core_uri","react","./e_core_exception","./c_core_notify","react-dom","./e_edison","./c_init_data_edison","./c_core_i18n","metaserver/static/js/langpack","./c_core_xhr","./c_csrf","./c_core_attribution_header"],(function(e,t,i,n,r,s,o,c,a,d,h,l,u,p,f,v,g,m,y,w,b){"use strict";var _,S={exports:{}};_=S,function(){var e={cipher:{},hash:{},keyexchange:{},mode:{},misc:{},codec:{},exception:{corrupt:function(e){this.toString=function(){return"CORRUPT: "+this.message},this.message=e},invalid:function(e){this.toString=function(){return"INVALID: "+this.message},this.message=e},bug:function(e){this.toString=function(){return"BUG: "+this.message},this.message=e},notReady:function(e){this.toString=function(){r

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1803)
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	5.235830949555532
Encrypted:	false
SSDEEP:	48:Bq1baQb1TzbtST35ubFuPIXufundDBq6QEzer2c5aQDRb:EamXtapoF+IXEun/4P2c5bdb
MD5:	4ADDF5E9272BD4FE3138862368434369
SHA1:	B9B339BB0495D1346BCFF1180D2D9CA3CD9EB6F6
SHA-256:	BA1EA83AACDFEC164A3161871E51026876A3BD863B46BB494C3EFFAE037B5007
SHA-512:	A0C5A6F026A9CF446EE46FD2FAC6031B011EB5C2D03C5CEC54F0BD3BE6E6636D6501DB2AD5A93E1DF39958EA61489CF7FC4827BF6E838B09927FA88A071765AF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/api_helper_validation.bundle-vflSt316S.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var t={r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);class n{constructor(t){this.dropboxOrigin=t,this.meta_asyncApi=!1}isDropboxDomain(t){const e=document.createElement("a");return e.href=t,e.hostname.endsWith(".dropbox.com")}handleEvent(t,e,n){"function"==typeof t&&t(e,n)}addQueryParameter(t,e){return 0!==e.indexOf("?")&&0!==e.indexOf("&")\|\|(e=e.substring(1)),null===t&&(t=""),-1!==t.indexOf("?")?t+="&"+e:t+="?"+e,t}makeRequest(t,e,n,i,o,a,s,r,d){if(!t)return;t=this.dropboxOrigin+t,n\|\|(n=6e4),i=i\|\|function(){},o=o\|\|function(){},a=a\|\|function(){},s=s\|\|function(){},d=void 0!==d?d:"POST";const c=new XMLHttpRequest;c.addEventListener("load",function(){this.meta_asyncApi=!0,200===c.status?this.handleEvent(i,c,r):this.handleEvent(o,c,r)}.bind(this))

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4418
Entropy (8bit):	4.550570902126072
Encrypted:	false
SSDEEP:	96:D9zCIF3c3CSTICP18YV8cqkvTy1GyB9W8uNg6WyWCHbI/zbQxapyQUZQvHbQB5xA:D9zCIFsSSTICP18YV8cqkvTcGm9W8uNg
MD5:	D6C32610BC01D28D09392E8CAE4869E6
SHA1:	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5
SHA-256:	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
SHA-512:	1F62F8FC1A3C6165019B7D736E04154D55C5135F83AE3A67E07FE55C00A2714297061C93A79DD5A9B710C6AC00F5286EC4E9992836802C223F5A4AECD518112D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/legacy-token-migration-vfl1sMmEL.css
Preview:	/* .In-Theme-Provider is the generic class we use to say we're inside of DIG's theme provider..we use it here as a way to ensure that the specificity of this selector can beat `0 1 0` assuming.it is loaded after the other dig tokens..*/..In-Theme-Provider {. --color__standard__background: var(--dig-color__background__base);. --color__faint__background: var(--dig-color__background__subtle);. --color__elevated__background: var(--dig-color__background__raised);. --color__standard__text: var(--dig-color__text__base);. --color__faint__text: var(--dig-color__text__subtle);. --color__standard__border: var(--dig-color__border__base);. --color__faint__border: var(--dig-color__border__subtle);. --color__disabled__text: var(--dig-color__disabled__base);. --color__disabled__border: var(--dig-color__disabled__base);. --color__disabled__background: var(--dig-color__disabled__base);. --color__core__accent: var(--dig-color__primary__base);. --color__attention__text: var(--dig-color__pr

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57485)
Category:	downloaded
Size (bytes):	57536
Entropy (8bit):	5.56289638591114
Encrypted:	false
SSDEEP:	1536:pHN3NpnQ2oY8jG823v+xK3Imhe0nRxzvwN3NpnQ2oY8zG/mPIrlTb2PyUhK03DKh:RN3NpnQ2oY8jG823v+xK3Im40UN3Npnd
MD5:	9344C1ACA08405FF26D245EA6D33379D
SHA1:	ACB6C050B2830F8FC108B5174F6A138D49C9974A
SHA-256:	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
SHA-512:	15A59E9F2F487AC63FFAEAB71D411C82E486A481507C606220324A6626E3E7EF9ADFF0A89C3E23FAA8256866BD4CF2B4ABDB3BC28399F97506743E4D07C24625
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_i18n-vflk0TBrK.js
Preview:	define(["exports","./e_core_exception","./c_src_sink_index","./c_init_data_runtime","metaserver/static/js/langpack","react"],(function(e,t,r,n,i,o){"use strict";function a(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=a(i),u=a(o),l=function(e,t){return l=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},l(e,t)};var c=function(){return c=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},c.apply(this,arguments)};function f(e,t){var r={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(null!

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 67559
Category:	downloaded
Size (bytes):	21502
Entropy (8bit):	7.989511589368222
Encrypted:	false
SSDEEP:	384:GM7pI1brzTu6i0yLKIAgLM6FKS85jfJCaYp9W+BCXoHVLhgUtsF8Lqp7w3tD:GMKPvm0qAglifJCaYp9WohHV9gUtsF8B
MD5:	418911F0E28E7F33A5AC1FC4F3C723DE
SHA1:	E2995B7FA3BF1AD2169B668BBE681018CB7FA7D7
SHA-256:	202635EB355C9B1B5A463FC5A69A87F6AC72AD0B5867E1A53CD8D9D7742D5119
SHA-512:	CBB5F40CE231ED3C9CA52610BD9EFF528ED070FA73E518443FF35990197CDB2A87166649B1B0658F7649E69204354663D8263F25A63EF3FBD14E5E8C2BDA1960
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app-modern.3733d47a.js
Preview:	............z.F.8.$.G...E.l.Ax2..d......P...M.c.`.P.C.<.........U.W..-g.....&.......u.{..Wa.n...[~..'...W.()x6I....O..nGc..\.sw4z...2f.....}..`..\|..A.M.S.{l.J&E.&-.B&KX.mn....[t..f.xvpPt..=..Y..r.?..f.$.<y.&7a...O.<...g)@xW.?.B.{........O....2K..X/y...$...[...]....?..J..BZX.7W.......^.z.R..0t.f.3..iV.jd,.n.h.. .&... ..K.....]:kE.."h.&..Y.d..^.].l.&l..l.l...&p'..wgq.fn.?::..Z.....k.".x^\|.D..s^f......$L&<....q.J.......i.p=9..lT....\W._.&.f...m.....u2t.A.<...F.w=..Hs.Wz.+J...6....A.(\.J~m4.....OW.`...+KMb.f....63l...._A.u..p5t..&..SO62..W../Ws9r..7.\|...w.u..?_...4.Z..U..c.0.u:...y....:.....U9.*....xX>M.<..klA......r[.h....4,.n...\.4D.E..'fI]S...$..+.4v.Vk...k...i.2~k.Z..a.Z.......s^./..#h.......F..i...{.M.9Lc..H..%.<....EE..~'D.>.(u.~eQ._kN..5..........-.q._i...E.x."[o.../A...2.b6...6..y.$,&skOiz.H..W..!O".{.f.../........h=KW..E+N.i..r..4.lWh....O/o........-lD..Y..%Qa.D!6r...9m..j=....(...xw.e.4+OT..KE;.L..-...aC...z.<.&.=..y....#...8

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9708
Entropy (8bit):	3.8793713050160132
Encrypted:	false
SSDEEP:	192:LBrxhQc9Lw8Z2YvJQTkfQnSEMk5yJ18AOmY7VW+6v+T:LBl6c9Mk2UuEQnS58AcVW+PT
MD5:	505204A28409603A9261BD06720FAC85
SHA1:	C97D11E5E9C6C6EF3A88AC9112679BC42A8D18DB
SHA-256:	BF418B83AA5AC1B67C9532B30EBAADBD0D01FE2823523924C8A63FAC04B9D136
SHA-512:	24EB0658B0B6E35C09D458B0C8AF002E7361A91A6090E4C1838AAE2B1FACDE238F75BAB00C4F32946EF26F7AF44DF1AD8435C00A37C12C34C710D8F34140E641
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="150" height="27" viewBox="0 0 150 27"><path fill="#DB382C" fill-rule="evenodd" d="M141.575509,3494.51559 C143.206988,3494.51559 144.755401,3494.51815 146.304173,3494.51303 C146.602277,3494.51194 146.907213,3494.51449 147.197046,3494.45528 C148.290572,3494.23196 149.114043,3493.66213 149.40064,3492.50347 C149.857324,3490.65619 148.699071,3489.06039 146.818753,3488.96572 C145.94422,3488.92186 145.06645,3488.95366 144.190119,3488.95256 C143.340398,3488.95146 142.490317,3488.95256 141.614345,3488.95256 C141.596725,3489.14372 141.576947,3489.26068 141.576947,3489.37728 C141.57479,3491.05533 141.575509,3492.73337 141.575509,3494.51559 Z M141.613986,3505.45488 C141.686264,3505.4801 141.758542,3505.52725 141.830821,3505.52761 C143.580607,3505.53054 145.333629,3505.59341 147.079459,3505.50934 C148.88606,3505.42198 149.960528,3504.29366 150.008354,3502.63023 C150.05654,3500.95913 149.064059,3499.75405 147.29485

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "BASE", 39 names, Macintosh, (C) 2018 Sharp Type CorporationSharp Grotesk DB Cyr Book 23Regular2.001;SHRP;SharpGroteskDBCyrBo
Category:	downloaded
Size (bytes):	170804
Entropy (8bit):	6.036896476196999
Encrypted:	false
SSDEEP:	3072:jKV69Dj+TB4pglXIIpiAcoe5Ib03eVN74ILh:jK6DqTipgtXe5Ib037g
MD5:	66A6F40989085FA248308A701D1583A6
SHA1:	AB63AEFD2A0CDA295E85114566A590D71DE5FDAE
SHA-256:	A4D136FBF589A21AD9CA548DCCE67B0F3C6B5603CF345C988C5CE307628CEFA3
SHA-512:	557C8AEF04277798C973528B885AAC54D2659BF3DFD2E9C126DA65CE9CB3070E77DCAD1890C1588F48A8AB13646997E749AB07B76040ADC098FA89C2A4DF443A
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBook23-vflZqb0CY.ttf
Preview:	........... BASE.4....6....@DSIG.......,....GPOS...+..6...Q.GSUB.M........TOS/2oE.........`cmap.n..........cvt .P....#.....fpgm.6..........gasp......6.....glyf..&...)....head..j....,...6hhea...t...d...$hmtx.+..........loca_(.R..$<...vmaxp...s....... name.......<...Zpost...X.. .....prep......"............A..lo_.<..........ovz.....o.......A.........................n..._.A.........................{...m.....<.r.........................X...K...X...^.2.J............................SHRP.@. 0........... ........'..... ...<...-...-...'.....Z.M.7.6.Z...Z...Z.g.7.I.Z..\.(.4.......Z...Z...Z.T.Z.].7...Z.\.7.$.Z.......#.7.N...................'.'...'...'...'...'...'...'...'...'...'...'...'...........M.7.M.7.M.7.M.7.M.7.6.Z.N...N.....Z...Z...Z...Z...Z...Z...Z...Z...Z.g.7.g.7.g.7.g.7.f...J.Z..\...........F.............(.4.(.4.(.4.(.4.(.4.(.(.(.4.(.4.(.1.......Z...Z...Z...Z...Z.....R.Z.R.Z.R.Z.R.Z.X.Z.].7.].7.].7.].7.].7.].7.].7.].7.].7.].7.].0./.7.$.Z.$.Z.$.Z.......................#...#...#

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 102, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7247
Entropy (8bit):	7.952450524932118
Encrypted:	false
SSDEEP:	192:hmDqPpT13Iwbe9Np8adQ/khDaPPBga/JGnv6:hmDqPpT13xq3phQ/khe3BgO46
MD5:	C31F1BBAB2898431D62FB86D629DA0EA
SHA1:	1D04913D6F4A9DC1A20E83EBBF9D13B9E256FE5E
SHA-256:	AED670161562B64AFD51F62002F8152D37439E9A5789B8FF3193EF133562148B
SHA-512:	AEB9317EECED84270C8F3476F3BBFE7C7A5D04D8D67124507C8FE0D1ED907E038A795880461FA2659707687FF32A2ECD2B780F0271611FF99F2DD58679F5E01A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...f.......U9....IDATx..w.....sgw.E..)bA.."h4QcI"j.UcMbD}c.Xb,Q...^c...5.Q.&&J.(."....P@..."evw.}.x~......E..\|.....s..{.9._!...C.4..W..U....../'..~...dp.4...i^w.v.....8h.5...U.d.5.i.-..$..l.t.B .\|.....<..........nC/.g.x`A'.[.......y...v.......YG.`[.\`S..G...L...._.8....)...}..`Y.Y..4p pS....XO......Y.m......n..o...?.@.k....f......u.............'.._'.....ii5...Q....L.\|.....n.....L.{.u.G....<....<...L.n.........N;fjo`+....bZ..$pL...V....k.........^.=.o...U..........ujpi......P....7.O.\k.0\.8..G.k.4..xE@-..F.G...[.gK..:^:....#.+.a.....>ZL{..O.z.7....K.=.....g..[_......j..e...f...t.h[...l.K.^_....]R..?.o..."..,...3.B....0H...f.c.........9n.@....?...x{.a...^.~.Z..a.@.d/..".."....x&.0.,...2S........8.~.........w./......N..B.Y..I.].]K.c.G..2y..K...../G....uY`>0...W..}9......s.{.........K[q.[..k.../d....~.@.3J....o....v...6.O_e.j..)..5@.{/...1!,t./...\......._....L..R2.Q.Z.Ei.w.hD..\.......06Bi.^bvu.....V...x^...t.C

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36228
Entropy (8bit):	7.972660467464412
Encrypted:	false
SSDEEP:	768:hixa+pQWVRGMS1SWtDtiWMLkF21pQY8z8OMfJpqlz8XjGKRy:hyYznSW9oLkQQD8OMfSlz86Kc
MD5:	3825C6E3C5703ED1A534A3FFB69706FA
SHA1:	E61EFC8FD316B2721FABC8943ED97F47B09353EF
SHA-256:	5EDC0E2C5AEF1DBCD2A116C196427811F5ED1A58A96619DFDF16F061A5C11DC0
SHA-512:	041A77BBD9AF9D8B8396E79DB5FBDB1022C61CEB81DE79D2B196135D96848C7C02DC0C9DEA876FE16FA114BA5DCD486E1FE54CF45FBBF9E53FCA77C0453DCFBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<...&IDATx....T..y....@... .H......:.{...]OX6.{...eS.;..e..!c..@.....^..mQ.....E...;..$z....f.%..M"....).A.P....9Y'O..y3....HeVf.?.....w...A.!..Br.$\|.....zW}..b......^P.#..B.I..y.WT..RI_o./S..... ....Q.NB.!....'\|...j.2.....a."H.!......t........ .[!....q5.B.!.D(......D......]vP..!..B".?O..$@.l..e.'.C\..B....#}E.j..nz.UJ.e.'.e.zB.!..!..v.j$... ./x.w....B.!y........K.w....9...B.!..`...7...-a.)...B...m.}3"~@~..}.!..B2O......"..l.M.!..._.....eL..B.!$..N.f\...^#....B.!$..hO..O..'!..BH~.O.Q^."..,%..B.!...?O.0G...........B.!$7.._..zAd?...]ng..!..B..&..2..;..7.L....t.c@\|......B.!Y.7.7....j_.?.{f....]Ww...]../...2B..27.B.!.d.F......_..L.2....B.!........J.. .....k......GB".E..p. ...u..1D...L.O.8G^'.F.H.........\".X...%AH..A...`..%....?t.;.B7?..<F....m....A..A"d......>p!....g...#...........I(.d.}\...... {.\03..W#..e.7....h.u.K%.lV...O........OE...\|.3w.O.ZK.#].}%..e/;'m...7

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2761)
Category:	downloaded
Size (bytes):	23919
Entropy (8bit):	5.072144381253257
Encrypted:	false
SSDEEP:	384:1alNsImVVMlKMC3e9l6uDOwSu3PaDWHt1Pq:1alKVADzDjpSDE3Pq
MD5:	261A6B567CDB0D004F86D922F69DCAF3
SHA1:	CB138E7F1146FF626E8934853CE00411030F572C
SHA-256:	6DECAFE238C81FBFB0975269CAB80E864D815000041C530DE6803733CEA4A3CF
SHA-512:	F8D7FE8056526D1BDF48DB95DC34649D3A6CA2FBAFD96A801ECC80949257542A5A8839E27C8997620455B5F59189432706206E7C5B549FB21DFFF812E5B5B4BF
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.35.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.35 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechan

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	41863
Entropy (8bit):	7.829312645417604
Encrypted:	false
SSDEEP:	768:QlPNMP7JHyOgmwejrMA8xiyNciVZ6tSZ8VqyqJBdOXVdel6Qx1lXwFC1o1o1o5vX:wc7xD8ejYRiqceAtSZ8MTJBsXVMl6/oy
MD5:	102A39F20246894CD21BC377D5CE4D29
SHA1:	AE9BE1D0DC3F346ED3D2168471D382E5B97D4A83
SHA-256:	E4C0ADB43C526C87A1D34043C0576ADCD774DC526265F815CCBDAA3E907D052A
SHA-512:	78788FADBDCA4B9ADAEE24E74CD3AF59C18A2E6DEC6C271A60B5E7E6B6AC0DD35D2E54B061CA9F0D9827715AF8BD6C5C5A6778CA8AA47AE2A7F158915C6701B6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......U...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:3227B9EF583911ECB6E3EB0B3A7346C0" xmpMM:DocumentID="xmp.did:3227B9F0583911ECB6E3EB0B3A7346C0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3227B9ED583911ECB6E3EB0B3A7346C0" stRef:documentID="xmp.did:3227B9EE583911ECB6E3EB0B3A7346C0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	210
Entropy (8bit):	4.967540864429918
Encrypted:	false
SSDEEP:	6:tnrZ8mc4slmvSao9mBQ8FSEYLOBRNcyKME:trZ8IqmQASEYgNgME
MD5:	E105F4F8A06EC51EFB491D530058ADA6
SHA1:	3BE642FE5793651094AB68193B55749A14B6F6AB
SHA-256:	9BDB7C863AC9F446D6005EF5F9C9B8DD83ED01D89F69437B830D489B1BA57BA3
SHA-512:	9582465A0A3C47736855DA0233D3E8DAED121F07E148869026A57FC3E7EE9CBA55F4226FF928DE3560610D5FE718EDB7961758AD69BCEE9A9378546D0102A2C6
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="17" xmlns="http://www.w3.org/2000/svg"><path d="M6 12.793V5.207a.5.5 0 01.854-.353l3.792 3.792a.5.5 0 010 .708l-3.792 3.792A.5.5 0 016 12.793z" fill="#0061fe" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2703
Entropy (8bit):	7.920424529726194
Encrypted:	false
SSDEEP:	48:X0OXa+cqiSDZ0VJNL7kG0c6X1sh11rTKq91am3/IMUuXIq:kQP/iS6V7LwG01X1shCq91n3/Igb
MD5:	BED5EC00348D0BC5785A02D996485570
SHA1:	6BD9BCF67CB2BEBA62346578B4B5D2D1C99E3DC7
SHA-256:	DDAAC8081C5A44A5A11C72C13888FA7AF5F59D2918944ECBE1E7C5C6E417D359
SHA-512:	8809D15CDDC4D377047A189B1D21F22A7037DE58CB99EF022F60A88DB7B430C61B75C168ACA3610D473C155BE742408981B011F30B62C1A668EF0D2370AE7EB9
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/lv6lji7h
Preview:	...........Y.s.:..+.w'...y..pq.R......;m6..J"p,_Yi....'..;I.e..Z..tt..Lc<...xl.;"..?.>.z%..+..........E@.3.x.!.[......G$.X.2I.v...#3.....N2.E,.&DN....).c....N)..0..~.._0.2.-Pe.0..X..^,.....jw,.d:......Yd:,N%...to..vo.WZ..x.5>........O..OON..'..0..Rj&p].j7zO{/.+..R}..o...I.B...[..'.....LL.#.W..aJ......G<.b.{C.z....g"..\k17..#....-#.D.v.7bp....g..i.>...s....S..4...i.j.9..).,.....Q.ts.R#....<...)..%$....I..8..E$.>.B,.<...3..5.3>b.m3....&S.&S...g..hE.v.T.N.)'...(..Q..<...;.e.k.K6f.Q.J..6.B.-2i..6,j..X .......}K?#..A..x.E..l6-...$.YfiR.T..i;.....=.a;....g.T.R..lJ.y.q.e.w.n...4.NE......A...:..SWW.e.'IDM..l.}2&....oI{k..V.......,....."&....n.p..Y..,S.\...^W_....m.Y...,.>.0w...F.v........p%.b....-.W.......D.....;.Qo....m...f?_._..v.x5#........Mw.t;.....{.=Qj....z.QK.M%w6.k..b...u..QW......F..i2%..S....U.^e..B.......?.*..4n6.....A1.$#Q..b.0....&>..D}.:...M.d..h.Z......Nk...;......+........f.B..\|`......%.dV..!...d...@g.. .$...z.L...

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1468 x 978, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	214830
Entropy (8bit):	7.955657016292396
Encrypted:	false
SSDEEP:	6144:lPDEgKkjrfN/lNv7tBP6VK3YgoLRN4vp19EBk:lPggKkzNh16I3YdNK13
MD5:	FA0120A9CA9FB3B89FDF9377978A47DD
SHA1:	358DEBFC3B9786845F6A061738E1E06B32F1F5D9
SHA-256:	66A4C7A469901AEAE82B462525268EAA174C96A1D63622A4C0E08E296E8C5142
SHA-512:	83098C0569F6F5E1C4F762C0DF0A066A9015531DF2438770DAA866A36FA36E9365BDE06F9C8D5039E2F18237E80A2C197EAA67DAA97D3B475914010EE1C00B65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................^....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8d94290-9c11-439f-b622-1e0ec71eeab3" xmpMM:DocumentID="xmp.did:515AC015B24311ECAD1EC4A3DB19B6F4" xmpMM:InstanceID="xmp.iid:515AC014B24311ECAD1EC4A3DB19B6F4" xmp:CreatorTool="Adobe Photoshop 22.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a1275321-f8d1-41dc-aa77-546c09741a15" stRef:documentID="adobe:docid:photoshop:60b6e8d3-c2bd-e942-8c02-d66c397561d5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......C?IDATx...il.w.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with no line terminators
Category:	downloaded
Size (bytes):	19112
Entropy (8bit):	4.925568202751897
Encrypted:	false
SSDEEP:	384:vuMyZYAlowcIXeCcT+Cn2vQSREsqfSSeZSHmfY6k4r:ByZ/xcT+Cn2vQSRYfak4r
MD5:	308F8B4A5B5EA4B321891F86955E7064
SHA1:	93E907A33A7BCB3DD616A5CC18013A2C1AD6CDB4
SHA-256:	AE9883DF7CB3BDECB466EA73670A4D96DFF0E5FC48133F7EF335099FF10A1581
SHA-512:	5B340E9A71F9DE911F6A1AB5BF7429B7E80CB7A594B6F2CF68E2798799BFA76C1602C7B694673619B9E706C86CEEEAA2222588DA3C7FC22985251714A0DF3B89
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37107391334019404765_1713459532369&_=1713459532370
Preview:	jQuery37107391334019404765_1713459532369({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"120","LabelWidth":100,"FieldWidth":150,"ToolTipType":"none","FontFamily":"Helvetica, Arial, sans-serif","FontSize":"13px","FontColor":"#333","FontUrl":null,"LineMargin":10,"ProcessorVersion":2,"CreatedByUserid":666,"ProcessOptions":{"language":"English","locale":"en_US","profiling":{"isEnabled":false,"numberOfProfilingFields":3,"alwaysShowFields":[]},"socialSignOn":{"isEnabled":false,"enabledNetworks":[],"cfId":null,"codeSnippet":""}},"EnableDeferredMode":0,"EnableCaptcha":0,"EnableGlobalFormValidationRule":1,"ButtonType":null,"ButtonImageUrl":null,"ButtonText":null,"ButtonSubmissionText":"Please Wait","ButtonStyle":{"id":11,"className":"mktoSimple","css":".mktoForm .mktoButtonWrap.mktoSimple .mkto

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 255x255, components 3
Category:	dropped
Size (bytes):	24064
Entropy (8bit):	7.936551923214232
Encrypted:	false
SSDEEP:	384:ig+JHnml2rUfK0Bo7IQy8j6rHv+2YIXxrI79TKwWCFaciQHHCXEL2tiEHb5GgL:ig+JHXrUJBodyE6rH22X1I7lKJ/ciSHe
MD5:	63A886D55DEBAA64DD071D8DB08F1B00
SHA1:	FCA660CF4A959446DAC178F86DA4DBEF428735E1
SHA-256:	127D38892F5157669A42DE9C2300D96516B6A3F2E33DD0BF0BF7BFB8E61EE663
SHA-512:	476CA6BC44E96870F88D80F92C12630256742DFB452A85AE43B2619EE6826C4B4CD55822A98BE924AB4A9CB17A99894F89ED796B04D576CBE1B8878C0C7D9E35
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Adobe.d.........Exif..MM.*..............Ducky.......U.....<http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 ">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:87E8C7DC61EC11E494F5C441ABFCE86B" xmpMM:DocumentID="xmp.did:87E8C7DD61EC11E494F5C441ABFCE86B">.....<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87E8C7DA61EC11E494F5C441ABFCE86B" stRef:documentID="xmp.did:87E8C7DB61EC11E494F5C441ABFCE86B"/>....</rdf:Description>...</rdf:RDF>..</x:xmpmeta>..<?xpacket end='w'?>...C....................................................................C..................

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	17514
Entropy (8bit):	7.979439809056521
Encrypted:	false
SSDEEP:	384:MCeANz57ABP/JAIe7CFBQGlqPie1DPQw4rFGl:CAoPtBQGwbQFw
MD5:	12BB4B3EF12530EA0930BE9CB598CB3E
SHA1:	0182C8AC44DB7FB202B5DDB45941AA628C660BE9
SHA-256:	B822D0739686674A37985B4DE358DBF486144F8B24004532FEAE153B74D40358
SHA-512:	9BCF61E6AE13CC78D13DB13627845468B551F56AB054769FAD831BAF5A6E56F69FBAA1E122E8933DB056EF9FE39ED3454ADFB3B905EBE36BB705096386164765
Malicious:	false
Reputation:	low
Preview:	RIFFbD..WEBPVP8 VD..0........>m4.I$".1!... ..gn.:.....V...h..o+8\..?9.w.^.x........S.....g.?d.d....l.r.......~c...g...w.....=..Z.....9.-..%....W.......{......../..._.?`>@........s...W.?._.......\|5.[..._.s.{.+.WgOK.d..z..K...n.......~[..f...C.....G....._7..........C....c...u}A}..../....W.s.7..k?..l...N......>.....................<...g....`k5...DB.S.N_...8...;.S.N_.P..W..\p...w.....'{p...w.....'{p...w.....'{p...w..x\9%j.;?....<.U...1..D.8..3q.Xm...^v~?K..yZ.....a..+Uy...)U7p..O.J.iR~`....X...iR~`....X...iR~`....X...iR~`....X..D......n.R..HZ.....a..+Uy...,6..j.;?....<....h...D..V.E..,6...>-.6......eC...`.a..+Uy...,6..j.;?......)..1....W......y.'...Xm....,.C{.6.4..?....<.U.g..........z...o..f.......~.....Z.`.e.Gv~?K..yZ. N...Z.....a..+Uy...,6..j.;73.j.....~}.k....5....!..V!...].$x..\6....V=.R...:..v!.{...j..>S.w1...V=.Vlk.V=.R...:..v!.{...c.u+..J.DY..i.(.9P.4..R...:..v!.{...c.u+..C.X.a..9.Cn.O..C.X.b.J...V=.R...9..."{...L...c.u...p.N.:c..\|6..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7314
Entropy (8bit):	7.923700982761407
Encrypted:	false
SSDEEP:	192:kK2nQvG0sDXHDewyViCcEgLFiq+EQXIjzkH79L:onQ+04zewKWpFiq+LXIU79
MD5:	DD8BA7CE826DCC3AB89612227A1CEF84
SHA1:	988720BC76A6664629D13E2D08A3508E6E914064
SHA-256:	8EF2C6B10111810E02195D426AED4A99555B1EA3DFF3BA7FEF761EF2C0D17C78
SHA-512:	D163275738B594FF072FD7007FCB1D8359FD420D16D2E08E82CE86E0F65B56E1021074FA66CC5D0F3C708607182AC9466A2E9927937E08C48E1318C547EFC9F2
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-ifttt@2x.png
Preview:	RIFF....WEBPVP8X.........../..ALPH/.....sm.2I..]}.....wp.!sw.XD.....k@..KM.......tM.V.y..YWU.t...}G.%H.$I...B%..E/F.L9......f.3....\.. <o.Jt.B.\.%.<@.)..Y`(.-.............N.#"`.b.L;....n....+..Zy...q.S..pa..\|..Q..)..g,.D9r..D...k.[.Ib.a..&. .%..U~.8.'..z@.....N.........A!..L..2.oh...2....`..8.)w....,.3..T.'....k.8v.......4..!r....JY.W.ii..pA+#.D...?.....x.. _.0U....,..... .d...].@t."22..(...c..gy..9B0{./c!.O..X.x..!].',...@.!.Y./.T.~ :.m.B..G..%U..q:F.b...h..H%....?^..@.vLI}nMX....@8hy .a5.....ON.%..e}.H...E.!a.h..dW_..%....$Hc.5@YFY.Uc.#.d..t`.T...... .......H..?.%.&.A...On.#a......y......N.lM...4?O.0=@`...(.GY..8.#.[$.5.b5l..-.(....2.i..v.4....[i..D..$...i.Y=..HG..c.6........$!..()..W';M..4W.u...(..D.F.I02.)d...j<...... !.U...(..Q.Z.X.[.%. 8.....\#.-c._....@Y.~<..D....F.b.O.hF>.'<V...(54..#...Q.F......T.i.]M&}..b..)mRI.G.`(.t.U".lU.g...m.G_.,^K.'9.%p...!..@.X."..eHh!3.!!.FFi>.m....i......s.f.+.v.Gl..........^...W?........#..AbQ_r.!.I..)...<..

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	74120
Entropy (8bit):	3.789991460571487
Encrypted:	false
SSDEEP:	1536:pKuP3lU9otMdueG8PNnRwK7bqTkQwiHGU35:Z0q
MD5:	C2854FB81CA5A0605C767060313F2056
SHA1:	B2E057F2CFE8989FFAA4E3D558ED7ECA88EAB47D
SHA-256:	78E9C763CA37AE021D8CC02D4FD29C4793F206A9B754492508FC68809EE8E715
SHA-512:	59FAB5889EC6A6199443C2475C5F73FD408F704358290D585A3A9B445F60DCD08781993DD188E22808A4FB96A3720DEFBE66617C1CBCE3555BC38740E3C0D16E
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2022/09/how-docsend-works.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="500" height="500" viewBox="0 0 500 500" fill="none"><path fill-rule="evenodd" clip-rule="evenodd" d="M286.342 62.8052C286.26 62.8876 252.466 63.0015 211.248 63.062L136.303 63.1686L135.528 64.7045C134.864 66.0223 134.76 70.1623 134.796 93.8905C134.821 109.099 134.988 133.639 135.17 148.423C135.351 163.207 135.521 179.065 135.545 183.66C135.589 191.516 135.656 192.083 136.701 193.132C138.302 194.746 139.76 195.407 143.21 196.085C145.189 196.475 147.212 196.533 148.956 196.25C151.722 195.804 174.174 195.824 184.675 196.281C187.914 196.422 199.494 196.691 210.407 196.875C227.594 197.166 230.249 197.112 230.249 196.466C230.249 195.458 233.074 192.813 234.36 192.616C234.932 192.529 236.255 192.066 237.304 191.587C240.315 190.211 245.853 189.574 250.133 190.114C253.009 190.475 253.983 190.436 254.285 189.944C254.993 188.798 263.733 191.916 267.885 194.799C269.855 196.168 269.554 196.909 269.881 197.338C270.3

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3814), with no line terminators
Category:	downloaded
Size (bytes):	3814
Entropy (8bit):	5.646849394670643
Encrypted:	false
SSDEEP:	96:YyRkcky4g476B8ZeZqYyiyg1j+36B8ZhZquyXgJr6B8Z/Zqdnb3:yhy4g476B0eZqYyiyg1w6B0hZquyXgJy
MD5:	4CD6BF7D66119096E2E2170F8DC9A1AE
SHA1:	67A73A1A6C3A1417F684AC7DB8277B5A9B6F54DD
SHA-256:	7480C6F5811C513A2061B450296B7D192074777D225A5735C6DFDB54C567D033
SHA-512:	35BAE3023F2CBCBB37C49C0A6C7602135CD7D3628FD4725F901E4DB1BFAD85A8E1E12F0A4FD624336CB70E5A0FFC4D78BB094051EA5BD2C74E8E1817F5FDABB4
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/982651595?random=1713459565240&cv=11&fst=1713459565240&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j768907168","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j768907168\u0026tag_eid=44805655","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sYV3fDA!2sZkjebg!3sAAptDV5ZCEWd"],"userBiddingSignals":[["8307377499","597481942"],null,1713459566854321],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rd

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1136
Entropy (8bit):	4.940469927918978
Encrypted:	false
SSDEEP:	24:2d6oNjLyBOeFeaxM2nUZ2OOhXB/ostZPdimNz/H/CG:c6W/yZN7JB/ND/H/CG
MD5:	7613197A47A28A237817C62D0BF8CFEA
SHA1:	8DF76B94D375CD790F986AFEB4B060700B276662
SHA-256:	D6501EC5C42B6120099880B291F19F8001CB5F79E4B0C8B97197CDE24E95B93B
SHA-512:	540E813E6759EA016F5D0492B72564F3D4831F7C5CCD31723BF6E0D403499A662A08AF0C1CA9FC95A01EC3A758910E35B5654BD72C0200602E9E4AE5953035E9
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/images/svg/arrow-graphite.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="18px" viewBox="0 0 30 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Path</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="arrow" transform="translate(0.000000, 0.571412)" fill="#1E1919" fill-rule="nonzero">. <path d="M20.8279018,0.235396205 L20.3543973,0.708833705 C20.0406027,1.02262835 20.0406027,1.53142299 20.3543973,1.8452846 L25.9745759,7.43305246 L0.803571429,7.43305246 C0.359799107,7.43305246 0,7.79285156 0,8.23662388 L0,8.90626674 C0,9.35003906 0.359799107,9.70983817 0.803571429,9.70983817 L25.9745759,9.70983817 L20.3543973,15.297606 C20.0406027,15.6114007 20.0406027,16.1201953 20.3543973,16.4340569 L20.8279018,16.9074944 C21.1416964,17.2212891 21.6504911,17.2212891 21.9642857,16.9074944 L29.7646205,9.13963728 C30.0784152,8.82584263 30.0784152,8.31704799 29.7646205,8.00318638 L21.9642857

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	17514
Entropy (8bit):	7.979439809056521
Encrypted:	false
SSDEEP:	384:MCeANz57ABP/JAIe7CFBQGlqPie1DPQw4rFGl:CAoPtBQGwbQFw
MD5:	12BB4B3EF12530EA0930BE9CB598CB3E
SHA1:	0182C8AC44DB7FB202B5DDB45941AA628C660BE9
SHA-256:	B822D0739686674A37985B4DE358DBF486144F8B24004532FEAE153B74D40358
SHA-512:	9BCF61E6AE13CC78D13DB13627845468B551F56AB054769FAD831BAF5A6E56F69FBAA1E122E8933DB056EF9FE39ED3454ADFB3B905EBE36BB705096386164765
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/lvEU8OcKg2k/maxresdefault.webp
Preview:	RIFFbD..WEBPVP8 VD..0........>m4.I$".1!... ..gn.:.....V...h..o+8\..?9.w.^.x........S.....g.?d.d....l.r.......~c...g...w.....=..Z.....9.-..%....W.......{......../..._.?`>@........s...W.?._.......\|5.[..._.s.{.+.WgOK.d..z..K...n.......~[..f...C.....G....._7..........C....c...u}A}..../....W.s.7..k?..l...N......>.....................<...g....`k5...DB.S.N_...8...;.S.N_.P..W..\p...w.....'{p...w.....'{p...w.....'{p...w..x\9%j.;?....<.U...1..D.8..3q.Xm...^v~?K..yZ.....a..+Uy...)U7p..O.J.iR~`....X...iR~`....X...iR~`....X...iR~`....X..D......n.R..HZ.....a..+Uy...,6..j.;?....<....h...D..V.E..,6...>-.6......eC...`.a..+Uy...,6..j.;?......)..1....W......y.'...Xm....,.C{.6.4..?....<.U.g..........z...o..f.......~.....Z.`.e.Gv~?K..yZ. N...Z.....a..+Uy...,6..j.;73.j.....~}.k....5....!..V!...].$x..\6....V=.R...:..v!.{...j..>S.w1...V=.Vlk.V=.R...:..v!.{...c.u+..J.DY..i.(.9P.4..R...:..v!.{...c.u+..C.X.a..9.Cn.O..C.X.b.J...V=.R...9..."{...L...c.u...p.N.:c..\|6..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47981)
Category:	downloaded
Size (bytes):	48037
Entropy (8bit):	5.265897252421922
Encrypted:	false
SSDEEP:	768:JYQq7XTMiYuxEvp1wr8HSktn4rdVbUyXqmHWEYWMhiAcaW9fjaaWlnxDKe4KSADK:NapZbm+1ZWkjiL7oBj
MD5:	AC75D2758BF3E040611814872A174121
SHA1:	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386
SHA-256:	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
SHA-512:	DE40C011C8BDC049AF0774BF5D41C7F98A042C65E300AFD90614A36C1EF3B0A1EC66BBDB938001F688F2DDD13F275F9C48C851CB5BE4977A2E6E00DAE4EB2A05
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_src_sink_index-vflrHXSdY.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_browser_browser_detection","./e_core_exception"],(function(e,t,n,s,i){"use strict";class r extends n.Message{constructor(e){super(),this.seconds=n.protoInt64.zero,this.nanos=0,n.proto3.util.initPartial(e,this)}fromJson(e,t){if("string"!=typeof e)throw new Error(`cannot decode google.protobuf.Timestamp from JSON: ${n.proto3.json.debug(e)}`);const s=e.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z\|\.([0-9]{3,9})Z\|([+-][0-9][0-9]:[0-9][0-9]))$/);if(!s)throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");const i=Date.parse(s[1]+"-"+s[2]+"-"+s[3]+"T"+s[4]+":"+s[5]+":"+s[6]+(s[8]?s[8]:"Z"));if(Number.isNaN(i))throw new Error("cannot decode google.protobuf.Timestamp from JSON: invalid RFC 3339 string");if(i<Date.parse("0001-01-01T00:00:00Z")\|\|i>Date.parse("9999-12-31T23:59:59Z"))throw new Error("cannot decode message google.protobuf.Timestamp from JSON: must be from

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50512), with no line terminators
Category:	downloaded
Size (bytes):	50512
Entropy (8bit):	5.807020158423289
Encrypted:	false
SSDEEP:	768:9VEzA9L3tdGZ9c6q8T/wNp1/JlG5Q3EiI:9VHLdoCkIxhlGe3E
MD5:	E7EB43056CA9009ACA1F0E2B87A75414
SHA1:	9670CF65C8D62B235C32D79C6C5357B4E339EB72
SHA-256:	DE64DA5D54E04FBBD77D20B880D79D72D06B6168D1734F9675C4A6AD86F760F6
SHA-512:	F3E5C135714C0487C25466936ADEA24F4F0F70F6E28FEB4C464DAD5C1AB103256EC40B33550B371DA250A75FAD8F6BEAA16AA13A3BD35C555D4439904EC8ABDE
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/super-socializer/css/front.css?ver=1711053212
Preview:	#the_champ_error{color:red;margin:7px 0}div.theChampCommentingTabs p#theChampReplyTitle{font-size:large}.the_champ_login_container{margin:2px 0}div.heateor_ss_follow_ul a:focus,div.heateor_ss_follow_ul a:link,div.the_champ_sharing_ul a:link,div.the_champ_sharing_ul a:focus{text-decoration:none;background:0 0!important}.the_champ_login_container img,.the_champ_sharing_container img{cursor:pointer;margin:2px;border:none}.the_champ_login_container img{display:none;float:left}#the_champ_loading_image{display:block!important;float:none}.the_champ_error{background-color:#ffffe0;border:1px solid #e6db55;padding:5px;margin:10px}#the_champ_sharing_more_providers{position:fixed;top:50%;left:47%;background:#fafafa;width:650px;margin:-180px 0 0 -300px;z-index:10000000;text-shadow:none!important;height:308px}#the_champ_popup_bg,#heateor_ss_browser_popup_bg,#heateor_ss_lj_popup_bg,#heateor_ss_mastodon_popup_bg{background:url(../../../../../../../plugins/super-socializer/images/transparent_bg.png);bo

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.8548730495981
Encrypted:	false
SSDEEP:	12:nnwkHFVF6YXukbpPxTEdxk2fKuv6/WbxXBu3J3nWN0j314IQL:nnwWpqkNOYDa6/gXBuNq054j
MD5:	85C876EB10030058F29245148995CC2D
SHA1:	458679E2B02107F6448729AEC844D3BD8283C9ED
SHA-256:	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
SHA-512:	2CA5D147B5630AA540DD241CB8C06429A7072108C2BEADF04ED532FC7F5291BDF1147F6C334293D96397B9402421B1AD52CDF9F1EA39918C95201DB1DBA19DCF
Malicious:	false
Reputation:	low
URL:	https://marketing.docsend.com/how-it-works/
Preview:	<html>. <head>. [if (gte IE 9) ]>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <![endif]-->. <title>Dropbox</title>. <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-eval'; ">. </head>.<body>.<script>. (function() {. /*. Requesting marketing service to process tealium events. */. document.head.appendChild(Object.assign(document.createElement('script'), {. src: 'https://www.dropbox.com/pithos/marketing_tracker_service',. async: true. }));. })();.</script>.</body>.</html>.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5374
Entropy (8bit):	7.937878888951757
Encrypted:	false
SSDEEP:	96:ReQJAkLb0zYKKTeH8om78AyAlnZt233d4CjM/8njdV+xflpdR+AUmWewQq7ra:ReQJAkw8omwAyeW7jJCAmdwQ0O
MD5:	A1C5EE893291426B402F346AD3F64FAC
SHA1:	72E23ED698D7FADEF1CC8AE88032E56F9C56DC7C
SHA-256:	FD0007F0AEA44E576B76C476A5C847A91BA8B91A1D26A23BE6E01FE28041A49C
SHA-512:	70A3C312118D70998ECE345F1FB09FEBF54F0A9DA58A67E8D93C6BE1AEA601DD081DF260C82B99B649877E1A8A9E243ECC8E96D0C638A1D5A5634EFFD211A185
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/Parampount-logo-120x102.png
Preview:	RIFF....WEBPVP8X........w..e..ALPH.........%..=..Id....PI..[7..[..].....k..vmX.4v.5...?..^..?#b..<...f.......m`.hO..h.ZZ!).W....Z=d'.....,.A...bJY'.t.c..K...J_.z._f.F.f>.......v.;..`c/...t.%..q'..ux.."B....X.F...JD.B.x%S._>. ..A...Dt...=.P.%.........[...+.&vs...h.D...B.#E.P..l$....-...@..=..>& .;u...&...a\..}.QS........@.j>.....\|\....0...o..w..x....U%.r...>.565.J....wh...q=.......Dm..`..r..-sP.......A.@t...F..+.z......,'8.-........Y....../\..8.C\|..C.f...p.....c9a:...%.....\..C7...j0...T.ww..V.8.@.`z...#.......In\|..T.~..39..8.5..A..,"..q....".i5.wVE+ti.......gK....}V.....h.m.R..c.c........R.;.!.._.B@....>...8.r`.z.?.;U@.,..I....{C..{%VL.#.$..s.9...;.r.`. ....j\|....\/..n.....F=V).I..z..I.e..r.r...."@7..7%.E..$}2...N.....r..[.....'....(.}.rY.@e.....va.....<....%E.........YLd..\|.s..?.I.pr..DTtjhm........~....o."&2........}!...lf>.....8.P.6..81.B....o.D....^Y...J...D.vf....Xj..?..x-.o..._&2.t.t.3)..>.C'...x.r...@:.8#....kI..ap...t

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226096
Entropy (8bit):	5.5433038763979035
Encrypted:	false
SSDEEP:	3072:ECq+71vbzwHnHVgK8Fnp2LUF1er5yyXatvFv522gY8pv1HIin:Jq8wH18f7tvx522v8pNHIc
MD5:	6E62C0EA891FB836F2441A73864F3628
SHA1:	F502A4D2FCB9F9BC962018769FE89C87DF84A658
SHA-256:	CB3C52662E4A28C94F83738742E9A01E4685DD39EC20FB6755E778B0A60ED139
SHA-512:	A199C4A76C23649774D2C54F3F5F4F1136886F5C84B84AFCBE10A25190542212EE56508DE18A53E7002F128AAA18E725C6ED2687E579217246CB433E4114A86C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-982651595
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-982651595","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31230)
Category:	downloaded
Size (bytes):	31611
Entropy (8bit):	4.893111591526175
Encrypted:	false
SSDEEP:	192:EpfCRornDwyfbEd2d2v6+mOoiWP6Vk+6D1iZVop4VmwJNZgEWJ83ptaLcsyxmsHK:EpfCRoGYY0uVGzBGrg6YYFuVZzBZ
MD5:	7C750AAD2B692C1D3E448FD3B3404136
SHA1:	67CE2AB7109B50856F58D42E8BDE38A9D071213F
SHA-256:	53B3A32379965955CC752FEC0C709ED86910370368E9824BCEFEAA731E54C725
SHA-512:	3024D9868DFD1AD01B6F52EBB429257B8D83F588C03566560F197CB0ED2BD459A9E0E3EA82FD72037607525D44CE48162E1F9AD4114A81D8A7D617F0902908DC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-tokens-vflfHUKrS.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..:root{--type__title__medium--lineheight:28px;--type__title__medium--fontweight_strong:500;--type__title__medium--fontweight:400;--type__title__medium--fontsize:22px;--type__title__standard--lineheight:28px;--type__title__standard--fontweight_strong:500;--type__title__standard--fontweight:400;--type__title__standard--fontsize:22px;--type__title__small--lineheight:26px;--type__title__small--fontweight_strong:500;--type__title__small--fontweight:400;--type__title__small--fontsize:16px;--type__title__large--lineheight:36px;--type__title__large--fontweight_strong:500;--type__title__large--fontweight:400;--type__title

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (35130)
Category:	downloaded
Size (bytes):	102163
Entropy (8bit):	5.492729595866729
Encrypted:	false
SSDEEP:	1536:r9AwZp52x8Vzt4ttkZMxD40hct4H5t9d5zCrGsD8VVw2Q1dLix6Z93c8BVoy:rWxnX0t4hzCrGsD8kdDikk2
MD5:	4CA4F3551ED06D2DD7B6A7BF382608E1
SHA1:	F20F567ACD13DD15C2E9530639BE51D3EB154E11
SHA-256:	DCB229B288136A53EB72068A14DD5D163990AB3D13C07B6A87E14F0B7571E09B
SHA-512:	FF2FDAE6C9BE447C0EA74E61A4A8D9754D36D54AF10758127342929C911ACAE502B35AB1D714D22EB2A97294A3BAF79B3F93966CB44ADF04C7323E0750F2FBCE
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"dropbox.docsend",o:{},sender:{},send:{},rpt:{ts:{a:new Date()}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{"pending":0},run_ready_q:function(){for(var i=0;i<utag.loader.ready_q.length;i++){utag.DB("READY_Q:"+i);try{utag.loader.ready_q[i]()}catch(e){utag.DB(e)};}},lh:function(a,b,c){a=""+location.hostname;b=a.split(".");c=(/\.co\.\|\.com\.\|\.org\.\|\.edu\.\|\.net\.\|\.asn\.\|\...\.jp$/.test(a))?3:2;return b.splice(b.length-c,c).join(".");},WQ:function(a,b,c,d,g){utag.DB('WQ:'+utag.loader.wq.length);try{if(utag.udoname&&utag.udoname.indexOf(".")<0){utag.ut.merge(utag.data,window[utag.udoname],0);}.if(utag.cfg.load_rules_at_wait){utag.handler.LR(utag.data);}}catch(e){utag.DB(e)};d=0;g=[];for(a=0;a<utag

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	61618
Entropy (8bit):	7.987225098065903
Encrypted:	false
SSDEEP:	1536:AYj0KKYGuJizKnfgNTOrzlN1mM7+tcxE2jT:zj0WJ7gNel9qtcjT
MD5:	FFE4EBB64088095697D032BBE5937316
SHA1:	4989D3FACC1CB0723F3A1C9CF88389303E0DAA54
SHA-256:	DBD1311AB3129724111698980D0579AF279E1B3DF647CF149238F0D2126CFFAD
SHA-512:	D9895892C8B8BEC6E63CCDE67327E5184A9D63D4DED614150501A65BDF713809A756123EDEE8DC462AFC239504074C06D62CE3D0B67DAF489352C0BDCC63420B
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/Salesloft_logos_panel.png
Preview:	RIFF....WEBPVP8X..............ALPHBn....'$H..xkD..9..6r$._..N.......3\.....V/...=....]...\.N.g.........U. .m.,x..............+.w...k....p...D.Q.t...A...T0."M........"...D.1.q.#'..I..CM.(t....(...n..\...u.5.?.........Fm.!9..Au.Iu<'..c.S.+...m#.mkm...y....U}]..OD.'....?......?......?......?......?......?......?......?......?......?......?...........g.e;...~....XB.}.Yn.V-.."....3+...X....6.{YE.>..B3.,..vhp.o1+i.....S..K{_b..^..3.\|S.8WM..</r...u...a.0%GbfZ....)....S+.ff%H.^........I.SN/a..........H.k..#.~......G.:......@.B.M......]..=.4..T4.....Kxj.#6L.99.....T.S2.f~D....]k. .......-..}?...I..Gj_g.-....R[.;..@..O....G........8....P...&.Py..S.B.m.Z.!.{3...V....AJ.......G...E...]4.j.n-V....;.......$f.@.)....4..2A4...#..8Dl.g...T..-.Arf...h..7-n..4.4..j....0.@zk..p.]$.5.Bj.....Cs.`.bW..C.......`a.AL.H_..>.... ..."......A....9.9"bm. X.Z.@-P1..pt9=C..,.&\.2..sb..-fAdK4..7&!.&4.te@.Pu.........5....h-+....[.W..\.p.......".Y......V..B.&z../.{..

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25374
Entropy (8bit):	7.978691306737924
Encrypted:	false
SSDEEP:	384:VJLm2PjQ+JztPcZW1MZvkmBZEI2O30PyHwrVnoxCVMmXSSQV/a1JAwSJv0QoNn:TT9tuRkm7RHHwXSSQVt903
MD5:	C42FD68E1E203D959102DF919A26D111
SHA1:	9C45446F31C15A402606656D313BC071EA7DB0AC
SHA-256:	99A2C8B11D22C06506B98B3690DA07C791011459FDF4F68EC4D7B96CB0B31B7D
SHA-512:	0D76A9E231D168FBFF537948C20E35DF209AEE7D400626326A8B33CF11814EB1758CEEFADD7FF1448090A04997462AF9DB4A2D6A3592538D4292BE41F85A7677
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v7_1_uploading.png
Preview:	RIFF.c..WEBPVP8X........~.....ALPH......m.H......D.......+.J4....y....HiI..<.m[....$,....H.."..HX....$.....$a.y........mk.....$ ..H@.....$ ..Hh.. ...s.........S.g......y...)5n[...q..F.nqh...X.x...ZyT...n.}......$4...WIh<~./..x..^#...DB.Y.{.....WH....yn}}.v.......1....Q;.^..=.7&.?..t[.J.0..#f.{..+$......b!...N.7EIN..I..r.d.1zYvA..c.S......./.$s..)wc... ..C....Pz.H.O`?...s......5.D....!..E.u.C.....v.C&...u....._....d..G.....[.7N?G`.4...E..5....,...Gw..S..X.pk..p...d...>..f..x..:..Y.1.hq...q.g[W....%..........@...3...o.E..Tg`13k<}1....z.Vu.b...^........>..w%Y.....+.LNU..bf.Gm.1.~.dc.:.f._.[0...........+..e...:.$U..t<i....3...U....a.k/G... .U.X,..N6.$...N#.q.f...A...p.L[9U...........A..Uu..33.^..@5...Q.Fd..f.fU'..u.w._x..,f.x.b..L.A..TU. ..q.jf.0......e\|o_.....7nf..^....#.\T.l...e..u.....d3....-...z9i.y.e@...?H.cG.PU...w4..`RU9....f...3K.fUU'..G.f@T.n.tD....,fV.c5..T.....Hf..V.. ...~..f?..l.&U.p..u...F .U.Y...Uur.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24834
Entropy (8bit):	7.984499046277903
Encrypted:	false
SSDEEP:	384:othxEk56GOMJrzschq/tY/VVbHJvIkYkTRtZb0B/6+WEMlMGbAwX3pj0kp:MCkplJ3sceABIkHrZKWFmhwZ
MD5:	6AFA07503C36F8BDE33DBC86BD634EF9
SHA1:	A0E242628EB72050B4240CADB50261571DC5ECAC
SHA-256:	93CEA9B0099EDF17B310483E564239DDF132C86D087DA6F96B1AB793D6EE8D09
SHA-512:	717F071F1B497D7B91A54A35DF1564075181ECEFA86F68A109538C64E3F247F6A16E3864DA80D917B99AB3F389852270650D9D0B5E3CB594714B76274F47FD72
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2022/09/DBX100_How_It_Works_v5_2_Security_2.png
Preview:	RIFF.`..WEBPVP8X........~.....ALPH.>....'$H..xkD..9J.6`....4".&mb.^...\|{+.;.R.mr$...B......6..@..Xn...n..P.#$6..:....Mu=S=.".?...m[.d..c..Q..BoTTllllQo..o...[.[.[.....[L.Dll.$.Aj.?...a.f.}..'.....9....i....s.q.........JU.g.4.Pf..i`IU4r.U."Zk.R...<..]..`B.h.0..E.s.H.K....bi.. B...a.9H... YZ>. Q.........]M.>YZ/=..p!.3I..~e..d.y..P.U....Lba.V...y..&.n5G`..!.1...y....j_.h1B.S...M.........h....8..b2....(fp.+#...<...:V]....(.......8..%...}..,c..y.!.R:.t...>y.bH.X.d,...CH.:c...Q.].#.w.......-xk 3....H...$..j.8..!....3....e..R.e.....=..V...@...s...X..J.Px.....R$jR}V$....u.)..G!.U.......G. l..n.a......CuB.$..'.5/....'QFmF..B6..`.....w..p.I....d....!{.(6B..<I.og#..n..... :/..I.Pl...=1..]x.m....S]D..!..V.....2..-`Hp.B..Z......h.....,*...1.u.wA...y.b.c....5...;........9..p.<...x`.#......(.g..8........"..Zi._. .7CqC......2\|......i....tw....P...............A2....w\...W.....!.5...tS. .P..O.J..<.l.]..#..6...p.d>....A...uAm.V.[.o..dD\}E3...9\.K.B....b..uAK.j..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	4.859812617168743
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfyMKtEFz8vv0QmUWURcE3a5Bd/LDjVwRYv+:2diO4NlfPGMyMKSzevw6RN3a5Bd/jHv+
MD5:	9D4AEDC7989218A310560C93A7BEA9FB
SHA1:	04A6AF2280FEACF24C83313AF5AFB09F777E9F51
SHA-256:	6F4F9D9C5BA0AE7C45D68BCF05CC615230FE2F860D7E945AB218BFFB2EA0BBF0
SHA-512:	89D5B32FFA6D68D6863B9A499241540D369CD04AF037B0DF9EB02C30F9EF074141EA4EA459B75A210300B4CEC8377C022F16016A470C3649D6B51784BBF9EF72
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/icon-facebook.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="evenodd" d="M14.796 25.667H3.621a1.288 1.288 0 0 1-1.288-1.288V3.62c0-.711.577-1.288 1.288-1.288H24.38c.711 0 1.288.577 1.288 1.288V24.38c0 .711-.577 1.288-1.288 1.288h-5.946V16.63h3.033l.454-3.522h-3.487v-2.248c0-1.02.283-1.714 1.745-1.714l1.865-.001v-3.15a24.928 24.928 0 0 0-2.717-.139c-2.689 0-4.53 1.642-4.53 4.655v2.597h-3.04v3.522h3.04v9.036z"></path></svg>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	395
Entropy (8bit):	4.912947748039042
Encrypted:	false
SSDEEP:	6:tI9mc4slzYbQMisKMiQwNcuaRtXIt3Vfykz0zdpmSSEjqx/BC:t4WbuxMihNrw4jyO0zvuEj+/M
MD5:	07E0B46EF0911C94EEEF6650DB31FC58
SHA1:	2719799EED05910D7158915DEFE83C58C16A7E92
SHA-256:	50BDDA75BACC6FC145E6E73943B4F690FA1CA9F5C94653875B3D0F2B2A420404
SHA-512:	984A1434F1E36B138AA9379F09DA68B3D05398C291A91898AA578955EB70C783BC01184F7C0FCE70AE24F79289AAB816B09EA32602F030D572ABD54CB2A09C05
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/images/svg/play-purple.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="56" height="56" viewBox="0 0 56 56">. <g fill="none" fill-rule="evenodd">. <circle cx="28" cy="28" r="28" fill="#0061fe"/>. <path fill="#FFF" d="M24.6 17.2l13.333 10c.442.331.532.958.2 1.4-.057.076-.124.143-.2.2L24.6 38.8c-.442.331-1.069.242-1.4-.2-.13-.173-.2-.384-.2-.6V18c0-.552.448-1 1-1 .216 0 .427.07.6.2z"/>. </g>.</svg>.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	578
Entropy (8bit):	7.502571045819332
Encrypted:	false
SSDEEP:	12:6v/7i+JK+DVFn54/XyExm1K1knAwkberqLHbRFhOQadBPk/vHKFbKygzYC:UJ/VN5kBX1kbkbMqL7XVad6ybKygUC
MD5:	29EC24AB2E9F7F77846D1DBF87BB129D
SHA1:	C779B93BE4A79202113F05B9E15F1E1ECE08E5A9
SHA-256:	2055194B763E8842D540E884D3FE156D10A699518CC1FFCEEE1C9681763117A7
SHA-512:	BA8FEC070D9E36946C6C85DF1933BAD1B4F0C17CF7C87B5A56E3C6130E57EF6C107A3DB3F977C8063FF73570D9ED5DFAC8D73DCD24855CB4F98EAE4897E0B10E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx....K.Q....Tp.-.Z.6.....C..Eu.:.E.(^D...."..........Q...=...?..<........;0 .....,.>.\.\|...y...x........%?.~F...b.H.7N....q4`.K...r.....O.u0..t!...Ha......e_..0a.2..0q..0.]H.i.3a...J....b.....0...)dU..c..FD.m.....'p.y..#".$.n..a.R1@.-.[D$.V...j...HB8.(C'....BhC.. .1/......U@....0"J..e...P....-.f.q.H.z.C...k[.;.....#"..{....Z..F.g@Y....O.X..=.1{...(`....B.*P.<"f{.o.@......v...\|...7...$.!}p........A..9..f.5..c8...../(rr...%.................Il..Y........n..Z...b....a.C..w...........7..cT..Z.3..1..yT....IEND.B`.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59474, version 1.0
Category:	downloaded
Size (bytes):	59474
Entropy (8bit):	7.996536832615746
Encrypted:	true
SSDEEP:	1536:OlpqLXHcqLkxDs5rCpQpzFF2yQKhQ/vxBxdJ0GmGg9N:opqLX8VQryQpp4yAi7
MD5:	5FE348C01DF65DCF6F32A5A2BB32CCAA
SHA1:	B340836124D41A35709EBC7AAC2DBE8671B2B9C3
SHA-256:	1447A6760A029027948042A533B863A20E635D71703A281456556BE464A92520
SHA-512:	EC76D671581ADAC9314D491E854BF217EE12222D36E5FE3C5BD2A177034F62A93354A5A8B0860F79960C09AE5FD7BEB1DE6F9249084D3757F453464B075D5094
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBCyrBook23-vflX-NIwB.woff2
Preview:	wOF2.......R...........+........................@......D.`..@...........H....6.$..f..v.. ..R.....V[.s......c.....TVzn.F.z...@.m:...fe.p..`.4._o..xW3 .........U.x...[...{B......Ai....H.J.Ve...6j..d.+.G.....1.?...cJ.....N._L..A`.h...Cu.%.h..P......03D..'.g.a.Sfx..O.(.\|.:.d..5..UOYI..'.f..&.W.U...\|.[..h>....k....I...6.Yt.)PW...@.3(...@....@...pS.r....]........u....P.E.Ye..@.-.....J..Z..b..(a]........0J....w...nX.....=L...W..I%....F6...].B[.vp......g,5.8[.@...X...:.Q.....\|...RPRR...].\.........X.k.;y..,i<.H.(.<tc.......$.....07A..3...?..$.g........I.h.$:.$zmZ.\..h..b......?.?]....L...Uv.{M..bH..b)...F.U..y....^@.I...l....\|.!.G....v.I.GB.H...z....p....$XP..R.-O}.........6..:...V6.q......<}..K....4XT@...S..6@......A.....VW.d..w..$M..G..P..C I.....K.}.1...9.......e.!60.H..CuV...`.B.....2.......s.ol.c...J.T...B.hHh...........7.@...........X.....0..N.?.n.....7="9y......c@.fYl.....m.?``..H...S.h.Q.N.\T.0cQV.t..........Um8-.....A0./.3.....c.;_..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 275x275, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10448
Entropy (8bit):	7.9811266475660245
Encrypted:	false
SSDEEP:	192:2JODpxK4HNK7AAJ+GC7aKTSqcfYN4nqpCTYZG083CvmnW9ts+xePeFFmYaqS:2JwLZNhAJ+GC7aKTSqcQmnqpCTYZH0Ig
MD5:	0B35A98B901BA83D6840823B0935F35A
SHA1:	11FE9509E6F812AC7289550E91FC8225DE95C7D1
SHA-256:	D27236A1332D25ACFEEC13723F37AA52D6FDD28A1A4E67AACF3A71E50EA4D4EC
SHA-512:	C5030DE929C0F6AA21E1AC8FBE590B615D91312DC1589AA46D1D57B55E2D1624EC15AEF0E9D48994CA9F6919641323A830188699A0CA0320A95835624B770740
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/07/Dan-Sincavage-275x275.jpg
Preview:	RIFF.(..WEBPVP8 .(...........>Q .D..!.J.l8....8..A../.H...>..W..........w./..[...=..W~..2...rl.7:..K..C..ZI......Z.VQ..F..g.{.P..".M{..?.]1h.W.Rfw....l..Xh>...0....0b..4do..]B.v...?.}.I..p...yn4..c...Y...fV~a.e......D;.n..TpH..KO.m.,....ov.{f...&.C5...uM.a.G....NbMK.5.....1.K..._..4SL..A.he...\#.x...$....V.....3.L>:N/xj...:.'...W..{Z.E.3.5......k.r...)..I...~@O..T..[...[.....h>.6.m.K...%........1X....`..Q{..?..Z.1......._.m.c.^!..t.....>m.&(...../DN....A..Oj.D.).....\......B]!.....B......[.....h....%>..l..b.....a7~..\..I07..B.C........h.3u.e.f-aX....H......bO.p.hJ.G.....cE.ZV......E?$/R".....6W.f...]l.k.i.}T.sM]......?...6b.....c.-......Q.1..~.J.e..L\\.<{..K8...D...H6.b.F3..,.....B...5....#..;..f.p..2.pe...o.....F..8.P..V.}.W..^$._....R....;&x.e...{.!.....g..q........#h.....X..+..d.sZ...@..$h.V$..\.....b/.I.! ....^M......!.1q.g....._.:.....z._...s.X...C.RZ.$.7vgQ.............(.....k.G..]U.\u...I.O...O.W+"o..Z.r..wSC.YY.....

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	53713
Entropy (8bit):	7.969977767467421
Encrypted:	false
SSDEEP:	1536:DcfIKFsAmU7OdXsXB83SU+HcHyt+4dlYR0d:eNF5mkOdXseC1ylY
MD5:	758C1D94E3DBCE941FCB4FC1D7352485
SHA1:	09BAD6FCC2E9B56839DF3BEE87961188C7A0039D
SHA-256:	FE8F78506B09E466EEBDA3F194FFEA08DEDF7627E7E815F776C3609233522926
SHA-512:	DCCCBC9E89AEA440A62ECA24378103E5630E73865720EE72CF60EF9276F0DA37EB5CC99D5F41F5CA13C90D8849323A22DEBFAA29DC3DB7DA82ACC3E7E27424E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<...sIDATx......y......I...."E.$.,.....bb....a....z......3[.Tre.pN..7....+...g.u..qR3<.Y.....rBK..Z_.,..H......?....y...t.....h<.b....n4.~...R".H$..D".H$..D".(y.i.Fo;p2.<d.%.,[.%E..S.Y..r...zdCQ~F.H$..D.....\|....y..W.'...`^~R.H$..D.6..Y...e...#.>.g..,Sb...D".H$..........KS.2.@`A~f.H$..D....,}.m.>7...K.H$..D".R....a..p..O.......D".H$.j.l.#....n.eH\.".H$..........T.}.".....".H$...MM.}....<Lw..)..i...H$..D..RS.?..`..L..GI.!..".H$......~..".H$.........E".H$...u.....D".H$...J.......AI...D".H.t..Q9...:&;...H$..D...?*.\|Pu^9.V.:....H$..D.$.....8...}o.H$..D.....w...QC..e.....U...?{}^=..z..uu..\|T... S2DD".H$.%..........G}v.rgY......>..e......5.....,.0..D".H..y.}.....Z.T....+[V..?......g3..G.,.s.Rt.D".H$.........~../....\|...aZ...'..D".(Qr...n........n...$.?.H$..D.R../.....V. .$..r.LX. b...D".H.....0...z......P~Nm..).......Z`.../n\..n..D".H$.u.l...:g......z&i .w.......}p...=G...(....G6l

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	120585
Entropy (8bit):	5.370923647345209
Encrypted:	false
SSDEEP:	1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs
MD5:	23BFE7E99565EE8F34AFD63C06F4C24B
SHA1:	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07
SHA-256:	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
SHA-512:	F6318DAF93E2C1EF27CCB2D84E4F10AC430F7E3194D29C7CD066332995318BB96609FAC18EDC827355799244B9BF1570C0807B429CDCED4C4B890C5F00DDF477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/react-dom-vflI7_n6Z.js
Preview:	/** @license React v17.0.2. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(M,ha){"object"===typeof exports&&"undefined"!==typeof module?ha(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],ha):(M=M\|\|self,ha(M.ReactDOM={},M.React))})(this,function(M,ha){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function Ta(a,b){gb(a,b);gb(a+"Capture",b)}function gb(a,b){Ib[a]=b;for(a=0;a<b.length;a++)zf.add(b[a])}function li(a){if(Af.call(Bf,a)

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 529675
Category:	downloaded
Size (bytes):	145894
Entropy (8bit):	7.998092643660417
Encrypted:	true
SSDEEP:	3072:Ha0ToVcqcnmWXKRYlXShqYkhScPJyoru6o8w4i254DGRKB:Hb810mWXJShBlGJHryCRKB
MD5:	9CBF93992BAA692AB73AE09787D8E47E
SHA1:	0B9F315EE22A2699A2961441AD9838CBC8B77DDE
SHA-256:	46CE5C1580E71EF361D872ADB6E42AAADA9AD4B1420DF9B010A4AAAADAD12BB3
SHA-512:	0B7D0E9209B7A332AFB4DB8FD87D12D0FFA5ABCDB4BD88E9C606A3946F1F629FC88893F97BE17E6F3A972057B168B2ABFC13B7DD11BB645F53666762B4D2A1D7
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.12a5980e.js
Preview:	............{.H. .W(^?]`..1)...V.l%+..^.$.",....4-..9...B...{w...7.2.P....0....S;(q...y.a~.q.^.WZ..S/x...>......^n.k.u.7=?r.N.......z....1.......F.o......F......L..6Pr.nR.Q...G..+.Fd....30V..7<.M...g.. ...\|`{0.............?....,.;.0.g....}...]...u./n:./n...,Z.~./.....<l....Q>..~.....`....w...3n.c?.....~..u.j...f....=..r.K..Q.b.J....{...6.MV.77..O=.o7..Y.R...B....Y.......g.....v..aK.....Fe.mm..A?.b...l.ZC.....~0RO.j...jV....v....j.=.n<.j..h.^.s..\j.[..^<.z..Ua.[..<.......ld`..\..l7.X=~..#...-. ^.j.^o.M.lz0..P..`..X.a...vms......jlW`5.[..I....J.m.j.s..7U..........\..8...{.....b....\|....X.zS...-mU.........T.......Q.....j.mV.....l.X.!....c...`.y?..j...U.....{..y...,....g.\|.l.g.b..hm..$..NS.)..cn4..v.)z..UiT.[[..-.7...^...mn.=.]...l.V.....n.....).0.&]4..#.M.`..vc..`...~4........m....o28.b%'..j...5..OcP...W.......p..<Y.-8...fM=.....&,q.p..,.NaX......\!:..!..#&%.N$l.;.I@..iG__w2..]...uz............X..j.4M...v.{.$M.Y...@.....a.'!/.Q...

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10533)
Category:	downloaded
Size (bytes):	10591
Entropy (8bit):	5.234934257056051
Encrypted:	false
SSDEEP:	192:ZUXRvotYV2cpTXupFgX8GehjTnNmSkpyTDUOFubQpKTH5+iD32nCoP32m3fcRN6T:ZUXRvotYUyXWFgX8GehjTNN1UOGlT0Cg
MD5:	151644207B52C049454C572377EE3E83
SHA1:	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4
SHA-256:	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
SHA-512:	98EB9930274D2B1C81F7C04736678B4F3DD066E94F29FD111FCA70D742AB82842EE6F49A075464BCB09A27011AB9841FFD578D4E0F6343348648C613927F6E0F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_init_data_edison-vflFRZEIH.js
Preview:	define(["exports","./c_init_data_runtime","./c_core_uri"],(function(e,t,n){"use strict";var r,a,o;function i(e){const t=o[e];return"string"!=typeof t?e.toString():t[0].toLowerCase()+t.substring(1).replace(/[A-Z]/g,(e=>"_"+e.toLowerCase()))}e.MethodKind=void 0,(r=e.MethodKind\|\|(e.MethodKind={}))[r.Unary=0]="Unary",r[r.ServerStreaming=1]="ServerStreaming",r[r.ClientStreaming=2]="ClientStreaming",r[r.BiDiStreaming=3]="BiDiStreaming",function(e){e[e.NoSideEffects=1]="NoSideEffects",e[e.Idempotent=2]="Idempotent"}(a\|\|(a={})),function(e){e[e.Canceled=1]="Canceled",e[e.Unknown=2]="Unknown",e[e.InvalidArgument=3]="InvalidArgument",e[e.DeadlineExceeded=4]="DeadlineExceeded",e[e.NotFound=5]="NotFound",e[e.AlreadyExists=6]="AlreadyExists",e[e.PermissionDenied=7]="PermissionDenied",e[e.ResourceExhausted=8]="ResourceExhausted",e[e.FailedPrecondition=9]="FailedPrecondition",e[e.Aborted=10]="Aborted",e[e.OutOfRange=11]="OutOfRange",e[e.Unimplemented=12]="Unimplemented",e[e.Internal=13]="Internal",e[e

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1778
Entropy (8bit):	4.326412428585242
Encrypted:	false
SSDEEP:	48:vgACoTGz66whgnqqwB9KbgCC/TQf5RjOg4yRZRY:jTG+6QgnqqwggCC/Ef/OgHlY
MD5:	A87A3FF054ECAF49A26A1A6639C12985
SHA1:	E2635453389E6DDF04435B05AEB3CBC08AD9E8C7
SHA-256:	205934B4647F28D38D32BE870B3F0B67532C7CC3825A49A73549C40E7263282F
SHA-512:	F6F8C273CFBA4B57393BAEE83C47B06E7915F7FA0A01F1B620ED0CE93E5992AF47D73F3FF44DC9ADA75B21DBBE9A33F1A6D94B5F4006A3A24DAB6BEC81EFAAA8
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/12/icon-podcast.svg
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fal" data-icon="podcast" class="svg-inline--fa fa-podcast fa-w-14" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="#FFFFFF" d="M326.011 313.366a81.658 81.658 0 0 0-11.127-16.147c-1.855-2.1-1.913-5.215-.264-7.481C328.06 271.264 336 248.543 336 224c0-63.221-52.653-114.375-116.41-111.915-57.732 2.228-104.69 48.724-107.458 106.433-1.278 26.636 6.812 51.377 21.248 71.22 1.648 2.266 1.592 5.381-.263 7.481a81.609 81.609 0 0 0-11.126 16.145c-2.003 3.816-7.25 4.422-9.961 1.072C92.009 289.7 80 258.228 80 224c0-79.795 65.238-144.638 145.178-143.995 77.583.624 141.19 63.4 142.79 140.969.73 35.358-11.362 67.926-31.928 93.377-2.738 3.388-8.004 2.873-10.029-.985zM224 0C100.206 0 0 100.185 0 224c0 82.003 43.765 152.553 107.599 191.485 4.324 2.637 9.775-.93 9.078-5.945-1.244-8.944-2.312-17.741-3.111-26.038a6.025 6.025 0 0 0-2.461-4.291c-48.212-35.164-79.495-92.212-79.101-156.409.636-103.637 84.348-188.625 187.964-190

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15368)
Category:	downloaded
Size (bytes):	15369
Entropy (8bit):	5.068877632418108
Encrypted:	false
SSDEEP:	192:JQNPyw5a9nhYm1lrM3y00hukrmjJPyuu42aGvyRtrMyqHdyb+imipupm2OSFQsG4:Jk9fMimipupm2OSFQsGeR+5ZJ0Fj5AY
MD5:	62E594328005F6A1C6E0EDBCAFA712B0
SHA1:	69404C43961EA5224B6DF433C9424C07679A08BD
SHA-256:	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
SHA-512:	D9001E196A218E7FC69619F03E5FAC65AC3FC02023AA7DDB2A7DD507CF952AADFA5A99A97194B03FBE85F50D7591CC759C544FE861D87A3176FF8B44B9D76C71
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_layout-vflYuWUMo.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflJ3txfq.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflyja8tN.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflbI0jjP.ttf") format("truetype");font-weight:500;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrot

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15606
Entropy (8bit):	7.963054811551208
Encrypted:	false
SSDEEP:	384:Xm4qV7svSpKIaVWOAOR47++lPZJOWmPkaYJzf8xIXFYKG:XVspK91m79lPZEWJaYGuXFy
MD5:	03DD8504E5692431E0185A0985372869
SHA1:	AAA23B99A22609AC672FC7B4290FBA3D39845256
SHA-256:	990D55AAEDC611648987E438819FBE00F279BE5B7FA8D08685EAAFDAA116B03C
SHA-512:	919C7869040D8FD0EA72C17B8A617B2F70F6A9EF1AF6F094A3528D5D3E52CC3EF80F6CBF2D87257309D150EB9E5B06FE8AE4C62DC0A8435F00D804AE110D7D02
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_5_One_Click_NDA.png
Preview:	RIFF.<..WEBPVP8X........~.....ALPH......V.V^[.u.H@....$ ...A$ ..C......c~'.d......r.%..(.m.....$.WF...[.._\..i..-N..n.%v..?...R.....=..!.L.q..O.k<....5....q..."..M.C.....$.y...~.......G.........P........{.H..H..M5....<E......C+.z.s.;H..]....<.~....Q....$..._.._....,...G-..D.e.oR....N.......G.e\|.)..r<.r....,n..D.~.....j.Dx...s.fz......[%t.q..........H<os.!.g...0N.#.up.g....p..O+......k.{4r.i..{.I0-S8..G...V.'.."..9..y.;D8.Jz...qc..IN....8.F.g.. ...n..Y...L.e..I4....%B;.t..l..).w...1-...(...).5J'0..R..D..S....5..u.yV.K.r4.C....~..7....A..p..y1....E..."..'.....UB9J.}.ET.. .g.V.....c..Z....0..L(GH..E.j..w..j.q...t.Pv7....Q....lVU...2..PHc_..{...Y..j.....V...is..A$..5.;..H.......t..u"I..m...D..q..m.C........n.i..8....l...t"Q....9.j..3.Y.)?..p...j1.\|...&..s.]...z.,..I.f..v.MU..o......Z....".j...YQ."..=.\$.j..Xn..Z.:.nf.I.a.w.r;..j..v7.TE<...u.I..l.m...E....D.j5...L5.8,.?. .....;........r"I.Z.........."Y7.....j..Xk..v.x.....7..Q...f

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33484)
Category:	downloaded
Size (bytes):	33629
Entropy (8bit):	5.281219042392323
Encrypted:	false
SSDEEP:	768:yofe7X5COk45xSeK+TD4pGuY1m4ydwDVNTJw8p++tMLhY/X3+tWjOVCkkq:SX5hkbVYc4GaPG
MD5:	99EB0DE2B72A849BCAB77B4AB0CA030B
SHA1:	1273CD3F0776E5A43F00065FBFF954FF243C837F
SHA-256:	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
SHA-512:	5712BA5EBB0CDFC698172C203673EE21C94D5B222FBC1DF0241670933660DA45CEB923B382E80CB4D1C7AF334242AC1E5F1BC9C1C4EB392803566FA9E64BA779
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflmesN4r.js
Preview:	/! For license information please see alameda_bundle_chrome_en.js.LICENSE.txt /.(()=>{var e={672:(e,t)=>{(function(){var e,n,r;!function(t,o,i){if(!o)throw new Error("No Promise implementation available");var s,a,c,u,l=e\|\|n,f=Object.prototype.hasOwnProperty,d={},p=[],h={},m={},v={},g={},y=/^\.\//,b=/^\/\|\:\|\?\|\.js$/,w=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/gm,_=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,x=/\.js$/,j=Array.prototype.slice;if("function"!=typeof e){var E=o.resolve(void 0);e=s=function n(r){var s,a,c,u,l,f,h,m,v=Object.create(null),g=Object.create(null),E={waitSeconds:7,baseUrl:"./",paths:{},bundles:{},pkgs:{},shim:{},config:{}},q=Object.create(null),M=[],$=Object.create(null),U=Object.create(null),P={},L=0,R=(new Date).getTime(),D=0,I={},B={},F={},N=o.resolve();function W(e,t,n){var r,o,i,s,a,c,u,l,f,d,p=t&&t.split("/"),h=E.map,m=h&&h["*"];if(e&&(c=(e=e.split("/")).length-1,E.nodeIdCompat&&x.test(e[c])&&(e[c]=e[c].replace(x,"")),"."===e[0].charAt(0)&&p&&(e=p.slice(0,

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65372)
Category:	downloaded
Size (bytes):	289039
Entropy (8bit):	5.411477614889522
Encrypted:	false
SSDEEP:	3072:OQkhJiPpxGk8E7Z1Xvl2aH0TU81RxN3NpnQ2oY8/GlP3vfl321f6EN3NpnQ2oY8z:OQwiRAsZ1Hw1R2Gz38fcGW59
MD5:	67475B672F88B55AC6295F2982A26639
SHA1:	D6026E1A8C78300894E1892FEA2277953E68CB72
SHA-256:	BFE2C137FAEC868CA548FE90010824A3D9536B55550B2EFA01B98C4E37821A21
SHA-512:	A9597691C778EF4CD9753CB00E250315904D74D7375FF4A9998F8F12D81DB9312E306A7CCE1F3EA98602787E9C6371E16506C18AC011FC20263FEB8204CCA498
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflZ0dbZy.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; /! For license information please see privacy_consent.bundle.js.LICENSE.txt /.define((()=>(()=>{var e={623:(e,t,n)=>{var r;(t=n(7451)(!1)).push([e.id,'._consent-iframe_1sqqe_1{background-color:transparent;border:none;bottom:0;left:0;overflow:hidden;position:fixed;z-index:999999}._consent-iframe_1sqqe_1[width="0"][height="0"]:not(._dialog-open_1sqqe_12){left:-1px}._consent-iframe_1sqqe_1._banner-visible_1sqqe_16,._consent-iframe_1sqqe_1._ccpa-banner-visible_1sqqe_20{width:100%}._consent-iframe_1sqqe_1._no-banner_1sqqe_24._banner-visible_1sqqe_16:not(._dialog-open_1sqqe_12){display:none}._consent-iframe_1sqqe_1._dialog-open_1sqqe_12{height:100%;width:100%}._consent-iframe_1sqqe_1._dialog-open_1sqqe_12._button-enabled_1sqqe_34{bottom:0}._consent-iframe_1sqqe_1._floating-button-open_1sqqe_38{height:60px;width:240px}._consent-iframe_1sqqe_1._floating-button-closed_1sqqe_43{height:60px;width:30px}._consent-

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	5.108741538431829
Encrypted:	false
SSDEEP:	3:wmSWnIJhyCnaz/p9OKHbOkCvLNjiOicUaVKJktptkNWBnY:wMmyCnaz/2KCle6UaVXtp8mY
MD5:	9F259825A6E04526FD8C06E83AF7932A
SHA1:	52AB4146DF92520E592CF748EF007C9AAA412E7C
SHA-256:	EFE5A6BF0D04E517BB2C09CF01D11939423A2B512F7F35F36E4CFAA822CFF9F4
SHA-512:	628B160219C2EC7BBC19180BA4BF505D31DDCD039F9A0D04219E68BA4BF410252A719C9B77ED01CC51E264DBF37B2CEA9E223A68B0E79621F86652E0BD9B66A0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgkli8CNgSz5ZxIFDfyM-aUSBQ02_qTlEgUND6hsDBIFDbLsZ2QSBQ3QsCUCEgUNmvq0kxIFDWUP-mY=?alt=proto
Preview:	ClcKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDQ+obAwaBAgJGAEKCw2y7GdkGgQIDRgBCgsN0LAlAhoECDwYAQoLDZr6tJMaBAgkGAEKBw1lD/pmGgA=

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1002x657, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15066
Entropy (8bit):	7.9747508335468895
Encrypted:	false
SSDEEP:	384:Ptpd9Itt0oKwj2wlZbYr1fwen1uW8vbZ:lpdaKejY1n1uW8vb
MD5:	CAE1EC29F596C39B225C523E80100AC2
SHA1:	19AF342B74BA7EAA6ECC010340278813336541FB
SHA-256:	7F00C465641D2D763A3B3A80B8B7F96B5856C40BDBFAB71E3B769C599A44398E
SHA-512:	8EAEE492C41CD371A42A521AC34864A3A343EE8A36E12F0178CF3908BC556CA81659DE31FF4CD5D270149425979057B0A0B29E04C0A20A6650E5235B631A45BF
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2023/06/Product_Analytics_screen_dbx_en-US.jpg
Preview:	RIFF.:..WEBPVP8 .:...........>Q&.F..!.!.Hp..gn... ...=.I..T...B...3.#}o.Vz~C.....>i...U........5.....I......y..?......K...'...o.......t.l...x..?..G.[........z....?\|...U.......C.?....j.#..........n.....>....2./...g..n..........c....FO.?.z..../........?..E\|....K.?..........O.........~.{..'.........................G..?a...d...._2K.I\|./.%.$.d...._2K.I\|.......`.......`.......`.......`.......`.......`.......`.........Tq>.0. t..p5.'Q....x.J.tZ..zk1RP.g.%..`.......`..r.G...D.e.n..Mdb....,..>.LK4'q.I.S.....k._...i.....`...y..!.....j3{.PZ........X..O...............{J.y.....V...M..1........gQ(.5.....x....4.%.G9..(..v.....2#..^.L...lq.......t.....A..^2.$.....).O.5.7m.2....B.,}...E.H~W..i.....`...y..?x5rz..{..,N.Dqn,u.......G_j..).$.4....nC..>_.D.T6Vd....iI.U.(Sm._...b...s.4Z81A.....^'..K.7..).5..!.....x&>(%J..l...`o.n.m.m..?......0.2a.9....}.."K...C......){..}.!1m.}!~{...<?..AQl.....AQl....4...`.......`.......`.......`.......`.......`..Y......{.J...F.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55068)
Category:	downloaded
Size (bytes):	55121
Entropy (8bit):	5.484379353481417
Encrypted:	false
SSDEEP:	1536:dRbEY2zJoG8bXShh7pxOp/8eCNgAXCVTZFm7YEIpWH:DCzP8jShh7pwp/8LUm7zIpg
MD5:	4632024B2FC84AF602164A9BBAB6F0E0
SHA1:	A4DCC96518AB1AD29F5273F26F24F52C10EF15FA
SHA-256:	0A3375D7FD084A72EA22ABAC8828878948C8E0BFFFF76FFADFECF9F028908626
SHA-512:	508F578A3047BBD0171D3EA0B70BBAFF57DD489F8F7C62D48F7B4B5097C8E0B8EE24B9CEAFD553F9F5B5AE94B23B86859100F419D9B663D4B7F98CAF65E7EB31
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_uxa_pagelet-vflRjICSy.js
Preview:	define(["require","exports","./c_init_data_runtime","./e_privacy_consent_static_ccpa_iframe","./c_src_sink_index","./c_viewer","./e_core_exception","./c_core_uri","./c_pap-client_analytics_client","react","./c_api_v2_noauth_client","./c_user_centric_perf_metrics_component_visually_complete_ajax","./c_core_attribution_header","./c_csrf","./c_browser_browser_detection","./c_core_notify","react-dom","./e_edison","./c_init_data_edison","./c_core_i18n","metaserver/static/js/langpack","./c_core_xhr","metaserver/static/js/modules/constants/viewer"],(function(e,t,n,a,i,o,r,s,l,c,m,u,_,d,E,g,h,p,f,T,N,A,S){"use strict";class I extends n.Message{constructor(e){super(),n.proto3.util.initPartial(e,this)}static fromBinary(e,t){return(new I).fromBinary(e,t)}static fromJson(e,t){return(new I).fromJson(e,t)}static fromJsonString(e,t){return(new I).fromJsonString(e,t)}static equals(e,t){return n.proto3.util.equals(I,e,t)}}var O,v,R,C,y;I.runtime=n.proto3,I.typeName="hql_events.TaxonomyAction",I.fields=

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	395
Entropy (8bit):	4.912947748039042
Encrypted:	false
SSDEEP:	6:tI9mc4slzYbQMisKMiQwNcuaRtXIt3Vfykz0zdpmSSEjqx/BC:t4WbuxMihNrw4jyO0zvuEj+/M
MD5:	07E0B46EF0911C94EEEF6650DB31FC58
SHA1:	2719799EED05910D7158915DEFE83C58C16A7E92
SHA-256:	50BDDA75BACC6FC145E6E73943B4F690FA1CA9F5C94653875B3D0F2B2A420404
SHA-512:	984A1434F1E36B138AA9379F09DA68B3D05398C291A91898AA578955EB70C783BC01184F7C0FCE70AE24F79289AAB816B09EA32602F030D572ABD54CB2A09C05
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="56" height="56" viewBox="0 0 56 56">. <g fill="none" fill-rule="evenodd">. <circle cx="28" cy="28" r="28" fill="#0061fe"/>. <path fill="#FFF" d="M24.6 17.2l13.333 10c.442.331.532.958.2 1.4-.057.076-.124.143-.2.2L24.6 38.8c-.442.331-1.069.242-1.4-.2-.13-.173-.2-.384-.2-.6V18c0-.552.448-1 1-1 .216 0 .427.07.6.2z"/>. </g>.</svg>.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65372)
Category:	downloaded
Size (bytes):	288998
Entropy (8bit):	5.411482367413438
Encrypted:	false
SSDEEP:	3072:OQkhJiPpxGk8E7Z1Xvl2aH0Ts81RxN3NpnQ2oY8/GlP3vfl321f6EN3NpnQ2oY8z:OQwiRAsZ1HO1R2Gz38fcGW59
MD5:	3A929448C73E4585174E95887BE98F44
SHA1:	58AA85D30946CD11F2FE1E275C83257A8C992967
SHA-256:	1D501D9AA0CDE8DA5FEF1F4B4C05B6ACF38A88DEEC42FE24140C055AE01A13F4
SHA-512:	7E7BFFEA3BC2A7CF01883D16A6F918AF818BA2D19EF3332801301875E00B30A04EDA6F79A2EE867A98650E2AA523FB3F046CD8CD305C9B89ADAB355CCB764982
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflOpKUSM.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; /! For license information please see privacy_consent.bundle.js.LICENSE.txt /.define((()=>(()=>{var e={623:(e,t,n)=>{var r;(t=n(7451)(!1)).push([e.id,'._consent-iframe_1sqqe_1{background-color:transparent;border:none;bottom:0;left:0;overflow:hidden;position:fixed;z-index:999999}._consent-iframe_1sqqe_1[width="0"][height="0"]:not(._dialog-open_1sqqe_12){left:-1px}._consent-iframe_1sqqe_1._banner-visible_1sqqe_16,._consent-iframe_1sqqe_1._ccpa-banner-visible_1sqqe_20{width:100%}._consent-iframe_1sqqe_1._no-banner_1sqqe_24._banner-visible_1sqqe_16:not(._dialog-open_1sqqe_12){display:none}._consent-iframe_1sqqe_1._dialog-open_1sqqe_12{height:100%;width:100%}._consent-iframe_1sqqe_1._dialog-open_1sqqe_12._button-enabled_1sqqe_34{bottom:0}._consent-iframe_1sqqe_1._floating-button-open_1sqqe_38{height:60px;width:240px}._consent-iframe_1sqqe_1._floating-button-closed_1sqqe_43{height:60px;width:30px}._consent-

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9708
Entropy (8bit):	3.8793713050160132
Encrypted:	false
SSDEEP:	192:LBrxhQc9Lw8Z2YvJQTkfQnSEMk5yJ18AOmY7VW+6v+T:LBl6c9Mk2UuEQnS58AcVW+PT
MD5:	505204A28409603A9261BD06720FAC85
SHA1:	C97D11E5E9C6C6EF3A88AC9112679BC42A8D18DB
SHA-256:	BF418B83AA5AC1B67C9532B30EBAADBD0D01FE2823523924C8A63FAC04B9D136
SHA-512:	24EB0658B0B6E35C09D458B0C8AF002E7361A91A6090E4C1838AAE2B1FACDE238F75BAB00C4F32946EF26F7AF44DF1AD8435C00A37C12C34C710D8F34140E641
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/buzzfeed.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="150" height="27" viewBox="0 0 150 27"><path fill="#DB382C" fill-rule="evenodd" d="M141.575509,3494.51559 C143.206988,3494.51559 144.755401,3494.51815 146.304173,3494.51303 C146.602277,3494.51194 146.907213,3494.51449 147.197046,3494.45528 C148.290572,3494.23196 149.114043,3493.66213 149.40064,3492.50347 C149.857324,3490.65619 148.699071,3489.06039 146.818753,3488.96572 C145.94422,3488.92186 145.06645,3488.95366 144.190119,3488.95256 C143.340398,3488.95146 142.490317,3488.95256 141.614345,3488.95256 C141.596725,3489.14372 141.576947,3489.26068 141.576947,3489.37728 C141.57479,3491.05533 141.575509,3492.73337 141.575509,3494.51559 Z M141.613986,3505.45488 C141.686264,3505.4801 141.758542,3505.52725 141.830821,3505.52761 C143.580607,3505.53054 145.333629,3505.59341 147.079459,3505.50934 C148.88606,3505.42198 149.960528,3504.29366 150.008354,3502.63023 C150.05654,3500.95913 149.064059,3499.75405 147.29485

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	4.184715362998154
Encrypted:	false
SSDEEP:	48:c3iGTG0Afdtz7vIveapoPAHDMpP+xirTB:RPb7vIpGbuirt
MD5:	C01EF893A21C01C7ED1066D488D62E9B
SHA1:	49D4E36F91E0C0C9FC8EDA2FDF12B618BD23201C
SHA-256:	75B91F4D3E5304674E6380DDF976320A6C987FC213531D0865DFA728EBA8A911
SHA-512:	F2D4D59077E4852CEA2CD41DAEB931859D56CBB7ACC7004E7A62467B1DBC0BC1348D6AA6E5B00C6AADFAF731F2DDB3589998EF4783AB1926248B343F397A13D7
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/01/icon-instagram.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M14.001 1.167c-3.485 0-3.923.015-5.291.077-1.367.063-2.3.28-3.115.596A6.284 6.284 0 0 0 3.32 3.32a6.3 6.3 0 0 0-1.48 2.273c-.319.817-.536 1.75-.597 3.115-.061 1.369-.077 1.807-.077 5.292s.015 3.921.077 5.29c.063 1.366.28 2.299.596 3.115.328.844.767 1.56 1.48 2.273a6.284 6.284 0 0 0 2.273 1.482c.817.317 1.75.533 3.115.596 1.37.062 1.807.077 5.292.077s3.921-.015 5.29-.077c1.366-.063 2.3-.28 3.117-.596a6.279 6.279 0 0 0 2.271-1.482 6.3 6.3 0 0 0 1.482-2.273c.315-.816.532-1.749.596-3.114.061-1.37.077-1.806.077-5.291 0-3.485-.016-3.923-.077-5.292-.064-1.366-.28-2.298-.596-3.114a6.299 6.299 0 0 0-1.482-2.274 6.272 6.272 0 0 0-2.272-1.48c-.818-.317-1.751-.533-3.118-.596-1.369-.062-1.804-.077-5.29-.077H14zM12.85 3.479H14c3.427 0 3.833.013 5.186.074 1.251.057 1.93.266 2.383.442.599.233 1.026.51 1.475.96.449.45.727.877.96 1.476.176.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	1.6001495726289154
Encrypted:	false
SSDEEP:	12:XFeeeQL5555555555dWr555555555555b5555r555555b555Lr555553r555Lh5k:X2uD
MD5:	F2A495D85735B9A0AC65DEB19C129985
SHA1:	F2E22853E5DA3E1017D5E1E319EEEFE4F622E8C8
SHA-256:	8BB1D0FA43A17436D59DD546F6F74C76DC44735DEF7522C22D8031166DB8911D
SHA-512:	6CA6A89DE3FA98CA1EFCF0B19B8A80420E023F38ED00F4496DC0F821CEA23D24FB0992CEE58C6D089F093FDEFCA42B60BB3A0A0B16C97B9862D75B269AE8463B
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ........................................................................................................................................................................@...@...p.......................@...@...................`...................................................`.......0...........................................................0...P...........................................................`................................PP...................................................................... .............................................................. ......................................................@@.................................P...........................................................`...0...........................................................0.......`...................................................`...................@...@...........................@...@......................................................

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 275x275, components 3
Category:	dropped
Size (bytes):	47461
Entropy (8bit):	7.652234202864379
Encrypted:	false
SSDEEP:	768:dKWqASfDF9pqaW4SkwiPJ9oPHVgkEFItLKDLdiLRj95aXv6QztF3CWpNstD:VbSZeLdkN+qQtLKDLojHUHtFHjs5
MD5:	169D29C8E69A3EC9FE44CD03818610C0
SHA1:	2EBE667C858236187888AB99A6CF9C60885A490F
SHA-256:	4E5DF2CACE890BCB0238F0C209CC629CB41C62479923A154FB51D264B36D88DA
SHA-512:	9BF8C5B8AD52935D204338B414312EC10F659FD02F302A1B6F8EC16FC5F166F40E35D1E3AAAB26F86A1C23E767688B9453F6D2AF749D9C0988F4D19CD05B13D4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221...........................................0100.......................................2020:12:04 14:22:09.ASCII...Screenshot..v0ICC_PROFILE.....v appl....scnrRGB XYZ ............acspAPPL....APPL...........................-appl...A.f=....[.................................desc.......{cprt...`...#wtpt........A2B2......tLchad..u....,aapy..v.....A2B0......tLA2B1......tLdesc.......!Apple Wide Color Sharing Profile................................................................................text....Copyright Apple Inc., 2016..XYZ ...............:mAB ........... ...P..........t.curv............curv............curv..............@...&...........X....r..........cz............para..........ff......V........para..........ff......V........para..........ff......V.............................................e....-.....=I....L.....\-....k.....{.................

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=114595&time=1713459588810&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F
Preview:	{}

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	2132
Entropy (8bit):	7.756757096531965
Encrypted:	false
SSDEEP:	48:iCDBU2MkssSKvog2Oa1zxK8jvodHdl/fFUZYNeLFsym0tCY8+OB9dkZolrD:iCaKvog2pxUewd7/fFUhsQfK2uf
MD5:	8185F71AFC4C2B2C149CCE874B0CF7EA
SHA1:	AEB2C5C33CF2C869C0C84BE558A2C787294BCED0
SHA-256:	CC7B70AD3F17CC71446FBE15227766EF549A250D13BA5F49D5E025F01A05EB97
SHA-512:	461B86F510ACEA0CFC7D80111328710D574D61508E1CF4185935BD2C6F17270ACDD1EDFE5A2CCBA25747C486CC1F54A734CA3D954013D09A707566018911CD32
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D.............................................<...........................!1.."...6Aar.2QUu...345BEb......................................@........................!..1Aq.Qa..."25Rr........3BST.....#b..............?..:"Q...D.%.(.DJ"Q..../[.........t..DY^$.R.. ...%l27g.CT....[..7...^...7+..m....Z.)..a....Q...}...W..X..w.JI...H....."3{.)...(..a...r.....i...G..Q.F.V>. ..>..K...mt.?g....<.F/.%`.:4.,p..Oh.Nf2....{UP.".\.:c...........&.....$.T..T.UE..........`.q...5.9..p.-..=...H....'....j....j...k.;Y.4....^...{8d..cTE.ff.".....T.R..(.!..9...".o;-..# K"..F.".I%..1TBG.n.#..g.l2}[F...Gs..$7,.$.X,k...+....O.o.z....fi$fv...wb.....Y..$.I&...k.......@.,........t./y$...W.U/5.[.z.a.j?1..F......j}......T..-.?.o.Z..........%.(..^H.r.J........u[.9.5J.~..H.wg...>_oU.%,....O..\&.M...q]NW'..$q.#.* p3.-...+.]8.T

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2432)
Category:	downloaded
Size (bytes):	3670
Entropy (8bit):	5.218491372909693
Encrypted:	false
SSDEEP:	96:uMnVcrUIatZjGGmg+ZfYaP5X1+gss8PkLyVhLllJKnGrbhI:uaVcrUIatZ6Gmg+BYaTV7q77I
MD5:	FCC1267301B53851DD157A1649A1246C
SHA1:	56EA33D397E2117285C40D796D6EBD02473945E3
SHA-256:	B5B3D69D9B52FDBAACC4C4E4EAF8A2F2EACFD5423242F9E611DCEF67E675B5CD
SHA-512:	1270BC29CB3F9C248EEB3AAD0FB504DDE0DDE3EE379A096FBA2CDB26B233F13A00D9D819FD207DC45E67FA302AD25C2A9814AE21B9358C59A71F0183D763A021
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.52.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.52 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map_func=function(arr,obj,item){var i=arr.shift();obj[i]=obj[i]\|\|{};if(arr.length>0){u.map_func(arr,obj[i],item);}else{obj[i]=item;}};u.parametersParser=function(paramObject){var newObj={contents:[]};if(paramObject){Object.keys(paramObject).forEach(function(key){if(Array.isArray(paramObject[key])){paramObject[key].forEach(function(param,index){if(newObj.contents.length<paramObject[key].length){newObj.contents[index]={};}.newObj.contents[index][key]=param;});}else{newObj[key]=paramObject[key];}});}.return newObj;};u.callback=function(){twq('config',u.data.pixelId);var event_id;u.data.events.forEach(function(event){event_id='tw-'+u.data.pixelId+'-'+event;twq('event',event_id,u.parametersParser(u.data[event]));});};u.map={};u.extend=[];u.sen

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 350, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11890
Entropy (8bit):	7.877653571946985
Encrypted:	false
SSDEEP:	192:3j35eWalybix4BcZmbj3b2rDBUDKF2lyr0kfyvVug1bPH4K/jKQPXTD8StBAur:3AzgAmbjSpU2oy4aytnxfnKw
MD5:	2C5E16F5F8CD1C471F35A076C789E53A
SHA1:	1E9FC9D7E8ABF2CF4435D1407522E00D14339150
SHA-256:	E5BD6BBC8152A259635F53E15279C1C3971DA201832B09FA5C7138DCF8167A3B
SHA-512:	B5C944FA8F25919543DC9694D539CD49A55217B9F97A9D736D2C589AEF4B1343D29C22750F39C84AA82F55BE2ABB105AD0A400C5F0F4C4FA85CD19535573B3D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^.....sQ......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0eed883c-692a-40f8-8bd7-8fa30165498f" xmpMM:DocumentID="xmp.did:758F3BFA508011ECA606B03DBE6F5128" xmpMM:InstanceID="xmp.iid:758F3BF9508011ECA606B03DBE6F5128" xmp:CreatorTool="Adobe Photoshop 22.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:02811fd3-5ab3-4790-babf-f7e54514e4d3" stRef:documentID="adobe:docid:photoshop:cf31d770-8110-7e47-9e2b-5a95619a148c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.@P...*.IDATx....\|...

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1789
Entropy (8bit):	4.184715362998154
Encrypted:	false
SSDEEP:	48:c3iGTG0Afdtz7vIveapoPAHDMpP+xirTB:RPb7vIpGbuirt
MD5:	C01EF893A21C01C7ED1066D488D62E9B
SHA1:	49D4E36F91E0C0C9FC8EDA2FDF12B618BD23201C
SHA-256:	75B91F4D3E5304674E6380DDF976320A6C987FC213531D0865DFA728EBA8A911
SHA-512:	F2D4D59077E4852CEA2CD41DAEB931859D56CBB7ACC7004E7A62467B1DBC0BC1348D6AA6E5B00C6AADFAF731F2DDB3589998EF4783AB1926248B343F397A13D7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M14.001 1.167c-3.485 0-3.923.015-5.291.077-1.367.063-2.3.28-3.115.596A6.284 6.284 0 0 0 3.32 3.32a6.3 6.3 0 0 0-1.48 2.273c-.319.817-.536 1.75-.597 3.115-.061 1.369-.077 1.807-.077 5.292s.015 3.921.077 5.29c.063 1.366.28 2.299.596 3.115.328.844.767 1.56 1.48 2.273a6.284 6.284 0 0 0 2.273 1.482c.817.317 1.75.533 3.115.596 1.37.062 1.807.077 5.292.077s3.921-.015 5.29-.077c1.366-.063 2.3-.28 3.117-.596a6.279 6.279 0 0 0 2.271-1.482 6.3 6.3 0 0 0 1.482-2.273c.315-.816.532-1.749.596-3.114.061-1.37.077-1.806.077-5.291 0-3.485-.016-3.923-.077-5.292-.064-1.366-.28-2.298-.596-3.114a6.299 6.299 0 0 0-1.482-2.274 6.272 6.272 0 0 0-2.272-1.48c-.818-.317-1.751-.533-3.118-.596-1.369-.062-1.804-.077-5.29-.077H14zM12.85 3.479H14c3.427 0 3.833.013 5.186.074 1.251.057 1.93.266 2.383.442.599.233 1.026.51 1.475.96.449.45.727.877.96 1.476.176.

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5496
Entropy (8bit):	7.860749778433087
Encrypted:	false
SSDEEP:	96:nW96LPgom7KuhkeCpw/IwCkBTfGOrMy1/z9rUc82LItrILIoxtHElzENdwAD/3:e7faIJgOoy1hriGzXk0D/
MD5:	018DA58D8F330C5ACA37746E8426F18B
SHA1:	A72BBD4D0F7EF2C9CAAFC591A11E66799DDFC456
SHA-256:	874078B9EBB5BE30E7F5CBA0643B5B5C0617DFDBFC9327AE4A84A5B0328ECBD6
SHA-512:	52409EF83A2793EE6944559FD083A0251E7D7195DC0CE1E0DBA5BF2C3B648B998500E2D0843734C7731403739CCC7B7557609E9B67A2A6848959CF33AF4D7C24
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-gmail@2x.png
Preview:	RIFFp...WEBPVP8X.........../..ALPHt......m.._z.T.9c....m.K.,........Nw....T.c....oDL...._......_......_......_......_......_......_......_.........s...x.m..r.M..ou.~.Z..{.....".....u.}..O...[o..pn..6..6...i..{..I3.I..@...Cq>I..........+..}.X.)....h#~..pq..2.....\|s).....x.Q...G#.<...Y.A...u.a..l..sy.,.]...s.]QN'..>f....B....;=.g..Z.E.+..9..-._...e..l...^S..<.B..#Q.a(9"...... ..'...p`.`.....\|`.....:...`....K.8.u>P..~g...?.o..:..<X....K...`....&.....<P~0......@.o....s.......<..+..,y..`..;.l....&.1y0.o.3.X.@....&...@.o....b..;.L~`.`..L.,y..+.<0..C.5.A... ..L)....GK.W.t.8....yg1.Q..6.....G.E...3.>\|.?JL%BY.8.u.h....."].c..I.6j.....%v".........;8.w...,..W..9L1.2.R6..1.z....9.sI...C[..?Xg....y.a.._'..........i.&....JL.f.....,C.=.l..%.!.%.b.SO.j./..._\|.A..'.U.....U?.U.~....W..^......O.....`0.....\...a...o9eM.y.._......_......_......_......_......_......_......_.......:&VP8 ....P.... .0.>Q(.F.... .xPp..gn.wN.....v..2.....W........S.)...%.......

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7422
Entropy (8bit):	3.9236278200513075
Encrypted:	false
SSDEEP:	96:/iIbtZR25Ophn56dZBdvZFf6AV92eR8mQwR2UhsGxFXv7eSsOLr3E5kYyH4BPhEQ:/iIbdZN56xtLxlsGxF/7eeEfAnqsO1
MD5:	88E63344B78E5AEE6A3C789095184A50
SHA1:	A634F2661430E76D1F1DC322372B29E33B0B6740
SHA-256:	E4024650696EDFE916BB7B50C009D0A952CB082080B4F185899C8594EA7BFE96
SHA-512:	34B9A5D67AE1359AFF9D04110C5150BDEE6BB6DC5F1AD564F1640D57FA6DB20A56C85CE67F3580732E93257D7E26AA15442734FFE949CF6FFA2EF0D76356A779
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/custlogos-onemedical.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="150" height="19" viewBox="0 0 150 19"><path fill="#005450" d="M554.565651,3498.14826 C553.653242,3498.14826 552.913415,3498.90487 552.913415,3499.83799 C552.913415,3500.77138 553.653242,3501.52772 554.565651,3501.52772 C555.478327,3501.52772 556.217886,3500.77138 556.217886,3499.83799 C556.217886,3498.90487 555.478327,3498.14826 554.565651,3498.14826 Z M549.608943,3493.07933 C548.696534,3493.07933 547.956707,3493.83567 547.956707,3494.76879 C547.956707,3495.70218 548.696534,3496.45852 549.608943,3496.45852 C550.52162,3496.45852 551.261179,3495.70218 551.261179,3494.76879 C551.261179,3493.83567 550.52162,3493.07933 549.608943,3493.07933 Z M549.608943,3503.21746 C548.696534,3503.21746 547.956707,3503.9738 547.956707,3504.90719 C547.956707,3505.84031 548.696534,3506.59693 549.608943,3506.59693 C550.52162,3506.59693 551.261179,3505.84031 551.261179,3504.90719 C551.261179,3503.9738 550.52162,3503.21746 549

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	74120
Entropy (8bit):	3.789991460571487
Encrypted:	false
SSDEEP:	1536:pKuP3lU9otMdueG8PNnRwK7bqTkQwiHGU35:Z0q
MD5:	C2854FB81CA5A0605C767060313F2056
SHA1:	B2E057F2CFE8989FFAA4E3D558ED7ECA88EAB47D
SHA-256:	78E9C763CA37AE021D8CC02D4FD29C4793F206A9B754492508FC68809EE8E715
SHA-512:	59FAB5889EC6A6199443C2475C5F73FD408F704358290D585A3A9B445F60DCD08781993DD188E22808A4FB96A3720DEFBE66617C1CBCE3555BC38740E3C0D16E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="500" height="500" viewBox="0 0 500 500" fill="none"><path fill-rule="evenodd" clip-rule="evenodd" d="M286.342 62.8052C286.26 62.8876 252.466 63.0015 211.248 63.062L136.303 63.1686L135.528 64.7045C134.864 66.0223 134.76 70.1623 134.796 93.8905C134.821 109.099 134.988 133.639 135.17 148.423C135.351 163.207 135.521 179.065 135.545 183.66C135.589 191.516 135.656 192.083 136.701 193.132C138.302 194.746 139.76 195.407 143.21 196.085C145.189 196.475 147.212 196.533 148.956 196.25C151.722 195.804 174.174 195.824 184.675 196.281C187.914 196.422 199.494 196.691 210.407 196.875C227.594 197.166 230.249 197.112 230.249 196.466C230.249 195.458 233.074 192.813 234.36 192.616C234.932 192.529 236.255 192.066 237.304 191.587C240.315 190.211 245.853 189.574 250.133 190.114C253.009 190.475 253.983 190.436 254.285 189.944C254.993 188.798 263.733 191.916 267.885 194.799C269.855 196.168 269.554 196.909 269.881 197.338C270.3

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11594
Entropy (8bit):	7.983801022577634
Encrypted:	false
SSDEEP:	192:DEWbPpmy3lWYlL1o2yOaJIWRtKW7rro6k7MbNiWW+gXnDf2Mrgc678qpHk:HjlWgLoJtRVPo6k7MbNsJDVrgcAk
MD5:	B338814B6B07FCBB4E47BE2469AAAB68
SHA1:	7C2E6C13FA6802970D3513B0167B4914B0261757
SHA-256:	96133BDD24BE004A0E1C50E14E3C5B8D4940F1DE17F06C7E794A1F6F0B16DA0E
SHA-512:	1256046E4A7CF31C34A2DD6910103A066D5EF4D9FE400C102250950AF8ABC6B683A431B4170850E0A33A38E8A830EC2B04404490DA0BA0A6F6408170BACC3F8A
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/Advanced-sharing-video-thumbnail-1.png
Preview:	RIFFB-..WEBPVP8 6-.......X...>Q$.F#..!#.J8p..gn.....L......t.?...?........ALON?..z...........K........k.@.....E......._.........~.........?......._.u.<............=....\Z......?.{S...?..............{b./.?...{.z..?...<Z.....G.......@...?.o........../...^......e..._._......y...I.....q..\|..T.?....Z%h...1..........P..]..h..g..H.8.mmF.....[J..x@..Q.....kiR4.8.0Pf.H%UO..I..eH.u.....hS....NC...\|.R..7...sE....,.a...5.%s..8.t.N..r...c~..A..=.q6..#(;_..h.B...f[..kw....M..D.F..R.W"....P~...$..+..$.{...........e.6.2....Lz.C5c........8@5...$U#m.V.k..t..4...a%...A.".....=..w.f.jD..7D..}.[..H.8.T*.X..z.%G.(.+. q...T.....T<.:.'.......;.J..;.R~ox...A........%..e,.'.D&]aa.X.S.........1wS6`]{.]......c...6.Mx....&V..g....l....g.....#@.\[.....:.b.7...b..d..z..u.U....u5.,.f....!.U.<.-..I..GL.86..$..(.D-..8s....C..J..q.Z..B............-.......oeS.Is.:....=.b..tEE.V.4.........."}f./..<.........N.~-..../..fs6RN..U..j[Q..bOG3..n.....@......nFFn.nk2%L.:....4.{..GI..{..

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	112229
Entropy (8bit):	5.250452098284999
Encrypted:	false
SSDEEP:	768:MTOWnwBCBLo1sY1WQ7tyQPMLRq43esRdLyWQL9XOYs1Vwo0UAd/KfD2zdGfM8TSn:SwBIo1seLPS7QdB1KfD2zAiXPec
MD5:	3AAF3196DDD813F9C2068FBD217377CC
SHA1:	A505865885A97259CDD3832CA01385BADEB44E01
SHA-256:	0C33182A384214494E33F116F6EC1191669D50574FE85B2C392C1951242D5369
SHA-512:	2094E1952920E29C210A3F1503529479C1DDBEE84C8AC99CBE41C045AA32DCC58F14614BF4231577B3512E773F20CAC0AFC07A434B7F2EBE4EAAB8342A1ADB60
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics.js/v1/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/analytics.min.js
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	91589
Entropy (8bit):	7.974180106881455
Encrypted:	false
SSDEEP:	1536:0GLGI7KydXIFbufKgmaFDBk7sFdIDFG/tktJF68uip7aQr4jA6xnsk4Em3pjnNC:0GxeydYFbkKgc76rerF68Fp7aQUjA6xx
MD5:	05CE5147ED4B9D4CA63DDAA1D679F894
SHA1:	D7D244174EB5507C1AF342E04D85AD0F6B13BE1A
SHA-256:	9D2E2E0665696A2E03AAEF67EB8D45E0FDE1D43A8EC9CF5F66EEE8E36238F9BA
SHA-512:	BAF372BF5DC234E049C5135F3308BDEC0360C655AA168D708346F7A643C6E00642729C29084D8860E7DC27F424A17216820E59CF43B101D0928C92CE8D0A4766
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...0.....~..G....pHYs...%...%.IR$... .IDATx..m...u...=..^1.A.......A..+....v...-...&.m.A.~.A..Aa....F..!.A~.h..mm.....9..A..%...:..(...W.{M.K3...S..g...f.={.........f.g}.g...]....p8.....p8....p8.....p8.O@.....p8...l.....p8......>.q8.....p8...' ....p8...c6....p8.....p....8.....p8.........p8....1.\|..p8.....p8f.O@.....p8...l.....p8......>.q8.....p8...' ....p8...c6....p8.....p....8.....p8.........p8....1.\|..p8.....p8f.O@.....p8...l.....p8......>.q8.....p8...' ....p8...c6....p8.....p....8.....p8.....t].X.ka....~"..-...m....qK_....%X.s..fs........f?..r..[...v..c....>.w..3...E..G`.~3....}.'J5..}.LN4...)6..<.....U.+..;+..e<S}.....e...O....k+..%..u).r....T....5.-.3_.9)c...5...cW...[../cm}?......9...e.B..qBV..'....ba@.,V.....Z\|S0e...g.j....Z..\......p8........m..A+.......P.X.(.M.. ...V.........0>&..A...2uu..NTn.Z+..v..5.OY.-..B..0..}.S.>C.k.W;...^....Q.~R.~N[=.'@....c{zc..m....Ho.}...F-a...G..5.....,...y.@v....C.....3......N.....'..=

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1136
Entropy (8bit):	4.940469927918978
Encrypted:	false
SSDEEP:	24:2d6oNjLyBOeFeaxM2nUZ2OOhXB/ostZPdimNz/H/CG:c6W/yZN7JB/ND/H/CG
MD5:	7613197A47A28A237817C62D0BF8CFEA
SHA1:	8DF76B94D375CD790F986AFEB4B060700B276662
SHA-256:	D6501EC5C42B6120099880B291F19F8001CB5F79E4B0C8B97197CDE24E95B93B
SHA-512:	540E813E6759EA016F5D0492B72564F3D4831F7C5CCD31723BF6E0D403499A662A08AF0C1CA9FC95A01EC3A758910E35B5654BD72C0200602E9E4AE5953035E9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="18px" viewBox="0 0 30 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Path</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="arrow" transform="translate(0.000000, 0.571412)" fill="#1E1919" fill-rule="nonzero">. <path d="M20.8279018,0.235396205 L20.3543973,0.708833705 C20.0406027,1.02262835 20.0406027,1.53142299 20.3543973,1.8452846 L25.9745759,7.43305246 L0.803571429,7.43305246 C0.359799107,7.43305246 0,7.79285156 0,8.23662388 L0,8.90626674 C0,9.35003906 0.359799107,9.70983817 0.803571429,9.70983817 L25.9745759,9.70983817 L20.3543973,15.297606 C20.0406027,15.6114007 20.0406027,16.1201953 20.3543973,16.4340569 L20.8279018,16.9074944 C21.1416964,17.2212891 21.6504911,17.2212891 21.9642857,16.9074944 L29.7646205,9.13963728 C30.0784152,8.82584263 30.0784152,8.31704799 29.7646205,8.00318638 L21.9642857

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	563723
Entropy (8bit):	5.683505293418189
Encrypted:	false
SSDEEP:	6144:x/BB2a5axgaLfQuLfQethykggjunRI2MqlL6ojtm03L3GGX9in9tYCiTKOnTK8Ls:kmaEGYLe6rUZ
MD5:	D252299CEF5B9176CF0435E72E0BAEEB
SHA1:	968A62D85C0D2E1322C27631422DFD196A427865
SHA-256:	EFB5DC6835AEB8A8E1615CA49DF1828CFAF708DC73651C5F1C651F2D2AB3907A
SHA-512:	F927BE7960C311EB4F765F6679573452A2A0A62C9A3C094E933F056DF823C1D64A93CC97D685302A7BF7FB02121026222BBF3039F99DD2959525ADD95DD95CCB
Malicious:	false
Reputation:	low
URL:	https://js.hsleadflows.net/leadflows.js
Preview:	!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=window[e];try{delete window[e];if(window[e])return window[e]=void 0}catch(e){}};window.leadflows.preserveGlobals=function(e,a){var n,i,l,o,s;for(n=0,l=e.length;n<l;n++){s=e[n];t(s,leadflows.preservedLeadinGlobals)}if(a)for(i=0,o=a.length;i<o;i++){s=a[i];t(s,leadflows.preservedOtherGlobals)}}}();leadflows.preserveGlobals(["hns","hns2","jade","I18n","Pikaday","reqwest"],["exports","define"]);window.leadflows=window.leadflows\|\|{};window.leadflows.version="lead-flows-js/static-1.1338/".replace(/\/(static(-\d+\.\d+)?)\//,"-$1");window.MutationObserver=window.MutationObserver\|\|function(e){"use strict";function a(e){this._watched=[];this._listener=e}function t(e){!function t(){var n=e.takeRecords();n.length&&e._listener(n,e);e._timeout=setTimeout(t

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23466
Entropy (8bit):	4.01177498072687
Encrypted:	false
SSDEEP:	384:hB9blHOzYij4tyQdBDmR0v1CXsj3Bz7lsUrGRdzo0oxp/QhN9OXiNH3Jt7mXz2Uo:79btrb7v1CXy3WKEdzuiXOQH3JNmhr8
MD5:	FBD89CF8E059168618C6BB9D3DAEA5FE
SHA1:	0B3505902DB5F386DEB4BCA6337A3A4762A6CF01
SHA-256:	019BFFEE16DD774BF8D3B2C33DFDB2B999B7353129C1AA2091FC0ECDF9646A77
SHA-512:	11E01891CB5C880983AD53591D0F1CF1ACDF2063AFA0E25A98EB64F41869C3940991FCDC71EA60CA14BE21F64CFD55FFB981B167561EAE01B77B902553F2633C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1645 1400" style="enable-background:new 0 0 1645 1400;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#B06330;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#6F4328;}...st2{fill-rule:evenodd;clip-rule:evenodd;fill:#14C8EB;}...st3{fill-rule:evenodd;clip-rule:evenodd;fill:#1E1919;}...st4{fill:#14C8EB;stroke:#231F20;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M922.2,581.7c-3.5,5.8-7.5,13.1-8.9,16.2c-1.4,3.1-3.6,6.7-4.8,8c-2,2.1-9.1,15.9-12.6,24.6...c-10.3,25.2-28.6,55.4-32.7,53.8c-1.2-0.5-2.2-0.1-2.2,0.8c0,3.1-10.3,7.8-19.1,8.8c-4.8,0.5-10.9,1.3-13.5,1.7...c-15.5,2.5-28.5,2.8-37.7,0.9c-8.4-1.7-11-3.2-16.4-8.8c-10.6-11.1-20.5-23.3-20.9-25.7c-0.4-2.9-16.1-20.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16909)
Category:	downloaded
Size (bytes):	16959
Entropy (8bit):	5.208525427500881
Encrypted:	false
SSDEEP:	384:YdVk7zan08HeCamIafhJc+HMoJ7AJOsJ/z304I31xJVhSE2+A:YdCnc3eCamIchJc+HMoJ7AJ1J/z304Ic
MD5:	313C3A6F8BD31B6BF355EF74CF3F819D
SHA1:	08A271D9551636E72D071433E8EBB0F2975D7A7E
SHA-256:	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
SHA-512:	CD297E57A34DAB753948E41CF1566200E9F577578CE35E2B2311A8F97FE67DF114A570F3D24ADCC0DA4F7C7ADC2BA4C4C44DF12F73EC2B2A1BDC89536512D17F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_uri-vflMTw6b4.js
Preview:	define(["exports"],(function(e){"use strict";const t={DEBUG:!1,IDLE_TIMEOUT:200,NETWORK_TIMEOUT:6e4};class i{static format(...e){return["[ttvc]",...e,"::",performance.now()]}static debug(...e){t.DEBUG&&console.debug(...this.format(...e))}static info(...e){t.DEBUG&&console.info(...this.format(...e))}static warn(...e){t.DEBUG&&console.warn(...this.format(...e))}}class s{constructor(){this.pendingRequests=0,this.subscribers=new Set,this.didNetworkTimeOut=!1,this.next=e=>{i.debug("AjaxIdleObservable.next()",e),this.subscribers.forEach((t=>t(e)))},this.startCleanupTimeout=()=>{if(0===t.NETWORK_TIMEOUT)return;this.abortCleanupTimeout();this.cleanupTimeout=window.setTimeout((()=>{i.warn("AjaxIdleObservable","::","Timed out waiting for requests to resolve.","Make sure that incrementAjaxCount() is always matched with decrementAjaxCount().","::","pendingRequests =",this.pendingRequests),this.didNetworkTimeOut=!0,this.pendingRequests=0,this.next("IDLE")}),t.NETWORK_TIMEOUT)},this.abortCleanupTime

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	580
Entropy (8bit):	4.804252944516369
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfy0UGei5iuOGXY1a0xa7OWoBvZwsV5UAGFtpt7ZY:2diO4NlfPGMy0UGsaoYb7w/ejpt7S
MD5:	FA605C234D37022FA5F7FE181DA548F7
SHA1:	629B384D562F45084F390996447294E94EC2574E
SHA-256:	57FC4672D5FA82F08312B849270C6898164F2CC7793A5F3FC0C8C1D453D2525C
SHA-512:	9F7595DDD56062894EF77AC8A62762C785E3CF75D3EEC3AFAE4659952BBFEE3F588C1DC9959DD44A1BC3F2DB99C36199565FA7307C280C7C0DB326FB22D910F6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="nonzero" d="M7.63 9.543V24.5h-5V9.543h5zm.33-4.626c0 1.436-1.086 2.585-2.83 2.585h-.032c-1.68 0-2.765-1.15-2.765-2.585 0-1.467 1.119-2.584 2.83-2.584 1.71 0 2.764 1.117 2.797 2.584zm17.707 11.007V24.5h-5.002v-8.002c0-2.01-.723-3.381-2.534-3.381-1.381 0-2.204.924-2.566 1.817-.132.32-.165.766-.165 1.213V24.5H10.4s.066-13.553 0-14.956H15.4v2.118c.664-1.018 1.853-2.47 4.508-2.47 3.291 0 5.759 2.138 5.759 6.732z"></path></svg>

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	2132
Entropy (8bit):	7.756757096531965
Encrypted:	false
SSDEEP:	48:iCDBU2MkssSKvog2Oa1zxK8jvodHdl/fFUZYNeLFsym0tCY8+OB9dkZolrD:iCaKvog2pxUewd7/fFUhsQfK2uf
MD5:	8185F71AFC4C2B2C149CCE874B0CF7EA
SHA1:	AEB2C5C33CF2C869C0C84BE558A2C787294BCED0
SHA-256:	CC7B70AD3F17CC71446FBE15227766EF549A250D13BA5F49D5E025F01A05EB97
SHA-512:	461B86F510ACEA0CFC7D80111328710D574D61508E1CF4185935BD2C6F17270ACDD1EDFE5A2CCBA25747C486CC1F54A734CA3D954013D09A707566018911CD32
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/SP5bjmT1BELkpOWyl51KAcOQZym0oxIKK-_0gBTcM0L23chpkrsV8FbaqVwaVl_f5zZw4piZTg=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D.............................................<...........................!1.."...6Aar.2QUu...345BEb......................................@........................!..1Aq.Qa..."25Rr........3BST.....#b..............?..:"Q...D.%.(.DJ"Q..../[.........t..DY^$.R.. ...%l27g.CT....[..7...^...7+..m....Z.)..a....Q...}...W..X..w.JI...H....."3{.)...(..a...r.....i...G..Q.F.V>. ..>..K...mt.?g....<.F/.%`.:4.,p..Oh.Nf2....{UP.".\.:c...........&.....$.T..T.UE..........`.q...5.9..p.-..=...H....'....j....j...k.;Y.4....^...{8d..cTE.ff.".....T.R..(.!..9...".o;-..# K"..F.".I%..1TBG.n.#..g.l2}[F...Gs..$7,.$.X,k...+....O.o.z....fi$fv...wb.....Y..$.I&...k.......@.,........t./y$...W.U/5.[.z.a.j?1..F......j}......T..-.?.o.Z..........%.(..^H.r.J........u[.9.5J.~..H.wg...>_oU.%,....O..\&.M...q]NW'..$q.#.* p3.-...+.]8.T

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2158)
Category:	downloaded
Size (bytes):	2626
Entropy (8bit):	5.202817310524062
Encrypted:	false
SSDEEP:	48:nMnk22WEAFEGLEHJSnVjsR8fyxUJU3Y7wDvtw2pBMVRHaz2WNX6IMj5wB/tOQ5oZ:nMnk22WEAFEGLEHysR8f3JU3Y7wrq2p8
MD5:	41FF913C299C30E59F2EBBF6E367BE77
SHA1:	8C55E0BC9B234C5A7EEA30175A9EFF40646456D7
SHA-256:	62BC03248D836E0345839EB74D212F31FA39B8F441305351B602660054BAB2F7
SHA-512:	0B9C5C058B66D82928D0BD26C8E6314FA3330FC1A1818273C232754F00CCACB80ABE88BC248CE264156BAB7592D63494F4FF51B516765F333DC411B500B30784
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.51.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.51 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..!function(){var analytics=window.analytics=window.analytics\|\|[];if(!analytics.initialize)if(analytics.invoked)window.console&&console.error&&console.error("Segment snippet included twice.");else{analytics.invoked=!0;analytics.methods=["trackSubmit","trackClick","trackLink","trackForm","pageview","identify","reset","group","track","ready","alias","debug","page","once","off","on","addSourceMiddleware","addIntegrationMiddleware","setAnonymousId","addDestinationMiddleware"];analytics.factory=function(e){return function(){var t=Array.prototype.slice.call(arguments);t.unshift(e);analytics.push(t);return analytics}};for(var e=0;e<analytics.methods.length;e++){var t=analytics.methods[e];analytics[t]=analytics.factory(t)}analytics.load=function(e,t){var n=document.createElement("script");n.type="text/javascript";n.async=!0;n.src="https://cdn.segment.com/analytics.js/v1/"+e+"/analytics.min.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	20608
Entropy (8bit):	7.980386462401763
Encrypted:	false
SSDEEP:	384:uO51y9UNI7OXGvlMT8/+LeZzs7JXxnkVCRtci1QeHtR1DFo/gpL6aI3n:951WUm7OXGvlY8m2sdhuCQPKtR1ROULS
MD5:	04ECF942D47815613A9D50F61671BC16
SHA1:	38CEB7B984701B05312BC6AD80CCBDC1C5052A4B
SHA-256:	EE0C1C72C276B04387269AD0373D82B584D72867C7D43C10AF706FD65DF4C899
SHA-512:	94DCD163E9B2420FDDF9A38F07B8907BF4694E45801072096C2ED55680668D1702DB3D0A635D2300ED7327A844A2CB3F4B47428949CA697CB74104ABD4E546E0
Malicious:	false
Reputation:	low
Preview:	RIFFxP..WEBPVP8 lP..0........>m6.I$#%(.QX....gn.u>.zQ.m-.G.}._...q......a.....w.....\|_..O.\|.\|.._...'>j.....G.../....@..................;.../..w.._.~............_.G....B...Wo.?.............<.M......R>6...?.7..X..._...o.??.....?........?._........=.?&.a.+........@...o.....S.<......w..~/.Z.....o..........).u..._..u..._..u..._..u..._.T..fZ]..>.Z]....._eS..-8.....-..i..-..i..-..i..-..m.a...6......#....W.....^kx.\|4....\|4....\|4....\|4....^.+V'.sIx.."5;.sh.)V..D......G..1.L!..S_+.[}.h..g.KK..g.KK..g.KK..g.K...u}....sh.wO.Y6.).m........\|4....\|4....\|4....\|4.............sh.v..MD..7t...n...:...-..i..-..i..-..i.......Q.Lk.S.F.W....Q.P.....W..'.k.$T...................t\0.":.......1.I...#....SO..G.m.kt.4Z.e..`P.w..t4...t4...t4...Y....p..eN...H.!q.1"{.u#.(.,...?..sC.f.4.....D..p.j...3...3...3...3./...)...5..g...]....+\|_@....W.H.......q\|..._C$..........wl.................D.^.&..J..=-9~G....X,'.........?.{o..%...".j..i.Z.E.....Vp..Q5.4....\|4....\|4....\|4.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 493458
Category:	downloaded
Size (bytes):	150798
Entropy (8bit):	7.9980164953692325
Encrypted:	true
SSDEEP:	3072:Qc8kNEeU0jv+LpmseX6E+c4muSjXr9AHJBUmNYSc9z0IvVf:QcHzjv+NmseX+c4L66HJBbNT4Df
MD5:	5C13346C290DC4AD1AC8AA2744045CBE
SHA1:	C298EFF5022F4498D4DF102181963D9C43DEBA00
SHA-256:	87318F8A885F7FBDF8963D554D80FDAA97617E09321C685EF3E0C7DF295AB063
SHA-512:	FCB9693C0FF83CB41F31595B661BA67E8DAC73CF628609E905517090AF78ADC9B13054A82F819FABF0AB770AC67FC9B4CA213563551455F91FF8E35DFE046E95
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.7a9ca9be.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...*=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,......;....i......W...>.z.....0.y..,H.wl...7.g..&.2........v..?...e:3...v.=......O....Y.Gc.}.`......l.5}6.".1..,....6.C....e.........n...l%v.F...~.....L ....oY...S...f...O......e..A......:I..v....^.5.............N..@...zd;;as.L..e....d&.\|.....Ht.e...+.....q;...........x.5.q.......9{..0(.\|t.$,[&.V..Y....m.]^Q...&...@...X...0..y7<..s. .D$oe...e.=...:..hw6.............=.1.xX.n...".2si5...=h/...n&.K...x.......b2.Q....e....Z..45.<.6.k..@.{..........m.f&....q....8.2.p4Y..x...8g..)_jO\..u..+......04.4{.Y..2o..c........./..{.N.Y..*G..{Prb...Ys.....h.1.(.h...[F..B..>..HG..#.p.>.j.t.....-../^...+i.....C...r..k.c.N.....,.@..........P%,......X..~.]...I.}..s";.1.t...7....F."U...Q...L$...1....cm..e...N.4H.uA.q-..t..H..6...].....@...sa85... ..n.9v...V....7M.....Y..'....(..'..Y.N.j.4b.5.%.E.DD#PS.E.w.......,..wt.....-. H..B.......d.<d....t.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7422
Entropy (8bit):	3.9236278200513075
Encrypted:	false
SSDEEP:	96:/iIbtZR25Ophn56dZBdvZFf6AV92eR8mQwR2UhsGxFXv7eSsOLr3E5kYyH4BPhEQ:/iIbdZN56xtLxlsGxF/7eeEfAnqsO1
MD5:	88E63344B78E5AEE6A3C789095184A50
SHA1:	A634F2661430E76D1F1DC322372B29E33B0B6740
SHA-256:	E4024650696EDFE916BB7B50C009D0A952CB082080B4F185899C8594EA7BFE96
SHA-512:	34B9A5D67AE1359AFF9D04110C5150BDEE6BB6DC5F1AD564F1640D57FA6DB20A56C85CE67F3580732E93257D7E26AA15442734FFE949CF6FFA2EF0D76356A779
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="150" height="19" viewBox="0 0 150 19"><path fill="#005450" d="M554.565651,3498.14826 C553.653242,3498.14826 552.913415,3498.90487 552.913415,3499.83799 C552.913415,3500.77138 553.653242,3501.52772 554.565651,3501.52772 C555.478327,3501.52772 556.217886,3500.77138 556.217886,3499.83799 C556.217886,3498.90487 555.478327,3498.14826 554.565651,3498.14826 Z M549.608943,3493.07933 C548.696534,3493.07933 547.956707,3493.83567 547.956707,3494.76879 C547.956707,3495.70218 548.696534,3496.45852 549.608943,3496.45852 C550.52162,3496.45852 551.261179,3495.70218 551.261179,3494.76879 C551.261179,3493.83567 550.52162,3493.07933 549.608943,3493.07933 Z M549.608943,3503.21746 C548.696534,3503.21746 547.956707,3503.9738 547.956707,3504.90719 C547.956707,3505.84031 548.696534,3506.59693 549.608943,3506.59693 C550.52162,3506.59693 551.261179,3505.84031 551.261179,3504.90719 C551.261179,3503.9738 550.52162,3503.21746 549

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13367
Entropy (8bit):	5.057936866539623
Encrypted:	false
SSDEEP:	192:1maFFZjROLUFKza7EIU6hUFRuKt3FLrOamnFvr2S1:13FZjROwFKzB6hUFRNFLiaeFvaS1
MD5:	56655DA87943D0E5EF98E742AE6EE3D2
SHA1:	AA87802906516962A3EC0F444031F7154B70F0AF
SHA-256:	256E42104F48A5FA80B031DA12DC56ACDE224FBA3F9810F8F8192B39136D365A
SHA-512:	0478226BADA3BA5CD80A70265B37B723F56804C35F94632CD0255F35776C93294C9EE799B3787EBCB43B1328212CB828B06ADDCD5E9FD33FFE639E9B3E5999A6
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/js/forms2/css/forms2.css
Preview:	/* This is used to test if the stylesheet has been loaded yet/.#mktoStyleLoaded {. background-color: #123456;. display: none;.}..mktoForm {. text-align: left;.}..mktoForm .mktoClear {. clear: both;. float: none;.}..mktoForm div,..mktoForm span,..mktoForm label,..mktoForm p {. text-align: left;. margin: 0;. padding: 0;.}..mktoForm input,..mktoForm select,..mktoForm textarea {. margin: 0;.}..mktoForm {. font-family: inherit;.}..mktoForm .mktoOffset {. float: left;. height: 1.2em;.}..mktoForm .mktoGutter {. float: left;. height: 1.2em;.}..mktoForm .mktoFieldWrap {. float: left;.}..mktoForm .mktoFieldWrap .mktoInstruction {. display: none;.}..mktoForm .mktoLabel {. float: left;. line-height: 1.2em;. padding-top: 0.3em;.}..mktoForm .mktoField {. line-height: 1.2em;. font-size: 1em;. float: left;.}..mktoForm .mktoPlaceholder {. float: left;.}..mktoForm .mktoLogicalField {. float: left;.}..mktoForm fieldset {. padding: 0;. margin: 0;.}..mktoForm fieldset legend {.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57806
Entropy (8bit):	5.327415521468651
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYCIo2+Dfz7:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyj
MD5:	E7FFF5AB774404DBCCA717CC139B6E3C
SHA1:	EB8000E1F3B62E9728D1786CE36602A2F5DA1893
SHA-256:	D01AEA7C5512A6DE49013256611AB3118F5D275961D5EF0BF70F74F5D918A6E5
SHA-512:	FFA8794C8667BD84F594BEC7DB963C8D9033CAA49D5A8A1A1C967A9E618752B326E30CD7761866FAD66FA40416162C8E724D21FEB661CE13A63AE3F79A7F77DE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/176175412745322?v=2.9.154&r=stable&domain=marketing.docsend.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.7300810038140355
Encrypted:	false
SSDEEP:	48:XEnPPPPPPPPDbKmZPZjPC/PcPhgBXKPP0xZJKPPPPPPPP+7nKPPPPPPPPuGss3sy:XEVYrZBD364ijQ6SbAqXnXMJoATL
MD5:	BEA91A0FA9877A62A91C6FD3B75310C3
SHA1:	3D7C7FF6E0E50AB898439C9FF8030BAB0B921508
SHA-256:	C53A953DC73AC96875D7816D072DC071DB3F055EE3293F3DD733A9F8A9D6BAE9
SHA-512:	9BE5EA3B72544537D23CD5E73D6DF0319BDF886B855B21938996597213EC2F7DCC6C84CD326C9F5AB108E9221B96333A936F15FE332C11F676D55259A3432104
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... .........................................+H.0,I..,I..+I..,I..,I..,I..+H..........................,H..,I..+I..+I..+I..+I..+I..+I..+I..+I..+I..,I..............,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..........+I..,I..+I..+I..,I..ez..........p...0L..+I..+I..,I..+I......,I.2,I..,I..,I..;U..........................4P..,I..,I..,I..+I..+I..,I..,I..,I..........................k.......,I..,I..,I..+I..+I..+I..+I..\r..........=W...K..j...k...........]s..+I..+I..+I..,I..,I..,I..............,I..,I..................5Q..,I..,I..,I..,I..+I..,I..............+I..,I..E_..........l...,I..,I..+I..+I..+I..+I..+I..]s..........;V..+I..+I..........bw..+I..+I..+I..+I..,I..,I..,I..,I..................9T..\r......>Y..,I..,I..,I..,I..+H.4+I..,I..+I..<W..................n...........+I..,I..+I..+H.0....+I..+I..+I..+I..-J..h}..........2N..Yp...K..+I..+I..+I..........,H..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,H..............,H..+I..+I..+I..+I

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	4.283381405994076
Encrypted:	false
SSDEEP:	3:HIVXTyJ1+KdUYn:HIVXTyJpUY
MD5:	749F9DA3E09E1847D520A345F2BB617F
SHA1:	7CD6F3EBAFCCDB644A11132DE32F3231CDB0BC07
SHA-256:	29705A6F03592C5C1DF7EE44D2E5D665C6C4E35FCA713D3FADB509E01AD4FDD2
SHA-512:	C44FAB80AD7B010F4D5FE32E3B81DD1B8AE5CAD5BD1B2CEDC5B02FBEC8662B924B3F59B687F764E6B91C3893349EAABD3A4A5CE2E5B420FBA824D57E33A57D77
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/dbx-ccpa-dns/public/css/dbx-ccpa-dns-public.css?ver=1711053212
Preview:	#evidon-prefdiag-overlay{z-index:100}

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2257), with no line terminators
Category:	downloaded
Size (bytes):	2257
Entropy (8bit):	5.848708244925283
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt084ccsSPXKps6:wsbSUtJfxrqLWWWdV6j1Eccw
MD5:	77D02CB76112C57774EF4DFF8898A0B6
SHA1:	61F0D0403641D12CEBEDE752F901C6C5EEACD7E4
SHA-256:	7A1CADA43A017B6AF8F515B0D48FD46C050269B86289ABFA995AE634F5C166AF
SHA-512:	36321CAE79380F7E4CC01402BE6A78F9049ED90D2A2704B194B4E1DECE9335DD7673E412A474677E6DD4015EE9C15E091D09060DFA0A6B5D6F0E51313DC57BAE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/982651595/?random=1713459593334&cv=11&fst=1713459593334&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 359 x 357, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11789
Entropy (8bit):	7.90944417737379
Encrypted:	false
SSDEEP:	192:CV/TVfaCW+/Li8Nzlr00BspSL/RjbMOipzMizATTKUbd5lrXx:C9T8CnhzvMSL/Rk3zMikFd5P
MD5:	79ABAE40BE48D7233FCEA00DCC816CE5
SHA1:	743A13716B86AEECD4B5F13524CA1D551EBA1CDA
SHA-256:	0B0DC1A6CA86BC18551B40C9BF1DE0303427FE85D10F95EFBDCC1DEE909CAC34
SHA-512:	58FECD5281F7B43B74F7899C7B1F222F0019BDE2DB012F466C28881DB6B35419CF4D17BB663DFF48A86DC8BBE08AF45DB4773BEAD240933CDBBE450C7A93BF40
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/07/AICPA-SOC-logo.png
Preview:	.PNG........IHDR...g...e............gAMA......a.....sRGB.........PLTEGp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{yy......ljj^[[VWYOS_OLM.....#.!VVXVWYWXZ...wwx................%"#......_`aaacXY[llm...............XY[___UVXEEG[Z\>;<...ZWX...WXZ...hhi^]_......utu...........~.rqr...ede...TSTVTU.......JGIXWX...................!.!". ...RPRPNO...POPQNP.......r......tRNS.@P.`.................`...... ......P ...........0p...p..............................@..@......0......0.....``............................................

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41318
Entropy (8bit):	7.733532104456156
Encrypted:	false
SSDEEP:	768:4KWqASfDF9pqaW4SkwiPJ9oPHVgkEFItL6s6przm2pMuYAfXjXe:2bSZeLdkN+qQtL6HnpMuYAfC
MD5:	4894A9FEF5977B87AECBE6A56AC90BCC
SHA1:	D2FE46A298334D83150F106C672C1C8CED5D405B
SHA-256:	88BE11F940A833C7CB66FC961AB0B85B509037E192DF226F4596711F3E299866
SHA-512:	DA869A1BE72BAB935EAD0B37C79378FC8DE7832CD445806A60D5C0769B9A916E47EC62F225D587D30222909890367AA46A4958B0EA98B329EAA55A81E54D9422
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2020/12/kevin-pineda-photo-275x275.jpeg
Preview:	RIFF^...WEBPVP8X.... .........ICCP v....v appl....scnrRGB XYZ ............acspAPPL....APPL...........................-appl...A.f=....[.................................desc.......{cprt...`...#wtpt........A2B2......tLchad..u....,aapy..v.....A2B0......tLA2B1......tLdesc.......!Apple Wide Color Sharing Profile................................................................................text....Copyright Apple Inc., 2016..XYZ ...............:mAB ........... ...P..........t.curv............curv............curv..............@...&...........X....r..........cz............para..........ff......V........para..........ff......V........para..........ff......V.............................................e....-.....=I....L.....\-....k.....{..................f.....................................4.p....!h...D1a....@.....P....@_6....nY....}.................0.....{.....&.....{.................... ..... R .....1....eBD....R$...va.....q......6...z.]...A..................W........6.........l/.

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	5.1223448635271
Encrypted:	false
SSDEEP:	6:U2ycV6jI4siXvXJBSU48t1UcA2xkN7w23biE1H5ouSLn8hrK9IVKDd/xWJrr0Q8J:U2eAi/ZBLTUQxkNP371H5ouSA0CVKR/p
MD5:	2FDFFDD1608FE3ED35E7827066DA9FD1
SHA1:	9D6516E47029DEAB1CB5158E9CC9C2D7562280EC
SHA-256:	A6DADDC200534ED549A179751B36B35F63D2AE229CF7191E9623945EABF0604A
SHA-512:	91078DBC23A85A0F77CD22A7E1DD22C4A696AEAB288246765906E0573C799DBDD3D05145AEC4CE8000FAAC3E03B37467407DC0036A6C113AEE4EBA7747E21F58
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/icons-vflL9_90W.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-icons@3.10.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5572)
Category:	downloaded
Size (bytes):	5578
Entropy (8bit):	5.3484778924531104
Encrypted:	false
SSDEEP:	96:T5GQtcLcrW5SlMBHAB5BmFDXUj53ndX6E3Qe5ynmNGkJppoLy9rpa5Zo/POUpph7:YocLcrW5SlMBHAB5BmFDXUjJndX6E3QK
MD5:	920D9E847038D310A2DCA8656CE4C596
SHA1:	A039D5EB24217FEACCD177217D4BFE8A06C652F7
SHA-256:	D27C21273EE707AB2BA5A6B96A816D863CAD1D4BF056557169E7A36E2D093E58
SHA-512:	4E70F5658C9315E075FA0C7965E5B2ACDEE8BF497942FE73F7AC48A67B73184C3ECB9F4CBA1B5B6D0C8C5A6B3FB789CB5BDA0B104499D9434EF3D20E72D5161E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_client.bundle-vflkg2ehH.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var e={d:(t,i)=>{for(var n in i)e.o(i,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:i[n]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{marketingTracker:()=>D});let i="production";function n(e){i=e}function r(e,t,n={}){if(e)return;"production"!==i&&alert(`Assertion Error: ${t}`);const r=new Error(`Assertion Error: ${t}`),{tags:o=[],exc_extra:s=null}=n;throw r.assertOptions={tags:o.concat("module:exception","assert"),exc_extra:s},r.isAssertion=!0,r}const o=void 0!==self&&self?self:window;o._DBX_UXA_GLOBAL=o._DBX_UXA_GLOBAL\|\|{};const s=o._DBX_UXA_GLOBAL,a="undefined"!=typeof self&&self?self:window;function c(e){const t=undefined;(a._DBX_UXA_bufferedClosures=a._DBX_UXA_buff

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.568208417061863
Encrypted:	false
SSDEEP:	3:UKJJFHTWWRmNbMWEAjR3uuIIE0pAspn:UKJjTWWRmNo0F8IE0bpn
MD5:	435A451090061BE4C0254761F2F94E1F
SHA1:	1A873F8C9A0DFB421E3213DFBBFA8AAFA9960D4C
SHA-256:	6C68769E8470CE89A0F2270529A5D47DB00917E3EF9DF946DCA202098F09D0A2
SHA-512:	0506DBDEDE1F984B75421EC86CDD451752EC85B44F5A6F880BC0F06BF8884F1F934F4EAFAD41ED89015D2118A73BD4DCB20AD4B0D2118E16F311AA25737CF1AB
Malicious:	false
Reputation:	low
URL:	https://polyfill.io/v3/polyfill.min.js?features=NodeList.prototype.forEach%2CArray.prototype.forEach%2CObject.assign%2CIntersectionObserver%2CArray.prototype.includes%2CURL%2CString.prototype.includes
Preview:	/. Polyfill service v3.111.0. * Disable minification (remove `.min` from URL path) for more info.*/..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8946
Entropy (8bit):	7.947489814034478
Encrypted:	false
SSDEEP:	192:ffsjQeLrxKkLgw4qFrt7gejiqi7tKoyMsA8r1yz8Caju1ej:cjrxRLgbqFrNgD3pjyrAhaaej
MD5:	C55F8FE117E36F5DE3AA1868FC5EAAAF
SHA1:	150A82DE0C07E09A0DAA7F956FA086C47A3A77F5
SHA-256:	26F929CE38FB9CB334CAEB4F9FDF6CA75B9E56084724D13D2BFAF1650FB0FC62
SHA-512:	A1D926A55AD42E19546EA661EEE30E346BFFB665BD1B6C40253485863CDD6901859A9B5AB46BAB25AA523D32647F962704CDA9ACA6C76E6226FF7DC8A402AA68
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-outlook@2x.png
Preview:	RIFF."..WEBPVP8X.........../..ALPH............$.......\"G..W...d.9FV.............g...G.#..$..a...x....f.............................................T@-&.d..!g@F........y.....V..X.\IA..5d....l.F.....`.%.>9...xG......p.....70..t...cJ.W9\..R......bq...XN.....a.......X....X...........p.0.I...X.v.......\|..&).V.&......L...HR..f.W..1....]JR.......$. IQ,....KR...(tc?I.U3I...z..%...(.. I..U.),..yU.).C.b).^5.R..1.....F...I.$eu.~..zw........$e.%)I......"&....9..JRZh..tk%)....`!.....H.q.[j.<@.G^ .....(.......qWH0.8..6}..,..-W.k0j..nYZXLC......(F.HU..5z..h..9.I.@.i\.....O...M..b.#...^`+.p..oXq.g..;..TLg....o..q....R..P....9:.oIY.L.ibg/w..Vh,.g..?.5JS.y...;j9.#.i1.<....{.G....VE.m..C.C"........c.@..<$..<.J..&y..Q.0.e........."!..1............g...";.C..m._.<q.{X,.$W..vH.....a".0...yH..<Dcc.-..m_...........B......\.!...<k[..+......IG......^......].....BwK..U..)....\|.....e.Q.`.`.!^..@c.....K\|...,.W.5...... x...,.=....x}S....%.2.bJh..un.P\|.y...9\..,......-A.s.&vM.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65155)
Category:	downloaded
Size (bytes):	148001
Entropy (8bit):	4.906082415856757
Encrypted:	false
SSDEEP:	3072:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2owYDo/xU8RDXQwQvdMUbQF7P/LPMDInAu:szx2x9JMbtA6CCYMMw/Id8N17xvU0Y2r
MD5:	369DC6BC585DE3225DD8F7A2E3875AF3
SHA1:	2E316D6E7D6CE9B6BCC76800327EE8F00D0D6536
SHA-256:	4C02ADF2AE56429E877AB87CDFFBBAB270170AD3B4A32D4DCA0E99B96AF614B2
SHA-512:	CA9C0C9FFACA25F5E2652F974909FE01BC53197C4BE79831ADBD61CE62949D33F20585AAAFFEA459A78503A831314E65C68A2A5EBB3C2A30854DFCD6994C0296
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-components-vflNp3GvF.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-foundations@2.16.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..._4rjmw90{-webkit-font-smoothing:antialiased;box-sizing:border-box}.js-focus-visible ._4rjmw90:focus:not([data-focus-visible-added]){outline:none}._4rjmw90:after,._4rjmw90:before{box-sizing:border-box}.ekabin0{-webkit-appearance:none;-moz-appearance:none;appearance:none}.ekabin1{-webkit-user-select:none;-moz-user-select:none;user-select:none}.ekabin2{list-style-type:none}.ekabin3{cursor:default}.ekabin4{cursor:pointer}.ekabin5{word-break:break-all}.ekabin6{word-break:break-word}.ekabin7{word-break:inherit}.ekabin8{word-break:keep-all}.ekabin9{white-space:normal}.ekabina{white-space:nowrap}.ekabinb{overflow:hidde

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30425)
Category:	downloaded
Size (bytes):	30473
Entropy (8bit):	5.212175489639093
Encrypted:	false
SSDEEP:	768:UdYEm4/5oG50/6dFx8gX5Nc+xUgDvjOvMmdATZyvEXWhnZgYJjPNiXQQ:2Y54H6d6rmMqvEm5Q
MD5:	69991038140966BA9AD01815DA736FB3
SHA1:	AC46284A7C3AB7DF07EA4CD3EB9F093538AB65D2
SHA-256:	FC593D1C8965D82E5A2800E995F28891E02FBCA92E6CFD143799170C9145A39D
SHA-512:	04A12BEA3AF0984C3414309F00A215D002AAA7D10B642958961F15D5A9D86F36A0ACC3987FD47D6B0DB83B98BEF9904C7173F4295B25D3ED2E078DAEB05CF43F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_uri","./c_browser_browser_detection","./c_init_data_edison","./e_core_exception"],(function(e,t,r,n,s,i,o){"use strict";function a(e){return n.assert(e.startsWith("/static/"),`'${e}' is not a /static url`),new n.URI({scheme:"https",authority:"cfl.dropboxstatic.com",path:e}).toString()}const d=["edison:preloadCss","js:requireCssWithComponent","js:require_css","loadCssWithCache","ensemble","CssEntryPoint","css-modules"],c=["css-modules"];function l(e,t,r){if(r[t].length>0){if(c.includes(t)){const n=r[t];for(let t=0;t<n.length;t++){const{elem:r,path:s}=n[t];if(s>e.path)return[r,t]}}return[r[t][r[t].length-1].elem.nextElementSibling,null]}const n=d.indexOf(t);for(let e=n-1;e>=0;e--){const t=r[d[e]]\|\|[];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=n+1;e<d.length;e++){const t=r[d[e]]\|\|[];if(t.length>0)return[t[0].elem,null]}return[null,null]}function u(e,t,r,n,s){e.elem.setAttribute("data-loader",t),e

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	578
Entropy (8bit):	7.502571045819332
Encrypted:	false
SSDEEP:	12:6v/7i+JK+DVFn54/XyExm1K1knAwkberqLHbRFhOQadBPk/vHKFbKygzYC:UJ/VN5kBX1kbkbMqL7XVad6ybKygUC
MD5:	29EC24AB2E9F7F77846D1DBF87BB129D
SHA1:	C779B93BE4A79202113F05B9E15F1E1ECE08E5A9
SHA-256:	2055194B763E8842D540E884D3FE156D10A699518CC1FFCEEE1C9681763117A7
SHA-512:	BA8FEC070D9E36946C6C85DF1933BAD1B4F0C17CF7C87B5A56E3C6130E57EF6C107A3DB3F977C8063FF73570D9ED5DFAC8D73DCD24855CB4F98EAE4897E0B10E
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2022/04/Docsend-Glyph_FAvicon_50x50_RGB-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx....K.Q....Tp.-.Z.6.....C..Eu.:.E.(^D...."..........Q...=...?..<........;0 .....,.>.\.\|...y...x........%?.~F...b.H.7N....q4`.K...r.....O.u0..t!...Ha......e_..0a.2..0q..0.]H.i.3a...J....b.....0...)dU..c..FD.m.....'p.y..#".$.n..a.R1@.-.[D$.V...j...HB8.(C'....BhC.. .1/......U@....0"J..e...P....-.f.q.H.z.C...k[.;.....#"..{....Z..F.g@Y....O.X..=.1{...(`....B.*P.<"f{.o.@......v...\|...7...$.!}p........A..9..f.5..c8...../(rr...%.................Il..Y........n..Z...b....a.C..w...........7..cT..Z.3..1..yT....IEND.B`.

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13778), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	111025
Entropy (8bit):	5.326147517946293
Encrypted:	false
SSDEEP:	1536:77j1Pap69fPKP6OOOtOOOG4zmfWiyiLOi:nhCU964zmfz/
MD5:	43DA21E617957E3F2144E321990EAB73
SHA1:	3053D110EEB154383E3EB8EE4B543A5AAAB602C1
SHA-256:	8593632F0AA746712876089C7F4E57B94591644E3CB2BEC3EC3BE67860350B1A
SHA-512:	929110393DCF8BEB4093A2F782DA32F678585A2172A5F1090D76BE346E116EF86E3A8B1C54FA29CAC84CDAFC4E86282E08FA671C64FE15125055F3183A3A0C62
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>.<meta name="facebook-domain-verification" content="2bhap9efl4twcb9o5dmi2yrcwjreiq" /> <script type="3b2accbd2a96e0c81f3dfecb-text/javascript">...window.dataLayer=window.dataLayer\|\|[];...dataLayer.push({....'dimension1': '',....'dimension2': ''...});...window.utag_data=window.utag_data\|\|{};...window.utag_data.dimension1 = '';...window.utag_data.dimension2 = '';..</script>..<script data-cfasync="false" data-load="norocketlazyloadscript">(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-THK58L');</script>..<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<link rel="profile" href="http://gmpg.org/xfn/11">.<link rel="pingback"

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 703827
Category:	downloaded
Size (bytes):	162751
Entropy (8bit):	7.9975139996022016
Encrypted:	true
SSDEEP:	3072:WK4wYKAsGJebyEgmSj9JK8bOlUGBHoyXypDz7t74vmoyYW1bCDa8omKae:WK4KmsbSJ1ql90Df2Xy1b+aIKR
MD5:	BBF9FE5C44467ED294A5EF62E7106FDC
SHA1:	69E44FEAC55674D8E20FF32C8F3008AEEDFBEA56
SHA-256:	47EE3486FF7868529F03909A65FCD028FBB9750AA39A2BD9D8E33697BE9AD560
SHA-512:	45E96DAF27E6D83C3DA044F34E05BDC69CAF9A182CDD25A964A886E0CB78C73D01D730A4EF04F86BEF204DC05B0816FF4B1485F22876D0C7DC48C5C1E42B6C0E
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app~tooltips-modern.77e8d419.js
Preview:	............s.G./....../......6(H..)K6..D.n..N.(.e.(.P E............3.e..n..n..J7.1.^.}..;'..P !OOG../..bUfV.'3..;.Y...z".(E......Q.'K..,..(... ...Qy..)J......E.%.^_.[t.'....g......z.r.;)q.C9._O._.l....r._\>......s..\.#.Ctg\|...Y.....y....{g.;}...S..a3.V.[.....H.,...(.9..Q....<E..<N......v..[.a.`...Q..\.u.(._.D.d.#!.,..p>.[..B\6/C\..........STTd={..36....%.xW.U.#M.."...S.....zq3....]....K...$.@.L.......x...v.y.."....<.,\|..\v!.Rj..3..N..3..,.O........W......9$.+.:9.+..d1.I.m..OF..9=?.b....'.."$.a.\@S..eZ.Of.V.~.^.?....[....v.F..)..n...+)W..Rn..h..1.....K.$Zh..~..g..N..'.;a.2E.l.tq.\.....f..../...}..9;o..$.....Y..L.=.C...hSu.f...%...9.t.x.,X.,.PQ1."V-.r.-.H.+.M..H....'x...Yf.^.}..".K.A.....Au.}.~g.s...e5..d.'......m.`.3o.z...)W..e\.y..7...Ip.r2T..$F3].#.....Kj........>JJN.HKz...87.....v..8.K...\..<..h.LQr..dN...2...I.y=#%5.z....I7.S..x..H.o@..9.#..a6d......}.Xd..."...[..Am.?.....-'....~.,..W....K..Iq..G..DBQQ.q..Y

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9876)
Category:	downloaded
Size (bytes):	9882
Entropy (8bit):	5.354340353456703
Encrypted:	false
SSDEEP:	192:jJVAWYFWLEdpXXlFUPxguyN2iJQdyZR2cSAcDfVLckkb5Apwk92+46uO4GbQT6:1PfE5huySsccSjDikkbihuOP
MD5:	9FCE6143999208F4699ABD041134D9C4
SHA1:	7DB9FA2C3B152D098D4877D9FAC0AC23BF7905E4
SHA-256:	C81169C2E6FFC04CF8F3364A1528745A8FC5CC8263B83F92C180C4B6E2164F06
SHA-512:	81F26E162FF3DAC8BDB08944FD4A2264058CBB0D1DAA102ED23086FEB2489CD1F7ED050A0520A79336C4F86E2BFB9C03ACD39293521F0A5347433C1B6F789FC4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_service.bundle-vfln85hQ5.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((()=>(()=>{"use strict";var e={1134:(e,t,o)=>{o.r(t),o.d(t,{CCPA_TOKEN_COOKIE_NAME:()=>i,COOKIE_ATTR_NAME_DOMAIN:()=>s,COOKIE_ATTR_NAME_EXPIRES:()=>l,COOKIE_ATTR_NAME_MAX_AGE:()=>u,COOKIE_ATTR_NAME_PATH:()=>c,COOKIE_ATTR_NAME_SAMESITE:()=>g,COOKIE_ATTR_NAME_SECURE:()=>d,COOKIE_ATTR_VALUE_SAMESITE_NONE:()=>p,ConsentCookieStore:()=>E,CookieCategory:()=>k,DNS_COOKIE_DEV_PREFIX:()=>a,DNS_COOKIE_NAME:()=>r,PRIVACY_CONSENT_COOKIE_NAMES:()=>w,SHADOW_COOKIE_NAME:()=>n,createCookieStr:()=>O,getAllCookiePairs:()=>_,getAllowedCategories:()=>C,getCookieStr:()=>v,isDropboxCookieName:()=>m});const n="__Secure-dbx_consent",i="__Secure-dbx_ccpa_token",r="__Secure-dbx_do_not_sell",a=r+"_dev_",s="Domain",c="Path",l="Expires",u="Max-Age",d="Secure",g="SameSite",p="None",w=new Set([n,r,i]),m=e=>!!w.has(e)\|\|!!e.startsWith(a),h="dropbox.com",f=6;function _(e){try{return String(document.cookie\|\|"").split(";").map((e=>e

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13778), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	93179
Entropy (8bit):	5.304248079324936
Encrypted:	false
SSDEEP:	1536:2aCvrapQKGPKP6OOOtOOOh70mrzmEkiyiLOk:diOSKC70mrzmE91
MD5:	C53BE3FF5687F2E7E7055352156A0734
SHA1:	B0A8EF179D9195768F9B7AC1BC3D23ED323BD98A
SHA-256:	0DA65EE6C29564A40F9208DB498FB8A01588B9CAF9DC71EAAC16A8813266FFE3
SHA-512:	A32DD089C5A1DB4ECA702CC66E108DF4D01FCEA446711CC0AA76E0836511C1AC7D1345A9B197CEAEEFAEFD3E0340C2FF75CACDE146EABCA7660AF263386E3C61
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/how-it-works/
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>.<meta name="facebook-domain-verification" content="2bhap9efl4twcb9o5dmi2yrcwjreiq" /> <script type="8e322e7b46ebc3a814bc1372-text/javascript">...window.dataLayer=window.dataLayer\|\|[];...dataLayer.push({....'dimension1': '',....'dimension2': ''...});...window.utag_data=window.utag_data\|\|{};...window.utag_data.dimension1 = '';...window.utag_data.dimension2 = '';..</script>..<script data-cfasync="false" data-load="norocketlazyloadscript">(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-THK58L');</script>..<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<link rel="profile" href="http://gmpg.org/xfn/11">.<link rel="pingback"

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.8548730495981
Encrypted:	false
SSDEEP:	12:nnwkHFVF6YXukbpPxTEdxk2fKuv6/WbxXBu3J3nWN0j314IQL:nnwWpqkNOYDa6/gXBuNq054j
MD5:	85C876EB10030058F29245148995CC2D
SHA1:	458679E2B02107F6448729AEC844D3BD8283C9ED
SHA-256:	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
SHA-512:	2CA5D147B5630AA540DD241CB8C06429A7072108C2BEADF04ED532FC7F5291BDF1147F6C334293D96397B9402421B1AD52CDF9F1EA39918C95201DB1DBA19DCF
Malicious:	false
Reputation:	low
URL:	https://marketing.docsend.com/
Preview:	<html>. <head>. [if (gte IE 9) ]>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <![endif]-->. <title>Dropbox</title>. <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-eval'; ">. </head>.<body>.<script>. (function() {. /*. Requesting marketing service to process tealium events. */. document.head.appendChild(Object.assign(document.createElement('script'), {. src: 'https://www.dropbox.com/pithos/marketing_tracker_service',. async: true. }));. })();.</script>.</body>.</html>.

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GPOS", 33 names, Macintosh, Atlas Grotesk Web RegularNot to be used for anything other than web font use!Atlas Grotesk WebRe
Category:	downloaded
Size (bytes):	120900
Entropy (8bit):	6.079899219123488
Encrypted:	false
SSDEEP:	3072:xh908xHjx10I2NMGw+P+ZvbnmMm4zhVHMiHBUZw5GKJ:p0qDxmPMnrJzh3HDt
MD5:	CA03FFD9DDE27DDF9A4786DDF6AD492A
SHA1:	984A905218B74E779B87376AEF33FFCB73CF24A0
SHA-256:	97F2276E7C9B3E3517C41FA01313243A2A0A299370B6DDEAF8482D29E404E917
SHA-512:	6BAB6C8BCB3730832CFF7732907120DE3605FE1258C116B99EC21DE1CDA4C952A2B2EE0E5F10983659290B92350C6915AF34B6ED45A60F08C602CC453C5F99C7
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/AtlasGrotesk-Regular-Web.ttf
Preview:	........... GPOS..;...ED....GSUBu._....(....LTSH.^'"........OS/2^.kf.......`cmap.....l....\cvt ...Y..r.....fpgm.B....oh...agasp......E8....glyf].....v4... hdmx.........`.head..hV...,...6hhea.+.....d...$hmtxR.ov........loca..p..r4....maxp........... name..{...1T...gpostM..r..6....\|prepB.e...p....5.......B9.0>_.<...........a.........;.,.....................,.D.....;.;...........................d...i.......................,.........X.............2..............................COMM.@.....,.D...... .............. .....................<.s.)...A...)...-.L._.L.$...&.y.V...2...<...:.<.....E...9.f.5.s.?.r..n.?...E.!.%.s.:...B...O...8.y.P.y.U.y.U...!...,...(...h...D...h...h.f.h.<.D...h...h.......h.[.h...h...h.7.D...h.7.D...h...L.......\...(.1.%...3......./.a.n.<...a...........q.b.)...c.^.../.c./.&./.f...a./.`.^...\.......^...^...^.`.^.7./.c.^.c./...^...,.k...`.\.....?.........&...4.a...!.l.a.............Q.../.s.@.w.Q.Y...!.l.T.:.q.(...7.... .=.v.U...(.q.&...;.y.V.......(.q.u.e.H...:........

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 340, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231484
Entropy (8bit):	7.993722069764503
Encrypted:	true
SSDEEP:	6144:lkoc2OlQJLszrtfspXZfB8Cui8beOY29H7DPSH:lxc7surtwZfB8RfSWbD6H
MD5:	6FE8F73B96B4FD5CDCA454E87184F6F5
SHA1:	C2CB3FACF0426CE281F0B2B0F6F003C95DF7178C
SHA-256:	AC6E709B2724EA7485954B53075501F4630337096709174D7E69F880C59F80E4
SHA-512:	E76A6EA619494F71D9BA28FC4526F8F58AE5491B13BA56478720E8775F2A24314F13B8761E3479F37F2E9875B4C5B4F18CB33D05B6B39AA000BDF546D6E1AC0A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...T......LB:....pHYs..........+.....;tEXtComment.xr:d:DAFzgw72iw0:5,j:8430021091838866642,t:23110720nm.t....iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>preseed refresh - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2023-11-07</Attrib:Created>. <Attrib:ExtId>c21af197-c7eb-4878-be12-c5de735f8f79</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </r

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x275, components 3
Category:	dropped
Size (bytes):	11292
Entropy (8bit):	7.957273500520558
Encrypted:	false
SSDEEP:	192:MjUELr4kMDQY0MbKq8LfDt+kVXBiSOuV4UUvve6D8ODhsWq/pW6ta5X5:IFNMZ0MbKH+kVRiSN4Uq9hsF/1a5J
MD5:	3B396CC9458A6B218CDBEB24C309D642
SHA1:	5930A6960D78152AE75CDB0646D746DEE61C1046
SHA-256:	764C17E8BC26E0A35E2F23C4B583B39631A34348161A2197EE4E55B457DCE7B4
SHA-512:	4760A471A2FE77AAFC197CB74C49305BB40BAFF91716AEC92B5D2C1D9A4E6DDB5F9801614FEB8858DBE195A939FF65F5AAA168E62C41684EEC01EF3C219C8F4E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."........................................B..........................!1AQ.."aq.#2B..Rb......%3....r..$&4Sc.................................2........................!1A.."Qq3..24a.#$R...5B.............?........D.....r...O..Is..o{.R45..i..dD..po...t.c..4...OD...!..^].+n.....#..6..!....p..M.P.......8:..k.p.e.....y...!i..@....`....m.. l..@.....\...:.%...TxZM./.y..U......F0.J.8.qFj.a.....T..0........K.SE0..k....,.....f..IV;.fwRs....Xs...-.0.a..#d....a.`).6.qL.h.1.$gpn........L1\..r.).9....&..X.RL.Q5jZ.N.A....#....d.%.U...".`-p7S.9]I"vT..g#.._...\............v$.8.@?(V..U..w.B?(V .I....8....Y.J.....'..Zv%.3..;<n.w.......F...Y.4Y..\|Ia.Sw..L.cj.i..!#.F}.k<N.E...J...c:..g.%)J/oT.2{.J...JsJ...M..uk.j6x..R1..,&.....4.'tH.....pk..l....z$.m.._w=.......'2...kuj....d..d...l......y.o!k..(X.\..r..Z....G.8.7A!...

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4720)
Category:	downloaded
Size (bytes):	4768
Entropy (8bit):	4.776680316640226
Encrypted:	false
SSDEEP:	96:sWqPkAQC4nY5Z9IuyDMLoXY8OFKE9lpF56KMBY3MIYiI:seAXqc9IumML38MpFDD3CiI
MD5:	366641E9CB419315F25D1AD2BF70936B
SHA1:	B789F141CB7EA723E10CB6F24428B760977FB9A2
SHA-256:	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
SHA-512:	A38D2E0DE2B87D1A8CEB9D48DEC9191D231E9ADAF675DC70A4790C180D8909BE407E5F8B51A6A4EA65474AAA18D93E3C995D26B90DDD29312E9FC5B144505924
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_viewer-vflNmZB6c.js
Preview:	define(["exports","metaserver/static/js/modules/constants/viewer","./c_core_uri"],(function(e,s,_){"use strict";class t{constructor(e){this.id=e.id,Object.assign(this,e)}toString(){return String(this.id)}}class i{constructor(e,s){this.active_and_paired_user_ids=s,this.users=e}get_users(){return Object.values(this.users).sort(((e,s)=>+e.linked_user_id-+s.linked_user_id))}is_uid_associated(e){return e in this.users}is_paired(){return this.active_and_paired_user_ids.length>1}has_linked_or_paired_users(){return Object.keys(this.users).length>1}get_unauthed_user_by_uid(e){return this.users[e]}}class r{static get_viewer(){return r._cached_viewer}static get_role_title(e){return this.get_viewer().get_title_with_correct_team_name(e)}static get_root_name(e){return this.get_viewer().get_root_name_with_correct_team_name(e)}static get_is_signed_in(e){return e.is_signed_in}constructor(e={}){this.replace_viewer_data(e)}replace_viewer_data(e={}){this._authed_users={},this._active_and_paired_authed_use

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6100
Entropy (8bit):	4.060158016416888
Encrypted:	false
SSDEEP:	96:nytdNehspMgia+/1PPpi5diCiScKjFVmtStZl6gHOOvj+bJFIP7PeuxaHRjrk:iNeXa+/1PB0FtbxnL+b2b6Rjrk
MD5:	4193A6FFCC35BA34C00C30363E96F4EC
SHA1:	0729FD0B38C6966947FC64EBC7BAD7761DC925FE
SHA-256:	931AC8A75B2177D3E7CF8B143BEDFBD73F3909E271177B76675D9E36F6E677C7
SHA-512:	A2F533CC72B8F98D0CF81168FDC2C11CD778BC858CFE8FA26FB3CCC60DC0F9B2D09EDC94600DAD6D7DEE624E8CB27A19F0AC61810C7A3FEC216E625ED0B74E4B
Malicious:	false
Reputation:	low
Preview:	<svg width="1242" height="121" viewBox="0 0 1242 121" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M703.612 95.9707H733.746C755.462 95.9707 771.566 82.5507 771.566 55.7107V49.6107C771.566 22.5267 754.12 9.2287 733.014 9.2287H703.612V95.9707ZM732.526 19.5987C748.142 19.5987 759.61 30.0907 759.61 50.4647V54.8567C759.61 75.2307 748.63 85.4787 733.258 85.4787H715.446V19.5987H732.526Z" fill="#0061FE"/>.<path d="M817.642 97.8007C838.748 97.8007 852.534 84.6247 852.534 62.2987V60.7127C852.534 37.8987 838.016 24.3567 817.642 24.3567C797.512 24.3567 782.75 37.5327 782.75 60.7127V62.2987C782.75 84.6247 795.438 97.8007 817.642 97.8007ZM817.642 87.1867C803.246 87.1867 794.828 77.7927 794.828 62.0547V60.7127C794.828 43.9987 804.344 34.6047 817.642 34.6047C831.184 34.6047 840.456 44.6087 840.456 60.7127V62.0547C840.456 77.7927 832.038 87.1867 817.642 87.1867Z" fill="#0061FE"/>.<path d="M897.831 97.8007C916.375 97.8007 929.429 88.8947 931.503 69.1307V68.8867H919.181V69.0087C917.107 81.330

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28539)
Category:	downloaded
Size (bytes):	117066
Entropy (8bit):	5.4803188100352545
Encrypted:	false
SSDEEP:	1536:WijYA266DhBC1cHZyjy+OCyKA+U2qR/DFMiogPGTgP7F0xLf02ewQrB:WijY8UDH4W5pDFM07F4QrB
MD5:	96B54FFD0E13D3CA3E104DC640A5AC0E
SHA1:	565DBA72C5B6DFBA9D006CA11FD5E3D500A903D2
SHA-256:	DB42BEBB074CB6503D871602EF3DCEB65753A3010AFAB413C3096889ABFCA9CC
SHA-512:	6DFDC42564ED82D1254691A815C493FCE67145FE430ADC93A8E2B624F28DB2001CFDAF294406C0D87438F73C0F32CFD809AE6EE8346C38B59EAD11936F39701D
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.32.js?utv=ut4.48.202403080219
Preview:	//tealium universal tag - utag.32 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..var s=s_gi("@@aa_report_suite@@").s.account="@@aa_report_suite@@";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternalFilters="javascript:,docsend.com,docsendstaging.wpengine.com,docsenddev.wpengine.com";s.linkLeaveQueryString=false;s.linkTrackVars="None";s.linkTrackEvents="None";s.usePlugins=false;s.currencyCode="USD";s.visitorNamespace="docsend";s.trackingServer="dpiprodesntls.112.2o7.net";s.trackingServerSecure="dpiprodesntls.112.2o7.net";s.charSet="UTF-8";s.expectSupplementalData=true;s.debugTracking=(utag.cfg)?utag.cfg.utagdb:false;function getParameterByName(name,url=window.location.href){name=name.replace(/[\[\]]/g,'\\$&');var regex=new RegExp('[?&]'+name+'(=([^&#]*)\|&\|#\|$)'),results=regex.exec(url);if(!results)return null;if(!results[2])return'';return decodeURIComponent(results[2].replace(/\+/g,' '));}.function sessionIDGenerator(){va

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4524
Entropy (8bit):	7.893947843833817
Encrypted:	false
SSDEEP:	96:VbihgJ54xqzWFDWJayjXZnO2xJGzR0YtFau7UrSp5FtQ:ti9xq+DWJay9nbGz1tQSp5nQ
MD5:	C8A01312D4BAA7AB5129EA9523F0450F
SHA1:	C85A8193C53A076AE9D6BC225F8579129A2ACDC7
SHA-256:	9FBA685E5D4A7328E326D39D516F36B9461FF9966B3AA5965F5F6CBCD5A26DF5
SHA-512:	ADD847D6712F553776FB7355652456D314A26B61D0CA8C2CD58CEB9801E8161522B01722EEBED0DB181A7F5391CD6BD410C7EA2698BAF53AB81CDCCFB52CE052
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...H.....Lo....sIDATx....L.u.../...$.....H......n......tQK...?....rrM..V.2....~.GnN..e3...0..@.o..o.?>l7v..w...8..~m.?.w.........E.H$..D".8%.[?q..,..6.b=.r...X.\d..$M".Hl.$xQ.r...8...a.......s8.&<.{.....D".b...24.(.0..t...B'.......M".H"(.\....!..f.8...b.&.H$a.*.E..0.}.L.O4...h..D.Q..2P.........+.<.D..Q..r\|..8).....vd.jK"I....;q)N...L.[. Y.H$......0.'edT.....M".87.z.[..<,...xE......B.A..Z...`...8).HM`?.k....m.i.&9XHbQV7.._..0.~\.?....Ee.C...-..L....p.&.......i....mh..X..(.2,..-x.....v.c?.5....Q........t..5X.......L..p..0epe.XVVRX..G.E.z..0..X.TX.].(D-:..SV.de%.%I.......M.......-h@7.Ae...`..$@.../`.z...5."...Ux.}h.....$A.....(..>...{..C.&..8?....ru5..R...),......Q....<.$!".%.._.Ey...Y..............D.2_F.......~...l.......x./.m.B.r.o...(F6..y..sa..<..x.{.!..7.4V.z...'..P..q...A....`....?.k..@...j.O.....{..~G?.0.=...0.K.........an...$..@7....^.....m...c.\|.4.2.....A..x...`7..q.C\|^...Y.A.....9[........a..0.d.b..q.{Q....f.g.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4016
Entropy (8bit):	4.567529144946003
Encrypted:	false
SSDEEP:	96:9t+w3AYdkh+4bk9Pdg6wiqdAKChsSSsbpn5b:z+w3ApdYXQiqdAK9SHn5b
MD5:	04E9FE320018B452E7019CD961021F42
SHA1:	FAB4D9CA8F3CB182117F8C20C1CA8C0E69ACC767
SHA-256:	47E5799EA427740581D13BAE0C414C7C46FC1BF7A17392B1332B94837732A878
SHA-512:	6E329A8D3A9DD9931679D8EA1159CB311DBC9156F56C235E01C0C0E5B66228A0F8520CE2FA34F0509D8ED5712B6C312726C2610128A0310EFF2F69D9EE16C4F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 1242 121" style="enable-background:new 0 0 1242 121;" xml:space="preserve"> <style type="text/css"> .st0{fill:#0061FE;} .st1{fill:#FFFFFF;} .st2{fill:#53514F;} </style> <path class="st0" d="M703.6,96h30.1c21.7,0,37.8-13.4,37.8-40.3v-6.1c0-27.1-17.4-40.4-38.6-40.4h-29.4V96z M732.5,19.6 c15.6,0,27.1,10.5,27.1,30.9v4.4c0,20.4-11,30.6-26.4,30.6h-17.8V19.6H732.5z"></path> <path class="st0" d="M817.6,97.8c21.1,0,34.9-13.2,34.9-35.5v-1.6c0-22.8-14.5-36.4-34.9-36.4c-20.1,0-34.9,13.2-34.9,36.4v1.6 C782.8,84.6,795.4,97.8,817.6,97.8z M817.6,87.2c-14.4,0-22.8-9.4-22.8-25.1v-1.3c0-16.7,9.5-26.1,22.8-26.1 c13.5,0,22.8,10,22.8,26.1v1.3C840.5,77.8,832,87.2,817.6,87.2z"></path> <path class="st0" d="M897.8,97.8c18.5,0,31.6-8.9,33.7-28.7v-0.2h-12.3V69c-2.1,12.3-9.3,18.2-21.2,18.2c-14.2,0-22.7-9.4-22.7-25.1 v-1.3c0-16.7,9.5-26.1,2

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 275x275, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5448
Entropy (8bit):	7.9669787924667315
Encrypted:	false
SSDEEP:	96:qRk3gKfQL5kFTyvDwdRN4qCf9rclq0hRdKjE2zuQHIbvxgaRqph9X:qRpdL5kwvDgR709I00hRQA2Wgasb9X
MD5:	28028ED44A0E5BC3BBA1694F2FB237FC
SHA1:	AA67FA082D136683400AF754DB247BB0EBD16335
SHA-256:	19FDEF36AA61D949CFB8C042B25B006A9C1EFFA17506C1EF3D8E71BCEC6516C7
SHA-512:	022951D9E4D88587AC033AD1E18AABA6B96C7CB5F2543D99FBDDCD7C7889333F34B2C87D9265BF1AD1AA936BEAB3F33B3657D3AD9941D8B7E952C5F8668A3D37
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/01/Ryan-Froats-Quartz-275x275.jpeg
Preview:	RIFF@...WEBPVP8 4............>Q&.E#.!.y..8....H.(N.....k...a~u.N.>.g.._..c<...O....I&.}n....j...3QcTwx........bIf[.4~K...T....y...$O.G..p.#...>..k.....k../.VC.4.i..qF}A.h..2#..\|..Y.ec.T.`./c.!...u{......!...U..bf..x...~1n3....A...Z..a...b.F8 . ."[..F.,M.R.......-.1..E=!.{`YLM.} .^...!.!.[`!...,Bb.X.U.$!;..:.@.IO>...q.. ..{(....$....p.........w..ox..x._.I..]......".j.o.-"..}......A.j.g..3,..[..Y...H&wZ...14..`F/@.J.`..n..cU.8.\|....9.....QI\|=...r..G...M.L..."7.v!..V..[-b....G..24.........:!..-...p4.PA.,..bI...0..I.e.".....D.....&tz.w..l.Ni..v..o..U(oV.p..&...].q7.Z.kG......8..\..!..W......XW._...^....@...e...?0. ....D(.....&.v.h..,.d^..a..F.Y.r..l.".!S/.xM}..;...\|.=...'.!....R..j_...;.Hq..w#..v..bAF]...s#j.i...W.f...X..a.\|..kw......mZ..UdG......U$.`u.CdVd`e.F...9.w...G.......(.=.<V....\|.w"n..&.s.!a.,+k..Z1..[R*......6...sec.:....I.1v..H..7.K..<X.'...:........{.."....{..#...Y<....n....?9'A8A@...I7p..[`.../A.....c.+..JB.']..h..$...G...y...

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 275x275, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7860
Entropy (8bit):	7.975849422404136
Encrypted:	false
SSDEEP:	192:is/67DPd1E+SCMTKlTLGUTM3+4QZZ/DznqT1X:i1TfMmlmUIu4QH/DDKX
MD5:	C63FB5676C4255FD5F87CFEB6A79E9DA
SHA1:	601F56A0138EDC151CC341FDD231FB60DF2F8145
SHA-256:	DA5EF4729D0E4A05270493468CF0AC653FBE84C10EE5C1E420EFF058E5135FE4
SHA-512:	BC821E91BCBC2036289E00EBAB02E9E2988A2120C4AE52A3345EED69CAD1CCC24B5957F47F52E9EEBDB1936C3B449CFCC2209247105E23D18CE514150131F2E3
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/09/gerst-275x275.jpeg
Preview:	RIFF....WEBPVP8 ....p........>Q$.E#.!..08....'...9.^..K.%G.!.n.........z....@.H............jD_x.u..!^S.>.W...<.RBMx......x.."^....v.t8Z....e..L.J.....!C..&.?Np.1.WIK..s...T....Z...U.......1YbS..ZK(.9+.y?S%(5)..NQ......z...V...w.jM...B.}...p..!..8;H....1!..TO0..v...YB)....tD.%TQX.A...;.'.S.`2_.....e.....-.i...R3....\|\|.X.b,.......j....5...w..:...?#~. ..9.....(......z.&WL.1\|.>.;Xd...81.B..{{m.Q....Yb.k...g.....o.\....~.3..i......v .J..3;P~.Xf./>....g..B.i......' ...`...#M...~A...iRpK.&.E#`....t....U..q(............Z.......3{.....7w..r.XcD=`..N..7.g`.7..b.^^k..^r........U..*.J.A...>T:......L.%.S!=..F...y._....5.]H.._.3..(..}AE......G....].hX.4.p..P:2.y........6......vE..$.0R..i4j:..~WS..9...Wb..;.N....vb8....f.>>..p..{O.@...8.h..i....._.jm..Z..-..giD.......Q-.....+12......r..V^.......o..."...N.t...\|.O...[.Hq8.S..=......K`X..]<B..]..}CLp......2..M.R.)TG.. .fZ.#\|.7\|'...\|....7..$D1.0.{"lI....G\|...+.$.\.~/...Ay..?........~.-3...x...vH...O. .6.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.6001495726289154
Encrypted:	false
SSDEEP:	12:XFeeeQL5555555555dWr555555555555b5555r555555b555Lr555553r555Lh5k:X2uD
MD5:	F2A495D85735B9A0AC65DEB19C129985
SHA1:	F2E22853E5DA3E1017D5E1E319EEEFE4F622E8C8
SHA-256:	8BB1D0FA43A17436D59DD546F6F74C76DC44735DEF7522C22D8031166DB8911D
SHA-512:	6CA6A89DE3FA98CA1EFCF0B19B8A80420E023F38ED00F4496DC0F821CEA23D24FB0992CEE58C6D089F093FDEFCA42B60BB3A0A0B16C97B9862D75B269AE8463B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/favicon.ico
Preview:	............ .h.......(....... ..... ........................................................................................................................................................................@...@...p.......................@...@...................`...................................................`.......0...........................................................0...P...........................................................`................................PP...................................................................... .............................................................. ......................................................@@.................................P...........................................................`...0...........................................................0.......`...................................................`...................@...@...........................@...@......................................................

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24608
Entropy (8bit):	7.797342152167557
Encrypted:	false
SSDEEP:	384:Yt4P5VqoUzSXgl6DDhWZXn1zO9bPxQr62Bum/nKeFkJa7ifZYeQFe21INXfub76:VUzegl6RWZtJLz7ga7xeSe27i
MD5:	3440AEF4CF42E4BF95B83929FC50B917
SHA1:	95D39F68FABF9CFB32061C892C87002F8D0CE119
SHA-256:	27889ECECC53DBD449867A48F7691570907E2A71A4886BD7080F6DA37925D47D
SHA-512:	BBA865CAAFE113F4D9EFDF574050329025299A7CFF208205E56F7247AF4E6520F01533755042DDB5EB9F1837F0379FEED6A6913E95C02BC2E5D8BC4BB6D691F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...0.....~..G....pHYs...%...%.IR$... .IDATx.....dW]...'3.,..[..;........$...D...Q..G.P@..?.AeqAe1.....:#H..$..aU`"..A...@...d...._.,..Z........;..9s...[.....b...............B.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....@e(.....................2.@....T........P.....P.. ....C.....

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.201692923824034
Encrypted:	false
SSDEEP:	3:CDcqKR6MJM7/yqXsf:CDcqKpC+qXs
MD5:	B1CA97940743AE11772CD5117D4CC0F1
SHA1:	BB43EC4B616225219997B3326E273E12086CC8C5
SHA-256:	2BC18C5E40B439C202BFA5D0A973C2A8C30CCDB6A83C85C5D0B55CD2ABCAD8B9
SHA-512:	A04AFB91D962371827C08FEF948F2F2896A6ED535D05491BF222C6CEFD5CCABABBA1E8F900E34F06943C0B631B31C05ABBB98FD74930714D3FF720C9688C7246
Malicious:	false
Reputation:	low
URL:	https://i.kissmetrics.com/i.js
Preview:	if(typeof(_kmil) == 'function')_kmil();

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 275x275, components 3
Category:	dropped
Size (bytes):	11733
Entropy (8bit):	7.940197830692797
Encrypted:	false
SSDEEP:	192:/8K9Xdm5PAj8HE1DWnh9hlBuCLzy3iWRpbwdlVLGwL0674hB4ODJj:/87XuDWJlBzySawdlVLGwL06MsO9j
MD5:	1F0A814B4D6D47B87AA75C88B76D1500
SHA1:	49590C446598EE5E925569D52BC7E139B0510799
SHA-256:	222D20E7EA33AD7A771F07978F6C822672BFFA6232C4081ADF26528325F1CD73
SHA-512:	E690331E559AA5DCF2D7C7E01974DE0726259AD1A135AC99E082BE2FC0DFD57BE468D5D3D45B375A49DB82365320B3721AB426DA57CA4A8D758785EEEBFA8F96
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"...............................................&.L..k.5.I..c...hM.V...$E.H..K.h..3.........%M;..d..0a.>......Z....p..0?6.XX..r........".:..Dc..X.....lvnoU..Z.9d`:....[..W..U..,]\...i.X!.a..#...j...F._^^k.Q@.R}.\|...2......_^l....I]...H.Ti~.7"...U.....hdb..L..U....Z6..=g...E-..j.=!.........S2.....-.....U..VD.k.;....Lc.%e...C.!.2...nu.O6?N...l.&.J.x...at......,..3..s.?L..m.B.....C\v....0..0.H..nQ......!g7g.#.z.FX.7.xc&....dlR%..\t...O.oFj..A....4y.6..!....,^..J..........m....~....H.-.h.!..u...,u.Z.......RR.1....7....-.S.....R0..WE..9.B..+...5.?8J.p.wd.......OC.u.\.}T6dk7P.U3.{..&.s..j.(.Y/[..x....S..^CW;...t.?'..V..G..E.z>g....F.Gp.=z.!........4.....7m..\...\|..)...G..{.b=d(./..h.5zY.X..~}\.l..^...wN..R.......U..S...^C..D........d.....`..-..\...2fD.:.C..]....*.!t"y..1.....G.+../.w..0...

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	519
Entropy (8bit):	4.859812617168743
Encrypted:	false
SSDEEP:	12:TMHdiO4NlfPGWfyMKtEFz8vv0QmUWURcE3a5Bd/LDjVwRYv+:2diO4NlfPGMyMKSzevw6RN3a5Bd/jHv+
MD5:	9D4AEDC7989218A310560C93A7BEA9FB
SHA1:	04A6AF2280FEACF24C83313AF5AFB09F777E9F51
SHA-256:	6F4F9D9C5BA0AE7C45D68BCF05CC615230FE2F860D7E945AB218BFFB2EA0BBF0
SHA-512:	89D5B32FFA6D68D6863B9A499241540D369CD04AF037B0DF9EB02C30F9EF074141EA4EA459B75A210300B4CEC8377C022F16016A470C3649D6B51784BBF9EF72
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 28 28"><path fill="#FFFFFF" fill-rule="evenodd" d="M14.796 25.667H3.621a1.288 1.288 0 0 1-1.288-1.288V3.62c0-.711.577-1.288 1.288-1.288H24.38c.711 0 1.288.577 1.288 1.288V24.38c0 .711-.577 1.288-1.288 1.288h-5.946V16.63h3.033l.454-3.522h-3.487v-2.248c0-1.02.283-1.714 1.745-1.714l1.865-.001v-3.15a24.928 24.928 0 0 0-2.717-.139c-2.689 0-4.53 1.642-4.53 4.655v2.597h-3.04v3.522h3.04v9.036z"></path></svg>

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1801
Entropy (8bit):	4.345849871855536
Encrypted:	false
SSDEEP:	24:0peTzhFcmNVhRACGkx19WssLeU9sbSIwD/mz4wDFrrb623vNEI6h8yVWM:0mcs6CGkwssozwD/mkwDFrr22VZi8y1
MD5:	F0539AA430280BFCF0188DD112804502
SHA1:	7B7CFF89D710B4BD92DBB86F378CF84A67E5364B
SHA-256:	0D07724B1F76653A67537C10A4A159A00C8640745528962AF1417641AD037472
SHA-512:	557E64B09F8183464528A425E04A7977879591FE5BBD19DAC701415C7F88C88180A091F4DBCEA8393F6BD81DBEDFCD8695A23F7C2CC078E9993802DF1C28BA2F
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/index.php/form/XDFrame
Preview:	<!doctype html>.<html>. <head>. <title>Marketo Forms 2 Cross Domain request proxy frame</title>. <script src="//lp.dropboxbusiness.com/js/forms2/js/forms2.min.js"></script>. <script>. (function (){. var $ = MktoForms2.$;. if(!window.parent \|\| window.parent == window){. return;. }. $(window).on("message", function (e){. var origin = e.originalEvent.origin;. var message = e.originalEvent.data;. try{. message = $.parseJSON(message); . }catch(ex){. return; //our messages are always JSON. }. if(message && message.mktoRequest && message.mktoRequest.ajaxParams){. var p = message.mktoRequest.ajaxParams;. var params = { type:"POST", dataType:"json", url:p.url, data:p.data, crossDomain:false, jsonp:false };. params.success = function (data){. window.parent.postMessage(JSON.stringify({. mktoResponse:{.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with no line terminators
Category:	downloaded
Size (bytes):	19112
Entropy (8bit):	4.925500710112418
Encrypted:	false
SSDEEP:	384:xIuMyZYAlowcIXeCcT+Cn2vQSREsqfSSeZSHmfY6k4r:kyZ/xcT+Cn2vQSRYfak4r
MD5:	024EC14202D74EA786DAA20CCA19A867
SHA1:	C8A03EFE37E8E2C231E9D0EFEF019142B6B4F50A
SHA-256:	27E3C71453E359F6372EE717B6C63C2386B8B43E785F40C6DCA2573B98B58D5B
SHA-512:	D521A1AECE9409ECEB9322A4EE4E140CC9580E5D3C4D92C80C27BC7688BFA44795B2CAA3A9C77A186B423C30F447234F54696253D87817A0DAECE047BD1D81A2
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37105587580039082392_1713459523353&_=1713459523354
Preview:	jQuery37105587580039082392_1713459523353({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"120","LabelWidth":100,"FieldWidth":150,"ToolTipType":"none","FontFamily":"Helvetica, Arial, sans-serif","FontSize":"13px","FontColor":"#333","FontUrl":null,"LineMargin":10,"ProcessorVersion":2,"CreatedByUserid":666,"ProcessOptions":{"language":"English","locale":"en_US","profiling":{"isEnabled":false,"numberOfProfilingFields":3,"alwaysShowFields":[]},"socialSignOn":{"isEnabled":false,"enabledNetworks":[],"cfId":null,"codeSnippet":""}},"EnableDeferredMode":0,"EnableCaptcha":0,"EnableGlobalFormValidationRule":1,"ButtonType":null,"ButtonImageUrl":null,"ButtonText":null,"ButtonSubmissionText":"Please Wait","ButtonStyle":{"id":11,"className":"mktoSimple","css":".mktoForm .mktoButtonWrap.mktoSimple .mkto

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13165)
Category:	downloaded
Size (bytes):	306251
Entropy (8bit):	5.503106610987704
Encrypted:	false
SSDEEP:	6144:VVPCQYGPGpcMT/yBNtuoAgai3YPhpR4JXcQL:VPU/yBNtKJ3QL
MD5:	838D57533B6F4CB9AE821EE0E4449B36
SHA1:	923C56CF9194409AFB8C40F72645A2AC8AC70BE0
SHA-256:	3DF53150A01BF71BD9EB0D110D3AA4559AFA3434F4672B1A80D2912AFD5C621B
SHA-512:	DEC68A2BBC25DE972143B2A7975F250DA3B170CC44A25F6878F43133B903DE70967567FF10E9A99C818B3740A93B4024D6AB5475A41DB19E2BF6D549306E1A48
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=32396d58173c4999bb2fff5ab2d32d36
Preview:	/1713455456,,JIT Construction: v1012878118,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8553)
Category:	downloaded
Size (bytes):	268238
Entropy (8bit):	5.569885141410033
Encrypted:	false
SSDEEP:	3072:3uZpq+71vbzwHn239n387vp2LUF1eFn+MCv522gY8pv1HdlnLP/w22b7/cL:+nq8wH2t6KVK522v8pNHdJLn2bS
MD5:	AD71D835AD8E5BA7D73D02E5DD8D7082
SHA1:	C23A14BE730B819D5E03394B0AF4067D0B5D47AC
SHA-256:	2E16CCC7A3591B251659127A38D49AA701547FCED80423154FAF4200D99AFA13
SHA-512:	1A1836C0AF0C47EB2D3A47952B227C90DCA8276222525D20C7DB16EBFDE9A99C9A325157F520F201C748656D49D8AA8CF916DDD31A71E2CFA43446DCF6C6A5B0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-JPP8SP2PRX&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":17},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","docsend\\.com","accounts\\.google\\.com"],"tag_id":20},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":21},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusion

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.576617644908667
Encrypted:	false
SSDEEP:	3:PFBwn:9Sn
MD5:	980021208D52C1907A8256F57F077691
SHA1:	CC2EF6376333CDFB4E18210689B4FFAE4FD60C39
SHA-256:	B5865D15F4439D43678F8F1165CA58106C42C0F1AFF9419DFC642FA4DCDAC269
SHA-512:	ABC045334B3A69A098E0D5AC0F391F389350432E8090C379829C3E7722FB991CC19E1F419CF3A150FC8A9351D359C0C6944AE2D782FFE7C24A4B4027A6111028
Malicious:	false
Reputation:	low
Preview:	RBAC: access denied

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12300)
Category:	downloaded
Size (bytes):	267051
Entropy (8bit):	5.556758795257348
Encrypted:	false
SSDEEP:	3072:eq+71vbzwHnHVIi8jnp2LUF1er5ryXatvFF522gY8pv1HLrolxvn:eq8wH1oY7tvH522v8pNHwlB
MD5:	B68F5CF9AF53EBAA99FB9301A476DCEB
SHA1:	C10999C59501BD3982CCF350B07F6668C08ADD06
SHA-256:	CF591AFFFB6CA0E2EFB58B5D4D7306286E54C65AC9F0DC63A85253B9CC60C7D9
SHA-512:	89970F52F18860AB3C744BF06EF84D01CFD0A5F85B97396E7B2DFCB9DA22C296D23DC533A1E3C166C9997E74EE0667AA12E3AD977A02DE232519043F14E0090A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-THK58L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"108",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"consent_categories"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dimension1"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.7300810038140355
Encrypted:	false
SSDEEP:	48:XEnPPPPPPPPDbKmZPZjPC/PcPhgBXKPP0xZJKPPPPPPPP+7nKPPPPPPPPuGss3sy:XEVYrZBD364ijQ6SbAqXnXMJoATL
MD5:	BEA91A0FA9877A62A91C6FD3B75310C3
SHA1:	3D7C7FF6E0E50AB898439C9FF8030BAB0B921508
SHA-256:	C53A953DC73AC96875D7816D072DC071DB3F055EE3293F3DD733A9F8A9D6BAE9
SHA-512:	9BE5EA3B72544537D23CD5E73D6DF0319BDF886B855B21938996597213EC2F7DCC6C84CD326C9F5AB108E9221B96333A936F15FE332C11F676D55259A3432104
Malicious:	false
Reputation:	low
URL:	https://www.g2.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... .........................................+H.0,I..,I..+I..,I..,I..,I..+H..........................,H..,I..+I..+I..+I..+I..+I..+I..+I..+I..+I..,I..............,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..........+I..,I..+I..+I..,I..ez..........p...0L..+I..+I..,I..+I......,I.2,I..,I..,I..;U..........................4P..,I..,I..,I..+I..+I..,I..,I..,I..........................k.......,I..,I..,I..+I..+I..+I..+I..\r..........=W...K..j...k...........]s..+I..+I..+I..,I..,I..,I..............,I..,I..................5Q..,I..,I..,I..,I..+I..,I..............+I..,I..E_..........l...,I..,I..+I..+I..+I..+I..+I..]s..........;V..+I..+I..........bw..+I..+I..+I..+I..,I..,I..,I..,I..................9T..\r......>Y..,I..,I..,I..,I..+H.4+I..,I..+I..<W..................n...........+I..,I..+I..+H.0....+I..+I..+I..+I..-J..h}..........2N..Yp...K..+I..+I..+I..........,H..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,I..,H..............,H..+I..+I..+I..+I

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26914
Entropy (8bit):	7.9809442984956736
Encrypted:	false
SSDEEP:	768:1o38ZUuOC/1vvJTgRYfkM/fOu5HbNKvNzMKHwn4p30Ia:1oj/C/1npgudfOu1bNKvaKG2kI
MD5:	C4717A807302F0725584DED781DBE895
SHA1:	979BF595D11E1F77C224D574EA3E06E05437F46F
SHA-256:	2304E91708DABAC22B436D6E8E843580A673384A6C7A21AF9D21B7B990C348EE
SHA-512:	B48D064B9F4B813F520CFB7BC0204C580CAB549F61E756179D94AC5B77580653110140A9823E478CBABF1904AC085D865E83D20026D2000EC11B2E634506D0B4
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_6_Solutions.png
Preview:	RIFF.i..WEBPVP8X........~.....ALPH.4....Vk{.f...6.. ..`..`.b`..`.. ...AX~.I..to..#"&@.....6...$.C...}..bl..?f...G...g..gev.....8o..P&..>.9)...1....).\..!.\....\...)\........$..<..h\....\=..0..........p..Q........nd.1...7..l..2..oc...n....>.h..I.3....f,7...h7..W..._.....\|..=...L...[....G....,U.....Rn...E?.\|#..W....7..y......_...3]oc...<.P.m..]m...n..qM....X.o...o"..Z.~...0./7...Y?.r..EKk..an.b........X..QK.{.e..J.vL!.h4......1.()..kx#,..K.d.....;.7....F.17.+.....!...I.K. .SM..j....e`..k> ....r.E..3T..c..........n.n?.....!CUn.lj..D.o..wK.m.....B..............a.Uo'V.'1.#......aQ........n/..v.5jJ..^K..3R.L.?..}....'.QZ..y...A....^.N.O.^.._..c.aC.;.H.l...YO......z.......a.h.'o..fhz..^b..Z....T......QVh.+.B..q.x,.....G=ot.T.....OJ...'.....4C......F...Y.F7=.t.c....E?..O..]..(MN7e...k)..8.I.....L.&...-'ZL.2;x...)0$Y.o..>I.N7=....3...~...'....$kP;A.:Im.GI.t....^^...#...#.g.VI....m.I7I.t.v.7..~fR.......xL.d..Q$..z....YM.CJA.....5..u..

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51437)
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.6914132784066815
Encrypted:	false
SSDEEP:	1536:jL1vJUPIxubKUfOBbxT2+kfVcaXryjm3ifN4i:ZO5bKUfOfK+kSa2jNr
MD5:	895054D4AF36A84FCE27EB97927CA036
SHA1:	639981DFD85846B185237E62B3892EA473B79E26
SHA-256:	ACD3A22015A7FC3412FE11C416D1EDBFDEDE063B0B2DFDC2711807434260CB42
SHA-512:	4CA4C9FAD90A6FFA57BB872593753BD7BFF70BFC24B3624720B737956047A0CA2C3851E2C8B5DCF9C96E4557AE4655738B33B1FCFB8507C7F36A24445EAA24ED
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function b(I){return I}var H=function(I,r,W,D,F,x,Q,m,w,a,u,J){for(a=(u=39,86);;)try{if(60==u)break;else{if(u==I)return a=86,m;if(u==W)R.console[x](J.message),u=I;else if(58==u)a=86,u=41;else if(u==r)u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J=S,u=58)}},e=function(I){return b.call(this,I)},R=this\|\|self;(0,eval)(function(I,r){return(r=H(43,68,74,20,null,"error","ad"))&&1===I.eval(r.createScript("1"))?function(W){return r.createScript(W)}:function(W){return""+W}}(R)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicati

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1561)
Category:	downloaded
Size (bytes):	12413
Entropy (8bit):	5.166763406803013
Encrypted:	false
SSDEEP:	192:habFnNojImVVMyK3TXXUcgbRmYa0+GH97opDu3UvdNOT5Qad9FMjnAuXBu4P5BaE:halNsImVVMyKDJgFAM7opC3UvUZCLjN
MD5:	B4880869BB31ABD815D3AEC2F4C50E06
SHA1:	1EABD3F6E22A8F0D94BDF32A9699F01554ED9CBD
SHA-256:	C15206CA53E9C46DDD96B1A78821B904ADA8D0CD48F3304B6F8C3438FC70A24D
SHA-512:	EF8DE6D56E1219CCBDEE2ABC5891E3CE681D3E95E4A590CC8B6BD166F0C9C8DF333EED1605CEC20E1F98AE38607D23FA83022D59C4485D0D3A2B991F5AD26EA4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.48.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.48 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechan

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	661
Entropy (8bit):	5.112361370693629
Encrypted:	false
SSDEEP:	12:bRUGa4GYLqGkwaRuEpzbx6PfUI2Fylde9hWKg2JW3dwVxK:urHjL1phyyWK5Y3KVxK
MD5:	8B7FB34E0EC9ECFD6C2523036161EFEF
SHA1:	A241AAB257D9E4B2F606E0AB94E4E8E9333B2369
SHA-256:	092F05A37727D13D22048C83B9928E9A17D878F216C1C2EC2090D0C404D2340B
SHA-512:	8BC8223B14145E2202F33C64ACDD5470CCFDCEFF776F37C3AB054723F944818CD452A0220B7F6BAD5EFE2206061B5A0278668F432A8991917F988C0C34D52E55
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vfli3-zTg.css
Preview:	@import url('./components-vflop5zSd.css');./* This loads after `components.css` because it contains all the legacy color tokens /.@import url('./legacy-token-migration-vfl1sMmEL.css');.@import url('./logos-vfloXgssw.css');.@import url('./icons-vflL9_90W.css');.@import url('./foundations-tokens-vflfHUKrS.css');.@import url('./foundations-components-vflNp3GvF.css');.@import url('./content-icons-vflmAcPHP.css');./ For any images that are circle cropped, scale them up a bit so that they're still cropped as a squircle /..dig-Avatar-image--modern[src='circle_crop=1'],..dig-Avatar-image--modern[srcset*='circle_crop=1'] {. transform: scale(1.075);.}.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2334)
Category:	downloaded
Size (bytes):	2400
Entropy (8bit):	5.164664434417214
Encrypted:	false
SSDEEP:	48:1aMEGPUm1zjIBS4gJaUoPepzUJIjk0y6o:d1zME4gJaXWpzwIAN6o
MD5:	D7102E61F8A55FE25337F4C956CCEF24
SHA1:	5B45C74151E3ADB6E9AA71428347060BA2098CA3
SHA-256:	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
SHA-512:	E5BED0B1A87DD2E17D187B6BA6E3F39EDB158AB547FE3C8D85BD090D05B4E659970122C105ECFE5CB4B0497A5D4E9FC3CD5D562C057ECA18A4786B5E0240B43C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/c_core_toast_toast_on_init-vfl1xAuYf.js
Preview:	define(["require","exports","./c_init_data_runtime","./c_core_notify","./c_csrf","./c_browser_browser_detection","./c_core_uri","./e_core_exception","react-dom","react","./e_edison","./c_init_data_edison"],(function(e,t,n,o,r,i,s,c,u,d,l,a){"use strict";function f(){return n.__awaiter(this,void 0,void 0,(function(){const t=i.edge&&!i.edgeChromium();if(void 0!==window.crypto.subtle&&!t&&!i.checkBrowserVersion(i.chrome,40,!1))return window.crypto;if(t){const{legacyEdgeWrapper:t}=yield new Promise((function(t,n){e(["./c_security_legacy_edge_shim"],t,n)})),n=t();if(void 0!==n)return n}throw function(e){const t=new Error(e);return t.isBrowserNotSupported=!0,t}("WebCrypto not supported")}))}function _(e,t){return n.__awaiter(this,void 0,void 0,(function(){const o=e.split(":");if(3!==o.length)return null;const[i,s,c]=o;if("1"!==i)return null;const u=(new TextEncoder).encode(s);let d=decodeURIComponent(c);try{d=atob(d)}catch(e){return null}const l=function(e){const t=new Uint8Array(e.length)

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25799
Entropy (8bit):	7.906842014597591
Encrypted:	false
SSDEEP:	768:rOEfAVeZ37GNaQkpu33Zrs4In0TRUOGMSzh8bQzjmKhUJAYJcMzMh:JVZi7miYwRZ+hL3mKhUWYJZzO
MD5:	903141714A8BC9ADB2C1BA29396A27A9
SHA1:	F9586D4451C004FC65181E0E62834C5A5A004C46
SHA-256:	950FB81B005DA22DBEF4D9C3CFB68A86D5328933E66066ABC0E6D1EB60E17969
SHA-512:	7B1D221CECC870293307C007552AC3E2CFD5EC4A8BD7C68419489D1E24A084B7230E97902DA2B92E72ADAD1A4249B4B43A19697BA4E4BEB2C011A0B33314BF75
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<..diIDATx..}p..}...E.%Y"h.$.)q [...&.c&...J.mrT,.6..n."....."...r....S....T...6....l9[.....U..y.....F.:.....D.M..N....<.g.=..3...T5g0........=..........@..6.7p../...-..e.......n.......2 ...I.&..p...j.H...6..*..... ...._9.9f.o,..QT.t.. .....C..@....ZZw......a.......J.L..7.E.:E......$ ...).w..?...E.gI......7.....r.?.............~.V..2.+.2M.........O)..~nE..2........OQ.3&.i.NP.p..........jj....b .........._....N.;...@....L..o........:y.?.\ .S......g:J..R.V.E.../..u.].....).6.v.@.Dm`....`...........Lm.."1V0......o.,..1H&..%......i.7.t....0w^.=....{k.OI.....r..&.h......k....D>.O.<..:....@...@nh...1..{..#k.g.{......[".6.w<...#..o.(.......`.!~OX...=V.....i.n._.K.8Cq...?.P./.h.....SeU..lJ^.........D......:i.1.......)..z..x.5...`.gw.......`Q7..../.s..I..1<'!.Y?@s.E...B.I..^..-[.{...o^.A..@..O58.....@..o....ei.OE.W......h...M.v..;..G.f......".C.hp.Xa....H_..j..<......D.`k.ob..w.o)..

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24564
Entropy (8bit):	7.982321689602927
Encrypted:	false
SSDEEP:	384:4LjfSktTp6+e/x30SnoTHKPrdYX//6NLlZE6Gn9NR9kALI555d+8EvCCve3DYfJB:Yj/Tp6+e1sDKPZYXgK6qVkzGdm3DcBz/
MD5:	05FC9F1F628DAEEDB96767C94E5E7D29
SHA1:	CF0D8CA37A707E3C0DB5A2841B2D374F0915DD4E
SHA-256:	CF9671D64932766CB38C964B2B1CBE8801040CCDC82956DE15AB351A29714556
SHA-512:	114208BE141C3E9EE97D00287E831DEBF26FB3CF00F07120558FAA710D1FD09E96EA7DE6DD73898231E61548346ECBDE6B8843574FEA9C9FDB52555F29A2F862
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2019/05/integrations-page-salesforce@2x.png
Preview:	RIFF._..WEBPVP8X.........../..ALPH.8.....m.H..o{v...G......&.0.Z}h'.7.LFn.mj6RDs..[.$K.$.2./..../.Ta&Q...N...._.$Y.$.......D.-3m...........=..q.#I2F...$.I.$I...$+.ZY++++.VV.JVV.V.d%IVV.d$.IF2..1..c..q...?.L.k....'"d.....C6..s.<+../.}>........o.....W~@s..i..F..d.[..O.V...f,-.f2...~.K.`.w}......N8.........@M...Mh.QHFY...mv)yq+.d%.n\...\|.g..`.e.8...._.#....j.Z.V...t}L.{..$b=@ ....m...^..ehd.jj.....w.l.g{'...2n..`-\K.._.".......,9c..^........_..q....7.J.w..^..A..j.}.W.L.,.............x......../,.l.9..cA) ....Z..i.16c.xEM..cyu..5.z.Y.z;7...6.~.y..1.....2.......+.o=...W...j...@...{.g.Ij.$....%....<!K.....4...}.u.~.{]..,~-..5..I....].......d...:.<.Y]..iE...e.\|..f@..3.....h.)..s....M..c....7...9\.~_2b%r#$W.."O/.....NJ.......4.....$.A.mu...Y....................U!....,P;.R..d+ONF.GR...Uv..i...NOu.AmXN.\....^..L.=W..S*...{u.:nl.d-..9.&...I#.1.....G."......ZW.!......jiN...../...0_..4.tY.\....)....?..6...U:Y..%SN...N......\YAu...i....g.^=.......^.E....

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	44554
Entropy (8bit):	7.964263127617596
Encrypted:	false
SSDEEP:	768:3kamE2Nz1IR8e7HX0uHq29d07btAcHZEG1ndOMz/fsqlPPSd:tmEexIaIKgSiCZEAdOM4qlP6
MD5:	446025C2202FAA3D7D07CD08648378B0
SHA1:	2ED2C8C5DE359A932D8956839366961CAF7A7F08
SHA-256:	E55A32403FD1453D79A4DF80A37C15D92689539309FC96A3B0089B885BB87D8E
SHA-512:	552C8F6EA05701C74E3F18FF0293A6FDC98C296AF03ADA3930722F38B6B8676674C638AB9129B971199E88F593599676D7D1F5245B2E9A69E2F3EF38B0276A7C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Macintosh)" xmpMM:InstanceID="xmp.iid:3765C8EE276F11ED9963ED767FC75670" xmpMM:DocumentID="xmp.did:3765C8EF276F11ED9963ED767FC75670"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3765C8EC276F11ED9963ED767FC75670" stRef:documentID="xmp.did:3765C8ED276F11ED9963ED767FC75670"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>M{x....yIDATx...\|....$.Y.,.r.;.f..;...Z..C.......H ....z.\|........7.d[...g.5Z.l..].j........y3;s..w..iii1

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9312
Entropy (8bit):	4.937003383694957
Encrypted:	false
SSDEEP:	192:e0zDuAn+eT6X3vRzpedPRPkaFclVERezlf/LX74K+ljkBfgk:ry2+eWXJ1eL4lVEoZf/5+ljCh
MD5:	46CAC945E491B87E2835B2D5E8EC8804
SHA1:	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B
SHA-256:	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
SHA-512:	E30B985F18B6ED70B6B2F50691AB5698412FE4F67D1297F2582D6445DF65971DBC35758C122F9780D8D6306F5AC6B543E82AB2ED24CEF68E94D8178112F7BE9E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/ccpa_iframe/ccpa_iframe-vflRsrJRe.css
Preview:	html,.html.maestro {. display: inline;. background-color: transparent !important;.}..body {. background-color: transparent !important;.}..:root {. /* Colors /. --color__theme__link: #0061ff;. --color_primary--light: #0061fe;. --color_primary--dark: #0057e5;. --color_graphite: #1e1919;. --color_graphite--darker: #312a25;. --color_coconut: #f7f5f2;. --color__utility__focusring: #428bff;. --color__disabled__background: #bfbfbf;. --color__opacity--darken1: #f3f0eb;. --color__opacity--darken2: #e4ddd3;. --color__faint__text: rgba(82, 74, 62, 0.78);. --color__alert__background: rgba(155, 0, 50, 0.1);.. / Animation Speeds /. --motion__time--fastest: 100ms;. --motion__time--faster: 200ms;. --motion__time--slow: 600ms;.. / Fonts */. --type__body--fontfamily: 'Atlas Grotesk Web', 'Atlas Grotesk', 'AtlasGrotesk', -apple-system,. 'BlinkMacSystemFont', 'Segoe UI', 'Helvetica Neue', 'Helvetica', 'Arial', sans-serif,.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	19940
Entropy (8bit):	7.973796806840857
Encrypted:	false
SSDEEP:	384:QdWEopWFerTHAUgsemtA8+e2SeDK4pqUlnrfc6TGjtmMQ8dxYsHia0:KZoc+TgKemOeVUVnTeXdx
MD5:	4691833A73B1EC07868C8B6340AA6869
SHA1:	8967052315F61141F1FE842E5E59DA25544D1199
SHA-256:	FCDF54D1C5C9720FE35829B15266633F59662F6DEF5647C38300A0866B8497C7
SHA-512:	03C08EC4846E468013A2C1E0E855831A74A2404574476D48842C205FA33EA5A5F94F3FB3CFE98700F73F09C37853C8BA1597FCF794CB06C16C1BF9EB342AB2CE
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/uploads/2021/12/DBX100_How_It_Works_v5_3_Analytics.png
Preview:	RIFF.M..WEBPVP8X........~.....ALPH......VkS.m...$ ..%!....r..$ .$ ..HX.$.uw ....G....9v,/......w5n.2.g\|......o61.-6..M..8e._........3..+8....n8{q?%..6.C..es?#..6.#.Z/..'.4.[~B.=...A...C...zho.?.....:.....!.r.!....c...y..a0....G.....!..m....0...0.......:.........._.._?._Y.@.o..D~3.@.o.....p.h.....5.0..6...Am..~6. .........!$...!._...$.........f..{M....:+..-KxW...m.....KV\|^.o.....a.!j.5yGD.>..^..).%Z..C..K.6.w.r..U.^.i...t.&.....}..Tw{....Z'..u,I.f..}..Tw.Z....k].C......6...l}.8n9.[@.uP..U.c..Uc`C}Z..k.f....ujX...U.3u.B...#.O.i.Z....4.64N.e...m.B;Q.h.Z..Z....[.w.Z....&.Z...?.,lh.[..h.M....(L.s...T.,]....P..72.V=.N..Z.wt.[>...i#"_..7Z...}.8,.;.^...P.L....C%XZ...?...]..m. .i#".SyC.fhEr..7[...}9....e."..-H....74....5..[..C...$y.,M..u.4......o.=...414.[.....r>.,Y......\|Z.;.E..h.5....HL..R.z..(.XU<.z..74.&...{ZlP..)..Yw..x.Xq\.0M....}D\.8.Y...v....+.{..{i....N...tK....C..P.F7.......+J.tw./;.%.Ga.H..m. ...(..}6....>..hw..\:..Y.f.. .+"

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with no line terminators
Category:	downloaded
Size (bytes):	19112
Entropy (8bit):	4.925803331028785
Encrypted:	false
SSDEEP:	384:WuMyZYAlowcIXeCcT+Cn2vQSREsqfSSeZSHmfY6k4r:cyZ/xcT+Cn2vQSRYfak4r
MD5:	1AC0A3B800CE910CA8070BCD78A2E26D
SHA1:	99E32392586BE8CF9858702BC7643DBBD9BDDAD9
SHA-256:	FCE7C2DE7E1FD7AC1B5CE7A5DC4B9C7063592FAAF9DAD0E1BA8B0769B4594EF9
SHA-512:	5635C6A1591629B8CA9035AD9C14AFB519319C782C02DB204BBC0B31A5944892BD8A79244E8812656C108FC3AE97BAFE632953C72208640E5D0C7DE770C48632
Malicious:	false
Reputation:	low
URL:	https://lp.dropboxbusiness.com/index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&callback=jQuery37107759753487658225_1713459581265&_=1713459581266
Preview:	jQuery37107759753487658225_1713459581265({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","ResetLabel":"Clear","ButtonLocation":"120","LabelWidth":100,"FieldWidth":150,"ToolTipType":"none","FontFamily":"Helvetica, Arial, sans-serif","FontSize":"13px","FontColor":"#333","FontUrl":null,"LineMargin":10,"ProcessorVersion":2,"CreatedByUserid":666,"ProcessOptions":{"language":"English","locale":"en_US","profiling":{"isEnabled":false,"numberOfProfilingFields":3,"alwaysShowFields":[]},"socialSignOn":{"isEnabled":false,"enabledNetworks":[],"cfId":null,"codeSnippet":""}},"EnableDeferredMode":0,"EnableCaptcha":0,"EnableGlobalFormValidationRule":1,"ButtonType":null,"ButtonImageUrl":null,"ButtonText":null,"ButtonSubmissionText":"Please Wait","ButtonStyle":{"id":11,"className":"mktoSimple","css":".mktoForm .mktoButtonWrap.mktoSimple .mkto

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1669), with no line terminators
Category:	downloaded
Size (bytes):	1669
Entropy (8bit):	4.867923317267309
Encrypted:	false
SSDEEP:	24:VLJuq3+qI+upBLBqdjgLBqd0+K5aQYhuNYodehuNYo:VP++BFfs5J1X
MD5:	A1DC873FEF5BD0CAD0E2F8CF78FB0AC6
SHA1:	CE22FD2DE9DAF1B2BA1FA0F6E81251B1436CC515
SHA-256:	66C21C40259A6733D4B50711A5C0813F316858CD9E4F4E99D2BE2FA5D8F111DE
SHA-512:	903C7E5F2EDBEC7D3003D8095FE0C4B2B4A42C6E77B43BADF7B05FD9666428AE6CE739F30DDF4D002378B24E9D1FE8EBEFC4E2EA0492BB1373AA8CC723E3C317
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=1711053212
Preview:	.bctt-click-to-tweet{display:block;background-color:#fff;position:relative;border:1px solid #ddd;-moz-border-radius:4px;border-radius:4px;padding:15px 15px 15px 30px;margin-bottom:1em;margin-top:1.75em}.bctt-click-to-tweet:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.bctt-click-to-tweet .mce-content-body{position:relative;color:#000!important;font-family:helvetica neue,Helvetica,Arial,sans-serif!important;font-size:1.5em;line-height:140%;font-weight:100;text-decoration:none!important;text-transform:none!important;word-wrap:break-word;border-bottom:none!important;box-shadow:none!important}.bctt-ctt-text a{padding:15px 0;margin:15px 0;position:relative;color:#000!important;font-family:helvetica neue,Helvetica,Arial,sans-serif!important;font-size:1.5em;line-height:140%;font-weight:100;text-decoration:none!important;text-transform:none!important;word-wrap:break-word;border-bottom:none!important;box-shadow:none!important}.bctt-ctt-text a:hover{text-de

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1454)
Category:	downloaded
Size (bytes):	1947
Entropy (8bit):	5.2564996833559094
Encrypted:	false
SSDEEP:	48:2Mng6SpuwsqK0az2WNX6IMj5wB/tOQ5oQJUG6e:2MngPntP74XejuB/1oQJUG6e
MD5:	5439BCAF10BCF48AAF914B8995B910AB
SHA1:	8249BB0A7B1E45BDBEB357E19FA133B28E64CD57
SHA-256:	AA113DBD31686181D190E58652D01E2B7C372A2747AD7C14CC37B6D560FCEF4F
SHA-512:	69E0E4105E1DF02A6D967272652B2F074025AB76971671FF5140087CE6CD23308009BA6F104FF707891E399DE413310A5FD6E9B96D82B7A56F44F167BC99C135
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.63.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.63 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..!function(f,b,e,v,n,t,s).{if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,'script','https://connect.facebook.net/en_US/fbevents.js');fbq('init','176175412745322');fbq('track','PageView');try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;retu

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9460)
Category:	downloaded
Size (bytes):	26110
Entropy (8bit):	4.916545628068536
Encrypted:	false
SSDEEP:	192:oagFnNojImVVMgaulg8LJq5lg8LJEvlLxXxl68Jg/8l68JgrYlljLWfFEiKuuRXw:oakNsImVVMgHy2MPSLXHl441ynb3UuRJ
MD5:	9B0B92715601739CF2D1FD5FB5DB08BF
SHA1:	D8EF11135A92E0A039C53E14AB73319D118229A9
SHA-256:	01EECA8545F3CFF540645825F9627ED5C4D2A13711ED20DB12E8898D098EAAA8
SHA-512:	E27649430D3272534F7B57C08DD0196D0339F1E806C7296938CF30B4528AA26E8CD4A258E87EDB672743359AADB32BE217B6B65C5853E93DA5A8D84EF4F4D190
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.47.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.47 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=114595&time=1713459564729&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F
Preview:	{}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	58775
Entropy (8bit):	5.562242370392343
Encrypted:	false
SSDEEP:	768:V+1I623bzp4VdOpt6fLQ9eduJSL/mrEYsmEi3DnQlDXNoZaAD3t:/6oQ8t6f3L/m2mDnbt
MD5:	1ACBD20B4A303A41BBA4C1AF0636ABBE
SHA1:	21497B44DCA32BAD04A2ABBBA7DD517E8CC16055
SHA-256:	760BCAF29C194CD5C63B59B29FEF5BC7FA164C844152FF5EEE8F7B97E84A38AC
SHA-512:	6D44328CAD49585021F03D4C90AF612F14CF6CFF4F6B68B3BC33C8E8A5C14E8B4721D34DE809D4ECA1140F6CBBD19135D9D12E822C5815EC8141755DC7B7A23B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Uqb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.PS(a)},Vqb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17913
Entropy (8bit):	7.601424625123953
Encrypted:	false
SSDEEP:	384:RHIvSTOs9YnrKDj8peoSscRvHeGw59Ry9vUn8in7VZ:RHY8SWDwYH/IE9v+8i7VZ
MD5:	CA2F4E7EB2C7BA6931A797CA16033AF8
SHA1:	1BFEDD791984875B702FF8D4CD062460D2B99E6A
SHA-256:	AB23781FE8758270C567E92D1E36F24B2BDFE269779B1383237D7ACF78136E11
SHA-512:	73BC91EFE91A8B167B300B448EBEA51C82C52D134A3FE326F0D6EDC6FC2A450D3CEB0824611DF89F94D9103A1632985554C5052D0469BA6E3040220991772B43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...0.....~..G....pHYs...%...%.IR$... .IDATx......e......5.DB ...".....iRL...P.E..F....WD..]..k.Q.D$.../EE./*b.+..dwO....yffs.-!.Ovg>..k.g...m...=?/.c......>.2....W. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g. .....!.....p..............g

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2962)
Category:	downloaded
Size (bytes):	2963
Entropy (8bit):	5.059442814486228
Encrypted:	false
SSDEEP:	48:boD3AFSMrvDpVzueGEKaxOSBaKv0DEq3AbCCLS1BDRLtmfDRcz43V56Y:bg3zU7/ieGEKaxnoKcDEq385mpa3nh
MD5:	4D8313A7B6900F61AE9BFE51DDF4F67B
SHA1:	8B528784DBBE02C32F5F844953563C9B30178600
SHA-256:	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
SHA-512:	9376D23F37B26C95A8DE19B1B104935C521DEE10328629A7B82CAA0FA524C7079DBB9687AA5C270D348FE64DA414C22F8E72DADC23C2FEC9427EB72598DA8263
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflTYMTp7.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	639
Entropy (8bit):	5.239448849095377
Encrypted:	false
SSDEEP:	12:U2eAi/ZB5tpUQxkNP371H5ouSA0CVKR/x6rgYaTmokRm2MRTGM6yK3TCz:xeAi/ZBdU7Z371HOu70CViTmBmDKn3Gz
MD5:	98070F1CF7C37AF35E411C1EAE73D5C3
SHA1:	652F4EC37768D55F02BA12617D3058E3A3436761
SHA-256:	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
SHA-512:	849B96385E40A08420CB2337673EC3F07AB828D5ED8F7856BC17C6E0BA1A2B8ECC9BA9CA16606930F02BC4B23E364DC832296C12FE3DB69EBB8948B975245A33
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/content-icons-vflmAcPHP.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-content-icons@4.6.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-ContentIcon{box-sizing:border-box}.dig-ContentIcon--overSubtle{--dig-color__fileicon__container:var(--dig-color__background__base)}.dig-ContentIcon--hasNoBackground{--dig-color__fileicon__container:transparent;--dig-color__fileicon__shadow:transparent}

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	4.326412428585242
Encrypted:	false
SSDEEP:	48:vgACoTGz66whgnqqwB9KbgCC/TQf5RjOg4yRZRY:jTG+6QgnqqwggCC/Ef/OgHlY
MD5:	A87A3FF054ECAF49A26A1A6639C12985
SHA1:	E2635453389E6DDF04435B05AEB3CBC08AD9E8C7
SHA-256:	205934B4647F28D38D32BE870B3F0B67532C7CC3825A49A73549C40E7263282F
SHA-512:	F6F8C273CFBA4B57393BAEE83C47B06E7915F7FA0A01F1B620ED0CE93E5992AF47D73F3FF44DC9ADA75B21DBBE9A33F1A6D94B5F4006A3A24DAB6BEC81EFAAA8
Malicious:	false
Reputation:	low
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fal" data-icon="podcast" class="svg-inline--fa fa-podcast fa-w-14" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="#FFFFFF" d="M326.011 313.366a81.658 81.658 0 0 0-11.127-16.147c-1.855-2.1-1.913-5.215-.264-7.481C328.06 271.264 336 248.543 336 224c0-63.221-52.653-114.375-116.41-111.915-57.732 2.228-104.69 48.724-107.458 106.433-1.278 26.636 6.812 51.377 21.248 71.22 1.648 2.266 1.592 5.381-.263 7.481a81.609 81.609 0 0 0-11.126 16.145c-2.003 3.816-7.25 4.422-9.961 1.072C92.009 289.7 80 258.228 80 224c0-79.795 65.238-144.638 145.178-143.995 77.583.624 141.19 63.4 142.79 140.969.73 35.358-11.362 67.926-31.928 93.377-2.738 3.388-8.004 2.873-10.029-.985zM224 0C100.206 0 0 100.185 0 224c0 82.003 43.765 152.553 107.599 191.485 4.324 2.637 9.775-.93 9.078-5.945-1.244-8.944-2.312-17.741-3.111-26.038a6.025 6.025 0 0 0-2.461-4.291c-48.212-35.164-79.495-92.212-79.101-156.409.636-103.637 84.348-188.625 187.964-190

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36207)
Category:	downloaded
Size (bytes):	462480
Entropy (8bit):	5.112695081095633
Encrypted:	false
SSDEEP:	12288:CNmwdbkZq3Qyhsj2FFWakrrU+DF9tGEiA53P/ISVMicQE:KmwdbkZq3Qyhsj2F7
MD5:	19DD3B6E8D0A34196996B2BDC4822B9D
SHA1:	7080B27982EE20508076653047399946A79C1EB6
SHA-256:	F90EB62796415887770F46A0AD5F320DDBB5C2DEC66D2EB3045E934786BBC76E
SHA-512:	50D377EC8533F6B4B5F24C81FD7EA454D7042C7E6D440D193CAF143652C63ACD2089CB839A831B2747E0C91DED3E6ECC008D57969B5686C3165C02B617CAD819
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/cache/min/1/wp-content/themes/marketing-site-theme/dist/css/app.css?ver=1711053212
Preview:	@charset "UTF-8";*,:after,:before{background-repeat:no-repeat;box-sizing:border-box}:after,:before{text-decoration:inherit;vertical-align:inherit}html{cursor:default;font-family:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.15;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;word-break:break-word}body{margin:0;overflow-x:hidden}body.scroll-disabled{height:100vh;overflow-y:hidden}@media only screen and (min-width:1024px){body.scroll-disabled{overflow-y:scroll}}h1{font-size:2em;margin:.67em 0}hr{height:0;overflow:visible}main{display:block}nav ol,nav ul{list-style:none}pre{font-family:Menlo,Consolas,Roboto Mono,Ubuntu Monospace,Noto Mono,Oxygen Mono,Liberation Mono,monospace;font-size:1em}a{background-color:transparent}abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 26, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl+lt/e867syxl/k4E08up:6v/lhPC2117Tp
MD5:	979B65078E378F1FB6799B7C72B74083
SHA1:	E8328432942D9E8FBF650969D3006F76B57ED37D
SHA-256:	190CD2250710218FE8D964A488BE11807CB653497ABD880A3F25593733A854F4
SHA-512:	63A1E7A0D5ECD6D10238F648FB1E830C8A2A52A8FDE3BFBC805DBA4D4B4FEEEE39309E5B4B6814C08836F31BF32D7EE037EF9A72087370FFCD0E44C0D49348EF
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87663518c804138b/1713459591979/ENb54b6QumsEJ6F
Preview:	.PNG........IHDR...+...........2.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22045
Entropy (8bit):	7.7002579921704175
Encrypted:	false
SSDEEP:	384:OWWe6pRT0J47aecHwGR7JZ/s8ncYq94NFQ752fSWpQnwBByqn7oUzmteH+j6h+Ct:f63UeGJWmg94PK52fSYAwqqFJH+s+Cxf
MD5:	3F080426BF7DED02057E3A8A2D421362
SHA1:	D4913D0F0110B56DC8D7D48BD58419DD870AEB69
SHA-256:	6DA5F5C06CD35A9BCF6E47BD9F051CEAEC2075CFDC06ABE50909236445CF2E27
SHA-512:	0CF5051A6C5763484CEC78B8B3FC038260F21A505021EC7B80789B50FDAE9524C33B604320A0ECE73B451339A213ED67840AC4F384E7A25739E901A70F7C50BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...0.....~..G....pHYs...%...%.IR$... .IDATx.....e[.'.u"nv.U.b.:.G....g..(".2..q.`U.D......G......S..'%"8......4U...k.yo.y....c..w._.'n~>Mv...z.;..~{....zm......]....E....<.....x......4.....i. .....@.........O#.....F....<.....x......4.....i. .....@.........O#.....F....<.....x......4.....i. .....@.........,.......z.p..vs..%=}..P.....L..m.S9.V.?..Z.../}...l.........m.^.....@..VO5 .T.Wi#).I.T}..T..S`..G_G......O.V...p...zuC..8.e@..e..^I3.g^..G..{.I.g-..ci.......#..".ri.Q.....k.U.{..)..t......:.cTO...y.....C...R58N...^...V>.U.?/..S..`......v..3...g..t......,...IO......lYB4z._........X..g.j...3/Gg1.={P... ..\|.l.NA...j...l...\.=4..J....}X9.......pH.t~.2.......R..<).L_.2...W.3...}K.......C.%;g...z....H.....QzR.Q...h.J...?._.Pw.....KH...p%....XU...$]..U..N.ER.......(f@..x.jv`itZ.......<...&t..."..kR.....S.6.v.R.l.G}K..Ie.k..E...r...>.'.1....C...i..]....x2.[r....\.=.U..fuR.v .L.4{@...g2....!...Y.lB:]*IO.../{...N...C..

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 639 x 479, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26266
Entropy (8bit):	7.932673885895845
Encrypted:	false
SSDEEP:	768:KPJnYFDV3iKXK3nxtSTCZb0Tmk05H4UANc:sJnyVyKXK3LE7mkEu6
MD5:	BAEC6C621FA8A4AFDE119DE89B5E3D6F
SHA1:	0F6924B0DA9E758857D356009F7C51C232062A71
SHA-256:	4C4FAA4F066C0F5004BCDB48018B1BEEBAF27F6D3289D2AA09D66C36A24613E3
SHA-512:	FDB770401532A97CC07F1F6E83FF288121278A6657F35DA96201AC8E81D048781567ED3DFC85E5853F900744CE95DFED30FF6FC3BB1264F75F6AF7A0D8B0A8B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.......tEXtSoftware.Adobe ImageReadyq.e<..f<IDATx......}.....H..fD2.$.=.ZRN...$..Q...ad!.q.. ........;[.#..wI....`/..m....v..O.`s..b....M.V6t...1.Hr.)....).T,......MM....]..P....WU.>....>......6....[N]l9.Mg.... lg;...K{.Z.>...............l"..A......#\|M.a.......t.m..8".......P...k;.O9.h..kQK....... E...7.........@......Ow.N.\|"}QX.6Aw0....u...!..tA.Oh..9.y.C....uf..#S..a....D..........I.c...i...8.)....u..n_G.$.PR..$by...c.....P'z..ia..P..].u.S.............."v....h9.........&V.OO.1~....8.........H..f..Cf.........J.n..s..w.p.S....j'.z.\.fe".;.....Ud(D.D.....Q0...8E....Jl...l^.i.........g.\|..RF..0.....T^.....V9v........m!.....5.r8\|i...&...P....M.C?w.-..)O1........_.Q?....G.(R........c...>/[..?....=.......(.....~_....#.ZW.2...sS.p..&}.`.e<g9..dd#~....^.}J..3o..\|Y.l..<...@..W.h.#.l....\|..p..%.FM..4)..h%p..uJ;B.MYtE.........?..y.D...cw....B.r...9H.;..V;H.=.(.g..C....o,..8z.]..r.....s.%....).._.8.".....J.e.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.605865765188183
Encrypted:	false
SSDEEP:	3:LzxBHVhV/FIIbN3fVMC06j:LzxSmNyCBj
MD5:	1A2E4874CB0BF70663449B0591212D1D
SHA1:	BEE60C74056CEA269081BBA4AE34CC9CE0484EFB
SHA-256:	E0C829B19E3FDCAE56FC11F13B660F297D678C6F3811B12C3FDCA8C0660CF147
SHA-512:	091B98168C74E151FFA43AAF5ED91E1781FA2EA051FE723913C35CB6E8199FF64954472172A226EE684A2E6E6A385AC914868D8AB7A46E5A37F7E0DC7FB3B703
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/src/subtitles/no_audio_caption.vtt
Preview:	WEBVTT..00:00:00.000 --> 00:00:03.000.[No audio]

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 275x275, components 3
Category:	dropped
Size (bytes):	14112
Entropy (8bit):	7.955386109320988
Encrypted:	false
SSDEEP:	384:/8Mv1NCrerXRLSSIwULOVhz3p4xuYhXBha79wrz5q:/8YOroXReMVn4R1La7ig
MD5:	3C6E6ED51B6DEC8317A9C05D459EC4E5
SHA1:	C9416203550D4F5DD39B870F6DCB00CCABDD2D84
SHA-256:	BBEA8E6FC4758BB9C1CD0359AE0EADFA57838493026FC6ADE9C135FD9EE191ED
SHA-512:	0347876497C981CF831264BFD39CB4EA5A54A928861A862BEE0BF6ABBBB94FEC4D0FABA45DBC98ACCB69BBCEA68A974F57B3AC73E7784AE286DD74BAC35B6060
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"................................................\|.=!"o....t..Y.(zi.:D.c...vBiO.o...a..(...RdL.Xb..<..y...uAG.M..hyF. .P`..{(.I ....o..p......X.Hq...!.......W...%U.&..m.>D.J...!.1#../..%_B...H.,.{..`.Q.Cha......fQ.Nu......N>.3..C.M..{.Ea..q..gQ...\....l.3.P....Wm..+...O.L..8......z......9S.oVb.c..y....:,..,F2.[.......T.e.R..PI.%..;.f9.:...N.%I..(....@..i..!.0...f.2]w/>..u.....[.}S.0.....I./.uF...%.A......f...f.R.!}...{.=....}...VgG...u.Fa).B..E..{....\.F.5..M.?5p.I..R....`g..M..#.D....)..u~....<.0u`...oiL.R]hh.t...@.F..!.O..qf.......\..?.>3^o..._eha...`...`....J}.0.8...1.be.m...!.E..I..+..$.r..=(!......wd.....-[+...Y.x..1.....c}...y\|G4y.....GY..t...h.....).IX.*.X.Wo..\.I\.>.....!i..2..b.0..v.8.......[...X.t.&.:....\|......M_L..kp7.mF...wIx...f....."{..../...,...O...0i..}....4.

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54939)
Category:	downloaded
Size (bytes):	55320
Entropy (8bit):	4.946031865259786
Encrypted:	false
SSDEEP:	768:TAZXM3pHnMxWKZB5HVNN6vMEzJWJd2wtg+3R9/Yo/GrdrYqLZ81A1t/OF+rwbxrO:TAZXapg3R9v/Grd9LBOFZxrnO
MD5:	250DD7BB2E374710798456A4C572D310
SHA1:	9B3D1D22932D5FAFD6DD05FD06D1885FE6CE6691
SHA-256:	F79612EE221ED657AD63B4ED70673AC24DEA5F4027078EF287686F3EDCFE90D2
SHA-512:	E2CF5BEAB1CFAC56DC5830E428F210E1E50ED0DA4C1921B9DED4D8C650E592427C9B5EC96E4184939B0C7FF2140792930DEF56C4C389CE72B059CC08774C0365
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/tokens-vflJQ3Xuy.css
Preview:	/ @generated -- This file is automatically synced from @dropbox/dig-components@19.18.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__unit--1_5:12px;--spacing__unit--2:16px;--spacing__unit--2_5:20px;--spacing__unit--3:24px;--spacing__unit--4:32px;--spacing__unit--5:40px;--boxshadow__elevation1:0px 8px 32px rgba(30,25,25,.03),0px 8px 16px rgba(30,25,25,.03),0px 4px 8px rgba(30,25,25,.03),0px 2px 4px rgba(30,25,25,.03),0px 1px 2px rgba(30,25,25,.03);--boxshadow__elevation2:0px 16px 80px rgba(30,25,25,.03),0px 32px 48px rgba(30,25,25,.03),0px 16px 32px rgba(30,25,25,.03),0px 8px 24px rgba(

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 55214, version 1.0
Category:	downloaded
Size (bytes):	55214
Entropy (8bit):	7.9964970591457645
Encrypted:	true
SSDEEP:	1536:OIbXZxojFUHlZ6ZcokVSLXiklLXuCUIlSKZbNFOr5kXs:9T0FUFIaokVSLXicyx8NUrqs
MD5:	237AAD684514B77165115300A45FA3AF
SHA1:	2D42D9FB68A83C98693A0D966D229F5DBC3D3A72
SHA-256:	40D852F2A2082060963BF762EF7E69A938D0B8ACF3885DE575594C197E6F16D8
SHA-512:	731B5CD8237997F2B6E2FD99BC95456E6D0D6881A3AB90A243E76C2F825635798A9C6641207DDB59B217A16449F8868035B612DCEA0ED331F9822C18AE68A185
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/SharpGroteskDBMedium20-vflI3qtaE.woff2
Preview:	wOF2...........................................@...D..D.`..@...........$..x.6.$..f..v.. ..j.....V[.T..........sl[+._..JR#..........%..../(.n........[....%)..P...n2...?........V.P.E....!(J..."<.....%...$.'.:f..3.g.A.]e.^.. ".R..FN...q.8..K...{..q...1q.."r2.L......FT...z...b@1.h..C.V...Q=V.`5...S?...Wz..6.X...z........vvf..).\h.ig.f%.,...7Q.=...!...oe.$.-u............\.4o..i..&..3..&.2.SF......+\]....x>5...srY.1..kJ..)..G=.._Zj.\....$..JvmlqH....._q...N3.........-z...X/...2..%..U..I..\|.V.@.g>...EG4i..Q.?....}.n.16...7h.2.#..;0..0...W....m.<..E?......E.........O.4.._.V+.Y;.wj.m.Uk_._j..e@.%...C.).....bs.`..f.....k.k ....7..2lHGF..J.......5.[.4f...Nl...p....~<............o.3........;{.r.d.).I`......k5.+S.\|...._.L..........P..U.."`y.3Z...s.B.\#VI........g..L...$y.D......;.....U..Sa+tm.?.(.:`.,..i.<s_N...{U-k..p......QH...y.pI..WJ<@..a......j......D..Cs......$.....,..3'd'...m..f.M"@.......I4kbH...x..=...Y5q2..$...1.'...{@.......(.<.....a.6.../._.d

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1410)
Category:	downloaded
Size (bytes):	1878
Entropy (8bit):	5.245594543427525
Encrypted:	false
SSDEEP:	48:rMnO6OpLvw1Q81az2WNX6IMj5wB/tOQ5oQJUG6V:rMn/pq8174XejuB/1oQJUG6V
MD5:	2231BAE4566078A61424E541B984882C
SHA1:	A6AC8CD5E9A0C4BB9E775677C4F7EAA8E58EB46A
SHA-256:	C17746F0255BB85C219182A8DA7CF3F13233A2217E6BF9CF9FF25A1496CED647
SHA-512:	A2C5B435EE354A985692A67E8AF8D5F2A6649559C5260E17F52D16F0AF21316134440B969974A3B5CE2799F0AA7C5FD2216146F6E1540F8B68D537D6DD9470FB
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/dropbox/docsend/prod/utag.46.js?utv=ut4.48.202403080337
Preview:	//tealium universal tag - utag.46 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved..!function(q,e,v,n,t,s){if(q.qp)return;n=q.qp=function(){n.qp?n.qp.apply(n,arguments):n.queue.push(arguments);};n.queue=[];t=document.createElement(e);t.async=!0;t.src=v;s=document.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s);}(window,'script','https://a.quora.com/qevents.js');qp('init','127bda98248c4954b8c2892a79eefaa2');qp('track','ViewContent');try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GPOS", 33 names, Macintosh, Atlas Grotesk Web MediumNot to be used for anything other than web font use!Atlas Grotesk WebMed
Category:	downloaded
Size (bytes):	126796
Entropy (8bit):	6.0973584224010855
Encrypted:	false
SSDEEP:	3072:D5G6Y5eOac4UV9r4R7Op9RUkfTVozobohsqDyGPWa:D5G/qtU8R78gkfTeMbo0w
MD5:	291050AC794E40E505B214078BC7D5A8
SHA1:	D73DA989319E842598D065E055B5C3EAFC0AB6F6
SHA-256:	718C4140F23A9AF1BB24D3367C7289AF6F036F722066B37662DA515F458F61C3
SHA-512:	21CC8C28517856A9283389F65310DE1EFF56D007BF5F3AEC0BFFF356E37984FFBF5A5C461733E23BEA2E83219A3724BC5FE658F54E9F820B37F307C77D296702
Malicious:	false
Reputation:	low
URL:	https://www.docsend.com/wp-content/themes/marketing-site-theme/dist/fonts/AtlasGrotesk-Medium-Web.ttf
Preview:	........... GPOS......N....&GSUBu._....0....LTSH.W..........OS/2_5k........`cmap.....l....\cvt .-....r....2fpgm.B....oh...agasp......M.....glyfu..j..v@....hdmx.........`.head..h'...,...6hhea.=.....d...$hmtxkN]f........locaZ.j..r@....maxp........... name.....:....cpostM..r..?....\|prep.p...p....?.......B<..._.<...........aH........1. .....................,.D.....1.2...........................f...N.......................8.........X.............2..............................COMM.@.....,.D...... .............. .....................8...$...;...+...;.].N.W.....$.y.G...,...:...<.<.....9...%.v.-...3...%.\|.3...9./.....1...3...I.../.y.F.y.O.y.M.;. ...0.......V...8...V...V._.V.0.8...V.9.V.......V._.V...V...V.6.8...V.6.8...V...7.......M.....-.....".......(.v.f.<...v...........q.O.=.#.z.M.>.).\|..G.).n...y..u.M.".L.$...H.M. .M...M.u.M.Y.).z.M.\|....M...$.....s.J.%...Q...$...)...../...%.!.`.............8.O.C.......w.=.{...!.`.g.1.q.....7...).....w.G...(.q.....8.y.G.......&.q.f.g.8...<.....)..

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/langpack/icu-en-vflmZFLky.json
Preview:	{}

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	565
Entropy (8bit):	4.890654810206789
Encrypted:	false
SSDEEP:	12:Yyt1Hzc6wg4IFFQbSJN1Kvu6exBA9QmA9abcA9FXQEBaeo4czgD+:YybTcq4SJLKcxBYQmY7YFBoV5
MD5:	BC775A8A3CD1B92C6C2066E255AF778A
SHA1:	DEC6A3E0AF17B50A719F937559F0953246F3ECE7
SHA-256:	7323C2251A688328967EA9CB5E799661489380701505CDD64C8AE3439A4607C2
SHA-512:	A02DA0EF1BC20DAE623A6FCEEF248B72A5B77112A0442790662647F46C5DBA91CD425F6FF00598FD8359D53402FF3365A739FC4F3292A7966E9F0364A4538ADB
Malicious:	false
Reputation:	low
Preview:	{"integrations":{"Segment.io":{"apiKey":"pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]},"retryQueue":false}},"plan":{"track":{"__default":{"enabled":true,"integrations":{}}},"identify":{"__default":{"enabled":true}},"group":{"__default":{"enabled":true}}},"edgeFunction":{},"analyticsNextEnabled":true,"middlewareSettings":{},"enabledMiddleware":{},"metrics":{"sampleRate":0.1},"legacyVideoPluginsEnabled":false,"remotePlugins":[]}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 18:58:25.971584082 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 18:58:35.579406023 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 18:58:36.294951916 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.295011044 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.295095921 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.295346022 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.295367002 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.324588060 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.324639082 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.324712038 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.327063084 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.327080965 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.519179106 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.522011042 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.522039890 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.523607016 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.523694992 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.527321100 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.527415991 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.527697086 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.527709007 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.539129972 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.539329052 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.539340973 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.540533066 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.540606022 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.541140079 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.541208029 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.579890966 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.595432997 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.595448971 CEST	443	49742	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.641375065 CEST	49742	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.791807890 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.791964054 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:36.791991949 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.792130947 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.792855978 CEST	49741	443	192.168.2.4	13.33.4.11
Apr 18, 2024 18:58:36.792876959 CEST	443	49741	13.33.4.11	192.168.2.4
Apr 18, 2024 18:58:38.001602888 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.001635075 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.001693964 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.005073071 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.005086899 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.225884914 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.227097034 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.227117062 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.228607893 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.228676081 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.230995893 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.231102943 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.285100937 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:38.285135031 CEST	443	49753	142.250.105.105	192.168.2.4
Apr 18, 2024 18:58:38.330708027 CEST	49753	443	192.168.2.4	142.250.105.105
Apr 18, 2024 18:58:39.008502007 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:39.008529902 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:39.008620024 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:39.032351017 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:39.032377005 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:39.255306959 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:39.255403996 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:39.508905888 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:39.508941889 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:39.509367943 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:39.551580906 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.042429924 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.088143110 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.155005932 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.155126095 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.155286074 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.155344963 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.155380011 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.155380011 CEST	49765	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.155400038 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.155422926 CEST	443	49765	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.218914986 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.218955040 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.219033957 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.219892025 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.219919920 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.440315008 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.440399885 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.442293882 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.442306995 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.442662001 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.443978071 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.488126040 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.647955894 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.648153067 CEST	443	49776	23.201.212.130	192.168.2.4
Apr 18, 2024 18:58:40.648226976 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.649081945 CEST	49776	443	192.168.2.4	23.201.212.130
Apr 18, 2024 18:58:40.649107933 CEST	443	49776	23.201.212.130	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 18:58:36.186989069 CEST	192.168.2.4	1.1.1.1	0x11d0	Standard query (0)	docsend.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.187177896 CEST	192.168.2.4	1.1.1.1	0x581a	Standard query (0)	docsend.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:36.795537949 CEST	192.168.2.4	1.1.1.1	0xc255	Standard query (0)	www.docsend.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.795660019 CEST	192.168.2.4	1.1.1.1	0x5f3b	Standard query (0)	www.docsend.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.527260065 CEST	192.168.2.4	1.1.1.1	0x99e9	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.527875900 CEST	192.168.2.4	1.1.1.1	0x379a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.749814034 CEST	192.168.2.4	1.1.1.1	0x7916	Standard query (0)	lp.dropboxbusiness.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.750819921 CEST	192.168.2.4	1.1.1.1	0x1b23	Standard query (0)	lp.dropboxbusiness.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.752892971 CEST	192.168.2.4	1.1.1.1	0xc29c	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.755989075 CEST	192.168.2.4	1.1.1.1	0x34b7	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.757461071 CEST	192.168.2.4	1.1.1.1	0xa648	Standard query (0)	polyfill.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.758383036 CEST	192.168.2.4	1.1.1.1	0xf606	Standard query (0)	polyfill.io	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.894733906 CEST	192.168.2.4	1.1.1.1	0xb564	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.895363092 CEST	192.168.2.4	1.1.1.1	0xe581	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.904292107 CEST	192.168.2.4	1.1.1.1	0x200c	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.904742002 CEST	192.168.2.4	1.1.1.1	0xdf9c	Standard query (0)	hsforms.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:37.905730009 CEST	192.168.2.4	1.1.1.1	0x54a2	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.906229973 CEST	192.168.2.4	1.1.1.1	0x16de	Standard query (0)	hs-scripts.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:38.005733013 CEST	192.168.2.4	1.1.1.1	0x8806	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.006345987 CEST	192.168.2.4	1.1.1.1	0x4ec9	Standard query (0)	hsleadflows.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:38.013416052 CEST	192.168.2.4	1.1.1.1	0x4415	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.014910936 CEST	192.168.2.4	1.1.1.1	0x9f34	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.116296053 CEST	192.168.2.4	1.1.1.1	0x9a5d	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.120560884 CEST	192.168.2.4	1.1.1.1	0xe660	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.121130943 CEST	192.168.2.4	1.1.1.1	0x2489	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:40.096487045 CEST	192.168.2.4	1.1.1.1	0xeda9	Standard query (0)	www.docsend.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:40.097763062 CEST	192.168.2.4	1.1.1.1	0xe875	Standard query (0)	www.docsend.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:44.699207067 CEST	192.168.2.4	1.1.1.1	0xe0c6	Standard query (0)	featuregates.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:44.699860096 CEST	192.168.2.4	1.1.1.1	0xee60	Standard query (0)	featuregates.org	65	IN (0x0001)	false
Apr 18, 2024 18:58:45.147054911 CEST	192.168.2.4	1.1.1.1	0xf309	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.147249937 CEST	192.168.2.4	1.1.1.1	0x6683	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:45.246233940 CEST	192.168.2.4	1.1.1.1	0xe399	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.246543884 CEST	192.168.2.4	1.1.1.1	0x2f3e	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:45.247772932 CEST	192.168.2.4	1.1.1.1	0x88bc	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.247962952 CEST	192.168.2.4	1.1.1.1	0x5514	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Apr 18, 2024 18:58:47.301563978 CEST	192.168.2.4	1.1.1.1	0x6b8d	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.301822901 CEST	192.168.2.4	1.1.1.1	0xad71	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:47.804847002 CEST	192.168.2.4	1.1.1.1	0xc4f4	Standard query (0)	featuregates.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.805318117 CEST	192.168.2.4	1.1.1.1	0x5ace	Standard query (0)	featuregates.org	65	IN (0x0001)	false
Apr 18, 2024 18:58:48.061716080 CEST	192.168.2.4	1.1.1.1	0xfd7d	Standard query (0)	lp.dropboxbusiness.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.062099934 CEST	192.168.2.4	1.1.1.1	0x2ff7	Standard query (0)	lp.dropboxbusiness.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:48.063060999 CEST	192.168.2.4	1.1.1.1	0x15f7	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.063733101 CEST	192.168.2.4	1.1.1.1	0xf3fb	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:48.909734964 CEST	192.168.2.4	1.1.1.1	0x1e66	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.910773039 CEST	192.168.2.4	1.1.1.1	0x860	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 18, 2024 18:58:49.178833008 CEST	192.168.2.4	1.1.1.1	0x26db	Standard query (0)	marketing.docsend.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.179487944 CEST	192.168.2.4	1.1.1.1	0xae59	Standard query (0)	marketing.docsend.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:49.855206013 CEST	192.168.2.4	1.1.1.1	0x2c67	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.855340004 CEST	192.168.2.4	1.1.1.1	0x61fe	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.274219036 CEST	192.168.2.4	1.1.1.1	0xd664	Standard query (0)	events.statsigapi.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.274471998 CEST	192.168.2.4	1.1.1.1	0x82c1	Standard query (0)	events.statsigapi.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.300671101 CEST	192.168.2.4	1.1.1.1	0x12ec	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.301242113 CEST	192.168.2.4	1.1.1.1	0xeac0	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.302100897 CEST	192.168.2.4	1.1.1.1	0x98d8	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.302297115 CEST	192.168.2.4	1.1.1.1	0x27b0	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.695401907 CEST	192.168.2.4	1.1.1.1	0x5353	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.695729971 CEST	192.168.2.4	1.1.1.1	0x94ea	Standard query (0)	hsforms.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.696731091 CEST	192.168.2.4	1.1.1.1	0x855a	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.696908951 CEST	192.168.2.4	1.1.1.1	0x9e7a	Standard query (0)	hs-scripts.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.698287010 CEST	192.168.2.4	1.1.1.1	0x775d	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.698966980 CEST	192.168.2.4	1.1.1.1	0xaac4	Standard query (0)	hsleadflows.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:51.820003986 CEST	192.168.2.4	1.1.1.1	0x6f0c	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.831934929 CEST	192.168.2.4	1.1.1.1	0xb805	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.834297895 CEST	192.168.2.4	1.1.1.1	0x649b	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:53.104207993 CEST	192.168.2.4	1.1.1.1	0xda75	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:53.104473114 CEST	192.168.2.4	1.1.1.1	0xf8e	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:55.440929890 CEST	192.168.2.4	1.1.1.1	0xc05d	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:55.441203117 CEST	192.168.2.4	1.1.1.1	0xf468	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:56.565196037 CEST	192.168.2.4	1.1.1.1	0x4161	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:56.565196037 CEST	192.168.2.4	1.1.1.1	0xca25	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:57.442220926 CEST	192.168.2.4	1.1.1.1	0x611b	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.442604065 CEST	192.168.2.4	1.1.1.1	0xeb69	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.058056116 CEST	192.168.2.4	1.1.1.1	0x5be5	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.058172941 CEST	192.168.2.4	1.1.1.1	0x3b25	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.069997072 CEST	192.168.2.4	1.1.1.1	0xe02f	Standard query (0)	dropbox.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.070127964 CEST	192.168.2.4	1.1.1.1	0xd4a4	Standard query (0)	dropbox.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.085794926 CEST	192.168.2.4	1.1.1.1	0x24a7	Standard query (0)	dpiprodesntls.112.2o7.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.085932016 CEST	192.168.2.4	1.1.1.1	0x4d20	Standard query (0)	dpiprodesntls.112.2o7.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.089704990 CEST	192.168.2.4	1.1.1.1	0xc892	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.089847088 CEST	192.168.2.4	1.1.1.1	0xc214	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.307729006 CEST	192.168.2.4	1.1.1.1	0x2764	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.307945967 CEST	192.168.2.4	1.1.1.1	0xeb77	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:58.826680899 CEST	192.168.2.4	1.1.1.1	0x39e4	Standard query (0)	dpiprodesntls.112.2o7.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.826848030 CEST	192.168.2.4	1.1.1.1	0xdc64	Standard query (0)	dpiprodesntls.112.2o7.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:59.124804974 CEST	192.168.2.4	1.1.1.1	0x37d6	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:59.125211954 CEST	192.168.2.4	1.1.1.1	0x7728	Standard query (0)	hsforms.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:59.126086950 CEST	192.168.2.4	1.1.1.1	0x2baf	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:59.127279043 CEST	192.168.2.4	1.1.1.1	0xf50d	Standard query (0)	hs-scripts.com	65	IN (0x0001)	false
Apr 18, 2024 18:58:59.127861023 CEST	192.168.2.4	1.1.1.1	0xbbb0	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:59.128242970 CEST	192.168.2.4	1.1.1.1	0x31ff	Standard query (0)	hsleadflows.net	65	IN (0x0001)	false
Apr 18, 2024 18:58:59.282563925 CEST	192.168.2.4	1.1.1.1	0x7fb1	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:59.282629013 CEST	192.168.2.4	1.1.1.1	0x41b5	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:59.283169031 CEST	192.168.2.4	1.1.1.1	0x86ed	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.675790071 CEST	192.168.2.4	1.1.1.1	0xa51e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.676088095 CEST	192.168.2.4	1.1.1.1	0x54ce	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:07.554300070 CEST	192.168.2.4	1.1.1.1	0x73d5	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.554433107 CEST	192.168.2.4	1.1.1.1	0x28a3	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:09.322266102 CEST	192.168.2.4	1.1.1.1	0x8891	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.322382927 CEST	192.168.2.4	1.1.1.1	0xc388	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:09.332803965 CEST	192.168.2.4	1.1.1.1	0x1c64	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.333230019 CEST	192.168.2.4	1.1.1.1	0x5e30	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:09.872330904 CEST	192.168.2.4	1.1.1.1	0x5b12	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.872530937 CEST	192.168.2.4	1.1.1.1	0xdf8b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:10.196892023 CEST	192.168.2.4	1.1.1.1	0xb33c	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.197180033 CEST	192.168.2.4	1.1.1.1	0x4556	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:10.198749065 CEST	192.168.2.4	1.1.1.1	0xd7d9	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.198889971 CEST	192.168.2.4	1.1.1.1	0xc914	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:10.429362059 CEST	192.168.2.4	1.1.1.1	0xd9d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.429675102 CEST	192.168.2.4	1.1.1.1	0x105e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:10.811280966 CEST	192.168.2.4	1.1.1.1	0xa344	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.811631918 CEST	192.168.2.4	1.1.1.1	0xb420	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:12.417076111 CEST	192.168.2.4	1.1.1.1	0xae7e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.417284012 CEST	192.168.2.4	1.1.1.1	0xd8e0	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:23.734021902 CEST	192.168.2.4	1.1.1.1	0xa66f	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.734292984 CEST	192.168.2.4	1.1.1.1	0x744f	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:24.407002926 CEST	192.168.2.4	1.1.1.1	0xdf94	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.407537937 CEST	192.168.2.4	1.1.1.1	0xd5a	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:24.408119917 CEST	192.168.2.4	1.1.1.1	0x3186	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.408307076 CEST	192.168.2.4	1.1.1.1	0x2878	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:24.408750057 CEST	192.168.2.4	1.1.1.1	0x17e7	Standard query (0)	js.hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.408919096 CEST	192.168.2.4	1.1.1.1	0x5393	Standard query (0)	js.hsleadflows.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.160589933 CEST	192.168.2.4	1.1.1.1	0x6ef9	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.160778999 CEST	192.168.2.4	1.1.1.1	0xa598	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.263340950 CEST	192.168.2.4	1.1.1.1	0x1da9	Standard query (0)	a.quora.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.263576031 CEST	192.168.2.4	1.1.1.1	0xdbf6	Standard query (0)	a.quora.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.264072895 CEST	192.168.2.4	1.1.1.1	0xb3d9	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.264219046 CEST	192.168.2.4	1.1.1.1	0xea63	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.281975031 CEST	192.168.2.4	1.1.1.1	0x1752	Standard query (0)	i.kissmetrics.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.282119989 CEST	192.168.2.4	1.1.1.1	0x7883	Standard query (0)	i.kissmetrics.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.471343040 CEST	192.168.2.4	1.1.1.1	0xa384	Standard query (0)	forms.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.471683979 CEST	192.168.2.4	1.1.1.1	0x1ef6	Standard query (0)	forms.hubspot.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.715938091 CEST	192.168.2.4	1.1.1.1	0x6024	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.716191053 CEST	192.168.2.4	1.1.1.1	0x44eb	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.754425049 CEST	192.168.2.4	1.1.1.1	0xbf70	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.754776001 CEST	192.168.2.4	1.1.1.1	0x932b	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.792515993 CEST	192.168.2.4	1.1.1.1	0xe50b	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.797461987 CEST	192.168.2.4	1.1.1.1	0x8909	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.827068090 CEST	192.168.2.4	1.1.1.1	0x6c48	Standard query (0)	tracking.g2crowd.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.827240944 CEST	192.168.2.4	1.1.1.1	0x650e	Standard query (0)	tracking.g2crowd.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.838692904 CEST	192.168.2.4	1.1.1.1	0x3a5a	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.838869095 CEST	192.168.2.4	1.1.1.1	0xd21	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:25.950583935 CEST	192.168.2.4	1.1.1.1	0xae1f	Standard query (0)	doug1izaerwt3.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.950738907 CEST	192.168.2.4	1.1.1.1	0xfda4	Standard query (0)	doug1izaerwt3.cloudfront.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.070768118 CEST	192.168.2.4	1.1.1.1	0x67ed	Standard query (0)	doug1izaerwt3.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.104624033 CEST	192.168.2.4	1.1.1.1	0xb486	Standard query (0)	forms.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.105061054 CEST	192.168.2.4	1.1.1.1	0xe807	Standard query (0)	forms.hubspot.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.339782000 CEST	192.168.2.4	1.1.1.1	0xc1a1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.340003014 CEST	192.168.2.4	1.1.1.1	0x6cb3	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.372826099 CEST	192.168.2.4	1.1.1.1	0x466b	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.372999907 CEST	192.168.2.4	1.1.1.1	0x2af8	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.491134882 CEST	192.168.2.4	1.1.1.1	0xf90e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.491380930 CEST	192.168.2.4	1.1.1.1	0x4cb2	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.748326063 CEST	192.168.2.4	1.1.1.1	0x573e	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.748496056 CEST	192.168.2.4	1.1.1.1	0x2018	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.749079943 CEST	192.168.2.4	1.1.1.1	0xc495	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.749284029 CEST	192.168.2.4	1.1.1.1	0x88a9	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.889772892 CEST	192.168.2.4	1.1.1.1	0x9beb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.890261889 CEST	192.168.2.4	1.1.1.1	0xa198	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:26.997555017 CEST	192.168.2.4	1.1.1.1	0xeaf0	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.997745037 CEST	192.168.2.4	1.1.1.1	0xee92	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.370815039 CEST	192.168.2.4	1.1.1.1	0xb7a4	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.370987892 CEST	192.168.2.4	1.1.1.1	0x62e8	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.377091885 CEST	192.168.2.4	1.1.1.1	0x2543	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.377295971 CEST	192.168.2.4	1.1.1.1	0x2e85	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.410393000 CEST	192.168.2.4	1.1.1.1	0xa58e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.410706043 CEST	192.168.2.4	1.1.1.1	0x9b9c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.433859110 CEST	192.168.2.4	1.1.1.1	0xb251	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.434076071 CEST	192.168.2.4	1.1.1.1	0x144a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.582144022 CEST	192.168.2.4	1.1.1.1	0x1345	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.582348108 CEST	192.168.2.4	1.1.1.1	0xa316	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.595187902 CEST	192.168.2.4	1.1.1.1	0xb33e	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.595496893 CEST	192.168.2.4	1.1.1.1	0x6878	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:27.958328962 CEST	192.168.2.4	1.1.1.1	0x11a3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.958482027 CEST	192.168.2.4	1.1.1.1	0x446	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:28.629134893 CEST	192.168.2.4	1.1.1.1	0x4d6d	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:28.629230976 CEST	192.168.2.4	1.1.1.1	0xa66e	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Apr 18, 2024 18:59:39.564604998 CEST	192.168.2.4	1.1.1.1	0x33c4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.564769983 CEST	192.168.2.4	1.1.1.1	0x6070	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:40.619261980 CEST	192.168.2.4	1.1.1.1	0xf816	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.619446993 CEST	192.168.2.4	1.1.1.1	0x17cf	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.117572069 CEST	192.168.2.4	1.1.1.1	0x76ad	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.117763042 CEST	192.168.2.4	1.1.1.1	0xc5eb	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.225641966 CEST	192.168.2.4	1.1.1.1	0xe247	Standard query (0)	lp.dropboxbusiness.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.225790977 CEST	192.168.2.4	1.1.1.1	0xfa55	Standard query (0)	lp.dropboxbusiness.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.226210117 CEST	192.168.2.4	1.1.1.1	0xe787	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.226532936 CEST	192.168.2.4	1.1.1.1	0xcc80	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.230926037 CEST	192.168.2.4	1.1.1.1	0x6f23	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.231102943 CEST	192.168.2.4	1.1.1.1	0x4337	Standard query (0)	hsforms.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.334527016 CEST	192.168.2.4	1.1.1.1	0xaa9a	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.334650040 CEST	192.168.2.4	1.1.1.1	0x24fe	Standard query (0)	hs-scripts.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.342381001 CEST	192.168.2.4	1.1.1.1	0x2300	Standard query (0)	hsforms.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.352348089 CEST	192.168.2.4	1.1.1.1	0xff6	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.352674007 CEST	192.168.2.4	1.1.1.1	0x3c10	Standard query (0)	hsleadflows.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:41.446266890 CEST	192.168.2.4	1.1.1.1	0x695b	Standard query (0)	hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.462640047 CEST	192.168.2.4	1.1.1.1	0xf987	Standard query (0)	hsleadflows.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.881798983 CEST	192.168.2.4	1.1.1.1	0xdfbe	Standard query (0)	www.g2.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.882198095 CEST	192.168.2.4	1.1.1.1	0xce9b	Standard query (0)	www.g2.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:45.639615059 CEST	192.168.2.4	1.1.1.1	0x6902	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:45.639883041 CEST	192.168.2.4	1.1.1.1	0xa257	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:46.743386984 CEST	192.168.2.4	1.1.1.1	0x8bc9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:46.755639076 CEST	192.168.2.4	1.1.1.1	0xc3f8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:47.449280024 CEST	192.168.2.4	1.1.1.1	0xdfcb	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.449714899 CEST	192.168.2.4	1.1.1.1	0x1242	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:47.532807112 CEST	192.168.2.4	1.1.1.1	0xbd80	Standard query (0)	www.g2.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.533364058 CEST	192.168.2.4	1.1.1.1	0x4da2	Standard query (0)	www.g2.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:49.969613075 CEST	192.168.2.4	1.1.1.1	0x522d	Standard query (0)	doug1izaerwt3.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:49.969957113 CEST	192.168.2.4	1.1.1.1	0x9c08	Standard query (0)	doug1izaerwt3.cloudfront.net	65	IN (0x0001)	false
Apr 18, 2024 18:59:50.101769924 CEST	192.168.2.4	1.1.1.1	0x681d	Standard query (0)	doug1izaerwt3.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:51.093436956 CEST	192.168.2.4	1.1.1.1	0x7cc	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:51.093648911 CEST	192.168.2.4	1.1.1.1	0xe8b8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:56.734306097 CEST	192.168.2.4	1.1.1.1	0x4b56	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:56.734307051 CEST	192.168.2.4	1.1.1.1	0x8d13	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 18:59:59.572592020 CEST	192.168.2.4	1.1.1.1	0xdd65	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:59.573120117 CEST	192.168.2.4	1.1.1.1	0xe6f7	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Apr 18, 2024 19:00:00.561903000 CEST	192.168.2.4	1.1.1.1	0xd464	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:00:00.562021017 CEST	192.168.2.4	1.1.1.1	0x6209	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 18:58:36.294378042 CEST	1.1.1.1	192.168.2.4	0x11d0	No error (0)	docsend.com		13.33.4.11	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.294378042 CEST	1.1.1.1	192.168.2.4	0x11d0	No error (0)	docsend.com		13.33.4.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.294378042 CEST	1.1.1.1	192.168.2.4	0x11d0	No error (0)	docsend.com		13.33.4.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.294378042 CEST	1.1.1.1	192.168.2.4	0x11d0	No error (0)	docsend.com		13.33.4.125	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:36.902689934 CEST	1.1.1.1	192.168.2.4	0xc255	No error (0)	www.docsend.com	www.docsend.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:36.905550003 CEST	1.1.1.1	192.168.2.4	0x5f3b	No error (0)	www.docsend.com	www.docsend.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.632183075 CEST	1.1.1.1	192.168.2.4	0x99e9	No error (0)	plus.l.google.com		173.194.219.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.633173943 CEST	1.1.1.1	192.168.2.4	0x379a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.857893944 CEST	1.1.1.1	192.168.2.4	0xc29c	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.857893944 CEST	1.1.1.1	192.168.2.4	0xc29c	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.860193014 CEST	1.1.1.1	192.168.2.4	0x34b7	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Apr 18, 2024 18:58:37.862485886 CEST	1.1.1.1	192.168.2.4	0xa648	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.863835096 CEST	1.1.1.1	192.168.2.4	0xf606	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	sj01.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	sj01.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	sj01.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	sj01.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.872864008 CEST	1.1.1.1	192.168.2.4	0x7916	No error (0)	sj01.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.873224020 CEST	1.1.1.1	192.168.2.4	0x1b23	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.873224020 CEST	1.1.1.1	192.168.2.4	0x1b23	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:37.873224020 CEST	1.1.1.1	192.168.2.4	0x1b23	No error (0)	sj01.mktossl.com			65	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999025106 CEST	1.1.1.1	192.168.2.4	0xb564	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:37.999800920 CEST	1.1.1.1	192.168.2.4	0xe581	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:58:38.225327969 CEST	1.1.1.1	192.168.2.4	0x2489	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 18:58:38.226644993 CEST	1.1.1.1	192.168.2.4	0xe660	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:38.226644993 CEST	1.1.1.1	192.168.2.4	0xe660	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:40.203799963 CEST	1.1.1.1	192.168.2.4	0xeda9	No error (0)	www.docsend.com	www.docsend.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:40.207448006 CEST	1.1.1.1	192.168.2.4	0xe875	No error (0)	www.docsend.com	www.docsend.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:44.805428982 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	featuregates.org		34.128.128.0	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.253758907 CEST	1.1.1.1	192.168.2.4	0xf309	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:45.253758907 CEST	1.1.1.1	192.168.2.4	0xf309	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.254956007 CEST	1.1.1.1	192.168.2.4	0x6683	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:45.350959063 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:45.352463007 CEST	1.1.1.1	192.168.2.4	0x88bc	No error (0)	widget.intercom.io		108.138.64.56	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.352463007 CEST	1.1.1.1	192.168.2.4	0x88bc	No error (0)	widget.intercom.io		108.138.64.83	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.352463007 CEST	1.1.1.1	192.168.2.4	0x88bc	No error (0)	widget.intercom.io		108.138.64.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.352463007 CEST	1.1.1.1	192.168.2.4	0x88bc	No error (0)	widget.intercom.io		108.138.64.81	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:45.353240967 CEST	1.1.1.1	192.168.2.4	0xe399	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:45.353240967 CEST	1.1.1.1	192.168.2.4	0xe399	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.406585932 CEST	1.1.1.1	192.168.2.4	0x6b8d	No error (0)	js.intercomcdn.com		18.164.78.19	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.406585932 CEST	1.1.1.1	192.168.2.4	0x6b8d	No error (0)	js.intercomcdn.com		18.164.78.6	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.406585932 CEST	1.1.1.1	192.168.2.4	0x6b8d	No error (0)	js.intercomcdn.com		18.164.78.56	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.406585932 CEST	1.1.1.1	192.168.2.4	0x6b8d	No error (0)	js.intercomcdn.com		18.164.78.72	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:47.910506964 CEST	1.1.1.1	192.168.2.4	0xc4f4	No error (0)	featuregates.org		34.128.128.0	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.167376041 CEST	1.1.1.1	192.168.2.4	0x15f7	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.168410063 CEST	1.1.1.1	192.168.2.4	0xf3fb	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	sj01.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	sj01.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	sj01.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	sj01.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.182039976 CEST	1.1.1.1	192.168.2.4	0xfd7d	No error (0)	sj01.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:48.185411930 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.185411930 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:48.185411930 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	sj01.mktossl.com			65	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		52.55.103.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		44.197.106.171	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		44.212.255.83	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		34.207.27.1	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		34.196.172.205	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		3.226.50.252	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		34.194.132.54	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.018570900 CEST	1.1.1.1	192.168.2.4	0x1e66	No error (0)	api-iam.intercom.io		54.162.198.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.320704937 CEST	1.1.1.1	192.168.2.4	0x26db	No error (0)	marketing.docsend.com	d3gwed3etk0v2d.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:49.320704937 CEST	1.1.1.1	192.168.2.4	0x26db	No error (0)	d3gwed3etk0v2d.cloudfront.net		3.163.80.122	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.320704937 CEST	1.1.1.1	192.168.2.4	0x26db	No error (0)	d3gwed3etk0v2d.cloudfront.net		3.163.80.49	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.320704937 CEST	1.1.1.1	192.168.2.4	0x26db	No error (0)	d3gwed3etk0v2d.cloudfront.net		3.163.80.82	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.320704937 CEST	1.1.1.1	192.168.2.4	0x26db	No error (0)	d3gwed3etk0v2d.cloudfront.net		3.163.80.66	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.400085926 CEST	1.1.1.1	192.168.2.4	0xae59	No error (0)	marketing.docsend.com	d3gwed3etk0v2d.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:49.959723949 CEST	1.1.1.1	192.168.2.4	0x2c67	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:49.959723949 CEST	1.1.1.1	192.168.2.4	0x2c67	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:49.962393999 CEST	1.1.1.1	192.168.2.4	0x61fe	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:51.379164934 CEST	1.1.1.1	192.168.2.4	0xd664	No error (0)	events.statsigapi.net		34.128.128.0	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		34.196.172.205	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		54.162.198.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		52.55.103.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		3.226.50.252	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		34.194.132.54	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		34.228.149.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		44.197.106.171	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.406009912 CEST	1.1.1.1	192.168.2.4	0x12ec	No error (0)	api-iam.intercom.io		44.212.255.83	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.407217979 CEST	1.1.1.1	192.168.2.4	0x98d8	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:51.407217979 CEST	1.1.1.1	192.168.2.4	0x98d8	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:53.210084915 CEST	1.1.1.1	192.168.2.4	0xf8e	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:53.211024046 CEST	1.1.1.1	192.168.2.4	0xda75	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:55.545306921 CEST	1.1.1.1	192.168.2.4	0xc05d	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:55.545306921 CEST	1.1.1.1	192.168.2.4	0xc05d	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:55.545641899 CEST	1.1.1.1	192.168.2.4	0xf468	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670051098 CEST	1.1.1.1	192.168.2.4	0xca25	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670770884 CEST	1.1.1.1	192.168.2.4	0x4161	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670770884 CEST	1.1.1.1	192.168.2.4	0x4161	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.124	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670770884 CEST	1.1.1.1	192.168.2.4	0x4161	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670770884 CEST	1.1.1.1	192.168.2.4	0x4161	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:56.670770884 CEST	1.1.1.1	192.168.2.4	0x4161	No error (0)	dzfq4ouujrxm8.cloudfront.net		3.161.163.76	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.197.186.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.82.211.88	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.224.27.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.230.68.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.198.48.92	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.209.244.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.201.108.241	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547498941 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.139.162	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547542095 CEST	1.1.1.1	192.168.2.4	0xeb69	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547542095 CEST	1.1.1.1	192.168.2.4	0xeb69	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:57.547542095 CEST	1.1.1.1	192.168.2.4	0xeb69	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.139.162	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.22.152.140	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.206.173.201	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.45.64.254	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.22.151.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.205.1.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.162892103 CEST	1.1.1.1	192.168.2.4	0x5be5	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.234.13	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.163057089 CEST	1.1.1.1	192.168.2.4	0x3b25	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.163057089 CEST	1.1.1.1	192.168.2.4	0x3b25	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.163057089 CEST	1.1.1.1	192.168.2.4	0x3b25	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.193787098 CEST	1.1.1.1	192.168.2.4	0xc214	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.194546938 CEST	1.1.1.1	192.168.2.4	0xc892	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.35	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.22	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.55	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.207446098 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.220525026 CEST	1.1.1.1	192.168.2.4	0xd4a4	No error (0)	dropbox.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.220525026 CEST	1.1.1.1	192.168.2.4	0xd4a4	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.220525026 CEST	1.1.1.1	192.168.2.4	0xd4a4	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dropbox.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.197.93.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.51.60	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.209.112.121	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.215.13.19	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.23.169.28	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.205.173.75	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.222762108 CEST	1.1.1.1	192.168.2.4	0xe02f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.45.39.174	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.413122892 CEST	1.1.1.1	192.168.2.4	0x2764	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.413374901 CEST	1.1.1.1	192.168.2.4	0xeb77	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.35	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.22	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.55	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:58:58.930865049 CEST	1.1.1.1	192.168.2.4	0x39e4	No error (0)	dpiprodesntls.112.2o7.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		172.217.215.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		74.125.138.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		74.125.138.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780369043 CEST	1.1.1.1	192.168.2.4	0xa51e	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780625105 CEST	1.1.1.1	192.168.2.4	0x54ce	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:06.780625105 CEST	1.1.1.1	192.168.2.4	0x54ce	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:07.662182093 CEST	1.1.1.1	192.168.2.4	0x73d5	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.427139997 CEST	1.1.1.1	192.168.2.4	0xc388	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:09.430156946 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	googleads.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.430156946 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	googleads.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.430156946 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	googleads.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.430156946 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	googleads.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.437431097 CEST	1.1.1.1	192.168.2.4	0x1c64	No error (0)	static.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.437431097 CEST	1.1.1.1	192.168.2.4	0x1c64	No error (0)	static.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977027893 CEST	1.1.1.1	192.168.2.4	0x5b12	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:09.977072001 CEST	1.1.1.1	192.168.2.4	0xdf8b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:10.301131964 CEST	1.1.1.1	192.168.2.4	0xb33c	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:10.301131964 CEST	1.1.1.1	192.168.2.4	0xb33c	No error (0)	photos-ugc.l.googleusercontent.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.301950932 CEST	1.1.1.1	192.168.2.4	0x4556	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.304162025 CEST	1.1.1.1	192.168.2.4	0xd7d9	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.534362078 CEST	1.1.1.1	192.168.2.4	0xd9d	No error (0)	googleads.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.534362078 CEST	1.1.1.1	192.168.2.4	0xd9d	No error (0)	googleads.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.534362078 CEST	1.1.1.1	192.168.2.4	0xd9d	No error (0)	googleads.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.534362078 CEST	1.1.1.1	192.168.2.4	0xd9d	No error (0)	googleads.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:10.535742998 CEST	1.1.1.1	192.168.2.4	0x105e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:10.915906906 CEST	1.1.1.1	192.168.2.4	0xb420	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:10.916775942 CEST	1.1.1.1	192.168.2.4	0xa344	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:10.916775942 CEST	1.1.1.1	192.168.2.4	0xa344	No error (0)	photos-ugc.l.googleusercontent.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.253.124.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.253.124.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.253.124.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.105.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		74.125.136.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		74.125.136.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.105.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		74.125.136.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.253.124.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521378994 CEST	1.1.1.1	192.168.2.4	0xae7e	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521967888 CEST	1.1.1.1	192.168.2.4	0xd8e0	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:12.521967888 CEST	1.1.1.1	192.168.2.4	0xd8e0	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:19.315668106 CEST	1.1.1.1	192.168.2.4	0xbac6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:19.315668106 CEST	1.1.1.1	192.168.2.4	0xbac6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838059902 CEST	1.1.1.1	192.168.2.4	0xa66f	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838059902 CEST	1.1.1.1	192.168.2.4	0xa66f	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838059902 CEST	1.1.1.1	192.168.2.4	0xa66f	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838059902 CEST	1.1.1.1	192.168.2.4	0xa66f	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838059902 CEST	1.1.1.1	192.168.2.4	0xa66f	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:23.838601112 CEST	1.1.1.1	192.168.2.4	0x744f	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:24.511388063 CEST	1.1.1.1	192.168.2.4	0xdf94	No error (0)	js.hs-banner.com		104.18.34.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.511388063 CEST	1.1.1.1	192.168.2.4	0xdf94	No error (0)	js.hs-banner.com		172.64.153.27	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513221025 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	js.hsleadflows.net		104.18.140.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513221025 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	js.hsleadflows.net		104.18.138.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513221025 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	js.hsleadflows.net		104.18.137.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513221025 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	js.hsleadflows.net		104.18.139.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513221025 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	js.hsleadflows.net		104.18.141.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.513391972 CEST	1.1.1.1	192.168.2.4	0xd5a	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:24.514018059 CEST	1.1.1.1	192.168.2.4	0x5393	No error (0)	js.hsleadflows.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:24.514328003 CEST	1.1.1.1	192.168.2.4	0x3186	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.514328003 CEST	1.1.1.1	192.168.2.4	0x3186	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:24.522161007 CEST	1.1.1.1	192.168.2.4	0x2878	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:25.265189886 CEST	1.1.1.1	192.168.2.4	0x6ef9	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.265189886 CEST	1.1.1.1	192.168.2.4	0x6ef9	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.265211105 CEST	1.1.1.1	192.168.2.4	0xa598	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:25.368465900 CEST	1.1.1.1	192.168.2.4	0x1da9	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.369127035 CEST	1.1.1.1	192.168.2.4	0xdbf6	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.369240999 CEST	1.1.1.1	192.168.2.4	0xea63	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.371592999 CEST	1.1.1.1	192.168.2.4	0xb3d9	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.408463955 CEST	1.1.1.1	192.168.2.4	0x1752	No error (0)	i.kissmetrics.com	i.kissmetrics.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.408463955 CEST	1.1.1.1	192.168.2.4	0x1752	No error (0)	i.kissmetrics.io		45.55.99.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.411721945 CEST	1.1.1.1	192.168.2.4	0x7883	No error (0)	i.kissmetrics.com	i.kissmetrics.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.575736046 CEST	1.1.1.1	192.168.2.4	0xa384	No error (0)	forms.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.575736046 CEST	1.1.1.1	192.168.2.4	0xa384	No error (0)	forms.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.577251911 CEST	1.1.1.1	192.168.2.4	0x1ef6	No error (0)	forms.hubspot.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:25.820555925 CEST	1.1.1.1	192.168.2.4	0x44eb	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.820600033 CEST	1.1.1.1	192.168.2.4	0x6024	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.820600033 CEST	1.1.1.1	192.168.2.4	0x6024	No error (0)	d296je7bbdd650.cloudfront.net		3.163.113.148	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.858840942 CEST	1.1.1.1	192.168.2.4	0xbf70	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.858840942 CEST	1.1.1.1	192.168.2.4	0xbf70	No error (0)	platform.twitter.map.fastly.net		146.75.40.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.859330893 CEST	1.1.1.1	192.168.2.4	0x932b	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.897845030 CEST	1.1.1.1	192.168.2.4	0xe50b	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.897845030 CEST	1.1.1.1	192.168.2.4	0xe50b	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.902821064 CEST	1.1.1.1	192.168.2.4	0x8909	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:25.932554007 CEST	1.1.1.1	192.168.2.4	0x650e	No error (0)	tracking.g2crowd.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:25.933443069 CEST	1.1.1.1	192.168.2.4	0x6c48	No error (0)	tracking.g2crowd.com		104.18.43.31	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.933443069 CEST	1.1.1.1	192.168.2.4	0x6c48	No error (0)	tracking.g2crowd.com		172.64.144.225	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:25.943443060 CEST	1.1.1.1	192.168.2.4	0x3a5a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.943443060 CEST	1.1.1.1	192.168.2.4	0x3a5a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.943479061 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:25.943479061 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.210005999 CEST	1.1.1.1	192.168.2.4	0xb486	No error (0)	forms.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.210005999 CEST	1.1.1.1	192.168.2.4	0xb486	No error (0)	forms.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.210043907 CEST	1.1.1.1	192.168.2.4	0xe807	No error (0)	forms.hubspot.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:26.444416046 CEST	1.1.1.1	192.168.2.4	0xc1a1	No error (0)	googleads.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.444416046 CEST	1.1.1.1	192.168.2.4	0xc1a1	No error (0)	googleads.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.444416046 CEST	1.1.1.1	192.168.2.4	0xc1a1	No error (0)	googleads.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.444416046 CEST	1.1.1.1	192.168.2.4	0xc1a1	No error (0)	googleads.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.444588900 CEST	1.1.1.1	192.168.2.4	0x6cb3	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:26.478702068 CEST	1.1.1.1	192.168.2.4	0x466b	No error (0)	td.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.478702068 CEST	1.1.1.1	192.168.2.4	0x466b	No error (0)	td.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.478702068 CEST	1.1.1.1	192.168.2.4	0x466b	No error (0)	td.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.478702068 CEST	1.1.1.1	192.168.2.4	0x466b	No error (0)	td.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.595690012 CEST	1.1.1.1	192.168.2.4	0x4cb2	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.595690012 CEST	1.1.1.1	192.168.2.4	0x4cb2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.595963001 CEST	1.1.1.1	192.168.2.4	0xf90e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.595963001 CEST	1.1.1.1	192.168.2.4	0xf90e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.852729082 CEST	1.1.1.1	192.168.2.4	0x573e	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.853178978 CEST	1.1.1.1	192.168.2.4	0xc495	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.853178978 CEST	1.1.1.1	192.168.2.4	0xc495	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.853178978 CEST	1.1.1.1	192.168.2.4	0xc495	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.853931904 CEST	1.1.1.1	192.168.2.4	0x88a9	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.853931904 CEST	1.1.1.1	192.168.2.4	0x88a9	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994561911 CEST	1.1.1.1	192.168.2.4	0x9beb	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:26.994647026 CEST	1.1.1.1	192.168.2.4	0xa198	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:27.101867914 CEST	1.1.1.1	192.168.2.4	0xeaf0	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.102495909 CEST	1.1.1.1	192.168.2.4	0xee92	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.475203037 CEST	1.1.1.1	192.168.2.4	0xb7a4	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.475203037 CEST	1.1.1.1	192.168.2.4	0xb7a4	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.475203037 CEST	1.1.1.1	192.168.2.4	0xb7a4	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.475683928 CEST	1.1.1.1	192.168.2.4	0x62e8	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.475683928 CEST	1.1.1.1	192.168.2.4	0x62e8	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.481311083 CEST	1.1.1.1	192.168.2.4	0x2543	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.514892101 CEST	1.1.1.1	192.168.2.4	0xa58e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.514892101 CEST	1.1.1.1	192.168.2.4	0xa58e	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.514910936 CEST	1.1.1.1	192.168.2.4	0x9b9c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.537936926 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.539227962 CEST	1.1.1.1	192.168.2.4	0x144a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:27.686218977 CEST	1.1.1.1	192.168.2.4	0x1345	No error (0)	api.segment.io		44.234.198.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.686218977 CEST	1.1.1.1	192.168.2.4	0x1345	No error (0)	api.segment.io		35.81.90.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.686218977 CEST	1.1.1.1	192.168.2.4	0x1345	No error (0)	api.segment.io		34.223.74.168	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.700383902 CEST	1.1.1.1	192.168.2.4	0xb33e	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:27.700383902 CEST	1.1.1.1	192.168.2.4	0xb33e	No error (0)	d296je7bbdd650.cloudfront.net		3.163.113.148	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:27.700591087 CEST	1.1.1.1	192.168.2.4	0x6878	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:28.062712908 CEST	1.1.1.1	192.168.2.4	0x446	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:28.063177109 CEST	1.1.1.1	192.168.2.4	0x11a3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:28.063177109 CEST	1.1.1.1	192.168.2.4	0x11a3	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:28.733880043 CEST	1.1.1.1	192.168.2.4	0x4d6d	No error (0)	api.segment.io		44.240.52.117	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:28.733880043 CEST	1.1.1.1	192.168.2.4	0x4d6d	No error (0)	api.segment.io		35.160.35.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:28.733880043 CEST	1.1.1.1	192.168.2.4	0x4d6d	No error (0)	api.segment.io		35.155.246.37	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:39.669138908 CEST	1.1.1.1	192.168.2.4	0x33c4	No error (0)	play.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:40.723731995 CEST	1.1.1.1	192.168.2.4	0xf816	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.222906113 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	plus.l.google.com		142.250.9.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.223289013 CEST	1.1.1.1	192.168.2.4	0xc5eb	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.331440926 CEST	1.1.1.1	192.168.2.4	0xe787	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.331440926 CEST	1.1.1.1	192.168.2.4	0xe787	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.333081961 CEST	1.1.1.1	192.168.2.4	0xcc80	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	sj01.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	sj01.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	sj01.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	sj01.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350296021 CEST	1.1.1.1	192.168.2.4	0xe247	No error (0)	sj01.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350372076 CEST	1.1.1.1	192.168.2.4	0xfa55	No error (0)	lp.dropboxbusiness.com	dropbox-ssl.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350372076 CEST	1.1.1.1	192.168.2.4	0xfa55	No error (0)	dropbox-ssl.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:41.350372076 CEST	1.1.1.1	192.168.2.4	0xfa55	No error (0)	sj01.mktossl.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:44.987412930 CEST	1.1.1.1	192.168.2.4	0xdfbe	No error (0)	www.g2.com		104.16.188.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.987412930 CEST	1.1.1.1	192.168.2.4	0xdfbe	No error (0)	www.g2.com		104.16.187.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.987412930 CEST	1.1.1.1	192.168.2.4	0xdfbe	No error (0)	www.g2.com		104.16.190.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.987412930 CEST	1.1.1.1	192.168.2.4	0xdfbe	No error (0)	www.g2.com		104.16.189.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.987412930 CEST	1.1.1.1	192.168.2.4	0xdfbe	No error (0)	www.g2.com		104.16.186.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:44.988792896 CEST	1.1.1.1	192.168.2.4	0xce9b	No error (0)	www.g2.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:45.744209051 CEST	1.1.1.1	192.168.2.4	0x6902	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:45.744209051 CEST	1.1.1.1	192.168.2.4	0x6902	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:45.745493889 CEST	1.1.1.1	192.168.2.4	0xa257	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:46.848697901 CEST	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:46.848697901 CEST	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:46.860095024 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:47.553903103 CEST	1.1.1.1	192.168.2.4	0x1242	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:47.554094076 CEST	1.1.1.1	192.168.2.4	0xdfcb	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.554094076 CEST	1.1.1.1	192.168.2.4	0xdfcb	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.638181925 CEST	1.1.1.1	192.168.2.4	0x4da2	No error (0)	www.g2.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:47.638777018 CEST	1.1.1.1	192.168.2.4	0xbd80	No error (0)	www.g2.com		104.16.186.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.638777018 CEST	1.1.1.1	192.168.2.4	0xbd80	No error (0)	www.g2.com		104.16.187.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.638777018 CEST	1.1.1.1	192.168.2.4	0xbd80	No error (0)	www.g2.com		104.16.189.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.638777018 CEST	1.1.1.1	192.168.2.4	0xbd80	No error (0)	www.g2.com		104.16.190.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:47.638777018 CEST	1.1.1.1	192.168.2.4	0xbd80	No error (0)	www.g2.com		104.16.188.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:51.200720072 CEST	1.1.1.1	192.168.2.4	0xe8b8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 18:59:51.202378035 CEST	1.1.1.1	192.168.2.4	0x7cc	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:51.202378035 CEST	1.1.1.1	192.168.2.4	0x7cc	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:56.840310097 CEST	1.1.1.1	192.168.2.4	0x8d13	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:56.840549946 CEST	1.1.1.1	192.168.2.4	0x4b56	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:56.840549946 CEST	1.1.1.1	192.168.2.4	0x4b56	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:59.677346945 CEST	1.1.1.1	192.168.2.4	0xdd65	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 18:59:59.677346945 CEST	1.1.1.1	192.168.2.4	0xdd65	No error (0)	www-env.dropbox-dns.com		162.125.9.18	A (IP address)	IN (0x0001)	false
Apr 18, 2024 18:59:59.684989929 CEST	1.1.1.1	192.168.2.4	0xe6f7	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:00:00.666481018 CEST	1.1.1.1	192.168.2.4	0xd464	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:00:00.666481018 CEST	1.1.1.1	192.168.2.4	0xd464	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	13.33.4.11	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:36 UTC	654	OUT	GET / HTTP/1.1 Host: docsend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:36 UTC	2570	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Cowboy Date: Thu, 18 Apr 2024 16:58:35 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713459516&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=CA2aJskJO5zBBZej8Wt1zEenFuTxWKojSaim6BHnqMw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713459516&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=CA2aJskJO5zBBZej8Wt1zEenFuTxWKojSaim6BHnqMw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: DENY X-Content-Type-Options: nosniff Location: https://www.docsend.com/ Cache-Control: no-cache Content-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-hbq0CoJlm1N3gmMX6ecW4w=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend Set-Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; domain=.docsend.com; path=/; secure; HttpOnly; SameSite=None X-Request-Id: 65cc33ca-c71b-4e8a-850c-776e40b7bd4f X-Runtime: 0.019309 Vary: Accept-Encoding, Origin Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Via: 1.1 vegur, 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL58-P1 X-Amz-Cf-Id: E0_WsIq81V1nRZhvgZJB6CZXs_p4SDX01VFjc3zPyHoKtkxhmpdsCA==
2024-04-18 16:58:36 UTC	96	IN	Data Raw: 35 61 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 5a<html><body>You are being <a href="https://www.docsend.com/">redirected</a>.</body></html>
2024-04-18 16:58:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49765	23.201.212.130	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 16:58:40 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=223479 Date: Thu, 18 Apr 2024 16:58:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49776	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 16:58:40 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=223388 Date: Thu, 18 Apr 2024 16:58:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 16:58:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49825	104.18.142.119	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:43 UTC	530	OUT	GET /forms/v2.js?ver=2 HTTP/1.1 Host: js.hsforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:44 UTC	1334	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 03 Apr 2024 11:15:05 UTC ETag: W/"b0047a8901d8ed9f81db3dcb5982114e" x-amz-server-side-encryption: AES256 x-amz-version-id: 4lHA5dnNobe4YqKec9CE2kPtPUzRSBNR Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b9e3ae23b2e5d7b2e1c159467ba23f34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: ucxNxPRBVfcrAcRLaHhZUwt0KiPfp4NGORAMU89aSeVIpaKvC7ToSg== Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.5064/bundles/project-v2.js&cfRay=87663388afcbad94-ATL Cache-Control: s-maxage=600, max-age=300 X-HS-Target-Asset: forms-embed/static-1.5064/bundles/project-v2.js X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: b7c5d820-7129-48f6-9d4a-49babecb4788 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-68b7f7fbff-kgjsm x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-04-18 16:58:44 UTC	890	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 62 37 63 35 64 38 32 30 2d 37 31 32 39 2d 34 38 66 36 2d 39 64 34 61 2d 34 39 62 61 62 65 63 62 34 37 38 38 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 32 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 45 58 50 49 52 45 44 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 61 71 44 48 68 72 54 79 55 6d 73 44 4f 49 63 51 44 30 2e 75 33 77 64 50 68 44 74 34 51 66 67 71 55 61 31 34 64 56 33 4d 2e 72 45 2d 31 37 31 33 34 35 39 35 32 33 2d 31 2e 30 2e 31 2e 31 2d 62 59 39 45 6d 68 63 4a 6b 51 46 75 53 5a 67 53 4c 41 56 2e 41 61 75 51 70 6d 76 31 76 Data Ascii: x-request-id: b7c5d820-7129-48f6-9d4a-49babecb4788cache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prodCF-Cache-Status: EXPIREDSet-Cookie: __cf_bm=aqDHhrTyUmsDOIcQD0.u3wdPhDt4QfgqUa14dV3M.rE-1713459523-1.0.1.1-bY9EmhcJkQFuSZgSLAV.AauQpmv1v
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ff9!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 65 5b 69 5d 2c 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 6e 2c 61 29 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 2b 78 4e 67 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 69 6a 48 70 22 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 25 34 3d 3d 30 26 26 74 25 31 30 30 7c 7c 74 25 34 30 30 3d 3d 30 3f 32 39 3a 32 38 3b 63 61 73 65 20 38 3a 63 61 73 65 20 33 3a 63 61 73 65 20 35 3a 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 33 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: ty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(e[i],o.join("."),n,a)}};t.a=r},"+xNg":function(e,t,n){"use strict";var r=n("ijHp");var a=function(e,t){switch(e){case 1:return t%4==0&&t%100\|\|t%400==0?29:28;case 8:case 3:case 5:case 10:return 30;default:ret
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 3b 74 2e 61 3d 69 7d 2c 22 30 57 4b 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 72 3d 6e 28 22 69 6a 48 70 22 29 2c 61 3d 6e 28 22 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 69 3d 2f 5e 2d 3f 5b 30 2d 39 5d 2a 5b 2e 5d 3f 5b 30 2d 39 5d 7b 30 2c 32 7d 24 2f 2c 6f 3d 65 3d 3e 4f 62 6a 65 63 74 28 72 2e 66 29 28 65 29 7c 7c 4f 62 6a 65 63 74 28 72 2e 68 29 28 65 29 7c 7c 4f 62 6a 65 63 74 28 72 2e 6c 29 28 65 29 7c 7c 69 2e 74 65 73 74 28 65 29 3f 6e 75 6c 6c 3a 5b 61 2e 49 4e 56 41 4c 49 44 5f 4e 55 4d 42 45 52 5d 7d 2c 22 30 64 30 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 Data Ascii: ;t.a=i},"0WKS":function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var r=n("ijHp"),a=n("6Nfw");const i=/^-?[0-9]*[.]?[0-9]{0,2}$/,o=e=>Object(r.f)(e)\|\|Object(r.h)(e)\|\|Object(r.l)(e)\|\|i.test(e)?null:[a.INVALID_NUMBER]},"0d07":function(e,t,n){"us
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 49 4e 2c 7b 64 6f 6d 61 69 6e 3a 69 7d 5d 29 3b 73 7c 7c 72 2e 70 75 73 68 28 5b 63 2e 49 4e 56 41 4c 49 44 5f 45 4d 41 49 4c 5d 29 3b 72 65 74 75 72 6e 7b 65 72 72 6f 72 73 3a 72 2c 69 6e 66 6f 73 3a 61 7d 7d 2c 70 3d 6e 28 22 49 35 30 2f 22 29 2c 62 3d 6e 28 22 36 51 7a 4e 22 29 3b 76 61 72 20 68 3d 65 3d 3e 4f 62 6a 65 63 74 28 62 2e 61 29 28 65 29 3f 65 2e 74 72 69 6d 28 29 3a 65 2c 67 3d 6e 28 22 72 34 36 49 22 29 2c 79 3d 6e 28 22 42 4c 42 4c 22 29 2c 76 3d 6e 28 22 73 42 6b 66 22 29 2c 45 3d 6e 28 22 41 39 71 67 22 29 2c 4f 3d 6e 28 22 69 37 53 46 22 29 2c 53 3d 6e 28 22 69 6a 48 70 22 29 2c 49 3d 6e 28 22 37 79 30 4f 22 29 2c 5f 3d 6e 28 22 32 67 32 76 22 29 2c 6a 3d 6e 2e 6e 28 5f 29 3b 63 6f 6e 73 74 20 6b 3d 28 7b 75 72 6c 3a 65 2c 70 6f 72 74 Data Ascii: IN,{domain:i}]);s\|\|r.push([c.INVALID_EMAIL]);return{errors:r,infos:a}},p=n("I50/"),b=n("6QzN");var h=e=>Object(b.a)(e)?e.trim():e,g=n("r46I"),y=n("BLBL"),v=n("sBkf"),E=n("A9qg"),O=n("i7SF"),S=n("ijHp"),I=n("7y0O"),_=n("2g2v"),j=n.n(_);const k=({url:e,port
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 28 6f 2e 77 29 28 61 29 2c 64 2e 72 65 73 75 62 73 63 72 69 62 65 64 29 3b 53 2e 73 6f 6d 65 28 65 3d 3e 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 2e 52 45 53 55 42 53 43 52 49 42 45 5f 4d 45 53 53 41 47 45 29 29 26 26 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 65 29 29 3b 6e 28 4f 62 6a 65 63 74 28 67 2e 63 29 28 5b 65 2c 4f 5d 29 29 3b 6e 28 4f 62 6a 65 63 74 28 67 2e 64 29 28 5b 65 2c 53 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 65 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 6f 6e 73 74 20 78 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 69 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 6c 3d 4f Data Ascii: (o.w)(a),d.resubscribed);S.some(e=>-1!==e.indexOf(c.RESUBSCRIBE_MESSAGE))&&n(Object(v.c)(E.e));n(Object(g.c)([e,O]));n(Object(g.d)([e,S]))};function R(e){return{type:r.e,payload:e}}const x=([e,t])=>(n,r)=>{const a=r(),i=Object(o.y)(a),s=Object(o.k)(a),l=O
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 7b 7d 2c 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 22 22 7d 2c 73 3d 28 65 2c 74 29 3d 3e 7b 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 72 74 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6f 2c 7b 69 73 53 75 62 6d 69 74 74 69 6e 67 3a 21 30 2c 73 75 62 6d 69 73 73 69 6f 6e 41 74 74 65 6d 70 74 73 3a 65 2e 73 75 62 6d 69 73 73 69 6f 6e 41 74 74 65 6d 70 74 73 2b 31 2c 6c 61 73 74 53 75 62 6d 69 73 73 69 6f 6e 53 74 61 72 74 4d 73 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 29 3b 63 61 73 65 22 73 75 62 6d 69 73 73 69 6f 6e 53 75 63 63 65 73 73 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 Data Ascii: SubmissionError:{},formSubmissionWarning:""},s=(e,t)=>{switch(t.type){case"submissionStart":return Object.assign({},o,{isSubmitting:!0,submissionAttempts:e.submissionAttempts+1,lastSubmissionStartMs:Date.now()});case"submissionSuccess":return Object.assig
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 6f 72 43 6c 61 73 73 3a 4f 62 6a 65 63 74 28 75 2e 68 29 28 65 29 2c 69 73 45 72 72 6f 72 56 69 73 69 62 6c 65 3a 4f 62 6a 65 63 74 28 61 2e 63 29 28 65 2c 74 2c 6e 29 2c 69 73 4d 6f 62 69 6c 65 52 65 73 70 6f 6e 73 69 76 65 3a 4f 62 6a 65 63 74 28 75 2e 73 29 28 65 29 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 43 6c 61 73 73 3a 4f 62 6a 65 63 74 28 75 2e 69 29 28 65 29 2c 6c 61 62 65 6c 3a 4f 62 6a 65 63 74 28 6c 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c Data Ascii: orClass:Object(u.h)(e),isErrorVisible:Object(a.c)(e,t,n),isMobileResponsive:Object(u.s)(e),errorMessageClass:Object(u.i)(e),label:Object(l.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 6e 2d 6e 61 6d 65 22 3b 63 61 73 65 22 6a 6f 62 74 69 74 6c 65 22 3a 72 65 74 75 72 6e 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 74 69 74 6c 65 22 3b 63 61 73 65 22 6c 61 73 74 6e 61 6d 65 22 3a 72 65 74 75 72 6e 22 66 61 6d 69 6c 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 73 61 6c 75 74 61 74 69 6f 6e 22 3a 72 65 74 75 72 6e 22 68 6f 6e 6f 72 69 66 69 63 2d 70 72 65 66 69 78 22 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f Data Ascii: n-name";case"jobtitle":return"organization-title";case"lastname":return"family-name";case"salutation":return"honorific-prefix";case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"co
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 75 34 48 6f 22 29 3b 63 6f 6e 73 74 20 61 3d 5b 2f 74 69 6d 65 6f 75 74 20 65 78 63 65 65 64 65 64 2f 2c 2f 52 65 71 75 65 73 74 20 61 62 6f 72 74 65 64 2f 2c 2f 4e 65 74 77 6f 72 6b 20 45 72 72 6f 72 2f 2c 2f 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 73 65 6e 64 27 20 6f 6e 20 27 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 27 2f 2c 2f 55 6e 65 78 70 65 63 74 65 64 20 65 6e 64 20 6f 66 20 4a 53 4f 4e 20 69 6e 70 75 74 2f 2c 2f 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 2f 2c 2f 49 50 5f 41 44 44 52 45 53 53 5f 49 53 5f 50 52 4f 42 41 42 4c 59 5f 41 5f 42 4f 54 2f 2c 2f 53 55 42 4d 49 53 53 49 4f 4e 5f 50 45 52 49 4f 44 5f 45 4e 44 45 44 2f 2c 2f 52 41 54 45 5f 4c Data Ascii: n){"use strict";var r=n("u4Ho");const a=[/timeout exceeded/,/Request aborted/,/Network Error/,/Failed to execute 'send' on 'XMLHttpRequest'/,/Unexpected end of JSON input/,/Unexpected token/,/IP_ADDRESS_IS_PROBABLY_A_BOT/,/SUBMISSION_PERIOD_ENDED/,/RATE_L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49824	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:43 UTC	553	OUT	GET /js/forms2/js/forms2.min.js?ver=2 HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:44 UTC	807	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:44 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Mar 2024 19:24:48 GMT ETag: W/"ba0904-31af8-612eecb9f6000" Vary: Accept-Encoding X-Content-Type-Options: nosniff Set-Cookie: BIGipServersj01web-nginx-app_https=!Gqp/X9awxvnpZ6keBGUusMppqwi+e6lFSLEtgHlkXCxJlUBlAMnQSPgISG583zHxlOuqW3vlb4u8Ew==; Path=/; Version=1; Secure; Httponly CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA; path=/; expires=Thu, 18-Apr-24 17:28:44 GMT; domain=.lp.dropboxbusiness.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876633888dfc6755-ATL
2024-04-18 16:58:44 UTC	562	IN	Data Raw: 37 63 37 38 0d 0a 2f 2a 21 20 66 6f 72 6d 73 32 20 32 30 32 34 2d 30 31 2d 32 39 20 20 53 65 65 20 66 6f 72 6d 73 32 2e 6a 73 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 67 2c 68 29 7b 69 66 28 21 63 5b 67 5d 29 7b 69 66 28 21 62 5b 67 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 68 26 26 69 29 72 65 74 75 72 6e 20 69 28 67 2c 21 30 29 3b 69 66 28 66 29 72 65 74 75 72 6e 20 66 28 67 2c 21 30 29 3b 76 61 72 20 6a 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 67 2b 22 27 22 29 3b 74 68 72 6f 77 Data Ascii: 7c78/! forms2 2024-01-29 See forms2.js for license info /!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 72 65 74 75 72 6e 20 62 3d 3d 3d 67 7c 7c 62 3d 3d 3d 6c 3f 36 32 3a 62 3d 3d 3d 68 7c 7c 62 3d 3d 3d 6d 3f 36 33 3a 69 3e 62 3f 2d 31 3a 69 2b 31 30 3e 62 3f 62 2d 69 2b 32 36 2b 32 36 3a 6b 2b 32 36 3e 62 3f 62 2d 6b 3a 6a 2b 32 36 3e 62 3f 62 2d 6a 2b 32 36 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 6a 5b 6c 2b 2b 5d 3d 61 7d 76 61 72 20 64 2c 65 2c 67 2c 68 2c 69 2c 6a 3b 69 66 28 61 2e 6c 65 6e 67 74 68 25 34 Data Ascii: ijklmnopqrstuvwxyz0123456789+/";!function(a){"use strict";function b(a){var b=a.charCodeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 64 22 3d 3d 74 79 70 65 6f 66 20 63 3f 74 68 69 73 2e 62 61 73 65 36 34 6a 73 3d 7b 7d 3a 63 29 7d 2c 7b 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 74 72 79 7b 76 61 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 3b 72 65 74 75 72 6e 20 62 2e 66 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 7d 2c 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 2c 34 32 3d 3d 3d 62 2e 66 6f 6f 28 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 2e 73 75 62 61 72 72 61 79 26 26 30 3d Data Ascii: d"==typeof c?this.base64js={}:c)},{}],2:[function(a,b,c){(function(b){"use strict";function d(){function a(){}try{var b=new Uint8Array(1);return b.foo=function(){return 42},b.constructor=a,42===b.foo()&&b.constructor===a&&"function"==typeof b.subarray&&0=
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 5b 64 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 28 62 2e 62 79 74 65 4c 65 6e 67 74 68 2c 61 3d 66 2e 5f 61 75 67 6d 65 6e 74 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 29 3a 61 3d 6c 28 61 2c 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 30 7c 71 28 62 2e 6c 65 6e 67 74 68 29 3b 61 3d 70 28 61 2c 63 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 63 3e 64 3b 64 2b 3d 31 29 61 5b 64 5d 3d 32 35 35 26 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 22 42 75 66 66 65 72 22 Data Ascii: [d];return a}function m(a,b){return f.TYPED_ARRAY_SUPPORT?(b.byteLength,a=f._augment(new Uint8Array(b))):a=l(a,new Uint8Array(b)),a}function n(a,b){var c=0\|q(b.length);a=p(a,c);for(var d=0;c>d;d+=1)a[d]=255&b[d];return a}function o(a,b){var c,d=0;"Buffer"
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 3a 72 65 74 75 72 6e 20 42 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 61 73 63 69 69 22 3a 72 65 74 75 72 6e 20 44 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 62 69 6e 61 72 79 22 3a 72 65 74 75 72 6e 20 45 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 41 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 75 63 73 32 22 3a 63 61 73 65 22 75 63 73 2d 32 22 3a 63 61 73 65 22 75 74 66 31 36 6c 65 22 3a 63 61 73 65 22 75 74 66 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 47 28 74 68 69 73 2c 62 2c 63 29 3b 64 65 66 61 75 6c 74 3a 69 66 28 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 61 29 3b 61 3d 28 61 2b 22 22 29 2e 74 6f 4c Data Ascii: :return B(this,b,c);case"ascii":return D(this,b,c);case"binary":return E(this,b,c);case"base64":return A(this,b,c);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return G(this,b,c);default:if(d)throw new TypeError("Unknown encoding: "+a);a=(a+"").toL
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 31 34 31 31 32 3e 6c 26 26 28 67 3d 6c 29 29 7d 7d 6e 75 6c 6c 3d 3d 3d 67 3f 28 67 3d 36 35 35 33 33 2c 68 3d 31 29 3a 67 3e 36 35 35 33 35 26 26 28 67 2d 3d 36 35 35 33 36 2c 64 2e 70 75 73 68 28 67 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 67 3d 35 36 33 32 30 7c 31 30 32 33 26 67 29 2c 64 2e 70 75 73 68 28 67 29 2c 65 2b 3d 68 7d 72 65 74 75 72 6e 20 43 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 24 3e 3d 62 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 62 3e 64 3b 29 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 Data Ascii: 14112>l&&(g=l))}}null===g?(g=65533,h=1):g>65535&&(g-=65536,d.push(g>>>10&1023\|55296),g=56320\|1023&g),d.push(g),e+=h}return C(d)}function C(a){var b=a.length;if($>=b)return String.fromCharCode.apply(String,a);for(var c="",d=0;b>d;)c+=String.fromCharCode.ap
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 65 2c 66 29 7b 69 66 28 62 3e 65 7c 7c 66 3e 62 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 76 61 6c 75 65 20 69 73 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 22 29 3b 69 66 28 63 2b 64 3e 61 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 3b 69 66 28 30 3e 63 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 4c 28 61 2c 62 2c 63 2c 34 2c 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 36 65 33 38 2c 2d 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 Data Ascii: e,f){if(b>e\|\|f>b)throw new RangeError("value is out of bounds");if(c+d>a.length)throw new RangeError("index out of range");if(0>c)throw new RangeError("index out of range")}function M(a,b,c,d,e){return e\|\|L(a,b,c,4,3.4028234663852886e38,-3.402823466385288
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 28 63 29 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 54 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 2c 66 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 26 26 21 28 28 62 2d 3d 32 29 3c 30 29 3b 67 2b 2b 29 63 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 29 2c 64 3d 63 3e 3e 38 2c 65 3d 63 25 32 35 36 2c 66 2e 70 75 73 68 28 65 29 2c 66 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 72 65 74 75 72 6e 20 57 2e 74 6f 42 79 74 65 41 72 72 61 79 28 4f 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 64 3e 65 26 26 21 28 65 2b 63 3e 3d 62 2e 6c 65 6e 67 74 68 7c 7c 65 3e 3d 61 2e 6c 65 6e 67 74 68 29 3b 65 2b 2b 29 Data Ascii: (c));return b}function T(a,b){for(var c,d,e,f=[],g=0;g<a.length&&!((b-=2)<0);g++)c=a.charCodeAt(g),d=c>>8,e=c%256,f.push(e),f.push(d);return f}function U(a){return W.toByteArray(O(a))}function V(a,b,c,d){for(var e=0;d>e&&!(e+c>=b.length\|\|e>=a.length);e++)
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 3b 63 2b 2b 29 7b 76 61 72 20 67 3d 61 5b 63 5d 3b 67 2e 63 6f 70 79 28 64 2c 65 29 2c 65 2b 3d 67 2e 6c 65 6e 67 74 68 7d 72 65 74 75 72 6e 20 64 7d 2c 66 2e 62 79 74 65 4c 65 6e 67 74 68 3d 73 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 30 7c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 22 22 3a 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 42 28 74 68 69 73 2c 30 2c 61 29 3a 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 71 75 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 66 2e 69 73 42 75 66 66 65 72 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 Data Ascii: ;c++){var g=a[c];g.copy(d,e),e+=g.length}return d},f.byteLength=s,f.prototype.toString=function(){var a=0\|this.length;return 0===a?"":0===arguments.length?B(this,0,a):t.apply(this,arguments)},f.prototype.equals=function(a){if(!f.isBuffer(a))throw new Type
2024-04-18 16:58:44 UTC	1369	IN	Data Raw: 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 41 63 63 65 73 73 20 75 73 69 6e 67 20 61 72 72 61 79 20 69 6e 64 65 78 65 73 20 69 6e 73 74 65 61 64 2e 22 29 2c 74 68 69 73 2e 72 65 61 64 55 49 6e 74 38 28 61 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 2e 73 65 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 41 63 63 65 73 73 20 75 73 69 6e 67 20 61 72 72 61 79 20 69 6e 64 65 78 65 73 20 69 6e 73 74 65 61 64 2e 22 29 2c 74 68 69 73 2e 77 72 69 74 65 55 49 6e 74 38 28 61 2c 62 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d Data Ascii: t() is deprecated. Access using array indexes instead."),this.readUInt8(a)},f.prototype.set=function(a,b){return console.log(".set() is deprecated. Access using array indexes instead."),this.writeUInt8(a,b)},f.prototype.write=function(a,b,c,d){if(void 0==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49837	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:45 UTC	603	OUT	OPTIONS /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,statsig-api-key,statsig-client-time,statsig-encoded,statsig-sdk-type,statsig-sdk-version Origin: https://www.docsend.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:45 UTC	611	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-methods: POST access-control-allow-headers: content-type,statsig-api-key,statsig-client-time,statsig-encoded,statsig-sdk-type,statsig-sdk-version access-control-max-age: 7200 access-control-allow-credentials: true Content-Length: 0 date: Thu, 18 Apr 2024 16:58:44 GMT x-statsig-region: gke-us-east1 via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49840	108.138.64.56	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:46 UTC	532	OUT	GET /widget/lv6lji7h HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2703 Connection: close Date: Thu, 18 Apr 2024 16:58:47 GMT Last-Modified: Thu, 18 Apr 2024 16:14:57 GMT ETag: "bed5ec00348d0bc5785a02d996485570" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: z9n_1DbQeOoUX7h9bBIyBXgEzE6hO8Tj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 09aa283795aaafe63cbd7c2cbac2c306.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DEIFC2l4SCnHQVPqXYt28VQDQU8hfuxoQPiA8E6vVZ033NuEF-m0zQ== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-04-18 16:58:47 UTC	2703	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0b 73 d3 3a 16 fe 2b 8e 77 27 b5 07 c7 79 94 f2 70 71 d9 52 ca a5 b3 14 18 c2 dc bd 3b 6d 36 a3 d8 4a 22 70 2c 5f 59 69 9a 9b e4 bf ef 27 f9 11 3b 49 cb 65 06 06 5a fb e8 bc 74 74 1e 9f 4c 63 3c 8f 03 c9 78 6c d9 ab 3b 22 0c ea af 9e 3f eb 3e ed 7a 25 9d da 2b ea d2 fb 84 0b 99 fa ab 94 cf 45 40 87 33 92 78 e6 94 85 21 8d 5b 19 a9 05 92 e9 90 84 0d 47 24 a5 58 94 32 49 bd 76 1b 94 16 23 33 97 c5 92 8a 80 e3 81 9b 4e 32 1f 45 2c 18 26 44 4e b7 9c df d2 92 29 08 63 17 bf da a6 93 4e 29 95 e9 30 11 fc 7e b9 c3 5f 30 b7 32 1e 2d 50 65 87 30 8d a5 58 1e 14 5e 2c 16 a5 b5 96 a0 6a 77 2c 9e 64 3a b4 14 d4 87 f4 de 9d ca 59 64 3a 2c 4e 25 89 a2 e1 8c 87 74 6f 7f c9 76 6f f8 57 5a 0d d3 78 cb 35 3e ee 9c 84 f4 d9 cb 80 04 cf 9e Data Ascii: Ys:+w'ypqR;m6J"p,_Yi';IeZttLc<xl;"?>z%+E@3x![G$X2Iv#3N2E,&DN)cN)0~_02-Pe0X^,jw,d:Yd:,N%tovoWZx5>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49838	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:46 UTC	847	OUT	GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37105587580039082392_1713459523353&_=1713459523354 HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:47 UTC	215	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:47 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19112 Connection: close cached: true Server: cloudflare CF-RAY: 8766339b6d9753fa-ATL
2024-04-18 16:58:47 UTC	1154	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 35 35 38 37 35 38 30 30 33 39 30 38 32 33 39 32 5f 31 37 31 33 34 35 39 35 32 33 33 35 33 28 7b 22 49 64 22 3a 32 30 36 37 34 2c 22 56 69 64 22 3a 32 30 36 37 34 2c 22 53 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 4e 61 6d 65 22 3a 22 44 53 2d 44 65 6d 6f 20 52 65 71 75 65 73 74 20 2d 20 45 6d 62 65 64 64 65 64 20 46 6f 72 6d 20 6f 6e 20 57 65 62 73 69 74 65 2d 32 30 36 37 34 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 4c 61 79 6f 75 74 22 3a 22 6c 65 66 74 22 2c 22 47 75 74 74 65 72 57 69 64 74 68 22 3a 31 30 2c 22 4f 66 66 73 65 74 57 69 64 74 68 22 3a 31 30 2c 22 48 61 73 54 77 6f 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 53 75 62 6d 69 74 4c 61 62 65 6c 22 3a 22 53 75 62 6d 69 74 22 2c 22 Data Ascii: jQuery37105587580039082392_1713459523353({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 39 39 63 34 37 63 29 2c 20 74 6f 28 23 37 35 61 65 34 63 29 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 7d 5c 6e 2e Data Ascii: , left top, left bottom, from(#99c47c), to(#75ae4c));\nbackground-image: -webkit-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: -moz-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: linear-gradient(to bottom, #99c47c, #75ae4c);\n}\n.
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 72 69 64 65 22 3a 6e 75 6c 6c 2c 22 4c 69 76 65 53 74 72 65 61 6d 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 2c 22 72 6f 77 73 22 3a 5b 5b 7b 22 49 64 22 3a 32 36 33 38 30 32 2c 22 4e 61 6d 65 22 3a 22 46 69 72 73 74 4e 61 6d 65 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 46 69 72 73 74 20 6e 61 6d 65 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 46 69 72 73 74 20 4e 61 6d 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e Data Ascii: ride":null,"LiveStreamSettings":null,"rows":[[{"Id":263802,"Name":"FirstName","IsRequired":true,"Datatype":"string","Maxlength":255,"InputLabel":"First name","InputInitialValue":"","InputSourceChannel":"constant","PlaceholderText":"First Name","Validation
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 65 2e 67 2e 20 44 6f 63 53 65 6e 64 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 32 36 33 38 30 39 2c 22 4e 61 6d 65 22 3a 22 43 6f 75 6e 74 72 79 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 70 69 63 6b 6c 69 73 74 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 50 69 63 6b 6c 69 73 74 56 61 6c 75 65 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 53 65 6c 65 63 74 2e 2e 2e 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 73 65 6c 65 63 74 65 Data Ascii: nt","ProfilingFieldNumber":0,"PlaceholderText":"e.g. DocSend","ValidationMessage":"This field is required."}],[{"Id":263809,"Name":"Country","IsRequired":true,"Datatype":"picklist","Maxlength":255,"PicklistValues":[{"label":"Select...","value":"","selecte
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 3a 22 42 6f 6c 69 76 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 6e 61 69 72 65 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 6e 61 69 72 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 72 61 7a 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 42 72 61 7a 69 6c 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 Data Ascii: :"Bolivia"},{"label":"Bonaire","value":"Bonaire"},{"label":"Bosnia and Herzegovina","value":"Bosnia and Herzegovina"},{"label":"Botswana","value":"Botswana"},{"label":"Bouvet Island","value":"Bouvet Island"},{"label":"Brazil","value":"Brazil"},{"label":"B
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 22 6c 61 62 65 6c 22 3a 22 43 72 6f 61 74 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 43 72 6f 61 74 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 75 72 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 43 75 72 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 79 70 72 75 73 22 2c 22 76 61 6c 75 65 22 3a 22 43 79 70 72 75 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 65 6e 6d 61 72 6b 22 2c 22 76 61 6c 75 65 22 3a 22 44 65 6e 6d 61 72 6b 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6a 69 62 6f 75 74 69 22 2c 22 76 61 6c 75 65 22 3a 22 44 6a 69 62 6f 75 74 69 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6f 6d 69 Data Ascii: "label":"Croatia","value":"Croatia"},{"label":"Curacao","value":"Curacao"},{"label":"Cyprus","value":"Cyprus"},{"label":"Czech Republic","value":"Czech Republic"},{"label":"Denmark","value":"Denmark"},{"label":"Djibouti","value":"Djibouti"},{"label":"Domi
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 6d 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 65 72 6e 73 65 79 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 65 72 6e 73 65 79 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 79 Data Ascii: label":"Guadeloupe","value":"Guadeloupe"},{"label":"Guam","value":"Guam"},{"label":"Guatemala","value":"Guatemala"},{"label":"Guernsey","value":"Guernsey"},{"label":"Guinea","value":"Guinea"},{"label":"Guinea-Bissau","value":"Guinea-Bissau"},{"label":"Guy
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 22 3a 22 4c 69 62 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 62 79 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 62 79 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 2c 22 76 61 6c 75 65 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 65 64 6f 6e 69 61 2c 20 46 59 52 4f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 Data Ascii: ":"Liberia"},{"label":"Libya","value":"Libya"},{"label":"Liechtenstein","value":"Liechtenstein"},{"label":"Lithuania","value":"Lithuania"},{"label":"Luxembourg","value":"Luxembourg"},{"label":"Macao","value":"Macao"},{"label":"Macedonia, FYRO","value":"Ma
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 63 61 72 61 67 75 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 63 61 72 61 67 75 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 75 65 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 75 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d Data Ascii: },{"label":"Nicaragua","value":"Nicaragua"},{"label":"Niger","value":"Niger"},{"label":"Nigeria","value":"Nigeria"},{"label":"Niue","value":"Niue"},{"label":"Norfolk Island","value":"Norfolk Island"},{"label":"Northern Mariana Islands","value":"Northern M
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 6d 6f 61 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 6d 6f 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 Data Ascii: "},{"label":"Saint Martin","value":"Saint Martin"},{"label":"Saint Pierre and Miquelon","value":"Saint Pierre and Miquelon"},{"label":"Saint Vincent and the Grenadines","value":"Saint Vincent and the Grenadines"},{"label":"Samoa","value":"Samoa"},{"label"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49841	31.13.65.7	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:46 UTC	531	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	1666	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: d155d7c9d015f0417249146a444fb797 ETag: "d1ac3c9461138b97c6b4e345ebb55d6b" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: 0VXXydAV8EFySRRqRE+3lw== Expires: Thu, 18 Apr 2024 17:11:17 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-18 16:58:47 UTC	851	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-18 16:58:47 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-18 16:58:47 UTC	3092	IN	Data Raw: 2a 31 37 31 33 34 35 39 30 37 37 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 32 38 37 38 31 31 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1713459077,,JIT Construction: v1012878118,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49839	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:46 UTC	574	OUT	GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	1440	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; expires=Tue, 17 Apr 2029 16:58:47 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:47 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:47 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:47 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Tue, 17 Apr 2029 16:58:47 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:46 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 214 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fd1f2bd9c33f4c3cac09dd42673738f3 Connection: close
2024-04-18 16:58:47 UTC	214	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 25 32 43 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 63 6c 69 65 6e 74 25 32 43 75 78 5f 61 6e 61 6c 79 74 69 63 73 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49843	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	809	OUT	POST /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive Content-Length: 304 STATSIG-CLIENT-TIME: 1713459523552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 1 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	304	OUT	Data Raw: 3d 30 6e 49 79 49 6d 61 6b 4a 69 4f 69 67 32 63 68 68 6d 49 73 55 32 63 73 46 6d 5a 36 49 43 5a 6c 52 33 63 6c 56 58 63 6c 4a 56 5a 7a 35 32 62 77 4e 58 5a 53 4e 58 59 30 78 57 5a 6b 4a 43 4c 39 4a 69 4e 31 59 6a 4e 33 41 44 4d 6d 46 57 4f 69 56 57 4c 30 4d 44 5a 35 30 53 5a 31 51 47 4e 74 45 47 4e 77 55 57 4c 35 45 57 59 30 4d 57 4f 6d 5a 6a 49 36 49 43 52 4a 56 47 62 69 46 47 64 7a 4a 43 4c 69 49 6a 4c 77 55 6a 4c 30 49 69 4f 69 34 32 62 70 4e 6e 63 6c 5a 31 61 6b 4e 6e 49 73 49 43 64 75 56 57 61 73 4e 57 4c 7a 70 6d 49 36 49 53 5a 77 6c 48 56 72 52 32 63 69 73 6e 4f 69 45 47 64 68 52 57 59 30 56 57 54 6e 6c 32 63 30 46 47 64 7a 4a 43 4c 39 31 6e 49 75 39 57 61 30 4e 57 64 6b 39 6d 63 77 4a 69 4f 69 49 58 5a 70 52 6e 49 37 70 6a 49 30 35 57 5a 74 35 32 Data Ascii: =0nIyImakJiOig2chhmIsU2csFmZ6ICZlR3clVXclJVZz52bwNXZSNXY0xWZkJCL9JiN1YjN3ADMmFWOiVWL0MDZ50SZ1QGNtEGNwUWL5EWY0MWOmZjI6ICRJVGbiFGdzJCLiIjLwUjL0IiOi42bpNnclZ1akNnIsICduVWasNWLzpmI6ISZwlHVrR2cisnOiEGdhRWY0VWTnl2c0FGdzJCL91nIu9Wa0NWdk9mcwJiOiIXZpRnI7pjI05WZt52
2024-04-18 16:58:47 UTC	445	IN	HTTP/1.1 200 OK access-control-allow-origin: * content-type: application/json; charset=utf-8 Content-Length: 6687 vary: Accept-Encoding date: Thu, 18 Apr 2024 16:58:47 GMT x-statsig-region: gke-us-east1 via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:58:47 UTC	810	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 5f 67 61 74 65 73 22 3a 7b 22 31 37 31 32 34 37 33 31 37 22 3a 7b 22 6e 61 6d 65 22 3a 22 31 37 31 32 34 37 33 31 37 22 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 58 53 6b 47 73 6d 39 43 31 66 65 35 4d 43 79 4c 54 69 78 35 4f 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 34 30 37 35 30 30 34 30 38 22 3a 7b 22 6e 61 6d 65 22 3a 22 34 30 37 35 30 30 34 30 38 22 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 35 6c 75 64 43 62 4e 52 75 35 7a 44 74 34 7a 6a 7a 41 37 64 6b 4d 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 73 74 61 62 6c 65 49 44 22 2c 22 73 65 63 6f 6e 64 61 Data Ascii: {"feature_gates":{"171247317":{"name":"171247317","value":true,"rule_id":"XSkGsm9C1fe5MCyLTix5O","id_type":"company_id","secondary_exposures":[]},"407500408":{"name":"407500408","value":true,"rule_id":"5ludCbNRu5zDt4zjzA7dkM","id_type":"stableID","seconda
2024-04-18 16:58:47 UTC	1255	IN	Data Raw: 6c 74 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 31 32 31 31 34 30 35 38 34 39 22 3a 7b 22 6e 61 6d 65 22 3a 22 31 32 31 31 34 30 35 38 34 39 22 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 75 73 65 72 49 44 22 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 31 35 31 34 33 33 32 38 36 38 22 3a 7b 22 6e 61 6d 65 22 3a 22 31 35 31 34 33 33 32 38 36 38 22 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 32 41 61 67 66 58 30 78 64 44 64 6c 31 47 38 4d 71 6d 35 52 30 57 3a 31 30 30 2e 30 30 3a 31 Data Ascii: lt","id_type":"company_id","secondary_exposures":[]},"1211405849":{"name":"1211405849","value":false,"rule_id":"default","id_type":"userID","secondary_exposures":[]},"1514332868":{"name":"1514332868","value":true,"rule_id":"2AagfX0xdDdl1G8Mqm5R0W:100.00:1
2024-04-18 16:58:47 UTC	1255	IN	Data Raw: 65 22 3a 66 61 6c 73 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 73 74 61 62 6c 65 49 44 22 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 33 38 30 36 31 30 31 30 31 33 22 3a 7b 22 6e 61 6d 65 22 3a 22 33 38 30 36 31 30 31 30 31 33 22 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 64 5f 74 79 70 65 22 3a 22 75 73 65 72 49 44 22 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 34 32 30 39 34 34 37 37 34 35 22 3a 7b 22 6e 61 6d 65 22 3a 22 34 32 30 39 34 34 37 37 34 35 22 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 72 75 6c 65 5f 69 64 22 3a 22 64 65 66 61 75 6c 74 Data Ascii: e":false,"rule_id":"default","id_type":"stableID","secondary_exposures":[]},"3806101013":{"name":"3806101013","value":false,"rule_id":"default","id_type":"userID","secondary_exposures":[]},"4209447745":{"name":"4209447745","value":false,"rule_id":"default
2024-04-18 16:58:47 UTC	1255	IN	Data Raw: 75 6c 65 5f 69 64 22 3a 22 70 72 65 73 74 61 72 74 22 2c 22 67 72 6f 75 70 22 3a 22 70 72 65 73 74 61 72 74 22 2c 22 69 73 5f 64 65 76 69 63 65 5f 62 61 73 65 64 22 3a 66 61 6c 73 65 2c 22 69 64 5f 74 79 70 65 22 3a 22 75 73 65 72 49 44 22 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 5f 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 75 73 65 72 5f 69 6e 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 32 39 39 32 36 33 37 32 35 31 22 3a 7b 22 6e 61 6d 65 22 3a 22 32 39 39 32 36 33 37 32 35 31 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 68 6f 77 5f 67 75 69 64 65 64 5f 73 68 61 72 69 6e 67 22 3a 66 61 6c 73 65 7d 2c 22 72 75 6c 65 5f 69 64 22 3a 22 32 64 69 7a 39 67 Data Ascii: ule_id":"prestart","group":"prestart","is_device_based":false,"id_type":"userID","is_experiment_active":false,"is_user_in_experiment":false,"secondary_exposures":[]},"2992637251":{"name":"2992637251","value":{"show_guided_sharing":false},"rule_id":"2diz9g
2024-04-18 16:58:47 UTC	1255	IN	Data Raw: 6c 73 65 2c 22 69 64 5f 74 79 70 65 22 3a 22 75 73 65 72 49 44 22 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 5f 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 75 73 65 72 5f 69 6e 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 33 39 34 30 39 30 33 38 33 33 22 3a 7b 22 6e 61 6d 65 22 3a 22 33 39 34 30 39 30 33 38 33 33 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 68 6f 77 5f 6d 6f 72 65 5f 69 6e 76 69 74 65 73 5f 62 61 6e 6e 65 72 22 3a 74 72 75 65 7d 2c 22 72 75 6c 65 5f 69 64 22 3a 22 6c 61 75 6e 63 68 65 64 47 72 6f 75 70 22 2c 22 67 72 6f 75 70 22 3a 22 6c 61 75 6e 63 68 65 64 47 72 6f 75 70 22 2c 22 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 54 65 73 74 22 2c 22 Data Ascii: lse,"id_type":"userID","is_experiment_active":false,"is_user_in_experiment":false,"secondary_exposures":[]},"3940903833":{"name":"3940903833","value":{"show_more_invites_banner":true},"rule_id":"launchedGroup","group":"launchedGroup","group_name":"Test","
2024-04-18 16:58:47 UTC	857	IN	Data Raw: 61 6e 74 22 5d 2c 22 69 73 5f 75 73 65 72 5f 69 6e 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 2c 22 75 6e 64 65 6c 65 67 61 74 65 64 5f 73 65 63 6f 6e 64 61 72 79 5f 65 78 70 6f 73 75 72 65 73 22 3a 5b 5d 7d 2c 22 32 32 31 34 39 32 39 38 38 34 22 3a 7b 22 6e 61 6d 65 22 3a 22 32 32 31 34 39 32 39 38 38 34 22 2c 22 76 61 6c 75 65 22 3a 7b 22 45 78 70 65 72 69 6d 65 6e 74 20 4e 61 6d 65 22 3a 22 22 2c 22 55 72 6c 20 70 61 74 74 65 72 6e 20 22 3a 22 22 2c 22 70 72 69 6d 61 72 79 20 70 61 72 61 6d 65 74 65 72 22 3a 22 22 2c 22 67 72 6f 75 70 73 22 3a 22 22 2c 22 42 75 74 74 6f 6e 20 4c 61 62 65 6c 22 3a 66 61 6c 73 65 7d 2c 22 72 75 6c 65 5f 69 64 22 3a 22 64 65 66 61 75 6c Data Ascii: ant"],"is_user_in_experiment":false,"secondary_exposures":[],"undelegated_secondary_exposures":[]},"2214929884":{"name":"2214929884","value":{"Experiment Name":"","Url pattern ":"","primary parameter":"","groups":"","Button Label":false},"rule_id":"defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49845	31.13.65.7	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	599	OUT	GET /en_US/sdk.js?hash=32396d58173c4999bb2fff5ab2d32d36 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.docsend.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	1680	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 838d57533b6f4cb9ae821ee0e4449b36 ETag: "6b4d3d109cf4f4f0a0d0b713e4e7ac4c" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: g41XUztvTLmugh7g5ESbNg== Expires: Fri, 18 Apr 2025 15:50:56 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-18 16:58:47 UTC	853	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-18 16:58:47 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-18 16:58:47 UTC	15265	IN	Data Raw: 2a 31 37 31 33 34 35 35 34 35 36 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 32 38 37 38 31 31 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1713455456,,JIT Construction: v1012878118,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 6b 3d 41 28 28 6d 2d 43 28 6a 2c 30 29 29 2f 33 30 2e 34 32 29 3b 43 28 6a 2c 6b 2b 31 29 3c 3d 6d 3b 6b 2b 2b 29 3b 6d 3d 31 2b 6d 2d 43 28 6a 2c 6b 29 3b 72 3d 28 68 25 38 36 34 65 35 2b 38 36 34 65 35 29 25 38 36 34 65 35 3b 73 3d 41 28 72 2f 33 36 65 35 29 25 32 34 3b 74 3d 41 28 72 2f 36 65 34 29 25 36 30 3b 7a 3d 41 28 72 2f 31 65 33 29 25 36 30 3b 72 3d 72 25 31 65 33 7d 65 6c 73 65 20 6a 3d 68 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 6b 3d 68 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2c 6d 3d 68 2e 67 65 74 55 54 43 44 61 74 65 28 29 2c 73 3d 68 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 2c 74 3d 68 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 2c 7a 3d 68 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 2c 72 3d 68 2e 67 65 74 55 54 Data Ascii: k=A((m-C(j,0))/30.42);C(j,k+1)<=m;k++);m=1+m-C(j,k);r=(h%864e5+864e5)%864e5;s=A(r/36e5)%24;t=A(r/6e4)%60;z=A(r/1e3)%60;r=r%1e3}else j=h.getUTCFullYear(),k=h.getUTCMonth(),m=h.getUTCDate(),s=h.getUTCHours(),t=h.getUTCMinutes(),z=h.getUTCSeconds(),r=h.getUT
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 68 65 61 64 65 72 20 74 61 62 6c 65 7b 68 65 69 67 68 74 3a 34 33 70 78 3b 77 69 64 74 68 3a 31 30 30 5c 75 30 30 32 35 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 68 65 61 64 65 72 20 74 64 2e 68 65 61 64 65 72 5f 6c 65 66 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 36 30 70 78 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 68 65 61 64 Data Ascii: ;vertical-align:middle;white-space:nowrap}.fb_dialog_content .dialog_header table{height:43px;width:100\u0025}.fb_dialog_content .dialog_header td.header_left{font-size:12px;padding-left:5px;vertical-align:middle;width:60px}.fb_dialog_content .dialog_head
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 69 7a 65 45 72 72 6f 72 22 2c 5b 22 73 64 6b 2e 55 41 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 7b 6c 69 6e 65 3a 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 61 2e 6c 69 6e 65 2c 6d 65 73 73 61 67 65 3a 61 2e 6d 65 73 73 61 67 65 2c 6e 61 6d 65 3a 61 2e 6e 61 6d 65 2c 73 63 72 69 70 74 3a 61 2e 66 69 6c 65 4e 61 6d 65 7c 7c 61 2e 73 6f 75 72 63 65 55 52 4c 7c 7c 61 2e 73 63 72 69 70 74 2c 73 74 61 63 6b 3a 61 2e 73 74 61 63 6b 54 72 61 63 65 7c 7c 61 2e 73 74 61 63 6b 7d 3b 62 2e 5f 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 61 3b 61 3d 2f 28 5b 5c 77 3a 5c 2e 5c 2f 5d 2b 5c 2e 6a 73 29 3a 28 5c 64 2b 29 2f 2e 65 78 65 Data Ascii: izeError",["sdk.UA"],(function(a,b,c,d,e,f,g){"use strict";function a(a){var b={line:a.lineNumber\|\|a.line,message:a.message,name:a.name,script:a.fileName\|\|a.sourceURL\|\|a.script,stack:a.stackTrace\|\|a.stack};b._originalError=a;a=/([\w:\.\/]+\.js):(\d+)/.exe
2024-04-18 16:58:47 UTC	1500	IN	Data Raw: 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 22 65 76 65 6e 74 2e 73 75 62 73 63 72 69 62 65 22 2c 68 3d 22 65 76 65 6e 74 2e 75 6e 73 75 62 73 63 72 69 62 65 22 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 69 7c 7c 28 69 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 76 61 72 20 63 3d 6a 28 29 3b 21 63 5b 61 5d 3f 63 5b 61 5d 3d 5b 62 5d 3a 63 5b 61 5d 2e 69 6e 64 65 78 4f 66 28 62 29 3d 3d 2d 31 26 26 63 5b 61 5d 2e 70 75 73 68 28 62 29 3b 61 21 3d 67 26 26 61 21 3d 68 26 26 6d 28 67 2c 61 2c 63 5b 61 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 76 61 72 20 63 3d 6a 28 29 5b 61 5d 3b 63 26 26 63 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 61 Data Ascii: ,e,f){"use strict";var g="event.subscribe",h="event.unsubscribe",i;function j(){i\|\|(i={});return i}function k(a,b){var c=j();!c[a]?c[a]=[b]:c[a].indexOf(b)==-1&&c[a].push(b);a!=g&&a!=h&&m(g,a,c[a])}function l(a,b){var c=j()[a];c&&c.forEach(function(a,d){a
2024-04-18 16:58:48 UTC	14884	IN	Data Raw: 74 3a 21 31 2c 6d 69 78 65 64 41 75 74 68 53 74 61 74 65 3a 61 2c 6c 6f 61 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 74 69 6d 65 72 3a 6e 75 6c 6c 2c 63 75 72 72 65 6e 74 54 69 6d 65 4f 75 74 3a 64 28 22 73 64 6b 2e 41 75 74 68 55 74 69 6c 73 22 29 2e 41 75 74 68 43 6f 6e 73 74 61 6e 74 73 2e 43 4f 4e 4e 45 43 54 45 44 5f 52 45 56 41 4c 49 44 41 54 45 5f 50 45 52 49 4f 44 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 45 53 28 22 4f 62 6a 65 63 74 22 2c 22 61 73 73 69 67 6e 22 2c 21 31 2c 69 28 29 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 68 3d 45 53 28 22 4f 62 6a 65 63 74 22 2c 22 61 73 73 69 67 6e 22 2c 21 31 2c 69 28 29 2c 68 2c 61 29 7d 63 3d 7b 67 65 74 53 74 61 74 65 3a 61 2c 73 65 74 53 74 61 74 65 3a 62 7d 3b 65 3d 63 3b Data Ascii: t:!1,mixedAuthState:a,loadState:null,timer:null,currentTimeOut:d("sdk.AuthUtils").AuthConstants.CONNECTED_REVALIDATE_PERIOD}}function a(){return ES("Object","assign",!1,i(),h)}function b(a){h=ES("Object","assign",!1,i(),h,a)}c={getState:a,setState:b};e=c;
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 65 6c 73 65 7b 64 2e 64 72 6f 70 70 65 64 2b 2b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 76 61 72 20 73 3d 7b 73 68 6f 75 6c 64 4c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 61 2e 68 61 73 68 29 7d 7d 2c 74 3d 22 52 45 5f 45 58 4e 5f 49 44 22 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 61 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 6f 62 6a 65 63 74 22 3f 62 3d 68 28 22 4e 6f 6e 2d 6f 62 6a 65 63 74 20 74 68 72 6f 77 6e 3a 20 25 73 22 2c 53 74 72 69 6e 67 28 61 29 29 3a 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 74 29 3f 62 3d 68 28 22 52 65 73 63 72 69 70 74 20 65 78 63 65 70 74 69 6f 6e 20 74 68 72 6f Data Ascii: else{d.dropped++;return null}}var s={shouldLog:function(a){return r(a.hash)}},t="RE_EXN_ID";function u(a){var b=null;a==null\|\|typeof a!=="object"?b=h("Non-object thrown: %s",String(a)):Object.prototype.hasOwnProperty.call(a,t)?b=h("Rescript exception thro
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 62 3e 31 3f 62 2d 31 3a 30 29 2c 64 3d 31 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 74 68 69 73 2e 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 22 66 61 74 61 6c 22 2c 61 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 3b 62 2e 6d 75 73 74 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 62 3e 31 3f 62 2d 31 3a 30 29 2c 64 3d 31 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 74 68 69 73 2e 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 22 65 72 72 6f 72 22 2c 61 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 3b 62 2e 77 61 72 Data Ascii: ngth,c=new Array(b>1?b-1:0),d=1;d<b;d++)c[d-1]=arguments[d];this.$1.apply(this,["fatal",a].concat(c))};b.mustfix=function(a){for(var b=arguments.length,c=new Array(b>1?b-1:0),d=1;d<b;d++)c[d-1]=arguments[d];this.$1.apply(this,["error",a].concat(c))};b.war

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49846	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	726	OUT	GET /js/forms2/css/forms2.css HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:47 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:47 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Mar 2024 19:24:48 GMT ETag: W/"2fe1000-3437-612eecb9f6000" Vary: Accept-Encoding Strict-Transport-Security: max-age=63113904 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 347 Expires: Thu, 18 Apr 2024 20:58:47 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 876633a048ffad70-ATL
2024-04-18 16:58:47 UTC	897	IN	Data Raw: 33 34 33 37 0d 0a 2f 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 69 66 20 74 68 65 20 73 74 79 6c 65 73 68 65 65 74 20 68 61 73 20 62 65 65 6e 20 6c 6f 61 64 65 64 20 79 65 74 2a 2f 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 32 33 34 35 36 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 43 6c 65 61 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 64 69 76 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 73 70 61 6e Data Ascii: 3437/* This is used to test if the stylesheet has been loaded yet*/#mktoStyleLoaded { background-color: #123456; display: none;}.mktoForm { text-align: left;}.mktoForm .mktoClear { clear: both; float: none;}.mktoForm div,.mktoForm span
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 6f 67 69 63 61 6c 46 69 65 6c 64 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 6c 65 67 65 6e 64 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 65 6d 20 30 2e 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 61 2e 6d 6b 74 6f 4e 6f 74 59 6f 75 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 36 39 32 66 33 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 61 2e 6d 6b 74 6f 4e 6f 74 59 6f 75 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 Data Ascii: ogicalField { float: left;}.mktoForm fieldset { padding: 0; margin: 0;}.mktoForm fieldset legend { margin: 0 1em 0.5em; color: inherit;}.mktoForm a.mktoNotYou { cursor: pointer; color: #4692f3;}.mktoForm a.mktoNotYou:hover { text-d
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 2e 6d 6b 74 6f 41 73 74 65 72 69 78 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 6c 61 62 65 6c 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d Data Ascii: mktoRequiredField .mktoAsterix { display: block;}.mktoForm .mktoRequiredField label.mktoLabel { font-weight: bold;}.mktoForm input[type=text],.mktoForm input[type=url],.mktoForm input[type=email],.mktoForm input[type=tel],.mktoForm input[type=
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 32 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 32 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 33 2e 34 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 33 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 34 2e 36 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 34 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 35 2e 38 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 35 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 37 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 36 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 38 2e Data Ascii: eight: 2em;}.mktoForm textarea[rows="2"] { height: 3.4em;}.mktoForm textarea[rows="3"] { height: 4.6em;}.mktoForm textarea[rows="4"] { height: 5.8em;}.mktoForm textarea[rows="5"] { height: 7em;}.mktoForm textarea[rows="6"] { height: 8.
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 2f 2a 2a 20 54 68 65 73 65 20 74 77 6f 20 73 74 79 6c 65 73 20 61 72 65 20 66 6f 72 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 63 73 73 20 74 72 61 6e 73 66 6f 72 6d 73 20 2a 2f 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 45 72 72 6f 72 20 2e 6d 6b 74 6f 45 72 72 6f 72 41 72 72 6f 77 57 72 61 70 2e 6d 6b 74 6f 41 72 72 6f 77 49 6d 61 67 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 Data Ascii: ate(45deg); transform: rotate(45deg); -ms-transform: rotate(45deg); width: 16px; margin-top: 5px;}/** These two styles are for browsers that don't support css transforms */.mktoForm .mktoError .mktoErrorArrowWrap.mktoArrowImage { background:
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 22 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 35 30 29 3b 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 7d 0a 2e 6d 6b 74 6f 4e 6f 4a 53 20 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 6d 6b 74 6f 4e 6f 4a 53 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 20 7b 0a 20 20 77 Data Ascii: -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=50)"; filter: alpha(opacity=50); cursor: default;}.mktoNoJS .mktoLabel { display: block; padding-right: 10px; width: 110px; text-align: right;}.mktoNoJS input[type=text] { w
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 65 41 72 72 6f 77 57 72 61 70 2e 6d 6b 74 6f 41 72 72 6f 77 49 6d 61 67 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 63 61 6c 6c 6f 75 74 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 67 72 65 65 6e 2e 70 6e 67 22 29 20 74 6f 70 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 37 70 78 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 61 6e 67 65 46 69 65 6c 64 20 2e 6d 6b 74 6f 52 61 6e 67 65 56 61 6c 75 65 41 72 72 6f 77 57 72 61 70 2e 6d 6b 74 6f 41 72 72 6f 77 49 6d 61 67 65 20 2e 6d 6b 74 6f 52 61 6e 67 65 56 61 6c 75 65 41 72 72 6f 77 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f Data Ascii: eArrowWrap.mktoArrowImage { background: transparent url("../images/callout-arrow-down-green.png") top center no-repeat; bottom: -7px;}.mktoForm .mktoRangeField .mktoRangeValueArrowWrap.mktoArrowImage .mktoRangeValueArrow { display: none;}.mktoFo
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 30 30 30 30 30 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 29 22 3b 0a 7d 0a 2e 6d 6b 74 6f 4d 6f 64 61 6c 20 2e 6d 6b 74 6f 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 31 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6d 6b 74 6f 4d 6f 64 61 6c 20 2e 6d 6b 74 6f 4d 6f 64 61 6c 43 6c 6f 73 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 6f 70 3a 20 2d 31 30 70 78 3b 0a 20 20 72 69 67 68 74 3a 20 2d 31 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: 00000, endColorstr=#80000000)";}.mktoModal .mktoModalContent { position: absolute; z-index: 10001; background: #fff; padding: 10px;}.mktoModal .mktoModalClose { position: absolute; cursor: pointer; top: -10px; right: -10px; backgroun
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 74 65 78 74 61 72 65 61 2e 6d 6b 74 6f 46 69 65 6c 64 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 73 65 6c 65 63 74 2e 6d 6b 74 6f 46 69 65 6c 64 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 73 65 6c 65 63 74 2e 6d 6b 74 6f 46 69 65 6c 64 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 6f 72 6d 52 6f 77 20 2e 6d 6b 74 6f 46 69 65 6c 64 20 7b 0a 20 20 20 20 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f Data Ascii: textarea.mktoField, .mktoForm select.mktoField { width: 100%; height: 1.5em; line-height: 1.5em; font-size: 18px; } .mktoForm select.mktoField { height: auto; } .mktoForm .mktoFormRow .mktoField { clear: left; } .mkto
2024-04-18 16:58:47 UTC	1369	IN	Data Raw: 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 6f 72 6d 43 6f 6c 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 69 65 6c 64 57 72 61 70 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 Data Ascii: .mktoMobileShow .mktoForm .mktoFormCol { float: none; } .mktoMobileShow .mktoForm .mktoFieldWrap { float: none; } .mktoMobileShow .mktoForm fieldset { padding: 0 10px; } .mktoMobileShow .mktoForm input[type=url], .mktoMobileShow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49847	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	739	OUT	GET /js/forms2/css/forms2-theme-simple.css HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:47 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:47 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Mar 2024 19:24:48 GMT ETag: W/"ba08c4-33a-612eecb9f6000" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5433 Expires: Thu, 18 Apr 2024 20:58:47 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 876633a04ac353be-ATL
2024-04-18 16:58:47 UTC	833	IN	Data Raw: 33 33 61 0d 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 2f 2a 20 63 73 73 20 6c 6f 61 64 20 64 65 74 65 63 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 72 65 6d 6f 76 65 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 23 31 32 33 34 35 36 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 6c 65 67 65 6e 64 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d Data Ascii: 33a#mktoStyleLoaded { /* css load detection, do not remove */ color:#123456;}.mktoForm fieldset {}.mktoForm fieldset legend{}.mktoForm input[type=text],.mktoForm input[type=url],.mktoForm input[type=email],.mktoForm input[type=tel],.mktoForm
2024-04-18 16:58:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49844	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	749	OUT	GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en
2024-04-18 16:58:47 UTC	3215	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:47 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:47 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:47 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:47 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 13723 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ab78cb04e29a48d5a64d94771d24d529 Connection: close
2024-04-18 16:58:47 UTC	13169	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()
2024-04-18 16:58:47 UTC	554	IN	Data Raw: 73 5f 6c 61 62 65 6c 22 3a 20 22 43 47 49 2d 35 35 33 22 2c 20 22 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 22 3a 20 22 43 47 49 2d 38 32 39 22 2c 20 22 75 78 61 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 22 3a 20 22 43 47 49 2d 34 38 36 22 2c 20 22 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 22 3a 20 22 43 47 49 2d 38 37 38 22 2c 20 22 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 22 3a 20 22 43 47 49 2d 39 33 39 22 2c 20 22 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 22 3a 20 22 43 47 49 2d 31 33 38 36 22 7d 2c 20 22 69 6e 63 6c 75 73 69 6f 6e 4d 65 74 68 6f 64 22 3a 20 22 50 49 54 48 4f 53 22 2c 20 22 65 6e 74 69 74 6c 65 64 41 70 70 73 22 3a 20 5b 22 64 61 73 68 22 2c 20 22 74 Data Ascii: s_label": "CGI-553", "marketing_tracker_inclusion_method": "CGI-829", "uxa_inclusion_method": "CGI-486", "bfcache_eligible": "CGI-878", "navigation_type": "CGI-939", "page_view_origin": "CGI-1386"}, "inclusionMethod": "PITHOS", "entitledApps": ["dash", "t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49848	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	506	OUT	GET /frame-modern.12a5980e.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145894 Connection: close Date: Thu, 18 Apr 2024 16:58:48 GMT Last-Modified: Thu, 18 Apr 2024 16:10:45 GMT ETag: "9cbf93992baa692ab73ae09787d8e47e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: guqUXqRlxWRW2EQCoxQDfYzk1WW4G1H5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d8ad943d740b6238b25a2f7e6eea878e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZOhTLDRd65MfmIC-1pSmblQZgs_561jicIAt7CSaOZPwGByWeUR4ow== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:58:47 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db 48 b6 20 fa 57 28 5e 3f 5d 60 ba 04 31 29 90 1a b6 56 c9 96 6c 25 2b d8 b2 bd 5e 1a 24 8b 22 2c 10 a0 01 90 34 2d f1 bf ef 39 a7 aa 80 42 a0 e4 ee 99 7b 77 df fb de 37 d3 32 88 50 f1 d4 c9 c1 30 cc f6 9f 8f 53 3b 28 71 16 b1 80 79 cc 61 7e fb 71 ab 5e ab 57 5a 06 dd 53 2f 78 ed c7 b2 b5 3e b0 1d 97 f7 ad d1 b8 5e 6e d5 6b db 9b 75 06 37 3d 3f 72 06 4e cf 8e 1c df 13 8f 9a cd 7a a3 8a 8f fc 31 0f ec c8 0f e4 17 db b5 46 03 6f 87 93 ee c8 89 c4 cd 46 a3 ba b1 b9 d8 19 4c bc 1e 36 50 72 0c 6e 52 8f 51 db 87 cb 9d 80 47 93 c0 2b 05 46 64 2e e2 97 f0 c9 a3 33 30 56 02 cb 37 3c c6 4d f5 89 c7 67 a5 a3 20 f0 03 a3 7c 60 7b 30 b2 d2 c0 f1 fa a5 91 df 9f b8 bc f4 9f e5 3f f8 1f e5 ff 2c 9b 3b d1 30 f0 67 a5 c8 ea f9 7d Data Ascii: {H W(^?]`1)Vl%+^$",4-9B{w72P0S;(qya~q^WZS/x>^nku7=?rNz1FoFL6PrnRQG+Fd.30V7<Mg \|`{0?,;0g}
2024-04-18 16:58:47 UTC	127	IN	Data Raw: c5 1c b5 e7 32 91 ec de 5c 96 2e 3e 1a cb ba 18 6f b7 64 1e d9 f3 b9 b4 3e 5d 57 a4 f5 e9 e6 50 66 8d bd 99 c8 ac b5 b7 d7 d2 54 15 44 b2 3a f2 64 28 0d 53 53 57 1a a6 64 8a d9 39 fb f9 e1 f7 6a 18 27 f5 35 36 b7 2a 48 3e ed e4 e0 f5 88 28 d6 b6 aa 82 3e d6 2a b5 ad 86 10 0f 44 e1 62 94 0e 64 89 62 94 0e 64 e1 e2 61 c2 f1 4f db 71 89 62 dd af f0 ff c3 19 5c 47 ff 25 29 25 07 bf Data Ascii: 2\.>od>]WPfTD:d(SSWd9j'56H>(>DbdbdaOqb\G%)%
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 93 52 f2 fe bf 37 a5 e4 e0 bf 35 a5 a4 1e e8 f1 ff a7 c8 fd 7f 41 8a dc 79 96 65 b0 ad fd cd 3e f0 68 c0 8e ce 53 ea c0 6e 5e 8f 64 5b c7 db 6f 18 c9 be ca 7f 2d 88 93 34 64 8d 83 d9 c0 6d db 9a 9c fd 90 1d d1 a7 61 c4 c7 14 0c 4a 91 00 32 23 5c 08 5b 95 8a 25 ce 95 4a 00 79 ac f1 2b 35 88 e7 ea de db d6 fd a7 bb 65 6f e7 4c 2e b6 f5 ba ef 6b 63 4c 19 5c 72 ef 3e bc fb 5c fc ee d1 6f db e9 42 eb 44 d8 e9 a4 a9 e0 68 83 7e 15 94 f3 c4 0c 2c 6a 1a e1 12 43 9d 28 9d 19 b5 ff c4 5c ef 68 9d 92 75 0a 7d 38 4f d0 d4 ca 24 5d 77 4f 28 2b 3e c4 ab df ea 6b 5b 41 f0 8f 49 70 44 d1 82 8a 69 4c 2c b5 d9 20 cc a3 b1 87 ca c6 8d e1 e0 b9 d6 b0 4e a9 8c 41 28 a0 58 ac 99 e1 53 b6 79 fc f3 f8 65 02 ff 7c 85 a6 52 1a b6 bd 34 8c 18 98 36 27 e6 0a 27 6d ac 31 d4 4f d6 64 Data Ascii: R75Aye>hSn^d[o-4dmaJ2#\[%Jy+5eoL.kcL\r>\oBDh~,jC(\hu}8O$]wO(+>k[AIpDiL, NA(XSye\|R46''m1Od
2024-04-18 16:58:48 UTC	9200	IN	Data Raw: e1 c9 4b 2b b7 c1 4f 17 a6 04 bc 50 ad df 88 ab d5 14 52 cf 2e 06 d7 46 aa 7d 49 1d 73 24 0f 7f 9b d7 bf 17 af 39 18 95 f5 7e 3d 18 70 a9 59 b1 a4 33 ac 3f 9f 4d 8a 6e 13 42 b3 a6 23 a2 7f ce 60 01 b7 a3 24 8e 2a 4f 3d 71 2b eb c1 6d 59 ef ab c6 71 a7 8c 5e 0f 5b 76 24 5f 04 31 90 c1 45 0b 86 cc de 0e 8d 7a d8 dd 6b 82 95 ea d6 8a 36 eb f8 5d 69 63 89 ac 9d 3d f6 d0 87 ad d7 f8 ca dc 32 96 37 30 1b 7a 6d 1d ab 0b ba 95 65 cd 87 96 a9 65 e5 16 c0 64 8b 86 a3 38 04 6a 49 24 d6 ca b5 cc dc f2 04 84 22 ff d1 69 c1 43 69 e5 e6 66 d3 ed b6 ec 28 d4 d5 aa 6e b5 2f 6a 3d aa 6a 47 65 ac 6b 5a c6 a0 65 c7 e0 d0 48 c5 ac ec aa 9e d6 08 69 f9 8a 64 bd 17 8e 35 da ee ef 57 96 e3 ee 6e b5 c1 8a cb 41 f8 f1 60 01 e2 07 cb 8f c6 f5 6b 71 82 d9 dd de 05 89 19 65 85 ac 53 Data Ascii: K+OPR.F}Is$9~=pY3?MnB#`$*O=q+mYq^[v$_1Ezk6]ic=270zmeed8jI$"iCif(n/j=jGekZeHid5WnA`kqeS
2024-04-18 16:58:48 UTC	9232	IN	Data Raw: c6 dc 1a bd cf 92 bd 18 18 b0 21 7f b9 b7 8d 84 f0 7c c3 c3 a9 87 52 1d f3 03 ec 4f 9d a0 23 c0 6b 00 9d 01 ff 52 cf 28 1d 52 ff 08 11 f2 2e ce e2 9c 92 29 8e 4e fc e5 2a 41 84 30 42 43 9d d4 79 54 06 b4 ef 11 c6 c0 2b ca 0d dd cc 27 fc 96 a4 c0 b0 38 61 09 0b 74 02 95 f6 31 32 7c 45 a7 01 fd f5 78 5e 08 61 b9 7e 9c 0a 5a c6 51 ca 27 6d c4 c5 a3 04 a7 00 75 98 d0 70 18 ef 61 44 41 43 fe ca 18 79 94 71 ba ef 01 40 3d 3e e7 e5 f4 48 b3 46 b9 16 9a f2 89 3d c2 5e 9f 02 7d 59 9a c4 c9 5d a1 ef 87 bf 01 fa 9c f7 67 93 e9 a2 cb 8c 4e f7 eb af 89 e5 70 df 05 ee 6c 7e fa b5 4f d4 ea d7 20 c0 6e d9 d5 01 9d fc 01 60 29 cb 69 7e 5c 26 1f 3b 58 8d 30 c3 91 14 4f e8 88 20 36 a4 c1 c7 19 41 43 12 25 f4 37 c8 82 da e2 38 4a 52 00 9d 57 79 dd 40 4d 28 32 21 78 e0 43 94 Data Ascii: !\|RO#kR(R.)N*A0BCyT+'8at12\|Ex^a~ZQ'mupaDACyq@=>HF=^}Y]gNpl~O n`)i~\&;X0O 6AC%78JRWy@M(2!xC
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: df 92 00 4a 9c ea fc 41 1c 6e c2 06 1d 68 00 1d 84 11 1c fb 45 07 92 0b e3 1f 5c 83 6d cb 0f 47 9e e4 8f da 1e 68 fc 8c b9 6e 2e 83 10 ef 9d 40 38 8f 94 b9 0b f8 ee e4 24 fc a2 06 0b b8 73 e7 24 87 27 54 d9 fe 51 48 7c 34 d4 3b 82 06 52 f0 05 11 2f a8 24 3b 53 0d a4 02 49 9f c1 e0 81 ea af b4 13 96 ed 84 65 3b 41 66 35 54 69 d4 1c 38 ba 5a bf b6 2d e6 87 c6 98 db f1 9d e7 76 cb 71 1f a7 d0 63 a1 c3 30 09 72 0f c2 38 2f 36 7a 92 90 ad 71 dc ec ea 71 0f 17 2e b1 f4 1a a5 33 f9 23 ef 42 7e 07 8d a6 a0 f2 0d f4 74 e5 c3 4a 36 2a 4f b9 1d e8 e4 fb 9d 52 a4 8c d3 d4 f7 a3 57 3c ab 39 fb 99 51 ce 66 84 e2 08 19 9d 05 de 61 c8 77 92 c8 d8 5b 2b d5 08 a1 aa 4c 83 39 60 98 81 8f 85 50 c9 13 79 5a 39 21 d3 7a 11 31 a8 f0 89 8f f3 85 e3 c6 c8 7a 98 bf 23 1f ea 41 e9 Data Ascii: JAnhE\mGhn.@8$s$'TQH\|4;R/$;SIe;Af5Ti8Z-vqc0r8/6zqq.3#B~tJ6*ORW<9Qfaw[+L9`PyZ9!z1z#A
2024-04-18 16:58:48 UTC	1024	IN	Data Raw: 9f 19 dc f3 e8 2c fe 37 a0 5e 69 ab 52 f8 ef 9b 09 bc 66 f3 64 da 3a 9c f4 4e 8d a4 87 80 01 09 87 15 f2 d9 40 d2 83 c9 d7 5f ad 60 f3 cc 81 7c d8 44 31 bf 8f 3c a9 4c 7d a8 54 23 a1 a0 43 25 6e 26 8a 58 a7 0a d9 04 62 7d 06 2e 1b 68 10 ef ca e2 16 ce ac 13 23 51 b7 d4 e2 17 a2 7f 88 26 87 b8 92 c5 27 be d7 91 88 86 a8 58 3e 46 83 f2 80 ff 1c 20 88 d6 1f ca 0a 89 34 2d 3e d3 30 50 20 ec 12 53 1c c5 18 13 55 f3 85 df 91 08 0c 29 59 57 1d 80 46 82 39 82 1f b1 fb 51 cc d2 26 7a 2e 90 24 28 42 46 7a b9 4b 60 12 85 b4 45 4b 22 c7 54 10 c1 44 c1 15 88 93 05 91 ae 27 60 87 22 58 9c 02 62 4a 70 73 ae be 15 74 08 42 c3 41 08 c0 46 2c 91 80 bf 06 d4 42 08 44 c1 c3 43 54 5f c0 79 e9 de f7 bd 28 ab 0f 61 73 ec 12 52 98 f6 3a ac fb f1 bc ac 3b 62 69 22 0f 32 34 33 9a Data Ascii: ,7^iRfd:N@_`\|D1<L}T#C%n&Xb}.h#Q&'X>F 4->0P SU)YWF9Q&z.$(BFzK`EK"TD'`"XbJpstBAF,BDCT_y(asR:;bi"243
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: e6 d2 86 c9 61 3a ac 6f 30 db fc 72 d8 04 b6 d1 d0 ea d4 53 de e8 2a 46 4e 53 1a b6 73 4e ed 11 7e d3 be 13 e4 42 32 65 1b 8a d5 9d 29 f8 bd b5 e7 71 d1 84 f0 be ae 0d 18 7f 13 51 f0 75 2a a6 6f 3f 8b c9 f5 66 71 98 9c 5e 31 89 76 fe 42 26 b6 e8 a0 d8 67 67 42 a2 2d 42 30 9a 30 0a c2 d1 2c 43 6d cd 48 54 15 3c 6c 89 9a 8b 59 ce 45 47 f2 ae 40 e2 c8 58 13 4a 2a 90 a0 a3 05 9f 8d 02 02 35 36 46 d4 f7 d0 de 87 7c 46 ea fa 12 b2 5e 10 83 dc 1c 68 41 02 e8 4e d6 1b 6c 18 e1 71 c1 87 ac 0c 15 6b 17 f5 18 8d 29 2c 9d 47 d1 5f e6 68 be 9d 25 7e 06 33 ae 65 75 ef 2e 1d 44 9a 0f ba c2 8a 8d b6 b2 05 ec 52 55 02 8b 2e 8e f2 96 79 43 07 a0 90 c1 de 04 f8 97 15 d3 0e 02 21 37 32 78 fa a0 a0 94 5f 0a 57 c8 b1 78 a3 21 08 27 85 e4 53 71 39 72 61 e4 23 70 af da 0f 92 b8 Data Ascii: a:o0rSFNSsN~B2e)qQuo?fq^1vB&ggB-B00,CmHT<lYEG@XJ*56F\|F^hANlqk),G_h%~3eu.DRU.yC!72x_Wx!'Sq9ra#p
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 32 fe cd d8 e9 74 34 28 ef 26 20 2c 85 bd d5 d6 29 7b a5 b3 52 4f 96 44 d6 b8 ac cd 42 19 29 53 1f 70 5c c9 ac cf a3 0b 27 66 76 7a 98 51 01 94 9d ac b2 08 ca cc 6f 8a 00 1d e2 8d 08 5d c1 1a 00 9a c1 b8 4c d4 c2 10 97 19 ed 95 c5 fe 36 17 4b 06 99 1c 34 1d 3c 50 f1 5c 50 2a 20 41 0c 27 9f 4f 49 6a 48 fa 02 3e 95 a1 d8 48 06 99 8b 78 7a 2a 42 db 62 52 29 6a 1b 65 c8 d6 1f 65 94 4b f2 62 14 fa e7 21 0b 80 8f 31 0a 15 60 2c 03 a6 28 d1 5a 36 0d 4b c0 ec 25 7a c3 6b b4 97 43 9e ca 63 5f 14 96 29 ac 34 56 3b 23 92 5d c1 44 71 54 60 d9 70 08 49 da ab 0f 2f 95 ce 8b 7f ee 7a 6e a4 5a 15 9f 9d 51 f0 38 ac 1d 17 51 37 94 ef 2b b8 bf af 5a e3 c4 87 77 c6 40 e9 aa 4b 9c 13 72 1c f2 a1 9c ae 69 df 29 f6 37 a4 98 fa 78 df 84 48 85 3f 80 47 8d 40 04 a4 78 fa 63 09 86 Data Ascii: 2t4(& ,){RODB)Sp\'fvzQo]L6K4<P\P* A'OIjH>Hxz*BbR)jeeKb!1`,(Z6K%zkCc_)4V;#]DqT`pI/znZQ8Q7+Zw@Kri)7xH?G@xc
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: e5 12 4f ca 4a 09 42 d6 79 9e ad 06 57 44 5a 80 8c e3 72 64 cb 1a 96 b5 ee 35 bc 87 a5 92 e5 e2 6d c6 e4 c5 91 36 92 76 bc 05 c8 8c 9a e2 f0 0c d5 ef 9b c0 8d c4 33 2a 2b 00 ef 9a f0 c9 98 33 04 57 5e f3 d1 7f cb c7 1b f7 ef 8f ee 5f ee 5b f3 1f 3b 0f f1 ff 1f 3c 72 ed 23 7c f5 74 fe a4 3a bf b6 31 ff e1 f4 ae 56 1d 3f 78 64 1f 7a cd 13 ba 6f b1 e9 0e c5 26 eb 01 9b c2 99 da 14 08 cb a6 40 0d f0 f7 70 e1 d8 a6 28 a6 36 65 ef 3d 8d c9 cb ad 42 0d 71 44 31 f3 88 8a 6f 73 ee 28 4f 60 89 e7 8d 9e 51 69 a1 4b e3 f4 35 8e a8 ca 63 f6 67 55 d5 32 c7 f0 aa 2d cc 3b 03 75 41 30 9e d1 6d 3f e2 4f 30 46 ab 9e c6 74 b4 db 39 61 c9 20 eb 78 e2 a1 37 2a 90 60 ca 35 25 c2 65 ed 92 2a 7e cf 43 62 e0 37 3f d3 69 e4 ad df 95 b6 a8 f2 0c d4 9e d9 dd 2e 61 be 26 77 dc b8 2b Data Ascii: OJByWDZrd5m6v3+3W^_[;<r#\|t:1V?xdzo&@p(6e=BqD1os(O`QiK5cgU2-;uA0m?O0Ft9a x7`5%e*~Cb7?i.a&w+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49849	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:47 UTC	507	OUT	GET /vendor-modern.7a9ca9be.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:47 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 150798 Connection: close Date: Thu, 18 Apr 2024 16:58:48 GMT Last-Modified: Thu, 18 Apr 2024 16:10:46 GMT ETag: "5c13346c290dc4ad1ac8aa2744045cbe" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: oGGEhaJF2sucBEhg_NTsWfPbpeAJLLzm Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 54f27782aca9bf13f9a3998bbd8a6886.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bc4mmgmhIcY5EpCrjKHaxdTNDE0LwIdywIVqbEEGH5LvZ0cSUC_dwg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a c7 de e9 d8 3b 1d b1 e6 1f 69 f3 dd c5 eb f3 0f 57 e7 cd ec 3e db 7a be f7 ff 99 d3 30 1e 79 e1 f5 2c 48 9b 77 6c b4 f0 c6 37 af 67 cb e8 26 88 32 96 8c e3 f9 f0 8f d4 fd 76 96 d5 aa 3f b0 9a 8b 65 3a 33 fb fd 83 76 a7 3d b0 1f 8f 0f 0e 0e 4f 1c 93 d9 99 1d 59 ee 8b 47 63 89 7d cb 92 60 9c 19 dd cb d1 1f 6c 9c 35 7d 36 09 22 f6 31 89 17 2c c9 1e cc cc 36 86 43 96 be 8f fd 65 c8 0c fb f1 d6 Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,;iW>z0y,Hwl7g&2v?e:3v=OYGc}`l5}6"1,6Ce
2024-04-18 16:58:47 UTC	467	IN	Data Raw: d3 f3 b5 5f 6f 6d 77 4e 8e 6a 08 be dd 3a b5 88 ca f1 15 73 8d ca f1 91 73 fe a8 39 91 3f be 69 7e d4 6e f3 17 cd 4f b0 cc 58 70 0b fd 51 73 eb b1 f0 64 79 91 41 14 2e 14 1e e3 b3 9e ea da 3f fe 88 cb 44 bb 08 10 af be 8d 0b 31 01 dd 5c ab c7 78 f4 d2 b5 1e 83 8f 01 8f 01 83 15 39 44 fe 22 0e 10 d6 92 1b c5 d1 07 76 bf 4c 5f ca 7b b3 dd a4 98 f0 21 ce f2 b4 58 a5 bd 9e 79 51 c4 c2 f3 fb 45 90 30 df 0d 54 c2 5b c8 0b e2 e5 3a 3e 4f 71 6d 3b a0 89 8e 18 0d da 95 d7 dd 2d 53 96 7c 02 9d c4 f5 ed 25 6a 05 97 0b 4c 4e 4d d0 ba e9 c6 d4 2b d0 f3 f0 ca 32 3a f2 f3 2e 9e 4e 19 20 81 18 03 57 fc f2 4a 53 57 5d 92 17 24 20 17 79 c2 1b 50 00 d0 c7 58 1c 22 5a 4e 26 4c 91 0e bd 4c fc 8a a2 24 dd 8f b5 ea f4 5c 5a 33 32 2b 2a 4d 19 68 c3 57 00 4b 4e bc 7a 01 15 7b 2d Data Ascii: _omwNj:ss9?i~nOXpQsdyA.?D1\x9D"vL_{!XyQE0T[:>Oqm;-S\|%jLNM+2:.N WJSW]$ yPX"ZN&LL$\Z32+*MhWKNz{-
2024-04-18 16:58:47 UTC	16384	IN	Data Raw: 42 02 d3 f8 a0 b2 19 fc 98 3d 16 7c 1d cf e7 65 21 5f 53 50 64 93 05 51 25 53 ac 75 d3 29 29 c5 7c 09 9c b3 65 e6 c7 77 51 05 84 4f 43 41 f3 f1 51 55 98 b4 5b 99 e2 8d 50 59 12 3f e0 d6 40 33 61 f8 0c d1 66 96 b9 a6 b7 e7 33 34 b3 14 77 fe eb 3d 49 98 c8 fb 21 be 33 e5 2c 68 93 54 c5 93 bc eb 90 93 4b 0d e6 6b 42 03 40 fc 2b 1b a5 f1 f8 86 65 75 5d 64 9a b0 e4 d7 80 e2 a3 1d 21 1e 36 49 f8 93 f3 c6 32 42 99 35 cc e2 21 93 b5 0e 61 82 87 77 b2 de e1 88 8d 3d 10 45 43 a3 a1 ae 19 79 5a 80 a9 eb 48 fe ea 24 7d bf b0 21 45 9c 25 b8 41 ff 33 f3 c2 6c 46 06 df 3f 31 47 d5 ca d4 4c a1 3c e7 f5 54 ea af a0 4e a3 41 ef 9a d5 27 f6 cc 7a a5 c2 d4 de 23 e6 39 42 30 61 df 04 a9 e8 fe 4b 74 01 08 c1 76 9b e3 e2 b3 01 b6 33 3a 68 1b 76 9d f6 b9 5b 5f 81 9c c0 72 bc cb Data Ascii: B=\|e!_SPdQ%Su))\|ewQOCAQU[PY?@3af34w=I!3,hTKkB@+eu]d!6I2B5!aw=ECyZH$}!E%A3lF?1GL<TNA'z#9B0aKtv3:hv[_r
2024-04-18 16:58:47 UTC	1024	IN	Data Raw: ab 51 37 af ae c1 b8 31 b2 6b d9 ee 2b 26 c5 0d b0 ba 21 75 89 55 a5 be e8 b5 45 82 8b 19 98 88 99 e5 2f 02 cb b9 bc bc 68 09 7c d5 0a 63 cc a2 72 5e e9 cb 78 e8 54 b3 0e a9 c7 d6 11 b8 d7 00 2a cd 5d 88 16 18 55 3e 69 8a b1 ab e6 6c 2a 9b 90 73 ac c3 84 4b b5 55 58 86 be 2c 27 92 12 7c e9 dc 6c 9c 13 bd a5 41 e9 54 71 49 b5 a3 26 99 bd 91 f3 59 18 84 7e 42 0b 81 06 46 aa 6d 8a 2f 50 7c 79 3a 37 bd 1b f6 06 e3 75 17 40 03 83 20 b0 5b ee fa b5 01 af 59 cb c5 db d4 3e 56 09 63 55 46 4e 33 52 94 79 ad bb 2a be a5 a4 bf b6 dd b0 3e e8 0f 83 16 57 53 62 cd 0f 9a e5 70 0a bd 55 4f 23 b2 3f 5f e4 35 8a 2c 25 8a 2c ca 8d 76 64 f2 2b b2 1a fe b3 71 04 fb 2c 98 19 43 7d 87 6a ac da 72 cb 58 d5 96 81 7e 3f 23 c9 fc 8c 9a 89 ea 59 79 e0 52 d1 64 e5 05 d0 4b 10 b0 ca Data Ascii: Q71k+&!uUE/h\|cr^xT]U>ilsKUX,'\|lATqI&Y~BFm/P\|y:7u@ [Y>VcUFN3Ry*>WSbpUO#?_5,%,vd+q,C}jrX~?#YyRdK
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 2e c4 10 91 6c 1c dc 14 15 53 2b d9 ad b0 c4 80 15 27 b4 fe 2b 19 a1 26 25 b8 19 46 b2 77 0a 03 ff 32 9f 93 49 bf 88 4a 31 8c 2a 9e 47 3d d6 5b bc f3 33 d2 48 88 37 7e 81 5e 8c bf fb 8e 7b 7e 4a 16 3d 73 c9 ee 7f 58 58 d9 8a 0e 1c 6c 0b 68 6d ec 38 92 b3 ab ea 58 bb a6 e3 9f 40 a5 17 c8 d0 82 be 44 af b0 d2 15 3e bf 34 c4 ff f5 14 d8 5d ef bd 34 3d 06 a4 ef 50 bd eb 1f 7d fd c3 55 58 f4 d7 84 d7 a7 0e 96 51 4f cb 3f 3d 76 c5 5f d3 5e fb 56 75 a2 6c d0 f6 46 3f 45 03 6f 2a c6 8e 81 37 10 13 7f ec 16 ac a8 4a 38 4b c0 be b4 11 54 83 50 7d 4f 9f 4a c2 7e da 4b 83 9c 3a e8 36 2c ff 69 36 ba 56 4f 1d a8 c4 bb c1 dc 86 82 b2 65 37 a5 a8 80 bc 6b 51 04 aa 23 64 e5 4e ed 0d 15 2a fd 55 fa 4f d6 9f 8a 1b 06 c5 d0 7d 01 bd 4d 88 62 22 f4 11 43 e8 b7 bc bb 2e 54 54 Data Ascii: .lS+'+&%Fw2IJ1G=[3H7~^{~J=sXXlhm8X@D>4]4=P}UXQO?=v_^VulF?Eo7J8KTP}OJ~K:6,i6VOe7kQ#dN*UO}Mb"C.TT
2024-04-18 16:58:48 UTC	1024	IN	Data Raw: 72 e8 fd fa b7 99 39 25 03 ce ac 96 04 f1 13 99 2e 82 ae ab d9 27 64 a5 98 bc 21 61 b3 cd 75 42 56 c3 ae 92 25 00 5b 0d 49 78 9b ea b0 8e f3 76 a5 09 60 24 c7 e5 1f 58 b0 aa 7d fc 9a 83 0b 30 02 2f 10 67 68 a0 68 57 ca bc 00 ca 74 5e 79 80 09 03 79 81 3c ed 83 fa 62 ae 2b 6b 53 71 62 6d 7a 57 22 bb f6 76 50 9a 8e 40 60 81 a1 45 30 a8 a8 87 8f f0 71 e1 4f d1 41 7d 5d 3c 0f 28 fc cf 1b 78 2b 97 7c 6f ed 37 6e f7 c9 f7 07 bf 05 c7 df 06 9f 82 35 e1 7d b3 e1 01 7a 38 c6 68 35 52 fd 91 40 c5 af 9e 51 58 4f a9 9e 14 ce 93 42 3f f1 97 38 50 99 6c 33 e4 c5 21 c9 7e 43 39 75 a1 ed ec ff 92 f7 26 dc 8d 63 fb 7d e0 57 91 e8 7e 32 d0 84 58 dc 45 91 85 62 aa 6b 79 5d ee ae e5 55 55 bf f6 7b 14 5b 86 48 50 42 17 05 f0 81 a0 54 2a 91 73 ec 38 5e e2 35 ce e2 d8 59 1c 3b Data Ascii: r9%.'d!auBV%[Ixv`$X}0/ghhWt^yy<b+kSqbmzW"vP@`E0qOA}]<(x+\|o7n5}z8h5R@QXOB?8Pl3!~C9u&c}W~2XEbky]UU{[HPBT*s8^5Y;
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 6e 9d a6 59 ec 96 a8 5f c4 f2 03 25 3b 9a 4e d8 dd e5 d0 b1 29 5c 5a 21 87 34 2b a3 6e dc bf 30 6a 59 63 5c e0 1c 5e a0 3a 25 40 63 6c 05 a2 47 4a c7 c7 bc bb 8f 8f 09 96 5c af fa 79 71 1d e7 2d 76 38 85 1d 0e 24 9d d2 58 99 b9 a4 92 09 a3 13 87 61 99 6d 13 e1 35 18 e2 34 87 9c ac 11 79 48 09 d8 b3 80 da 38 c7 79 41 7d 68 44 f7 80 f2 dd 09 90 b2 34 e9 8b 64 81 44 df e9 17 b9 31 f8 1c cb 56 96 1a e0 f2 0e 5a 37 7b e7 1b 5c 5e 2a de 91 5a 28 ef b6 f6 0c c4 ef 01 80 6b ea 0d 38 8b 86 eb a6 14 1a ed c3 dd c0 82 26 94 ad 19 14 98 5a 48 7b 07 6a 29 6d 77 b7 35 54 2f d8 7d 9f 17 48 8e 50 b9 e6 13 2c bb a0 9d 2a 9d cf 11 fb 66 16 07 e7 01 c2 17 ed 08 14 c2 80 09 5e b1 ef 21 1a 93 b0 81 e7 0e 30 56 8a 94 00 de 04 ba 90 3b 11 4a 5f 82 04 02 a0 e6 d4 e7 a9 dc 3d ba Data Ascii: nY_%;N)\Z!4+n0jYc\^:%@clGJ\yq-v8$Xam54yH8yA}hD4dD1VZ7{\^Z(k8&ZH{j)mw5T/}HP,f^!0V;J_=
2024-04-18 16:58:48 UTC	1024	IN	Data Raw: 8d 5a bd 88 9c 60 f6 44 cc 52 b3 d5 39 2c 24 54 24 38 42 ec ae 85 f2 f0 24 62 7e aa 59 15 e6 1e e0 fc 15 b8 11 e1 7a 2a 2c 68 7e c0 3f cc ef 4e a5 34 60 44 9b 72 3e ec 85 f7 aa 08 21 38 b2 fb b0 d0 f0 ad 91 13 82 25 e1 ae bb b1 b5 70 46 76 d7 43 07 03 e5 14 39 74 47 69 a6 52 7c 49 bb 5d a8 5f a0 35 26 3a c1 ca 4b 21 b1 0b 8a 5a a3 97 f7 26 fd d0 0d 7b 03 36 0f 9a f5 7a d1 a6 ab 1d b4 65 b7 07 07 07 87 07 b7 a1 67 21 3a b1 12 37 16 01 f0 34 71 cb 99 2c e8 ad 21 58 30 9f 28 6e 3a 34 83 b0 5c 1e da 69 c0 21 ba 8b 24 1e 3a c6 1d cd 4e bd 56 48 a8 19 eb 2c e8 a1 1b 48 fc c0 15 2e cd ea bc 42 0d 4a eb 13 38 21 db 11 12 4d 5d 27 0a ab 48 4e 07 39 a1 54 f3 b4 24 3d d8 3a 6c 80 96 f2 5c a2 45 75 b8 db d7 de a9 1c f6 76 3e 2b ab 9f 87 19 50 3f 45 bf ca fa 60 58 ea Data Ascii: Z`DR9,$T$8B$b~Yz*,h~?N4`Dr>!8%pFvC9tGiR\|I]_5&:K!Z&{6zeg!:74q,!X0(n:4\i!$:NVH,H.BJ8!M]'HN9T$=:l\Euv>+P?E`X
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: fa 61 53 ac ac 78 9b c3 11 f9 bc cd 62 9b fc 2d 43 6c e3 6d 10 db 78 9b c4 36 de 26 b1 8d b7 49 72 92 bf 91 97 9c 78 1b 25 27 de 36 c9 89 37 28 c2 89 99 87 8a 3a ca 09 cb bc 42 a9 98 97 91 8a 69 11 9a b7 2e 2c f3 0a e4 37 e6 74 6b d1 46 a6 5a 4a 73 bc 22 b9 96 51 a9 30 78 a6 32 95 73 79 6b 72 2e af 48 ce e5 dd 5e 92 94 b5 4d 64 31 bd a1 25 dd dd f5 06 d8 a5 43 a1 86 ed 14 e1 8a c3 46 bb ad c8 59 62 68 a4 d6 b2 d3 68 76 a4 75 83 24 73 98 f6 a9 b6 3a 1b 64 d3 3a a3 48 81 c9 74 5f 79 5d f9 c4 63 ac 85 20 f4 fb 9e a4 08 38 e6 1b 34 eb a0 8b 6d a6 55 00 67 3b 87 9d 42 0b 17 3a 5f 12 c9 11 f9 55 fd a6 5a 0f 25 ca 48 f9 6a 9c 76 69 a9 3b 30 72 0f 64 d8 03 5b eb 46 a0 13 c9 c5 42 0b 21 19 62 a1 80 11 66 80 59 aa c3 42 d3 07 2d 90 d1 1f 25 0c 4c 6a 1d b6 9c fb db Data Ascii: aSxb-Clmx6&Irx%'67(:Bi.,7tkFZJs"Q0x2sykr.H^Md1%CFYbhhvu$s:d:Ht_y]c 84mUg;B:_UZ%Hjvi;0rd[FB!bfYB-%Lj
2024-04-18 16:58:48 UTC	16384	IN	Data Raw: 1c 28 6f 1f a8 5b 73 f1 42 a2 fa ee 1f d2 d3 df fd ac d9 03 2f 24 2a 92 ab 79 a4 07 42 db 3f ba d9 2a 8e 13 5c 46 94 6d cd 0c 32 34 33 c8 da 98 41 f4 fa 0f e9 55 1c 63 54 78 c3 46 98 bf 81 e3 19 7a 75 ed fe 5c 27 ad 2a 77 aa c9 d2 07 ea d6 b6 04 81 e2 82 7c 84 9d e4 2c 96 7d 10 2d 05 cc 0a 5d 5f 8c 16 c4 3e 86 de e4 d6 3b 62 bf f7 16 c8 79 52 9a 79 32 86 c9 ef b8 9d 85 45 fd 54 cb 4d 1d 00 f9 b3 f6 ae 54 80 f0 85 f3 bd e6 90 80 01 cc 21 39 ca 0b d4 c6 cb a6 a4 61 ca bf 4a 69 6a 69 34 e3 aa 87 a7 a4 5c 24 27 80 3f 4b 20 71 b3 61 71 31 ad 28 35 c2 bf 64 2d 87 2a 93 72 84 42 79 95 9c c8 2a 31 8f ac 2c 36 4d d0 4e 8e 9a c2 3f a8 2e 34 2d f2 13 54 7f 5e 82 a6 a4 6a a8 94 f2 1b 69 95 ca 6f ac f8 c5 06 c7 2c d8 1a 2d 55 e9 44 ce a6 a4 ab 7a 96 8f 01 26 d4 67 e7 Data Ascii: (o[sB/$yB?\Fm243AUcTxFzu\'w\|,}-]_>;byRy2ETMT!9aJiji4\$'?K qaq1(5d-rBy*1,6MN?.4-T^jio,-UDz&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49851	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:48 UTC	353	OUT	GET /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:48 UTC	374	IN	HTTP/1.1 403 Forbidden x-statsig-region: gke-us-east1 Content-Length: 19 content-type: text/plain date: Thu, 18 Apr 2024 16:58:48 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:58:48 UTC	19	IN	Data Raw: 52 42 41 43 3a 20 61 63 63 65 73 73 20 64 65 6e 69 65 64 Data Ascii: RBAC: access denied

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49853	104.17.74.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:48 UTC	873	OUT	GET /index.php/form/XDFrame HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:48 UTC	467	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 X-Content-Type-Options: nosniff Vary: Accept-Encoding Set-Cookie: BIGipServersj01web-nginx-app_https=!crWWwaYuNnkaYE8eBGUusMppqwi+exI7PuVfhI43Eew3UIYMwK6TNlc24DOxSl8sL+zHiYVlLlDZ; Path=/; Version=1; Secure; Httponly CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876633a62eba6734-ATL
2024-04-18 16:58:48 UTC	902	IN	Data Raw: 37 30 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 6f 20 46 6f 72 6d 73 20 32 20 43 72 6f 73 73 20 44 6f 6d 61 69 6e 20 72 65 71 75 65 73 74 20 70 72 6f 78 79 20 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 6c 70 2e 64 72 6f 70 62 6f 78 62 75 73 69 6e 65 73 73 2e 63 6f 6d 2f 6a 73 2f 66 6f 72 6d 73 32 2f 6a 73 2f 66 6f 72 6d 73 32 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 20 3d 20 4d 6b 74 6f 46 6f 72 6d 73 32 2e 24 3b 0a 20 20 20 20 20 20 20 Data Ascii: 709<!doctype html><html> <head> <title>Marketo Forms 2 Cross Domain request proxy frame</title> <script src="//lp.dropboxbusiness.com/js/forms2/js/forms2.min.js"></script> <script> (function (){ var $ = MktoForms2.$;
2024-04-18 16:58:48 UTC	906	IN	Data Raw: 28 64 61 74 61 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6b 74 6f 52 65 73 70 6f 6e 73 65 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 66 6f 72 22 3a 6d 65 73 73 61 67 65 2e 6d 6b 74 6f 52 65 71 75 65 73 74 2e 69 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 64 61 74 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 6f 72 69 67 69 6e 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: (data){ window.parent.postMessage(JSON.stringify({ mktoResponse:{ "for":message.mktoRequest.id, error:false, data:data } }), origin);
2024-04-18 16:58:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49857	104.17.74.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:49 UTC	744	OUT	GET /js/forms2/js/forms2.min.js HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lp.dropboxbusiness.com/index.php/form/XDFrame Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:49 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:49 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 05 Mar 2024 19:24:48 GMT ETag: W/"ba0904-31af8-612eecb9f6000" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6953 Expires: Thu, 18 Apr 2024 20:58:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 876633aad8748bb5-ATL
2024-04-18 16:58:49 UTC	925	IN	Data Raw: 37 64 65 32 0d 0a 2f 2a 21 20 66 6f 72 6d 73 32 20 32 30 32 34 2d 30 31 2d 32 39 20 20 53 65 65 20 66 6f 72 6d 73 32 2e 6a 73 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 67 2c 68 29 7b 69 66 28 21 63 5b 67 5d 29 7b 69 66 28 21 62 5b 67 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 68 26 26 69 29 72 65 74 75 72 6e 20 69 28 67 2c 21 30 29 3b 69 66 28 66 29 72 65 74 75 72 6e 20 66 28 67 2c 21 30 29 3b 76 61 72 20 6a 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 67 2b 22 27 22 29 3b 74 68 72 6f 77 Data Ascii: 7de2/! forms2 2024-01-29 See forms2.js for license info /!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 22 3d 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 6b 2d 31 29 3f 31 3a 30 2c 6a 3d 6e 65 77 20 66 28 33 2a 61 2e 6c 65 6e 67 74 68 2f 34 2d 69 29 2c 67 3d 69 3e 30 3f 61 2e 6c 65 6e 67 74 68 2d 34 3a 61 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6c 3d 30 3b 66 6f 72 28 64 3d 30 2c 65 3d 30 3b 67 3e 64 3b 64 2b 3d 34 2c 65 2b 3d 33 29 68 3d 62 28 61 2e 63 68 61 72 41 74 28 64 29 29 3c 3c 31 38 7c 62 28 61 2e 63 68 61 72 41 74 28 64 2b 31 29 29 3c 3c 31 32 7c 62 28 61 2e 63 68 61 72 41 74 28 64 2b 32 29 29 3c 3c 36 7c 62 28 61 2e 63 68 61 72 41 74 28 64 2b 33 29 29 2c 63 28 28 31 36 37 31 31 36 38 30 26 68 29 3e 3e 31 36 29 2c 63 28 28 36 35 32 38 30 26 68 29 3e 3e 38 29 2c 63 28 32 35 35 26 68 29 3b 72 65 74 75 72 6e 20 32 3d 3d 3d 69 3f 28 68 3d 62 28 61 2e 63 68 61 Data Ascii: "="===a.charAt(k-1)?1:0,j=new f(3*a.length/4-i),g=i>0?a.length-4:a.length;var l=0;for(d=0,e=0;g>d;d+=4,e+=3)h=b(a.charAt(d))<<18\|b(a.charAt(d+1))<<12\|b(a.charAt(d+2))<<6\|b(a.charAt(d+3)),c((16711680&h)>>16),c((65280&h)>>8),c(255&h);return 2===i?(h=b(a.cha
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 38 32 33 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 3f 28 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 7c 7c 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 76 6f 69 64 20 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 3f 67 28 74 68 69 73 2c 61 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 68 28 74 68 69 73 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 75 74 66 38 22 29 3a 69 28 74 68 69 73 2c 61 29 29 3a 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 6e 65 77 20 66 28 61 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3a 6e 65 77 20 Data Ascii: 823}function f(a){return this instanceof f?(f.TYPED_ARRAY_SUPPORT\|\|(this.length=0,this.parent=void 0),"number"==typeof a?g(this,a):"string"==typeof a?h(this,a,arguments.length>1?arguments[1]:"utf8"):i(this,a)):arguments.length>1?new f(a,arguments[1]):new
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 6f 6e 20 70 28 61 2c 62 29 7b 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 28 61 3d 66 2e 5f 61 75 67 6d 65 6e 74 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 2c 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 66 2e 70 72 6f 74 6f 74 79 70 65 29 3a 28 61 2e 6c 65 6e 67 74 68 3d 62 2c 61 2e 5f 69 73 42 75 66 66 65 72 3d 21 30 29 3b 76 61 72 20 63 3d 30 21 3d 3d 62 26 26 62 3c 3d 66 2e 70 6f 6f 6c 53 69 7a 65 3e 3e 3e 31 3b 72 65 74 75 72 6e 20 63 26 26 28 61 2e 70 61 72 65 6e 74 3d 5a 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 69 66 28 61 3e 3d 65 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 42 75 66 66 65 72 20 6c 61 72 67 65 72 20 74 Data Ascii: on p(a,b){f.TYPED_ARRAY_SUPPORT?(a=f._augment(new Uint8Array(b)),a.__proto__=f.prototype):(a.length=b,a._isBuffer=!0);var c=0!==b&&b<=f.poolSize>>>1;return c&&(a.parent=Z),a}function q(a){if(a>=e())throw new RangeError("Attempt to allocate Buffer larger t
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3b 69 66 28 66 25 32 21 3d 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 68 65 78 20 73 74 72 69 6e 67 22 29 3b 64 3e 66 2f 32 26 26 28 64 3d 66 2f 32 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 64 3e 67 3b 67 2b 2b 29 7b 76 61 72 20 68 3d 70 61 72 73 65 49 6e 74 28 62 2e 73 75 62 73 74 72 28 32 2a 67 2c 32 29 2c 31 36 29 3b 69 66 28 69 73 4e 61 4e 28 68 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 68 65 78 20 73 74 72 69 6e 67 22 29 3b 61 5b 63 2b 67 5d 3d 68 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 56 28 52 28 62 2c 61 2e 6c 65 6e 67 74 68 2d 63 29 2c 61 2c 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: length;if(f%2!==0)throw new Error("Invalid hex string");d>f/2&&(d=f/2);for(var g=0;d>g;g++){var h=parseInt(b.substr(2*g,2),16);if(isNaN(h))throw new Error("Invalid hex string");a[c+g]=h}return g}function v(a,b,c,d){return V(R(b,a.length-c),a,c,d)}function
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 31 32 37 26 61 5b 65 5d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 22 3b 63 3d 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 2c 63 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 3b 63 3e 65 3b 65 2b 2b 29 64 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 5b 65 5d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 3b 28 21 62 7c 7c 30 3e 62 29 26 26 28 62 3d 30 29 2c 28 21 63 7c 7c 30 3e 63 7c 7c 63 3e 64 29 26 26 28 63 3d 64 29 3b 66 6f 72 28 76 61 72 20 65 3d 22 22 2c 66 3d 62 3b 63 3e 66 3b 66 2b 2b 29 65 2b 3d 51 28 61 5b 66 5d Data Ascii: +=String.fromCharCode(127&a[e]);return d}function E(a,b,c){var d="";c=Math.min(a.length,c);for(var e=b;c>e;e++)d+=String.fromCharCode(a[e]);return d}function F(a,b,c){var d=a.length;(!b\|\|0>b)&&(b=0),(!c\|\|0>c\|\|c>d)&&(c=d);for(var e="",f=b;c>f;f++)e+=Q(a[f]
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 34 38 36 32 33 31 35 37 65 33 30 38 29 2c 58 2e 77 72 69 74 65 28 61 2c 62 2c 63 2c 64 2c 35 32 2c 38 29 2c 63 2b 38 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 7b 69 66 28 61 3d 50 28 61 29 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 22 29 2c 61 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 3b 61 2e 6c 65 6e 67 74 68 25 34 21 3d 3d 30 3b 29 61 2b 3d 22 3d 22 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d 3f 61 2e 74 72 69 6d 28 29 3a 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 31 36 3e 61 3f 22 30 22 2b 61 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 61 2e 74 6f 53 74 72 69 6e 67 Data Ascii: 48623157e308),X.write(a,b,c,d,52,8),c+8}function O(a){if(a=P(a).replace(aa,""),a.length<2)return"";for(;a.length%4!==0;)a+="=";return a}function P(a){return a.trim?a.trim():a.replace(/^\s+\|\s+$/g,"")}function Q(a){return 16>a?"0"+a.toString(16):a.toString
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 4d 41 58 5f 42 59 54 45 53 3d 35 30 2c 66 2e 70 6f 6f 6c 53 69 7a 65 3d 38 31 39 32 3b 76 61 72 20 5a 3d 7b 7d 3b 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3d 76 6f 69 64 20 30 21 3d 3d 62 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 62 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3a 64 28 29 2c 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 28 66 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 66 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 55 69 6e 74 38 41 72 72 61 79 29 3a 28 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 6e 67 74 68 3d 76 6f 69 64 20 30 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 65 6e 74 3d 76 6f Data Ascii: MAX_BYTES=50,f.poolSize=8192;var Z={};f.TYPED_ARRAY_SUPPORT=void 0!==b.TYPED_ARRAY_SUPPORT?b.TYPED_ARRAY_SUPPORT:d(),f.TYPED_ARRAY_SUPPORT?(f.prototype.__proto__=Uint8Array.prototype,f.__proto__=Uint8Array):(f.prototype.length=void 0,f.prototype.parent=vo
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 76 61 72 20 61 3d 22 22 2c 62 3d 63 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 26 26 28 61 3d 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 22 68 65 78 22 2c 30 2c 62 29 2e 6d 61 74 63 68 28 2f 2e 7b 32 7d 2f 67 29 2e 6a 6f 69 6e 28 22 20 22 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 62 26 26 28 61 2b 3d 22 20 2e 2e 2e 20 22 29 29 2c 22 3c 42 75 66 66 65 72 20 22 2b 61 2b 22 3e 22 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 61 72 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 66 2e 69 73 42 75 66 66 65 72 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 42 75 66 66 65 72 22 29 3b 72 65 74 Data Ascii: var a="",b=c.INSPECT_MAX_BYTES;return this.length>0&&(a=this.toString("hex",0,b).match(/.{2}/g).join(" "),this.length>b&&(a+=" ... ")),"<Buffer "+a+">"},f.prototype.compare=function(a){if(!f.isBuffer(a))throw new TypeError("Argument must be a Buffer");ret
2024-04-18 16:58:49 UTC	1369	IN	Data Raw: 62 29 29 62 3d 30 7c 62 2c 69 73 46 69 6e 69 74 65 28 63 29 3f 28 63 3d 30 7c 63 2c 76 6f 69 64 20 30 3d 3d 3d 64 26 26 28 64 3d 22 75 74 66 38 22 29 29 3a 28 64 3d 63 2c 63 3d 76 6f 69 64 20 30 29 3b 65 6c 73 65 7b 76 61 72 20 65 3d 64 3b 64 3d 62 2c 62 3d 30 7c 63 2c 63 3d 65 7d 76 61 72 20 66 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2d 62 3b 69 66 28 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 63 3e 66 29 26 26 28 63 3d 66 29 2c 61 2e 6c 65 6e 67 74 68 3e 30 26 26 28 30 3e 63 7c 7c 30 3e 62 29 7c 7c 62 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 20 74 6f 20 77 72 69 74 65 20 6f 75 74 73 69 64 65 20 62 75 66 66 65 72 20 62 6f 75 6e 64 73 22 29 3b 64 7c 7c 28 64 3d 22 75 74 66 38 22 Data Ascii: b))b=0\|b,isFinite(c)?(c=0\|c,void 0===d&&(d="utf8")):(d=c,c=void 0);else{var e=d;d=b,b=0\|c,c=e}var f=this.length-b;if((void 0===c\|\|c>f)&&(c=f),a.length>0&&(0>c\|\|0>b)\|\|b>this.length)throw new RangeError("attempt to write outside buffer bounds");d\|\|(d="utf8"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49858	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:49 UTC	601	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 450 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:49 UTC	450	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 33 31 62 64 36 32 39 38 2d 66 39 61 62 2d 34 32 65 37 2d 38 62 63 39 2d 38 32 33 32 36 34 33 64 34 66 36 66 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 65 36 64 35 38 34 61 37 31 37 32 30 35 38 33 31 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 65 63 75 72 65 25 32 30 44 6f 63 75 6d 65 6e 74 25 32 Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=31bd6298-f9ab-42e7-8bc9-8232643d4f6f&r=&platform=web&installation_type=js-snippet&Idempotency-Key=e6d584a717205831&internal=%7B%7D&is_intersection_booted=false&page_title=Secure%20Document%2
2024-04-18 16:58:49 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:49 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0028kmccb6dpchm2kc00 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"34a2b728d972105093b88f60b0ecd305" X-Runtime: 0.262090 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:58:49 UTC	4450	IN	Data Raw: 31 31 35 61 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 6f 63 53 65 6e 64 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 6e 75 6c 6c 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 61 5f 66 65 77 5f 6d 69 6e 75 74 65 73 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f Data Ascii: 115a{"app":{"name":"DocSend","audio_enabled":true,"show_powered_by":true,"team_intro":null,"team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"a_few_minutes","launcher_expected_response_delay_translatio
2024-04-18 16:58:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49859	3.163.80.122	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:49 UTC	945	OUT	GET / HTTP/1.1 Host: marketing.docsend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656
2024-04-18 16:58:49 UTC	435	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 627 Connection: close Last-Modified: Wed, 31 May 2023 19:16:09 GMT Server: AmazonS3 Date: Thu, 18 Apr 2024 05:56:50 GMT ETag: "85c876eb10030058f29245148995cc2d" X-Cache: Hit from cloudfront Via: 1.1 e05f9b3de38fbfe53441974080c25cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: HnJ66Kl1HRT_ihv576-umhpW5a9d9u-JP3xf6E8Efcsi4jCSVu6jQA== Age: 39720
2024-04-18 16:58:49 UTC	627	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 20 5d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 68 74 74 70 73 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d Data Ascii: <html> <head> ...[if (gte IE 9) ]> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <![endif]--> <title>Dropbox</title> <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49861	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:50 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 816 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:50 UTC	816	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6c 61 74 65 6e 63 79 25 32 32 25 33 41 30 25 32 43 25 32 32 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 25 32 32 25 33 41 25 32 32 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 Data Ascii: event_type=page_view&extra_params=%7B%22page_view_latency%22%3A0%2C%22bfcache_eligible%22%3Afalse%2C%22page_view_origin%22%3A%22normal%22%2C%22hierarchy_group%22%3Anull%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%
2024-04-18 16:58:50 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:50 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:50 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 74 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e098ae561e3c4645a6c02dfddc494566 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49862	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:50 UTC	1240	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:50 UTC	5554	IN	HTTP/1.1 302 Found Content-Security-Policy: base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; img-src https://* data: blob: ; media-src https://* blob: ; default-src 'none' ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:58:50 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:58:50 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:58:50 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b25c39427c14447f87b5c9b3caf1dcd1 Connection: close Transfer-Encoding: chunked
2024-04-18 16:58:50 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49863	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:51 UTC	1243	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:51 UTC	5244	IN	HTTP/1.1 200 OK Content-Security-Policy: frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; img-src https://* data: blob: ; default-src 'none' ; base-uri 'self' ; font-src https://* data: ; media-src https://* blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:58:51 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:58:51 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:58:51 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e22dcdc7262f46d297144350d0ee7489 Connection: close Transfer-Encoding: chunked
2024-04-18 16:58:51 UTC	3257	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-18 16:58:51 UTC	11522	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 52 55 4e 4e 49 4e 47 5f 49 4e 5f 45 44 49 53 4f 4e 20 3d 20 74 72 75 65 3b 0a 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 Data Ascii: 1000<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.RUNNING_IN_EDISON = true;window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/privacy_consent/ccpa_i
2024-04-18 16:58:51 UTC	7092	IN	Data Raw: 63 31 32 0d 0a 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 28 72 65 71 75 69 72 65 43 6f 6e 66 69 67 2c 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6e 74 72 79 4f 70 74 69 6f 6e 73 3a 20 7b 22 64 73 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 30 31 35 64 35 63 65 37 64 64 33 31 34 32 63 64 38 66 63 61 30 39 34 61 35 30 61 64 62 66 36 39 40 64 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 34 35 30 35 35 34 36 38 33 31 30 33 36 34 31 36 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 39 37 36 38 34 35 63 63 66 33 36 66 66 32 31 62 61 66 38 63 37 64 32 66 32 31 66 31 66 64 39 33 31 32 37 34 62 37 38 32 22 2c 22 65 6e Data Ascii: c12;window.addRequireLoadCallback(function() { window.configureRequire(requireConfig, { sentryOptions: {"dsn":"https://015d5ce7dd3142cd8fca094a50adbf69@d.dropbox.com/4505546831036416","release":"976845ccf36ff21baf8c7d2f21f1fd931274b782","en
2024-04-18 16:58:51 UTC	545	IN	Data Raw: 32 31 61 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 44 61 74 61 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 73 74 61 6e 74 73 2f Data Ascii: 21a<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedDataModule("metaserver/static/js/modules/constants/
2024-04-18 16:58:51 UTC	1230	IN	Data Raw: 34 63 37 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 74 51 46 43 68 78 77 61 58 52 6f 62 33 4d 75 52 57 52 70 63 32 39 75 55 48 4a 6c 5a 6d 56 30 59 32 68 54 5a 58 4a 32 61 Data Ascii: 4c7<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EtQFChxwaXRob3MuRWRpc29uUHJlZmV0Y2hTZXJ2a
2024-04-18 16:58:51 UTC	8873	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 75 41 46 43 69 5a 31 65 46 39 68 62 6d 46 73 65 58 52 70 59 33 4d 75 56 58 68 42 62 6d 46 73 65 58 52 70 59 33 4e 46 Data Ascii: 1000<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EuAFCiZ1eF9hbmFseXRpY3MuVXhBbmFseXRpY3NF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49868	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:51 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:51 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:58:51 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0028fnhiuib1bq5p4ja0 X-Runtime: 0.017280 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:58:51 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49866	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:51 UTC	603	OUT	OPTIONS /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,statsig-api-key,statsig-client-time,statsig-encoded,statsig-sdk-type,statsig-sdk-version Origin: https://www.docsend.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:51 UTC	679	IN	HTTP/1.1 200 OK permissions-policy: interest-cohort=() x-frame-options: SAMEORIGIN x-response-time: 0 ms access-control-allow-methods: POST access-control-allow-headers: content-type,statsig-api-key,statsig-client-time,statsig-encoded,statsig-sdk-type,statsig-sdk-version access-control-max-age: 7200 access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 0 date: Thu, 18 Apr 2024 16:58:51 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49867	34.237.73.95	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:51 UTC	683	OUT	GET /pubsub/5-Oy6SU1VrIIK8U2elKQ9kIZk2ScpNpeaNkclHgqmYEc-m8xfiGfQx9jBXMT-gfE4Dfoglx1o-vBWhgRjjbTzcBRQ7X-LmSn-j2aSC?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.docsend.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: kRJNbD1qaR83G7r0ofQC1w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49869	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:52 UTC	810	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 1886 STATSIG-CLIENT-TIME: 1713459530114 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:52 UTC	1886	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 61 70 70 5f 6d 65 74 72 69 63 73 3a 3a 70 61 67 65 5f 6c 6f 61 64 5f 74 69 6d 65 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 37 38 39 32 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 22 7d 2c 22 74 69 6d 65 22 3a 31 37 31 33 34 35 39 35 32 35 37 38 31 2c 22 73 74 61 74 73 69 67 4d 65 74 61 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 50 61 67 65 22 3a Data Ascii: {"events":[{"eventName":"statsig::app_metrics::page_load_time","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":7892.299999999988,"metadata":{"url":"https://www.docsend.com/"},"time":1713459525781,"statsigMetadata":{"currentPage":
2024-04-18 16:58:52 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:58:51 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:58:52 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49871	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:53 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 766 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:53 UTC	766	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 34 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 33 35 33 36 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 6c 25 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A4%2C%22time_on_page_ms%22%3A3536%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22url%
2024-04-18 16:58:53 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:53 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:53 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 974973d2aece4fe2a0be6a3b7b13e519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49870	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:53 UTC	824	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:53 UTC	1147	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:53 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:53 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 92bc87a5594e4b4a9129ff41142a1c0b Connection: close
2024-04-18 16:58:53 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49874	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:54 UTC	809	OUT	POST /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive Content-Length: 588 STATSIG-CLIENT-TIME: 1713459532765 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 1 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:54 UTC	588	OUT	Data Raw: 3d 30 58 66 69 38 6b 55 69 6f 6a 49 35 4a 48 64 75 56 33 62 6a 4a 43 4c 69 49 54 4e 75 63 54 4e 75 45 44 4f 78 34 53 4d 34 49 69 4f 69 41 58 61 69 77 69 49 32 4d 6a 4c 33 4d 54 4e 76 6b 6d 63 68 5a 57 59 54 42 43 4d 75 41 6a 4c 77 34 79 4e 78 45 7a 4c 6c 31 32 62 79 68 32 51 67 6b 79 62 72 4e 57 5a 48 42 53 5a 72 6c 47 62 67 77 43 54 4e 52 46 53 4c 68 43 49 32 4d 6a 4c 33 4d 54 4e 76 51 58 61 4c 4a 57 5a 58 56 47 62 77 42 58 51 67 6b 43 4e 32 67 48 49 37 51 6a 4e 75 6c 32 56 67 73 44 4d 75 41 54 4d 67 51 6c 54 67 4d 33 64 76 52 6d 62 70 64 46 4b 67 41 6a 4c 31 38 53 59 73 78 57 61 36 39 57 54 69 6f 6a 49 30 35 57 5a 6e 46 32 58 79 56 32 63 31 4a 79 65 36 49 79 63 6b 78 57 5a 70 5a 45 5a 6c 5a 58 61 79 56 47 52 7a 56 33 62 70 5a 58 5a 79 42 6e 49 73 49 69 Data Ascii: =0Xfi8kUiojI5JHduV3bjJCLiITNucTNuEDOx4SM4IiOiAXaiwiI2MjL3MTNvkmchZWYTBCMuAjLw4yNxEzLl12byh2QgkybrNWZHBSZrlGbgwCTNRFSLhCI2MjL3MTNvQXaLJWZXVGbwBXQgkCN2gHI7QjNul2VgsDMuATMgQlTgM3dvRmbpdFKgAjL18SYsxWa69WTiojI05WZnF2XyV2c1Jye6IyckxWZpZEZlZXayVGRzV3bpZXZyBnIsIi
2024-04-18 16:58:54 UTC	447	IN	HTTP/1.1 204 No Content access-control-allow-origin: * access-control-allow-methods: POST, GET, DELETE, PATCH access-control-max-age: 7200 date: Thu, 18 Apr 2024 16:58:54 GMT x-statsig-region: gke-us-east1 via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49876	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:54 UTC	847	OUT	GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2F&callback=jQuery37107391334019404765_1713459532369&_=1713459532370 HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:58:55 UTC	215	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:55 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19112 Connection: close cached: true Server: cloudflare CF-RAY: 876633cd7fdf4511-ATL
2024-04-18 16:58:55 UTC	1154	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 37 33 39 31 33 33 34 30 31 39 34 30 34 37 36 35 5f 31 37 31 33 34 35 39 35 33 32 33 36 39 28 7b 22 49 64 22 3a 32 30 36 37 34 2c 22 56 69 64 22 3a 32 30 36 37 34 2c 22 53 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 4e 61 6d 65 22 3a 22 44 53 2d 44 65 6d 6f 20 52 65 71 75 65 73 74 20 2d 20 45 6d 62 65 64 64 65 64 20 46 6f 72 6d 20 6f 6e 20 57 65 62 73 69 74 65 2d 32 30 36 37 34 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 4c 61 79 6f 75 74 22 3a 22 6c 65 66 74 22 2c 22 47 75 74 74 65 72 57 69 64 74 68 22 3a 31 30 2c 22 4f 66 66 73 65 74 57 69 64 74 68 22 3a 31 30 2c 22 48 61 73 54 77 6f 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 53 75 62 6d 69 74 4c 61 62 65 6c 22 3a 22 53 75 62 6d 69 74 22 2c 22 Data Ascii: jQuery37107391334019404765_1713459532369({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 39 39 63 34 37 63 29 2c 20 74 6f 28 23 37 35 61 65 34 63 29 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 7d 5c 6e 2e Data Ascii: , left top, left bottom, from(#99c47c), to(#75ae4c));\nbackground-image: -webkit-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: -moz-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: linear-gradient(to bottom, #99c47c, #75ae4c);\n}\n.
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 72 69 64 65 22 3a 6e 75 6c 6c 2c 22 4c 69 76 65 53 74 72 65 61 6d 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 2c 22 72 6f 77 73 22 3a 5b 5b 7b 22 49 64 22 3a 32 36 33 38 30 32 2c 22 4e 61 6d 65 22 3a 22 46 69 72 73 74 4e 61 6d 65 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 46 69 72 73 74 20 6e 61 6d 65 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 46 69 72 73 74 20 4e 61 6d 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e Data Ascii: ride":null,"LiveStreamSettings":null,"rows":[[{"Id":263802,"Name":"FirstName","IsRequired":true,"Datatype":"string","Maxlength":255,"InputLabel":"First name","InputInitialValue":"","InputSourceChannel":"constant","PlaceholderText":"First Name","Validation
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 65 2e 67 2e 20 44 6f 63 53 65 6e 64 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 32 36 33 38 30 39 2c 22 4e 61 6d 65 22 3a 22 43 6f 75 6e 74 72 79 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 70 69 63 6b 6c 69 73 74 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 50 69 63 6b 6c 69 73 74 56 61 6c 75 65 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 53 65 6c 65 63 74 2e 2e 2e 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 73 65 6c 65 63 74 65 Data Ascii: nt","ProfilingFieldNumber":0,"PlaceholderText":"e.g. DocSend","ValidationMessage":"This field is required."}],[{"Id":263809,"Name":"Country","IsRequired":true,"Datatype":"picklist","Maxlength":255,"PicklistValues":[{"label":"Select...","value":"","selecte
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 3a 22 42 6f 6c 69 76 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 6e 61 69 72 65 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 6e 61 69 72 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 72 61 7a 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 42 72 61 7a 69 6c 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 Data Ascii: :"Bolivia"},{"label":"Bonaire","value":"Bonaire"},{"label":"Bosnia and Herzegovina","value":"Bosnia and Herzegovina"},{"label":"Botswana","value":"Botswana"},{"label":"Bouvet Island","value":"Bouvet Island"},{"label":"Brazil","value":"Brazil"},{"label":"B
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 22 6c 61 62 65 6c 22 3a 22 43 72 6f 61 74 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 43 72 6f 61 74 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 75 72 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 43 75 72 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 79 70 72 75 73 22 2c 22 76 61 6c 75 65 22 3a 22 43 79 70 72 75 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 65 6e 6d 61 72 6b 22 2c 22 76 61 6c 75 65 22 3a 22 44 65 6e 6d 61 72 6b 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6a 69 62 6f 75 74 69 22 2c 22 76 61 6c 75 65 22 3a 22 44 6a 69 62 6f 75 74 69 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6f 6d 69 Data Ascii: "label":"Croatia","value":"Croatia"},{"label":"Curacao","value":"Curacao"},{"label":"Cyprus","value":"Cyprus"},{"label":"Czech Republic","value":"Czech Republic"},{"label":"Denmark","value":"Denmark"},{"label":"Djibouti","value":"Djibouti"},{"label":"Domi
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 6d 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 65 72 6e 73 65 79 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 65 72 6e 73 65 79 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 79 Data Ascii: label":"Guadeloupe","value":"Guadeloupe"},{"label":"Guam","value":"Guam"},{"label":"Guatemala","value":"Guatemala"},{"label":"Guernsey","value":"Guernsey"},{"label":"Guinea","value":"Guinea"},{"label":"Guinea-Bissau","value":"Guinea-Bissau"},{"label":"Guy
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 22 3a 22 4c 69 62 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 62 79 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 62 79 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 2c 22 76 61 6c 75 65 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 65 64 6f 6e 69 61 2c 20 46 59 52 4f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 Data Ascii: ":"Liberia"},{"label":"Libya","value":"Libya"},{"label":"Liechtenstein","value":"Liechtenstein"},{"label":"Lithuania","value":"Lithuania"},{"label":"Luxembourg","value":"Luxembourg"},{"label":"Macao","value":"Macao"},{"label":"Macedonia, FYRO","value":"Ma
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 63 61 72 61 67 75 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 63 61 72 61 67 75 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 75 65 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 75 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d Data Ascii: },{"label":"Nicaragua","value":"Nicaragua"},{"label":"Niger","value":"Niger"},{"label":"Nigeria","value":"Nigeria"},{"label":"Niue","value":"Niue"},{"label":"Norfolk Island","value":"Norfolk Island"},{"label":"Northern Mariana Islands","value":"Northern M
2024-04-18 16:58:55 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 6d 6f 61 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 6d 6f 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 Data Ascii: "},{"label":"Saint Martin","value":"Saint Martin"},{"label":"Saint Pierre and Miquelon","value":"Saint Pierre and Miquelon"},{"label":"Saint Vincent and the Grenadines","value":"Saint Vincent and the Grenadines"},{"label":"Samoa","value":"Samoa"},{"label"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49875	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:54 UTC	846	OUT	GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:55 UTC	1173	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 214 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9e805f0aeb7f48fe902dab4e3a91c8b8 Connection: close
2024-04-18 16:58:55 UTC	214	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 25 32 43 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 63 6c 69 65 6e 74 25 32 43 75 78 5f 61 6e 61 6c 79 74 69 63 73 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49878	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	810	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 1355 STATSIG-CLIENT-TIME: 1713459533762 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:55 UTC	1355	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 64 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6d 61 72 6b 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6f 76 65 72 61 6c 6c 22 2c 22 61 63 74 69 6f 6e 22 3a 22 73 74 61 72 74 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 32 39 30 32 2e 36 30 30 30 30 30 30 30 30 30 30 36 7d 2c 7b 22 6b 65 79 22 3a 22 69 6e 69 74 69 61 6c 69 7a 65 22 2c 22 73 74 65 70 22 3a 22 6e 65 74 77 6f 72 6b 5f 72 65 71 75 65 Data Ascii: {"events":[{"eventName":"statsig::diagnostics","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":null,"metadata":{"markers":[{"key":"overall","action":"start","timestamp":2902.600000000006},{"key":"initialize","step":"network_reque
2024-04-18 16:58:55 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:58:54 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:58:55 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49879	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	601	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 575 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:55 UTC	575	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 64 38 64 63 30 32 66 31 2d 39 34 66 32 2d 34 61 30 63 2d 62 62 37 32 2d 63 32 35 35 63 32 34 61 39 30 38 63 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 36 35 36 66 61 32 34 62 65 66 32 66 61 65 64 65 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 65 63 75 72 65 25 32 30 44 6f 63 75 6d 65 6e 74 25 32 Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=d8dc02f1-94f2-4a0c-bb72-c255c24a908c&r=&platform=web&installation_type=js-snippet&Idempotency-Key=656fa24bef2faede&internal=%7B%7D&is_intersection_booted=false&page_title=Secure%20Document%2
2024-04-18 16:58:55 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0002g0pssjiuion6vqr0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"a36646beda4c57ed00244f6012c544d3" X-Runtime: 0.189551 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:58:55 UTC	4451	IN	Data Raw: 31 31 35 62 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 6f 63 53 65 6e 64 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 6e 75 6c 6c 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 61 5f 66 65 77 5f 6d 69 6e 75 74 65 73 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f Data Ascii: 115b{"app":{"name":"DocSend","audio_enabled":true,"show_powered_by":true,"team_intro":null,"team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"a_few_minutes","launcher_expected_response_delay_translatio
2024-04-18 16:58:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49881	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 766 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:55 UTC	766	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 36 32 30 33 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 6c 25 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A6%2C%22time_on_page_ms%22%3A6203%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22url%
2024-04-18 16:58:55 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a5b0463a845346b6b7a71e77eeb462a4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49883	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	873	OUT	GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:55 UTC	3037	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 13723 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: da7d51fb8b71497098efb845e156d5d9 Connection: close
2024-04-18 16:58:55 UTC	13347	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()
2024-04-18 16:58:55 UTC	376	IN	Data Raw: 2f 2a 6e 6f 6e 5f 64 72 6f 70 62 6f 78 5f 70 61 74 68 5f 6e 6f 5f 70 69 69 2a 22 2c 20 22 69 66 72 61 6d 65 4f 72 69 67 69 6e 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 22 2c 20 22 74 65 61 6c 69 75 6d 50 72 6f 66 69 6c 65 22 3a 20 22 64 6f 63 73 65 6e 64 22 2c 20 22 74 65 61 6c 69 75 6d 45 6e 76 22 3a 20 22 70 72 6f 64 22 7d 2c 20 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 69 6e 69 74 5f 64 61 74 61 22 3a 20 7b 22 69 66 72 61 6d 65 4f 72 69 67 69 6e 22 3a 20 22 63 6f 6e 73 65 6e 74 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 22 2c 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 20 22 69 73 43 63 70 61 45 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 7d 2c 20 22 6e 6f 6e 5f 77 65 62 73 65 72 Data Ascii: /non_dropbox_path_no_pii", "iframeOrigin": "https://marketing.docsend.com", "tealiumProfile": "docsend", "tealiumEnv": "prod"}, "privacy_consent_init_data": {"iframeOrigin": "consent.dropbox.com", "countryCode": "US", "isCcpaEnabled": true}, "non_webser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49884	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	853	OUT	GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:55 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7719 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d8ac9ddc5e5b4a33857ebdf8fd5d4ca0 Connection: close
2024-04-18 16:58:56 UTC	7719	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49885	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f4f0cbfc4d4a4a4ca1ee627e0927d407 Connection: close
2024-04-18 16:58:56 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49887	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:55 UTC	809	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 740 STATSIG-CLIENT-TIME: 1713459534604 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:55 UTC	740	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 61 70 70 5f 6d 65 74 72 69 63 73 3a 3a 70 61 67 65 5f 6c 6f 61 64 5f 74 69 6d 65 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 31 36 36 34 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 23 6d 61 69 6e 22 7d 2c 22 74 69 6d 65 22 3a 31 37 31 33 34 35 39 35 33 34 32 35 36 2c 22 73 74 61 74 73 69 67 4d 65 74 61 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 Data Ascii: {"events":[{"eventName":"statsig::app_metrics::page_load_time","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":1664.6000000000058,"metadata":{"url":"https://www.docsend.com/#main"},"time":1713459534256,"statsigMetadata":{"current
2024-04-18 16:58:56 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:58:55 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:58:56 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49897	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:56 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:58:56 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0002e74v8v3335a8cjhg X-Runtime: 0.013822 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:58:56 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49898	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 862 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	862	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6c 61 74 65 6e 63 79 25 32 32 25 33 41 2d 31 25 32 43 25 32 32 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 25 32 32 25 33 41 25 32 32 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 Data Ascii: event_type=page_view&extra_params=%7B%22page_view_latency%22%3A-1%2C%22bfcache_eligible%22%3Afalse%2C%22page_view_origin%22%3A%22normal%22%2C%22hierarchy_group%22%3Anull%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22
2024-04-18 16:58:56 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 32 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2d0f91d794ec44c280d1aeed4d120626 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49900	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 16bdc392be3f4c5ea6fc0da57015f47c Connection: close
2024-04-18 16:58:56 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49901	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	1240	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	5554	IN	HTTP/1.1 302 Found Content-Security-Policy: script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' ; base-uri 'self' ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; default-src 'none' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; font-src https://* data: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ Content-Security-Policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:58:56 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 68af3f342ee940f2b92f6410e4f71509 Connection: close Transfer-Encoding: chunked
2024-04-18 16:58:56 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49903	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 762 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:56 UTC	762	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 72 65 61 64 79 5f 66 6f 72 5f 75 78 61 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 25 32 32 25 33 41 25 32 32 43 4c 49 45 4e 54 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 Data Ascii: event_type=marketing_tracker_ready_for_uxa&extra_params=%7B%22marketing_tracker_inclusion_method%22%3A%22CLIENT%22%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22url%22%3
2024-04-18 16:58:56 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:56 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 15802e1f4bec4e2181afbb87ea26cce5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49904	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	1243	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	5244	IN	HTTP/1.1 200 OK Content-Security-Policy: child-src https://www.dropbox.com/static/serviceworker/ blob: ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; media-src https:// blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; img-src https://* data: blob: ; base-uri 'self' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; default-src 'none' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:58:57 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 718dd162ee90437799f4086be397ab33 Connection: close Transfer-Encoding: chunked
2024-04-18 16:58:57 UTC	1905	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-18 16:58:57 UTC	1127	IN	Data Raw: 33 35 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 3b 6c 65 74 20 61 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 7b 61 3d 5b 5d 2c 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 3d 65 3d 3e 61 2e 70 75 73 68 28 65 29 2c 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: 35f<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">(()=>{"use strict";const e=window;let a;const r=()=>{a=[],e.addRequireLoadCallback=e=>a.push(e),e.configureRequire=function(){const a=arguments;e.addRequireLoadCallback((()=>e.configureRequire.apply(null,a
2024-04-18 16:58:57 UTC	4329	IN	Data Raw: 63 34 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6f 46 72 56 7a 34 41 38 56 51 43 37 50 6e 32 56 6c 4b 4c 4d 30 4f 4d 61 64 63 45 3d 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 5f 63 68 72 6f 6d 65 5f 65 6e 2d 76 66 6c 6d 65 73 4e 34 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 37 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 36 0d 0a 3c 62 6f 64 79 3e 0d 0a 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e Data Ascii: c4<script nonce="oFrVz4A8VQC7Pn2VlKLM0OMadcE=" src="https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflmesN4r.js" crossorigin="anonymous"></script>7</head>6<body>1000<script nonce="6qBsa6oln
2024-04-18 16:58:57 UTC	12140	IN	Data Raw: 31 63 66 32 0d 0a 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 2d 76 66 6c 61 5a 6b 51 4f 42 22 2c 20 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 5f 65 64 69 73 6f 6e 5f 72 65 61 63 74 5f 70 61 67 65 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f Data Ascii: 1cf2pa_iframe_bundle_amd/dist/e_edison": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB", "atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/
2024-04-18 16:58:57 UTC	2835	IN	Data Raw: 38 65 62 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 6d 61 72 6b 53 65 72 76 65 72 53 69 64 65 50 72 65 66 65 74 63 68 53 74 61 72 74 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f Data Ascii: 8eb<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { if (edisonModule.Edison.markServerSidePrefetchStarted) { edisonModule.Ediso
2024-04-18 16:58:57 UTC	1230	IN	Data Raw: 34 63 37 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 74 51 46 43 68 78 77 61 58 52 6f 62 33 4d 75 52 57 52 70 63 32 39 75 55 48 4a 6c 5a 6d 56 30 59 32 68 54 5a 58 4a 32 61 Data Ascii: 4c7<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EtQFChxwaXRob3MuRWRpc29uUHJlZmV0Y2hTZXJ2a
2024-04-18 16:58:57 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 75 41 46 43 69 5a 31 65 46 39 68 62 6d 46 73 65 58 52 70 59 33 4d 75 56 58 68 42 62 6d 46 73 65 58 52 70 59 33 4e 46 Data Ascii: 1000<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EuAFCiZ1eF9hbmFseXRpY3MuVXhBbmFseXRpY3NF
2024-04-18 16:58:57 UTC	4249	IN	Data Raw: 31 30 36 61 0d 0a 32 5a 57 35 30 58 33 52 7a 49 69 77 67 49 6d 78 70 62 6d 74 66 61 57 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 59 57 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 59 32 46 74 63 43 49 73 49 43 4a 77 59 58 4a 68 62 56 39 6b 5a 58 4e 72 64 47 39 77 58 32 78 76 5a 32 64 70 62 6d 64 66 61 57 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 5a 6d 4a 6a 62 47 6c 6b 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 64 6a 62 47 6c 6b 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 74 33 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 31 7a 59 32 78 72 61 57 51 69 4c 43 41 69 63 47 46 79 59 57 31 66 62 6d 56 30 49 69 77 67 49 6e 42 68 63 6d 46 74 58 32 39 78 59 53 49 73 49 43 4a 77 59 58 4a 68 62 56 39 30 5a 6d 38 69 4c 43 41 69 63 47 46 79 59 57 31 66 64 47 73 69 4c 43 41 69 Data Ascii: 106a2ZW50X3RzIiwgImxpbmtfaWQiLCAicGFyYW1fYWQiLCAicGFyYW1fY2FtcCIsICJwYXJhbV9kZXNrdG9wX2xvZ2dpbmdfaWQiLCAicGFyYW1fZmJjbGlkIiwgInBhcmFtX2djbGlkIiwgInBhcmFtX2t3IiwgInBhcmFtX21zY2xraWQiLCAicGFyYW1fbmV0IiwgInBhcmFtX29xYSIsICJwYXJhbV90Zm8iLCAicGFyYW1fdGsiLCAi
2024-04-18 16:58:57 UTC	520	IN	Data Raw: 64 64 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 64 6f 6e 65 53 74 72 65 61 6d 69 6e 67 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 65 62 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e Data Ascii: dd<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.doneStreaming(); });});</script>eb<script nonce="6qBsa6oln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49905	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	824	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	1147	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2f53245bdf48480e8b34bfb0f84943b6 Connection: close
2024-04-18 16:58:57 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49907	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	553	OUT	GET /utag/dropbox/docsend/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:57 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 102163 Connection: close Date: Thu, 18 Apr 2024 16:58:58 GMT Last-Modified: Fri, 08 Mar 2024 03:37:36 GMT ETag: "4ca4f3551ed06d2dd7b6a7bf382608e1" x-amz-server-side-encryption: AES256 x-amz-version-id: jhuMPaJlJ55yXQiRh4_ziG9AEDNDPh.2 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a0b6936ea609adfae0144582cb15c8c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: BE1cl_DADr3x8ALer_LW413FeyHOBf1-Zv3tDqD3LgiDrH0K30eBRw== Cache-Control: max-age=300
2024-04-18 16:58:57 UTC	15781	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 29 7b 76 61 72 20 75 74 61 67 3d 7b 69 64 3a 22 64 72 6f 70 62 6f 78 2e 64 6f 63 73 65 6e 64 22 2c 6f 3a 7b 7d 2c 73 65 6e 64 65 Data Ascii: //tealium universal tag - utag.loader ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"dropbox.docsend",o:{},sende
2024-04-18 16:58:57 UTC	209	IN	Data Raw: 2c 76 69 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 61 2c 62 29 7b 69 66 28 21 75 74 61 67 2e 76 5f 69 64 29 7b 61 3d 74 68 69 73 2e 70 61 64 28 74 2c 31 32 29 3b 62 3d 22 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 62 2e 73 75 62 73 74 72 69 6e 67 28 32 2c 62 2e 6c 65 6e 67 74 68 29 2c 31 36 29 3b 74 72 79 7b 61 2b 3d 74 68 69 73 2e 70 61 64 28 28 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3f 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3a 30 29 2c 32 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 Data Ascii: ,vi:function(t,a,b){if(!utag.v_id){a=this.pad(t,12);b=""+Math.random();a+=this.pad(b.substring(2,b.length),16);try{a+=this.pad((navigator.plugins.length?navigator.plugins.length:0),2);a+=this.pad(navigator.use
2024-04-18 16:58:57 UTC	1870	IN	Data Raw: 72 41 67 65 6e 74 2e 6c 65 6e 67 74 68 2c 33 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6c 65 6e 67 74 68 2c 34 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 6c 65 6e 67 74 68 2c 33 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 73 63 72 65 65 6e 2e 77 69 64 74 68 2b 73 63 72 65 65 6e 2e 68 65 69 67 68 74 2b 70 61 72 73 65 49 6e 74 28 28 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 29 3f 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 3a 73 63 72 65 65 6e 2e 70 69 78 65 6c 44 65 70 74 68 29 2c 35 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 61 2b 3d 22 31 32 33 34 35 22 7d 3b 75 74 61 67 2e 76 5f 69 64 3d 61 3b 7d 0a 72 65 74 75 72 6e Data Ascii: rAgent.length,3);a+=this.pad(document.URL.length,4);a+=this.pad(navigator.appVersion.length,3);a+=this.pad(screen.width+screen.height+parseInt((screen.colorDepth)?screen.colorDepth:screen.pixelDepth),5)}catch(e){utag.DB(e);a+="12345"};utag.v_id=a;}return
2024-04-18 16:58:57 UTC	16384	IN	Data Raw: 72 69 62 75 74 65 28 6c 2c 6f 2e 61 74 74 72 73 5b 6c 5d 29 7d 0a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 6f 2e 73 72 63 29 3b 69 66 28 74 79 70 65 6f 66 20 6f 2e 63 62 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 62 28 29 7d 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 7b 62 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 27 63 6f 6d 70 6c 65 74 65 27 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 27 6c 6f 61 64 65 64 27 29 7b 74 68 69 73 2e Data Ascii: ribute(l,o.attrs[l])}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.
2024-04-18 16:58:57 UTC	16384	IN	Data Raw: 6e 79 2e 62 69 6e 64 28 68 2c 68 65 29 2c 68 2e 61 70 70 72 6f 76 65 41 6c 6c 3d 68 2e 61 70 70 72 6f 76 65 2e 62 69 6e 64 28 68 2c 68 65 29 2c 68 2e 69 73 41 70 70 72 6f 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 2c 68 2e 70 65 72 6d 69 73 73 69 6f 6e 73 29 7d 2c 68 2e 69 73 50 72 65 41 70 70 72 6f 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 2c 49 29 7d 2c 68 2e 66 65 74 63 68 50 65 72 6d 69 73 73 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e 3d 74 3f 68 2e 6f 6e 28 64 65 2e 43 4f 4d 50 4c 45 54 Data Ascii: ny.bind(h,he),h.approveAll=h.approve.bind(h,he),h.isApproved=function(t){return e(t,h.permissions)},h.isPreApproved=function(t){return e(t,I)},h.fetchPermissions=function(e){var t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],n=t?h.on(de.COMPLET
2024-04-18 16:58:57 UTC	3072	IN	Data Raw: 72 65 61 64 79 54 6f 41 74 74 61 63 68 49 66 72 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 61 64 79 54 6f 41 74 74 61 63 68 49 66 72 61 6d 65 50 72 65 6c 69 6d 69 6e 61 72 79 28 29 26 26 28 74 68 69 73 2e 64 6f 41 74 74 61 63 68 49 66 72 61 6d 65 7c 7c 65 2e 5f 64 6f 41 74 74 61 63 68 49 66 72 61 6d 65 29 26 26 28 74 68 69 73 2e 73 75 62 64 6f 6d 61 69 6e 26 26 22 6e 6f 73 75 62 64 6f 6d 61 69 6e 72 65 74 75 72 6e 65 64 22 21 3d 3d 74 68 69 73 2e 73 75 62 64 6f 6d 61 69 6e 7c 7c 65 2e 5f 73 75 62 64 6f 6d 61 69 6e 29 26 26 74 68 69 73 2e 75 72 6c 26 26 21 74 68 69 73 2e 73 74 61 72 74 65 64 41 74 74 61 63 68 69 6e 67 49 66 72 61 6d 65 7d 2c 61 74 74 61 63 68 49 66 72 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: readyToAttachIframe:function(){return this.readyToAttachIframePreliminary()&&(this.doAttachIframe\|\|e._doAttachIframe)&&(this.subdomain&&"nosubdomainreturned"!==this.subdomain\|\|e._subdomain)&&this.url&&!this.startedAttachingIframe},attachIframe:function(){
2024-04-18 16:58:57 UTC	8728	IN	Data Raw: 69 5d 2c 61 3d 5b 6f 28 22 69 62 73 22 29 2c 6f 28 72 2e 69 64 7c 7c 22 22 29 2c 6f 28 72 2e 74 61 67 7c 7c 22 22 29 2c 55 2e 65 6e 63 6f 64 65 41 6e 64 42 75 69 6c 64 52 65 71 75 65 73 74 28 72 2e 75 72 6c 7c 7c 5b 5d 2c 22 2c 22 29 2c 6f 28 72 2e 74 74 6c 7c 7c 22 22 29 2c 22 22 2c 22 22 2c 72 2e 66 69 72 65 55 52 4c 53 79 6e 63 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 5d 2c 72 2e 73 79 6e 63 4f 6e 50 61 67 65 7c 7c 28 74 68 69 73 2e 63 61 6e 53 65 74 54 68 69 72 64 50 61 72 74 79 43 6f 6f 6b 69 65 73 3f 74 68 69 73 2e 61 64 64 4d 65 73 73 61 67 65 28 61 2e 6a 6f 69 6e 28 22 7c 22 29 29 3a 72 2e 66 69 72 65 55 52 4c 53 79 6e 63 26 26 74 68 69 73 2e 63 68 65 63 6b 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 28 72 2c 61 2e 6a 6f 69 6e 28 22 7c 22 Data Ascii: i],a=[o("ibs"),o(r.id\|\|""),o(r.tag\|\|""),U.encodeAndBuildRequest(r.url\|\|[],","),o(r.ttl\|\|""),"","",r.fireURLSync?"true":"false"],r.syncOnPage\|\|(this.canSetThirdPartyCookies?this.addMessage(a.join("\|")):r.fireURLSync&&this.checkFirstPartyCookie(r,a.join("\|"
2024-04-18 16:58:57 UTC	8680	IN	Data Raw: 30 5d 5d 2c 75 3d 73 5b 31 5d 3b 69 66 28 21 63 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 75 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 6b 65 20 73 75 72 65 20 74 68 65 20 70 6c 75 67 69 6e 20 61 6e 64 20 41 50 49 20 6e 61 6d 65 20 65 78 69 73 74 2e 22 29 3b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 72 2c 7b 63 61 6c 6c 62 61 63 6b 3a 6f 7d 29 3b 63 5b 75 5d 2e 63 61 6c 6c 28 63 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 79 65 2e 65 72 72 6f 72 28 22 5b 65 78 65 63 75 74 65 5d 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 7d 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 45 72 72 6f 72 2e 70 72 6f Data Ascii: 0]],u=s[1];if(!c\|\|"function"!=typeof c[u])throw new Error("Make sure the plugin and API name exist.");var l=Object.assign(r,{callback:o});c[u].call(c,l)}catch(e){ye.error("[execute] Something went wrong: "+e.message)}}};f.prototype=Object.create(Error.pro
2024-04-18 16:58:57 UTC	16384	IN	Data Raw: 64 53 65 72 76 65 72 26 26 53 2e 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 53 65 72 76 65 72 2e 69 6e 64 65 78 4f 66 28 22 2e 64 65 6d 64 65 78 2e 6e 65 74 22 29 3c 30 26 26 28 53 2e 5f 75 73 65 31 73 74 50 61 72 74 79 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 53 65 72 76 65 72 3d 21 30 29 3b 76 61 72 20 6e 3d 53 2e 5f 67 65 74 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 55 52 4c 44 61 74 61 28 22 5f 73 65 74 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 46 69 65 6c 64 73 22 29 2c 69 3d 6e 2e 75 72 6c 3b 72 65 74 75 72 6e 20 53 2e 5f 67 65 74 52 65 6d 6f 74 65 46 69 65 6c 64 28 54 2c 69 2c 65 2c 74 2c 6e 29 7d 3b 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 53 2e 67 65 74 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 Data Ascii: dServer&&S.marketingCloudServer.indexOf(".demdex.net")<0&&(S._use1stPartyMarketingCloudServer=!0);var n=S._getAudienceManagerURLData("_setMarketingCloudFields"),i=n.url;return S._getRemoteField(T,i,e,t,n)};var H=function(e,t){var n={};S.getMarketingCloudV
2024-04-18 16:58:57 UTC	14671	IN	Data Raw: 22 29 3f 22 26 64 5f 63 66 3d 22 2b 44 3a 22 22 29 2b 22 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 76 65 72 3d 32 22 2b 28 21 69 26 26 53 2e 5f 75 73 65 31 73 74 50 61 72 74 79 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 53 65 72 76 65 72 3f 22 26 64 5f 76 65 72 69 66 79 3d 31 22 3a 22 22 29 2b 22 26 64 5f 6f 72 67 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 2e 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 4f 72 67 49 44 29 2b 22 26 64 5f 6e 73 69 64 3d 22 2b 28 53 2e 69 64 53 79 6e 63 43 6f 6e 74 61 69 6e 65 72 49 44 7c 7c 30 29 2b 28 69 3f 22 26 64 5f 6d 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 3a 22 22 29 2b 28 53 2e 69 64 53 79 6e 63 44 69 73 61 62 6c 65 33 72 64 50 61 72 74 79 53 79 6e Data Ascii: ")?"&d_cf="+D:"")+"&d_rtbd=json&d_ver=2"+(!i&&S._use1stPartyMarketingCloudServer?"&d_verify=1":"")+"&d_orgid="+encodeURIComponent(S.marketingCloudOrgID)+"&d_nsid="+(S.idSyncContainerID\|\|0)+(i?"&d_mid="+encodeURIComponent(i):"")+(S.idSyncDisable3rdPartySyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49906	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:56 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bab16b989cda410e83abaeda0100e26f Connection: close
2024-04-18 16:58:57 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49909	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	1241	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=e22dcdc7262f46d297144350d0ee7489&time=1713459531 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3bdfaf999554472dabea91fb1d57cce1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49910	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	853	OUT	GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	3035	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:57 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7719 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 91ede92c5ca04d43a4ff8352e4f60c67 Connection: close
2024-04-18 16:58:57 UTC	7719	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49912	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:57 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0433448dfdb548228b178b3e8f8a8549 Connection: close
2024-04-18 16:58:57 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49919	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.32.js?utv=ut4.48.202403080219 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 117066 Connection: close Date: Thu, 18 Apr 2024 16:58:58 GMT Last-Modified: Fri, 08 Mar 2024 03:37:36 GMT ETag: "96b54ffd0e13d3ca3e104dc640a5ac0e" x-amz-server-side-encryption: AES256 x-amz-version-id: ._HS3uPAXVzDuvjkpTsANXo3cyDZU5wv Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ba45784c5eb48f73d25fca60176d4032.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: MsFFwVsBiL2YRE1dyhhrbAd02EQMZH66qP4OjXtNnehBrEO0e9OQ8Q== Cache-Control: max-age=1296000
2024-04-18 16:58:58 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 32 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 73 3d 73 5f 67 69 28 22 40 40 61 61 5f 72 65 70 6f 72 74 5f 73 75 69 74 65 40 40 22 29 0a 73 2e 61 63 63 6f 75 6e 74 3d 22 40 40 61 61 5f 72 65 70 6f 72 74 5f 73 75 69 74 65 40 40 22 3b 73 2e 74 72 61 63 6b 44 6f 77 6e 6c 6f 61 64 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 74 73 3d 74 72 75 65 3b 73 2e 6c 69 6e 6b Data Ascii: //tealium universal tag - utag.32 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.var s=s_gi("@@aa_report_suite@@")s.account="@@aa_report_suite@@";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.link
2024-04-18 16:58:58 UTC	1475	IN	Data Raw: 72 65 70 6c 61 63 65 28 22 2f 22 2c 22 3a 22 29 3b 69 6e 74 49 6e 64 65 78 4f 66 4d 61 74 63 68 3d 68 33 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 3b 7d 0a 72 65 74 75 72 6e 20 68 33 3b 7d 0a 73 2e 74 72 69 6d 57 53 3d 66 75 6e 63 74 69 6f 6e 28 73 74 72 29 7b 69 66 28 73 74 72 29 7b 73 74 72 3d 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 2f 2c 27 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 73 74 72 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 69 66 28 2f 5c 53 2f 2e 74 65 73 74 28 73 74 72 2e 63 68 61 72 41 74 28 69 29 29 29 7b 73 74 72 3d 73 74 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 2b 31 29 3b 62 72 65 61 6b 3b 7d 7d 0a 72 65 74 75 72 6e 20 73 74 72 3b 7d 0a 65 6c 73 65 20 72 65 74 75 72 6e 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 Data Ascii: replace("/",":");intIndexOfMatch=h3.indexOf("/");}return h3;}s.trimWS=function(str){if(str){str=str.replace(/^\s+/,'');for(var i=str.length-1;i>=0;i--){if(/\S/.test(str.charAt(i))){str=str.substring(0,i+1);break;}}return str;}else return;}function ge
2024-04-18 16:58:58 UTC	1024	IN	Data Raw: 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 69 66 28 62 3d 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 5b 6b 5d 2c 62 2e 5f 63 26 26 22 73 5f 63 22 3d 3d 3d 62 2e 5f 63 29 72 65 74 75 72 6e 20 62 7d 28 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 28 68 2e 63 6f 6e 74 65 78 74 44 61 74 61 2e 61 70 6c 3d 22 34 2e 30 22 29 3b 77 69 6e 64 6f 77 2e 69 6e 4c 69 73 74 3d 77 69 6e 64 6f 77 2e 69 6e 4c 69 73 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 62 2c 64 2c 63 2c 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 29 62 3d 62 2e 73 70 6c 69 74 28 63 7c 7c 22 2c 22 29 3b 65 6c 73 65 20 69 66 Data Ascii: window.s_c_il.length;k++)if(b=window.s_c_il[k],b._c&&"s_c"===b._c)return b}();"undefined"!==typeof h&&(h.contextData.apl="4.0");window.inList=window.inList\|\|function(b,d,c,e){if("string"!==typeof d)return!1;if("string"===typeof b)b=b.split(c\|\|",");else if
2024-04-18 16:58:58 UTC	12792	IN	Data Raw: 3b 63 2b 2b 29 69 66 28 61 3d 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 5b 63 5d 2c 61 2e 5f 63 26 26 22 73 5f 63 22 3d 3d 3d 61 2e 5f 63 29 7b 63 3d 61 3b 62 72 65 61 6b 20 61 7d 7d 63 3d 76 6f 69 64 20 30 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 2e 63 6f 6e 74 65 78 74 44 61 74 61 2e 72 66 6c 3d 22 32 2e 31 22 29 3b 69 66 28 21 62 7c 7c 21 66 29 72 65 74 75 72 6e 22 22 3b 63 3d 5b 5d 3b 61 3d 22 22 3b 65 3d 65 7c 7c 22 2c 22 3b 68 3d 68 7c 7c 65 3b 67 3d 67 7c 7c 21 31 3b 62 3d 62 2e 73 70 6c 69 74 28 65 29 3b 65 3d 62 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 65 3b 64 2b 2b 29 2d 31 3c 62 5b 64 5d 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 26 26 28 61 3d 62 5b 64 5d 2e 73 70 6c 69 74 28 22 3a 22 Data Ascii: ;c++)if(a=window.s_c_il[c],a._c&&"s_c"===a._c){c=a;break a}}c=void 0}"undefined"!==typeof c&&(c.contextData.rfl="2.1");if(!b\|\|!f)return"";c=[];a="";e=e\|\|",";h=h\|\|e;g=g\|\|!1;b=b.split(e);e=b.length;for(var d=0;d<e;d++)-1<b[d].indexOf(":")&&(a=b[d].split(":"
2024-04-18 16:58:58 UTC	6396	IN	Data Raw: 29 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 6e 26 26 21 2f 5e 5b 30 2d 39 2e 5d 2b 24 2f 2e 74 65 73 74 28 6e 29 29 7b 66 3d 32 3c 66 3f 66 3a 32 3b 76 61 72 20 6c 3d 6e 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 30 3c 3d 6c 29 7b 66 6f 72 28 3b 30 3c 3d 6c 26 26 31 3c 66 3b 29 6c 3d 6e 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 6c 2d 31 29 2c 66 2d 2d 3b 6c 3d 30 3c 6c 3f 6e 2e 73 75 62 73 74 72 69 6e 67 28 6c 29 3a 6e 7d 7d 67 3d 6c 3b 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 22 22 2b 62 3a 22 22 3b 69 66 28 64 7c 7c 22 22 3d 3d 3d 62 29 69 66 28 22 22 3d 3d 3d 62 26 26 28 64 3d 2d 36 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 64 29 7b 76 61 72 20 65 3d 6e 65 77 20 44 61 74 Data Ascii: ).length-1;if(n&&!/^[0-9.]+$/.test(n)){f=2<f?f:2;var l=n.lastIndexOf(".");if(0<=l){for(;0<=l&&1<f;)l=n.lastIndexOf(".",l-1),f--;l=0<l?n.substring(l):n}}g=l;b="undefined"!==typeof b?""+b:"";if(d\|\|""===b)if(""===b&&(d=-60),"number"===typeof d){var e=new Dat
2024-04-18 16:58:58 UTC	6396	IN	Data Raw: 64 3a 62 2e 69 6e 64 65 78 4f 66 28 22 3b 22 2c 64 29 3b 72 65 74 75 72 6e 28 63 3d 30 3e 64 3f 22 22 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 2e 73 75 62 73 74 72 69 6e 67 28 64 2b 32 2b 63 2e 6c 65 6e 67 74 68 2c 30 3e 65 3f 62 2e 6c 65 6e 67 74 68 3a 65 29 29 29 3f 63 3a 22 22 7d 3b 66 3d 66 3f 66 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 73 74 61 72 74 22 3b 69 66 28 22 73 74 6f 70 22 3d 3d 3d 66 7c 7c 22 73 74 61 72 74 22 3d 3d 3d 66 29 7b 6d 3d 6d 3f 6d 3a 22 73 5f 67 74 74 63 22 3b 65 3f 65 3d 22 64 22 3d 3d 3d 65 3f 38 36 34 45 35 3a 22 68 22 3d 3d 3d 65 3f 33 36 45 35 3a 22 73 22 3d 3d 3d 65 3f 31 45 33 3a 36 45 34 3a 28 6c 3d 33 30 2c 65 3d 36 45 34 29 3b 6c 3d 69 73 4e 61 4e 28 6c 29 3f 33 30 3a 6c 3b 6c 2a 3d 65 3b Data Ascii: d:b.indexOf(";",d);return(c=0>d?"":decodeURIComponent(b.substring(d+2+c.length,0>e?b.length:e)))?c:""};f=f?f.toLowerCase():"start";if("stop"===f\|\|"start"===f){m=m?m:"s_gttc";e?e="d"===e?864E5:"h"===e?36E5:"s"===e?1E3:6E4:(l=30,e=6E4);l=isNaN(l)?30:l;l*=e;
2024-04-18 16:58:58 UTC	6396	IN	Data Raw: 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2b 22 3b 20 70 61 74 68 3d 2f 3b 22 2b 28 66 3f 22 20 65 78 70 69 72 65 73 3d 22 2b 64 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3b 22 3a 22 22 29 2b 28 67 3f 22 20 64 6f 6d 61 69 6e 3d 22 2b 67 2b 22 3b 22 3a 22 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 6f 6f 6b 69 65 52 65 61 64 29 3f 63 6f 6f 6b 69 65 52 65 61 64 28 63 29 3d 3d 3d 62 3a 21 31 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 52 65 61 64 3d 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 52 65 61 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 63 29 63 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 22 22 3b Data Ascii: IComponent(b)+"; path=/;"+(f?" expires="+d.toUTCString()+";":"")+(g?" domain="+g+";":""),"undefined"!==typeof cookieRead)?cookieRead(c)===b:!1}};window.cookieRead=window.cookieRead\|\|function(c){if("string"===typeof c)c=encodeURIComponent(c);else return"";
2024-04-18 16:58:58 UTC	2564	IN	Data Raw: 69 74 65 3d 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 57 72 69 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 63 2c 62 2c 66 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 63 29 7b 76 61 72 20 68 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 68 26 26 21 2f 5e 5b 30 2d 39 2e 5d 2b 24 2f 2e 74 65 73 74 28 68 29 29 7b 61 3d 32 3c 61 3f 61 3a 32 3b 76 61 72 20 65 3d 68 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 30 3c 3d 65 29 7b 66 6f 72 28 3b 30 3c 3d 65 26 26 31 3c 61 3b 29 65 3d 68 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 65 2d 31 29 2c Data Ascii: ite=window.cookieWrite\|\|function(c,b,f){if("string"===typeof c){var h=window.location.hostname,a=window.location.hostname.split(".").length-1;if(h&&!/^[0-9.]+$/.test(h)){a=2<a?a:2;var e=h.lastIndexOf(".");if(0<=e){for(;0<=e&&1<a;)e=h.lastIndexOf(".",e-1),
2024-04-18 16:58:58 UTC	9000	IN	Data Raw: 2e 30 22 7d 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 29 66 6f 72 28 76 61 72 20 63 3d 30 2c 62 3b 63 3c 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 77 69 6e 64 6f 77 2e 73 5f 63 5f 69 6c 5b 63 5d 2c 62 2e 5f 63 26 26 22 73 5f 63 22 3d 3d 3d 62 2e 5f 63 29 72 65 74 75 72 6e 20 62 7d 28 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 2e 63 6f 6e 74 65 78 74 44 61 74 61 2e 67 65 74 50 72 65 76 69 6f 75 73 56 61 6c 75 65 3d 22 33 2e 30 22 29 3b 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 57 72 69 74 65 3d 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 57 72 69 74 65 7c Data Ascii: .0"};var a=function(){if("undefined"!==typeof window.s_c_il)for(var c=0,b;c<window.s_c_il.length;c++)if(b=window.s_c_il[c],b._c&&"s_c"===b._c)return b}();"undefined"!==typeof a&&(a.contextData.getPreviousValue="3.0");window.cookieWrite=window.cookieWrite\|
2024-04-18 16:58:58 UTC	8408	IN	Data Raw: 65 28 27 73 5f 74 70 73 27 2c 4d 61 74 68 2e 63 65 69 6c 28 28 74 65 6d 70 44 61 74 65 2d 73 2e 74 6f 74 61 6c 54 69 6d 65 29 2f 31 30 30 30 29 29 3b 73 2e 55 74 69 6c 2e 63 6f 6f 6b 69 65 57 72 69 74 65 28 27 73 5f 70 76 73 27 2c 73 2e 70 76 74 29 7d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 27 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 29 7b 73 2e 76 69 73 69 62 69 6c 69 74 79 3d 66 61 6c 73 65 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 2e 70 76 69 29 3b 7d 65 6c 73 65 7b 73 2e 76 69 73 69 62 69 6c 69 74 79 3d 74 72 75 65 3b 73 2e 70 76 69 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 73 2e 70 76 78 2c 31 30 Data Ascii: e('s_tps',Math.ceil((tempDate-s.totalTime)/1000));s.Util.cookieWrite('s_pvs',s.pvt)}document.addEventListener('visibilitychange',function(event){if(document.hidden){s.visibility=false;clearTimeout(s.pvi);}else{s.visibility=true;s.pvi=setInterval(s.pvx,10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49918	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	1241	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=718dd162ee90437799f4086be397ab33&time=1713459537 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:58 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 50ab1e6726534f61b94717167a5ef21e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49920	34.197.186.181	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	729	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536327 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	824	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:57 GMT Content-Type: application/json;charset=utf-8 Content-Length: 366 Connection: close X-TID: P4B9UA8tRGY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://marketing.docsend.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-076df3bc9.edge-va6.demdex.com 2 ms set-cookie: demdex=68304145449534289530469067022552814867; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:57 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:58 UTC	366	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 37 37 34 32 31 37 35 34 36 30 35 39 36 31 30 35 37 35 30 34 35 33 32 32 36 32 32 34 39 32 35 39 32 37 31 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"67742175460596105750453226224925927173","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49921	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	589	OUT	GET /utag/tiqapp/utag.v.js?a=dropbox/docsend/202403080337&cb=1713459536451 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 16:51:45 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 161bd03eaf30dfbf1f3868e38fd7be86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: TsxbPxMKjDCoYUJ8DhAMAOOXDCOyNweJJimGfdo1buuqE8O5lHboeg== Age: 433 Cache-Control: max-age=300
2024-04-18 16:58:58 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49923	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:57 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:58 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d065170881364308af200467cec9bc0e Connection: close
2024-04-18 16:58:58 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49925	34.197.186.181	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	729	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536658 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	824	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:58 GMT Content-Type: application/json;charset=utf-8 Content-Length: 366 Connection: close X-TID: lJ/vnu0NQ2I= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://marketing.docsend.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-08a7e5e53.edge-va6.demdex.com 2 ms set-cookie: demdex=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:58 UTC	366	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 30 33 33 39 39 32 30 33 30 33 33 35 31 37 38 39 35 38 39 31 34 32 34 35 33 32 32 30 35 30 39 39 34 38 35 33 31 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"03399203033517895891424532205099485311","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49924	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:58 UTC	807	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 72 65 61 64 79 5f 66 6f 72 5f 75 78 61 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 25 32 32 25 33 41 25 32 32 43 4c 49 45 4e 54 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 Data Ascii: event_type=marketing_tracker_ready_for_uxa&extra_params=%7B%22marketing_tracker_inclusion_method%22%3A%22CLIENT%22%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22url%22%3
2024-04-18 16:58:58 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:58 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:58 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:58 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8a0eba29713742078d93e7a129fdd632 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49929	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:58 UTC	813	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 32 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 32 30 30 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A2%2C%22time_on_page_ms%22%3A2002%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22ur
2024-04-18 16:58:58 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:58:58 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:58:58 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:58:58 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:58:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 524637ec83614f00a34b7b7bc0208f56 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49933	34.225.139.162	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	519	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536327 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68304145449534289530469067022552814867
2024-04-18 16:58:58 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:58 GMT Content-Type: application/json;charset=utf-8 Content-Length: 366 Connection: close X-TID: XLuTa1dKQiQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-094b4b910.edge-va6.demdex.com 2 ms set-cookie: demdex=68304145449534289530469067022552814867; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:58 UTC	366	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 37 37 34 32 31 37 35 34 36 30 35 39 36 31 30 35 37 35 30 34 35 33 32 32 36 32 32 34 39 32 35 39 32 37 31 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"67742175460596105750453226224925927173","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49935	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	753	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=67742175460596105750453226224925927173&ts=1713459536971 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	446	IN	HTTP/1.1 200 OK access-control-allow-origin: https://marketing.docsend.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 16:58:58 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:58:58 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49936	54.197.93.190	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	760	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: dropbox.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68304145449534289530469067022552814867
2024-04-18 16:58:58 UTC	604	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:58 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: AMQha3MKT5U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 11:58:13 GMT DCS: dcs-prod-va6-1-v059-068eea5f9.edge-va6.demdex.com 0 ms
2024-04-18 16:58:58 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49939	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	753	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=03399203033517895891424532205099485311&ts=1713459537163 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:58 UTC	446	IN	HTTP/1.1 200 OK access-control-allow-origin: https://marketing.docsend.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 16:58:58 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:58:58 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49941	34.225.139.162	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	519	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1713459536658 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=03242510230966952991372664810416290409
2024-04-18 16:58:58 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:58 GMT Content-Type: application/json;charset=utf-8 Content-Length: 366 Connection: close X-TID: o/bAezReSfE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v059-09b5e96f3.edge-va6.demdex.com 3 ms set-cookie: demdex=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:58 UTC	366	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 30 33 33 39 39 32 30 33 30 33 33 35 31 37 38 39 35 38 39 31 34 32 34 35 33 32 32 30 35 30 39 39 34 38 35 33 31 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"03399203033517895891424532205099485311","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49944	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:59 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e59318b72338465e959e0d5f0604fd66 Connection: close
2024-04-18 16:58:59 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49950	34.197.186.181	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	670	OUT	GET /ibs:dpid=411&dpuuid=ZiFRUgAAAGGwyANw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68304145449534289530469067022552814867
2024-04-18 16:58:59 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 80AVGCNlQjg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0932a00c0.edge-va6.demdex.com 4 ms set-cookie: dpm=68304145449534289530469067022552814867; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68304145449534289530469067022552814867; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49951	54.197.93.190	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:58 UTC	760	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: dropbox.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=03242510230966952991372664810416290409
2024-04-18 16:58:59 UTC	604	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:59 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: c/bfjTzjT6w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 12:56:06 GMT DCS: dcs-prod-va6-2-v059-072d97a6a.edge-va6.demdex.com 0 ms
2024-04-18 16:58:59 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49954	34.197.186.181	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:59 UTC	670	OUT	GET /ibs:dpid=411&dpuuid=ZiFRUgAAAB5dpgMv HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=03242510230966952991372664810416290409
2024-04-18 16:58:59 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:58:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +CYtRUGBRNg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-082381a98.edge-va6.demdex.com 3 ms set-cookie: dpm=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:58:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:58:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49956	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:59 UTC	488	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=67742175460596105750453226224925927173&ts=1713459536971 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:59 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:58:59 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:58:59 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49955	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:59 UTC	488	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&mid=03399203033517895891424532205099485311&ts=1713459537163 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:58:59 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:58:59 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:58:59 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49957	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:58:59 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:58:59 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:58:59 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 928ea3eb66e2465e8c7748a6d0c6db2a Connection: close
2024-04-18 16:58:59 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49966	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	521	OUT	GET /vendors~app~tooltips-modern.77e8d419.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 162751 Connection: close Date: Thu, 18 Apr 2024 16:59:01 GMT Last-Modified: Thu, 18 Apr 2024 16:10:46 GMT ETag: "bbf9fe5c44467ed294a5ef62e7106fdc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: IwnYtU3QC5ttsZBXyaF2x64yCOIuSTPP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0e227d05dec6e4f9fddab21a200ee232.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -m_qd-m3z_GUEOGdEKmD6CQskVh5ve13KZqBmO8HikM_jI8OqWEZUA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:59:01 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd e9 73 1b 47 96 2f fa fd fd 15 14 a6 2f 1b 18 82 14 a9 cd 36 28 48 97 12 29 4b 36 b5 b4 44 d9 6e 8b 1a 4e 11 28 92 65 02 28 a8 50 20 45 8b 9c 0b ee fb be 88 bb b8 ef fb be 33 c2 94 65 c9 96 97 6e b7 dd 6e b7 97 4a 37 03 31 1f 5e c4 7d 7f c2 3b 27 b3 aa 50 20 21 4f 4f 47 bf 0f 2f e2 da 62 55 66 56 2e 27 33 cf f2 3b 99 59 85 93 ff 7a 22 ea 8a 28 45 b9 04 07 ef f1 f1 51 82 27 4b 94 dc 9c 2c 88 9e 28 af 8b e7 20 c9 c7 f3 51 79 bc c7 29 4a be ff e0 bc de ff 90 45 d1 25 0b 5e 5f ac 5b 74 f2 92 27 ee b5 d7 f8 d7 9d 67 12 de 88 fb c0 17 97 7a ed 72 ca 8d 3b 29 71 f2 43 39 ea 5f 4f fe 5f e6 6c 97 98 c9 b9 d2 72 04 5f 5c 3e 9f e9 e5 1c b9 97 73 fc 9e 5c c1 23 f3 92 43 74 67 7c e0 b3 ff d7 59 0a 0b ef dd b7 c4 79 fd be 1c f3 bd 7b Data Ascii: sG//6(H)K6DnN(e(P E3ennJ71^};'P !OOG/bUfV.'3;Yz"(EQ'K,( Qy)JE%^_[t'gzr;)qC9_O_lr_\>s\#Ctg\|Yy{
2024-04-18 16:59:01 UTC	1249	IN	Data Raw: e8 2d 4c cd 1b db 0c d6 0e 80 86 16 94 a5 69 65 69 93 fe 40 8b f6 e2 7c b0 aa 0e c4 3e 7c 14 96 6b 95 e5 3a 65 b9 25 58 3b ad 8d 42 93 3e 0a b3 4f a1 11 65 b9 4f 59 a9 43 5c 7c 07 60 7c a6 57 59 9e 50 96 37 7d 3c 68 9f 44 28 bf a0 2c 2f 63 b1 9a d0 e0 0d 61 a3 ec f1 4a a9 b2 52 41 1f 87 6a 1d 7e 16 c8 74 78 95 95 56 65 65 44 59 6d d0 b3 f6 28 2b fd 34 6b c9 2f a5 2d aa 69 a8 72 f0 bc d3 f7 1c bb 9e a6 ac 2c 29 2b cb ca ca b6 b2 5a 11 ac 29 0e 75 7f 21 bc fb 83 21 06 dd 87 d1 d4 69 59 05 d1 e8 a1 0d 94 86 1a a8 c6 cc 58 ff 95 34 65 75 4e 59 9d 57 56 57 95 55 40 c9 c5 ea 1c 97 19 4c 42 a5 3a 8f d5 61 72 33 a2 43 93 49 6d 29 ad f9 b0 b4 19 74 58 1f 60 51 86 44 d9 82 61 9e b2 b6 ab ac 97 28 eb d5 ca 7a bb b2 de a3 ac 0f 28 eb e3 ca fa 8e b2 51 a2 6c 0c 28 1b Data Ascii: -Liei@\|>\|k:e%X;B>OeOYC\\|`\|WYP7}<hD(,/caJRAj~txVeeDYm(+4k/-ir,)+Z)u!!iYX4euNYWVWU@LB:ar3CIm)tX`QDa(z(Ql(
2024-04-18 16:59:01 UTC	16384	IN	Data Raw: 21 15 d5 a4 62 3e d8 31 88 8b eb fa 62 40 4d 2b b5 bf a4 a2 91 54 f4 ab 46 8d 54 3c 26 15 9d c1 1a cd 95 6a d6 cd 1d a9 98 20 15 e0 6a 69 fc d0 e2 61 95 b4 e9 4a 61 0e e7 b3 b6 e2 39 58 63 b7 97 54 56 91 ca 1e 52 55 4d aa 80 17 13 7d a4 b2 9e 54 36 04 6b 9b d4 da 30 da ae 56 55 41 67 b6 72 80 54 95 87 ac 33 a9 9c 25 95 73 a4 72 85 54 82 f5 dc 56 75 e0 82 51 07 6a 3e d3 7e 5a ce c1 a0 b2 07 4e 46 55 33 30 31 ef 23 55 2d a4 aa 95 54 0d 07 6b 9b 75 fa ab 7a 49 55 5f b0 a6 54 6d b4 92 97 3f da 86 5c df 06 ae de be 43 d9 06 34 19 a9 da 23 d5 65 a4 ba 9a 54 b7 93 ea 7e 52 bd 48 aa d7 48 cd 13 52 5b 42 6a ab 48 6d f3 cd db 37 d0 e2 f4 1f 96 f6 27 25 a7 00 1b 0e 3d 0d 5c 75 90 ea 06 52 dd 42 39 a6 16 2f 63 30 ae 7e 52 dd 4d aa 81 17 02 d5 30 73 23 54 83 91 ea 51 Data Ascii: !b>1b@M+TFT<&j jiaJa9XcTVRUM}T6k0VUAgrT3%srTVuQj>~ZNFU301#U-TkuzIU_Tm?\C4#eT~RHHR[BjHm7'%=\uRB9/c0~RM0s#TQ
2024-04-18 16:59:01 UTC	1024	IN	Data Raw: 87 b6 88 8c 28 44 af f5 95 3f 67 a6 b0 e8 a3 50 4c 2c 66 3c 13 69 40 a5 11 a9 3e 56 38 26 97 4f 22 61 84 34 b9 31 36 55 67 a9 31 22 ad 03 27 3d 0e 39 e3 f8 34 f7 d1 29 77 b5 44 42 31 51 0c 2f 86 70 45 c8 e5 3c 12 4d 42 65 2c 97 85 35 c1 f0 2a 7c a2 cb 5d 36 e9 e2 b2 c9 97 20 43 84 b8 de 73 76 a8 3c 3e 96 29 f0 d8 38 e3 f5 c5 af 33 4e 4e bb e2 db ce 57 c6 5c b6 21 75 53 11 21 53 86 a4 9c 5a ba 88 28 23 5d 24 fb cf 55 bf 43 a8 d7 ac 85 e4 fa 7c 18 0e 94 7a d5 22 17 d6 25 71 d8 ef b0 f5 26 b5 20 41 f9 12 94 a7 83 18 17 3c 05 74 c7 01 84 f1 2b 98 fc b0 cc ae 78 8c cd ad 94 17 aa 70 e0 1c 94 41 05 6f 32 3a 23 bb 2d 48 34 fb 4b c9 36 7c 4f 0f 8b 51 4c c3 70 4d 30 41 3d 1c 14 8c 2c 86 e0 46 02 7a 86 08 9a 02 49 05 24 47 01 e6 36 70 5f 74 4f 01 4d cc 71 57 c1 06 Data Ascii: (D?gPL,f<i@>V8&O"a416Ug1"'=94)wDB1Q/pE<MBe,5*\|]6 Csv<>)83NNW\!uS!SZ(#]$UC\|z"%q& A<t+xpAo2:#-H4K6\|OQLpM0A=,FzI$G6p_tOMqW
2024-04-18 16:59:01 UTC	16384	IN	Data Raw: c3 36 31 39 82 f5 07 5b 70 8f 10 ad dd bd 50 a3 db a5 80 8e 9f 09 88 d1 29 cf d4 f7 b1 d4 e5 8f 0b 64 f0 b6 08 05 e5 c4 60 81 9c 2a d7 14 94 cb 86 8c 88 a1 b8 36 47 66 c7 b0 a4 5b cc 58 e5 58 46 01 62 6e 6b f1 c4 3a 91 e3 bb 61 22 d1 48 75 c5 2d 63 88 65 50 5f 56 fd ba 60 4c 0c 08 40 20 a2 f1 07 3d 1d f5 50 31 bc a2 2b 58 30 ec 15 96 3a 08 71 f1 a8 00 c2 05 02 c2 d9 16 a2 c0 65 2b 1a 76 c4 9d 40 d5 cf 54 02 31 42 2c 0d a0 57 e8 08 82 02 57 f2 a9 1e 97 f1 9b e2 e2 37 4d d8 e2 e7 09 19 0b 54 9f a2 07 65 f2 cb d5 0b c3 82 33 b8 26 a7 1a 32 88 46 81 b0 fb 84 88 93 0b 11 1f 27 de 52 8e 05 5d c7 8b 47 1f e2 d8 58 84 3c fa 87 02 ff 7d 28 0c 54 94 a9 b7 84 78 7c 93 ca d5 bb c4 ab 0d 28 47 25 e7 42 c1 7c cf 89 4c 93 55 14 84 05 82 ba e3 97 93 ef f8 65 8d 43 f1 c7 Data Ascii: 619[pP)d`*6Gf[XXFbnk:a"Hu-ceP_V`L@ =P1+X0:qe+v@T1B,WW7MTe3&2F'R]GX<}(Tx\|(G%B\|LUeC
2024-04-18 16:59:01 UTC	2691	IN	Data Raw: ed d6 90 ae e7 01 17 69 c0 79 aa 7c c0 84 e2 19 41 6a 34 fb b2 d9 69 b8 09 4d 56 07 e4 e6 7a 12 2f 3b 3e a0 41 78 c1 1a 82 68 25 e7 81 15 f3 f2 ee c1 b4 5d 66 86 fd 61 e6 3d 2e 10 b6 85 0c ec aa db 70 1e 3a 01 20 7c 51 75 41 fc cf a6 fb da b7 29 53 b1 b3 45 65 9d fe f7 2c c8 0e fc f9 86 88 9b 82 59 10 f8 ae 9c 0e 9f d6 a1 ef ec 40 d8 1f 59 18 10 30 a8 97 65 de 67 8b 34 4b b5 35 1c f9 c6 85 b2 93 83 d6 c5 65 d9 14 4f 68 ca ce 44 c7 03 bb e0 e2 83 1b 17 a7 75 98 f6 89 d3 e5 21 28 be a7 7f cb c4 8f 6b 3d 12 71 89 ce c6 05 67 c3 9f e4 43 23 d8 d6 8b 1e 26 76 1b 04 41 0e 8d 9a 40 51 c0 b3 29 fc 72 e0 99 9c 54 76 82 d3 e0 11 f2 00 04 1e b1 27 28 e8 6c da 21 c4 4d 77 ce 1d 68 e7 d4 18 0e 4d b1 9e cb 8b 8b 8b 11 fa c7 b8 b8 3f a9 d0 e6 4f f2 50 e1 0c f3 c6 c9 1d Data Ascii: iy\|Aj4iMVz/;>Axh%]fa=.p: \|QuA)SEe,Y@Y0eg4K5eOhDu!(k=qgC#&vA@Q)rTv'(l!MwhM?OP
2024-04-18 16:59:01 UTC	9000	IN	Data Raw: c2 3a c3 19 a6 e6 83 6c 75 cb 73 07 4d 39 44 97 15 b3 76 ba 17 11 bb fa f3 ea e8 b8 38 3b 56 a4 d4 e3 de a7 1e 28 f3 a0 36 46 51 30 41 b4 00 44 b0 e8 f8 77 a8 b9 7e 1e 4f cb c6 cd 4e fc 05 ca 26 f7 e9 a0 76 1f 11 e3 20 8a 18 90 2e 7a 1e 00 7c d0 1a 86 96 03 8f ce 10 da 44 c1 ab b3 20 69 f3 9d 16 c5 2b 6f b7 1c a4 36 af 0f 22 66 df 3e 64 77 68 e5 d3 10 34 71 2e 4b a3 3b 24 86 d1 81 53 5a 5c c4 38 42 cd 52 f0 2d 76 e8 86 68 0a 23 09 fa 0c ed 2d 17 5a 09 d0 7b 39 13 12 4d ef 03 f7 05 e9 e1 80 06 19 50 38 09 91 2f 12 c7 16 80 13 95 bd 6b ad 2e 2f 22 a3 49 84 a2 90 2e d2 f7 9a f6 67 56 07 93 75 86 d0 08 e5 e9 33 a3 39 27 60 f2 59 fa f0 96 88 47 15 4c 20 12 b1 bd 1a 74 53 85 0c 90 f1 00 0c 17 fd fd 93 10 4e 86 b2 70 72 1f e0 a5 67 a4 59 66 14 b7 d9 c3 7c 07 20 Data Ascii: :lusM9Dv8;V(6FQ0ADw~ON&v .z\|D i+o6"f>dwh4q.K;$SZ\8BR-vh#-Z{9MP8/k./"I.gVu39'`YGL tSNprgYf\|
2024-04-18 16:59:01 UTC	16384	IN	Data Raw: 52 37 4e ea 16 a9 fc 3c 40 35 e4 fc 4d fe 1a 8e 31 d8 d5 2a 03 b9 0f b4 6d 3b c7 12 45 85 56 96 bc 9b aa 94 9e ce 65 b0 26 8f 7f ec a3 8b 06 a4 7e 84 d4 4f 92 fa 39 52 bf 4c ea 37 e9 ba 73 d1 62 46 16 14 54 e1 e3 05 b5 2b 05 55 2b 05 cd 3f f3 e1 42 07 69 a8 20 0d b5 a4 a1 9e 34 b4 f2 e4 00 b4 d5 dd 4a 96 1a 25 cb c2 df 7c a7 2f de a4 cb 9d 5e d2 30 47 1a 96 48 c3 1a 69 d8 22 8d 85 a4 b1 86 34 36 92 c6 76 d2 d8 4b e9 cd 0c fd b2 55 c9 69 2e dd 77 ed f9 bb 28 92 34 96 91 c6 2a da 54 5c 06 9d e0 15 77 2a 95 d6 2a 95 2e da 90 16 ad 7e e1 bb 60 66 d3 49 1a 97 48 e3 1a 69 dc 21 4d 15 a4 a9 86 34 75 91 a6 5e d2 34 48 ab 6a 96 19 e3 1a 6e 84 92 a6 42 d2 54 c6 68 da 16 44 b6 e0 02 55 d1 06 d0 af a6 46 3c 36 d1 e1 78 47 cc f0 ec 8e 4a 13 6d 48 c0 9a 91 7d 8f 52 89 Data Ascii: R7N<@5M1m;EVe&~O9RL7sbFT+U+?Bi 4J%\|/^0GHi"46vKUi.w(4T\w**.~`fIHi!M4u^4HjnBThDUF<6xGJmH}R
2024-04-18 16:59:01 UTC	16384	IN	Data Raw: 36 da c1 a8 98 22 c4 0b 26 24 28 c0 56 b3 0d 7f 04 3b e7 a8 6a ca 6c 21 ac 8b 59 40 c8 08 50 0e 54 60 17 72 e3 82 ba d8 c7 44 39 20 da 8e ca 11 7b 1c 11 f4 20 bf 10 eb 8f 09 a7 d6 7e 11 7a 60 aa ec ab ef 17 d8 96 e5 8f 67 5b d0 66 7e cc ef c7 ef 23 db b9 3d b3 4d d4 a9 47 ec a1 93 5b aa 36 56 28 93 2a cb 57 68 a9 b2 9f a9 65 4b 3b 39 5b 84 7d 0a 5a 58 29 ac 36 0f f0 26 12 12 84 11 c7 22 aa dc 2f 6c 4f e6 b0 42 fd 62 82 d3 e7 b0 1a 47 d8 25 8a 69 b1 6a c2 ea d3 f8 9e 27 ce 1c 11 33 b3 4d 14 ee 8f 3d 0a 7b 88 6f 6e 08 6a 13 af ed a9 8b 30 61 16 d8 97 62 12 61 ed a9 8b b7 8b b9 e3 91 c7 aa 16 90 f4 54 40 93 5d db 45 b5 84 c5 59 71 8d 5e 54 4d 58 9c a0 9c f0 2f 86 4b 3a 21 8f 92 5d 4c 79 9c 6c e0 33 44 17 60 9e 41 64 ed b6 47 ab 7c 84 ce e3 1c 85 32 dd 8b 92 Data Ascii: 6"&$(V;jl!Y@PT`rD9 { ~z`g[f~#=MG[6V(*WheK;9[}ZX)6&"/lOBbG%ij'3M={onj0abaT@]EYq^TMX/K:!]Lyl3D`AdG\|2
2024-04-18 16:59:01 UTC	16384	IN	Data Raw: 75 07 84 5c 10 8f 61 c8 01 2f b6 86 8e eb 36 dc 6a b3 5e 6f 36 9a 26 cc 6e bb 66 b6 ed 56 bd e9 d6 9b 83 56 bd df 84 45 b2 ce db 31 75 47 6e ce 62 2f 3e dd 46 5b 04 ac dc 39 df 69 82 28 e9 d4 41 52 69 0c 5a 28 74 39 20 72 b5 06 36 4c f3 96 53 eb 58 66 bf d9 87 85 a6 da 00 8e 65 0f 4d ab 63 83 a4 d6 6a 0d 9a 43 c7 36 5d b1 d4 4f bd 0f 53 a5 70 cf 3e dc 4a 4b 08 52 ee 5a 62 83 e8 0f c2 07 ac ec 9d 7e 1b 96 c3 06 74 0b c8 2b 8d 6a c7 ee 34 5b cd 46 a3 01 8d 6c 55 5b c0 8a 6b 38 b4 5c 58 37 9d 46 cb ad d6 2d 10 2f c5 22 3f 9d 9d f6 47 81 aa 1d f4 e1 56 da 41 90 f2 db 01 1c a9 d9 77 80 1f f5 5b b0 58 58 fd 5a 6b d8 06 e5 03 d6 3c 0b 24 2d bb 0e 82 0b 2e 24 b5 aa d9 b4 9a 83 f6 a0 d3 ac 0d 6a a0 d2 34 6b 43 58 7e 44 3b c8 da 4d d5 0e fa 50 99 9e dd b8 19 04 28 Data Ascii: u\a/6j^o6&nfVVE1uGnb/>F[9i(ARiZ(t9 r6LSXfeMcjC6]OSp>JKRZb~t+j4[FlU[k8\X7F-/"?GVAw[XXZk<$-.$j4kCX~D;MP(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49968	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	2033	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s3864202734271?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=329867D088CC7215-5195E06B379548D8&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&h2=marketing.docsend.com&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=f94d9a1a-623f-4586-905c-dec298db1b9c&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:00 GMT expires: Wed, 17 Apr 2024 16:59:00 GMT last-modified: Fri, 19 Apr 2024 16:59:00 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626345525870592-4618478587038177817 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49969	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	2066	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36440170823801?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=2598E6178332AFE3-4B8015A8075EBAD8&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=92ec06e5-7cf2-4b6b-a970-de32b64e930a&v13=04%2F18%2F2024&v14=67742175460596105750453226224925927173&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:00 GMT expires: Wed, 17 Apr 2024 16:59:00 GMT last-modified: Fri, 19 Apr 2024 16:59:00 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626345465577472-4618605403514800480 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49970	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	512	OUT	GET /vendors~app-modern.3733d47a.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 21502 Connection: close Date: Thu, 18 Apr 2024 16:59:02 GMT Last-Modified: Thu, 18 Apr 2024 16:10:46 GMT ETag: "418911f0e28e7f33a5ac1fc4f3c723de" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: avM7WjMAHd7Bbf3U.EqUUmC_N0v7wA_q Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2c87bc2888ef60a43faafef8499a8c5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TpQ1w8fxExOaOqUECEKVkPlPcs4nvCoEjkmwMvSDTkpEy-zpIaT4hw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:59:01 UTC	8333	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd fb 7a db 46 b2 38 f8 2a 24 c6 47 01 cc 16 45 ca 96 6c 81 41 78 32 be ec 64 d6 8e fd 8b 9c cc c9 50 8c 0c 91 4d 11 63 10 60 00 50 12 43 e2 3c c0 fe b1 af b0 af b8 8f b0 55 d5 57 80 a0 2d 67 e2 ec 9e ef db f9 26 16 d1 d7 ea ee ea ea ba 75 b5 7b 1d a7 57 61 fc 6e 1e e5 dd 5b 7e b5 0c 27 1f 9e cd 57 c9 87 28 29 78 36 49 17 97 ff ca 83 4f 17 d9 6e 47 63 af bb 5c e5 73 77 34 7a fc a8 7f 32 66 9b d3 de e3 c7 7d df e5 ac 60 99 17 7c b3 e1 41 d6 4d 16 53 97 7b 6c b6 4a 26 45 94 26 2d ee 42 26 4b 58 e4 6d 6e c2 ac 95 07 ed b6 5b 74 ff 91 66 1f 78 76 70 50 74 ff 0a 3d e3 df b7 59 ba 88 72 8e 3f df cc 66 f9 24 e3 3c 79 16 26 37 61 de 90 f4 03 4f a6 3c 8b 92 eb 67 29 40 78 57 1c 3f c7 42 7f 7b f7 fa 95 c8 7f 11 f3 05 4f 8a c6 c4 ee Data Ascii: zF8*$GElAx2dPMc`PC<UW-g&u{Wan[~'W()x6IOnGc\sw4z2f}`\|AMS{lJ&E&-B&KXmn[tfxvpPt=Yr?f$<y&7aO<g)@xW?B{O
2024-04-18 16:59:01 UTC	6396	IN	Data Raw: 20 bc f9 05 5b 0e 85 df 1b 75 87 f7 fe 2b 20 f4 25 93 ca 8d dd 45 55 d7 ee d1 57 53 e0 68 4e a8 14 06 4a eb b7 53 85 df 85 93 22 5e c3 62 29 73 28 5e a8 83 34 8e e1 77 90 83 db a9 02 5c 27 20 39 fc 7e 80 1c 5e ad 02 30 51 4d 15 16 a9 28 1f de d5 cb 53 f8 22 ff ab 4a 1d 4a ad 62 95 df 82 66 33 7e cd ef 4a e7 2b 06 73 13 c5 0d 1d 49 bd 2b 65 3b 6c 95 7d a4 cc 8f 3f bc 82 12 ab a8 61 1a 75 91 1f bf 7b ee 30 f4 b3 6a 2a 83 e9 0b 58 50 69 1c 63 00 27 cf 00 87 78 53 61 9d a9 8b af 96 cb fd c5 29 b3 65 97 c7 25 95 14 29 1c 08 3f 8d 4d e3 ea 5c 13 ff 90 a1 74 90 a0 b4 00 e4 00 36 02 e0 96 58 ad 3d 4b 14 03 9b dc 58 05 16 0c 86 06 b9 ef 20 f3 63 f5 10 81 72 dc eb 8b 34 e3 cd 85 2b a0 41 db 50 10 ca 8b 60 2d 37 8d f3 a0 f2 5a 32 0c 01 4b 38 5e 5f 6a 2e ac f2 74 61 Data Ascii: [u+ %EUWShNJS"^b)s(^4w\' 9~^0QM(S"JJbf3~J+sI+e;l}?au{0j*XPic'xSa)e%)?M\t6X=KX cr4+AP`-7Z2K8^_j.ta
2024-04-18 16:59:01 UTC	6773	IN	Data Raw: 03 73 3a ae f0 3c da 6e 9d 30 49 93 f5 02 18 0d c7 eb 38 63 47 74 41 d3 52 e9 22 57 31 0f 75 60 e3 90 39 62 fa dc 07 7d cf 51 57 2b e3 20 d3 25 f3 38 82 72 4f d9 61 5f df 25 c1 0d 89 ed c6 c3 dd 57 bc 86 38 4c d2 a7 7c 77 fe 46 bf f5 e7 3b c2 25 13 2b 89 60 6d 5a bb 4e 19 43 67 e4 74 12 d5 27 0e c1 77 04 ca c8 7e 54 96 08 34 58 32 0a a8 f0 c5 54 20 ac 10 fe 4f 41 ae fd 4f 44 f4 4e 19 87 90 62 61 68 72 ac 14 f9 30 43 2a b1 6f 71 29 b9 80 12 10 5d ee 39 38 1d 58 ac 69 d8 d0 25 86 5e 4a 87 22 ee 48 c2 56 6c a2 02 9a cd 82 d5 30 72 31 38 18 2e 2b 19 21 74 d0 3d 25 6d e4 8a ab 0e d5 1b 1f c8 84 99 77 78 e5 0d c0 c9 90 c8 e8 77 49 e1 ce e0 1c 83 63 44 be 81 13 7d a3 a3 b8 ec 32 c2 70 00 43 8f 00 9c ba dd 2b bb c7 b8 fe 14 c0 9d 62 c5 63 b0 7a f1 92 72 eb c1 26 Data Ascii: s:<n0I8cGtAR"W1u`9b}QW+ %8rOa_%W8L\|wF;%+`mZNCgt'w~T4X2T OAODNbahr0C*oq)]98Xi%^J"HVl0r18.+!t=%mwxwIcD}2pC+bczr&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49965	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:00 UTC	768	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 31 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 30 38 37 36 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A11%2C%22time_on_page_ms%22%3A10876%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22ur
2024-04-18 16:59:01 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:01 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:01 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5f24a4d141da416d8ef09a624ea20af6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49967	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:00 UTC	1337	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:00 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-04-18 16:59:01 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 102 X-Webkit-Csp: sandbox Content-Length: 137 Date: Thu, 18 Apr 2024 16:59:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 119d2fcef5b549eeaf1783b85032d88c Connection: close
2024-04-18 16:59:01 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49973	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:01 UTC	809	OUT	POST /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive Content-Length: 588 STATSIG-CLIENT-TIME: 1713459539758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 1 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	588	OUT	Data Raw: 3d 30 58 66 69 38 6b 55 69 6f 6a 49 35 4a 48 64 75 56 33 62 6a 4a 43 4c 69 49 54 4e 75 63 54 4e 75 45 44 4f 78 34 53 4d 34 49 69 4f 69 41 58 61 69 77 69 49 32 4d 6a 4c 33 4d 54 4e 76 6b 6d 63 68 5a 57 59 54 42 43 4d 75 41 6a 4c 77 34 79 4e 78 45 7a 4c 6c 31 32 62 79 68 32 51 67 6b 79 62 72 4e 57 5a 48 42 53 5a 72 6c 47 62 67 77 43 54 4e 52 46 53 4c 68 43 49 32 4d 6a 4c 33 4d 54 4e 76 51 58 61 4c 4a 57 5a 58 56 47 62 77 42 58 51 67 6b 43 4e 32 67 48 49 37 51 6a 4e 75 6c 32 56 67 73 44 4d 75 41 54 4d 67 51 6c 54 67 4d 33 64 76 52 6d 62 70 64 46 4b 67 41 6a 4c 31 38 53 59 73 78 57 61 36 39 57 54 69 6f 6a 49 30 35 57 5a 6e 46 32 58 79 56 32 63 31 4a 79 65 36 49 79 63 6b 78 57 5a 70 5a 45 5a 6c 5a 58 61 79 56 47 52 7a 56 33 62 70 5a 58 5a 79 42 6e 49 73 49 69 Data Ascii: =0Xfi8kUiojI5JHduV3bjJCLiITNucTNuEDOx4SM4IiOiAXaiwiI2MjL3MTNvkmchZWYTBCMuAjLw4yNxEzLl12byh2QgkybrNWZHBSZrlGbgwCTNRFSLhCI2MjL3MTNvQXaLJWZXVGbwBXQgkCN2gHI7QjNul2VgsDMuATMgQlTgM3dvRmbpdFKgAjL18SYsxWa69WTiojI05WZnF2XyV2c1Jye6IyckxWZpZEZlZXayVGRzV3bpZXZyBnIsIi
2024-04-18 16:59:01 UTC	447	IN	HTTP/1.1 204 No Content access-control-allow-origin: * access-control-allow-methods: POST, GET, DELETE, PATCH access-control-max-age: 7200 date: Thu, 18 Apr 2024 16:59:01 GMT x-statsig-region: gke-us-east1 via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49974	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:01 UTC	846	OUT	GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:01 UTC	1173	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:01 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:01 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:01 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 214 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fb6d1b0e93964660a0ffee6a7efc16f2 Connection: close
2024-04-18 16:59:01 UTC	214	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 25 32 43 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 63 6c 69 65 6e 74 25 32 43 75 78 5f 61 6e 61 6c 79 74 69 63 73 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49975	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:01 UTC	862	OUT	GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&callback=jQuery37102514834265039647_1713459539712&_=1713459539713 HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:59:01 UTC	215	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:01 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19112 Connection: close cached: true Server: cloudflare CF-RAY: 876633f629865082-ATL
2024-04-18 16:59:01 UTC	1154	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 32 35 31 34 38 33 34 32 36 35 30 33 39 36 34 37 5f 31 37 31 33 34 35 39 35 33 39 37 31 32 28 7b 22 49 64 22 3a 32 30 36 37 34 2c 22 56 69 64 22 3a 32 30 36 37 34 2c 22 53 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 4e 61 6d 65 22 3a 22 44 53 2d 44 65 6d 6f 20 52 65 71 75 65 73 74 20 2d 20 45 6d 62 65 64 64 65 64 20 46 6f 72 6d 20 6f 6e 20 57 65 62 73 69 74 65 2d 32 30 36 37 34 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 4c 61 79 6f 75 74 22 3a 22 6c 65 66 74 22 2c 22 47 75 74 74 65 72 57 69 64 74 68 22 3a 31 30 2c 22 4f 66 66 73 65 74 57 69 64 74 68 22 3a 31 30 2c 22 48 61 73 54 77 6f 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 53 75 62 6d 69 74 4c 61 62 65 6c 22 3a 22 53 75 62 6d 69 74 22 2c 22 Data Ascii: jQuery37102514834265039647_1713459539712({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 39 39 63 34 37 63 29 2c 20 74 6f 28 23 37 35 61 65 34 63 29 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 7d 5c 6e 2e Data Ascii: , left top, left bottom, from(#99c47c), to(#75ae4c));\nbackground-image: -webkit-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: -moz-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: linear-gradient(to bottom, #99c47c, #75ae4c);\n}\n.
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 72 69 64 65 22 3a 6e 75 6c 6c 2c 22 4c 69 76 65 53 74 72 65 61 6d 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 2c 22 72 6f 77 73 22 3a 5b 5b 7b 22 49 64 22 3a 32 36 33 38 30 32 2c 22 4e 61 6d 65 22 3a 22 46 69 72 73 74 4e 61 6d 65 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 46 69 72 73 74 20 6e 61 6d 65 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 46 69 72 73 74 20 4e 61 6d 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e Data Ascii: ride":null,"LiveStreamSettings":null,"rows":[[{"Id":263802,"Name":"FirstName","IsRequired":true,"Datatype":"string","Maxlength":255,"InputLabel":"First name","InputInitialValue":"","InputSourceChannel":"constant","PlaceholderText":"First Name","Validation
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 65 2e 67 2e 20 44 6f 63 53 65 6e 64 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 32 36 33 38 30 39 2c 22 4e 61 6d 65 22 3a 22 43 6f 75 6e 74 72 79 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 70 69 63 6b 6c 69 73 74 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 50 69 63 6b 6c 69 73 74 56 61 6c 75 65 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 53 65 6c 65 63 74 2e 2e 2e 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 73 65 6c 65 63 74 65 Data Ascii: nt","ProfilingFieldNumber":0,"PlaceholderText":"e.g. DocSend","ValidationMessage":"This field is required."}],[{"Id":263809,"Name":"Country","IsRequired":true,"Datatype":"picklist","Maxlength":255,"PicklistValues":[{"label":"Select...","value":"","selecte
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 3a 22 42 6f 6c 69 76 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 6e 61 69 72 65 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 6e 61 69 72 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 72 61 7a 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 42 72 61 7a 69 6c 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 Data Ascii: :"Bolivia"},{"label":"Bonaire","value":"Bonaire"},{"label":"Bosnia and Herzegovina","value":"Bosnia and Herzegovina"},{"label":"Botswana","value":"Botswana"},{"label":"Bouvet Island","value":"Bouvet Island"},{"label":"Brazil","value":"Brazil"},{"label":"B
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 22 6c 61 62 65 6c 22 3a 22 43 72 6f 61 74 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 43 72 6f 61 74 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 75 72 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 43 75 72 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 79 70 72 75 73 22 2c 22 76 61 6c 75 65 22 3a 22 43 79 70 72 75 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 65 6e 6d 61 72 6b 22 2c 22 76 61 6c 75 65 22 3a 22 44 65 6e 6d 61 72 6b 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6a 69 62 6f 75 74 69 22 2c 22 76 61 6c 75 65 22 3a 22 44 6a 69 62 6f 75 74 69 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6f 6d 69 Data Ascii: "label":"Croatia","value":"Croatia"},{"label":"Curacao","value":"Curacao"},{"label":"Cyprus","value":"Cyprus"},{"label":"Czech Republic","value":"Czech Republic"},{"label":"Denmark","value":"Denmark"},{"label":"Djibouti","value":"Djibouti"},{"label":"Domi
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 6d 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 65 72 6e 73 65 79 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 65 72 6e 73 65 79 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 79 Data Ascii: label":"Guadeloupe","value":"Guadeloupe"},{"label":"Guam","value":"Guam"},{"label":"Guatemala","value":"Guatemala"},{"label":"Guernsey","value":"Guernsey"},{"label":"Guinea","value":"Guinea"},{"label":"Guinea-Bissau","value":"Guinea-Bissau"},{"label":"Guy
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 22 3a 22 4c 69 62 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 62 79 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 62 79 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 2c 22 76 61 6c 75 65 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 65 64 6f 6e 69 61 2c 20 46 59 52 4f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 Data Ascii: ":"Liberia"},{"label":"Libya","value":"Libya"},{"label":"Liechtenstein","value":"Liechtenstein"},{"label":"Lithuania","value":"Lithuania"},{"label":"Luxembourg","value":"Luxembourg"},{"label":"Macao","value":"Macao"},{"label":"Macedonia, FYRO","value":"Ma
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 63 61 72 61 67 75 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 63 61 72 61 67 75 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 75 65 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 75 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d Data Ascii: },{"label":"Nicaragua","value":"Nicaragua"},{"label":"Niger","value":"Niger"},{"label":"Nigeria","value":"Nigeria"},{"label":"Niue","value":"Niue"},{"label":"Norfolk Island","value":"Norfolk Island"},{"label":"Northern Mariana Islands","value":"Northern M
2024-04-18 16:59:01 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 6d 6f 61 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 6d 6f 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 Data Ascii: "},{"label":"Saint Martin","value":"Saint Martin"},{"label":"Saint Pierre and Miquelon","value":"Saint Pierre and Miquelon"},{"label":"Saint Vincent and the Grenadines","value":"Saint Vincent and the Grenadines"},{"label":"Samoa","value":"Samoa"},{"label"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49976	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:01 UTC	601	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 551 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:01 UTC	551	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 64 65 35 34 36 39 35 65 2d 33 31 64 31 2d 34 64 32 63 2d 61 33 66 38 2d 36 30 33 66 64 35 32 39 65 38 33 38 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 63 33 38 65 61 36 33 33 61 33 38 30 35 39 65 35 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 48 6f 77 25 32 30 4f 75 72 25 32 30 53 65 63 75 72 65 25 Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=de54695e-31d1-4d2c-a3f8-603fd529e838&r=&platform=web&installation_type=js-snippet&Idempotency-Key=c38ea633a38059e5&internal=%7B%7D&is_intersection_booted=false&page_title=How%20Our%20Secure%
2024-04-18 16:59:02 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:02 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0002g2clum6u6mq868r0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"c8521f08747a49e38105e71eabc06e96" X-Runtime: 0.224152 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:59:02 UTC	4451	IN	Data Raw: 31 31 35 62 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 6f 63 53 65 6e 64 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 6e 75 6c 6c 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 61 5f 66 65 77 5f 6d 69 6e 75 74 65 73 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f Data Ascii: 115b{"app":{"name":"DocSend","audio_enabled":true,"show_powered_by":true,"team_intro":null,"team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"a_few_minutes","launcher_expected_response_delay_translatio
2024-04-18 16:59:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49977	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:01 UTC	873	OUT	GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:02 UTC	3037	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:02 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:02 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:02 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 13723 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8ab286eca0144d47a43d9e5e4edd75e7 Connection: close
2024-04-18 16:59:02 UTC	13347	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()
2024-04-18 16:59:02 UTC	376	IN	Data Raw: 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 20 22 69 73 43 63 70 61 45 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 7d 2c 20 22 6e 6f 6e 5f 77 65 62 73 65 72 76 65 72 5f 63 6d 73 5f 73 74 79 6c 65 5f 61 75 74 6f 5f 69 6e 69 74 22 3a 20 66 61 6c 73 65 2c 20 22 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 69 74 5f 64 61 74 61 22 3a 20 7b 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 2a 6e 6f 6e 5f 64 72 6f 70 62 6f 78 5f 70 61 74 68 5f 6e 6f 5f 70 69 69 2a 22 2c 20 22 69 66 72 61 6d 65 4f 72 69 67 69 6e 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 22 2c 20 22 74 65 61 6c 69 75 6d 50 72 6f 66 69 6c 65 22 3a 20 22 Data Ascii: "countryCode": "US", "isCcpaEnabled": true}, "non_webserver_cms_style_auto_init": false, "marketing_tracker_init_data": {"src": "https://marketing.docsend.com/non_dropbox_path_no_pii", "iframeOrigin": "https://marketing.docsend.com", "tealiumProfile": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49978	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:02 UTC	810	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 1381 STATSIG-CLIENT-TIME: 1713459540791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:02 UTC	1381	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 64 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6d 61 72 6b 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6f 76 65 72 61 6c 6c 22 2c 22 61 63 74 69 6f 6e 22 3a 22 73 74 61 72 74 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 32 33 33 35 2e 31 30 30 30 30 30 30 30 30 30 30 36 7d 2c 7b 22 6b 65 79 22 3a 22 69 6e 69 74 69 61 6c 69 7a 65 22 2c 22 73 74 65 70 22 3a 22 6e 65 74 77 6f 72 6b 5f 72 65 71 75 65 Data Ascii: {"events":[{"eventName":"statsig::diagnostics","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":null,"metadata":{"markers":[{"key":"overall","action":"start","timestamp":2335.100000000006},{"key":"initialize","step":"network_reque
2024-04-18 16:59:02 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:59:01 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:02 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49980	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:03 UTC	813	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 36 30 35 37 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A6%2C%22time_on_page_ms%22%3A6057%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22ur
2024-04-18 16:59:03 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:03 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:03 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:03 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:03 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: eb60c40c87014f9d9a25fd9724e3f63e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49981	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	1337	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:03 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-04-18 16:59:03 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 108 X-Webkit-Csp: sandbox Content-Length: 137 Date: Thu, 18 Apr 2024 16:59:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1f97dbdc94bf4261ad6b2c9826c73fab Connection: close
2024-04-18 16:59:03 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49984	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	513	OUT	GET /app~tooltips-modern.b070189d.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:03 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 54058 Connection: close Date: Thu, 18 Apr 2024 16:59:04 GMT Last-Modified: Thu, 18 Apr 2024 16:10:45 GMT ETag: "e3f42890fd479dd5f9e7ce2b13595746" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: YOUl2zPBblzz8aELCbBC9G09tZoirw98 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 002f46e348ce9568cd7a478ff65daf30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LrJJWVLZZN9WSf2SnSGUo9h0ene3EfoK7m63O7C264uExeJYRIq24w== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 7a db 46 92 28 fc 2a 14 36 d1 10 e3 26 cc bb 28 2a 8c 56 96 ed c4 33 be 6d e4 dc c6 eb a3 80 64 53 84 05 02 34 00 4a 62 28 ce b3 9c 67 f9 9f ec af aa ee 06 ba 71 a1 e8 24 33 bb 73 be d9 cd c8 20 d0 f7 ae ae ae 7b 59 ab 98 d7 e2 24 f2 26 89 75 52 bf f2 c3 b1 eb bf 9b 7b b1 73 cb c7 4b 77 72 7d 3e 5f 05 d7 5e 90 f0 68 12 2e 2e 3f c6 a3 87 8b dc df bf ff 60 3b cb 55 3c af bf 7f 3f e8 f6 db 1f d8 66 d0 1f 74 07 c3 3a 67 09 0b ed d1 d7 9b d0 99 d6 13 b6 39 1b d6 e1 d7 93 55 92 84 c1 37 51 b8 5a 9e 25 30 94 f1 2a e1 5b fb e4 c6 8d 6a d1 28 ac 1f f7 7b dd a6 cd 3c 78 ec c2 73 cb 66 01 be 6d 0d 3a 6d 9b b9 f0 78 d4 1a 74 bb 36 8b e1 71 d0 3f 6e 77 6c e6 c3 63 a7 d3 6b 1f db 27 93 30 88 93 da 64 54 6f b2 d8 39 5b db 75 6b 4c Data Ascii: zF(6&(V3mdS4Jb(gq$3s {Y$&uR{sKwr}>_^h..?`;U<?ft:g9U7QZ%0*[j({<xsfm:mxt6q?nwlck'0dTo9[ukL
2024-04-18 16:59:03 UTC	448	IN	Data Raw: 0b c5 e4 44 2d a4 c1 20 73 ab a5 cc 60 71 7d 64 09 b9 a9 fa 38 b0 0f f9 91 a7 1d a4 15 50 0a 0a ac 9f a1 3d 4e 77 01 9e a5 03 ca 19 19 31 03 15 02 af 12 a9 0d 96 1b 44 ea e6 92 05 d3 15 c4 7e a6 20 f6 ff 45 15 c4 fe 43 0a e2 c9 bf 15 c4 ff 5c 05 f1 b4 20 c8 d8 78 01 a6 cc 43 30 84 cb 86 61 e4 b8 27 3e 47 43 16 74 f0 58 0a 77 10 18 f1 2d 14 00 5a c9 4e 9d 0f 37 28 5d d2 48 a6 0c 0f 79 e8 57 92 3f 04 c3 a5 34 66 5e 8c 2c 2b 45 54 73 fc 51 8e 3b 56 d0 0a 12 55 57 23 84 92 4c 88 5d f4 0a f2 75 24 e8 65 6d e7 91 e0 d2 38 f5 cb aa 7e c9 12 27 d9 b2 2b 9b 1d 1c 2c 0e 0f 8b 32 75 bd 3b b8 eb 8b c6 d2 d3 02 91 6c 2c 73 53 5f 66 0f 2e f8 90 d4 2a 27 4b 87 18 b3 91 74 8d a9 2d 46 cb 2d eb 34 8f 8f 4b bc 89 5e 14 48 60 29 3d f6 52 e9 71 e6 7d 77 73 37 59 fc aa c5 8e Data Ascii: D- s`q}d8P=Nw1D~ EC\ xC0a'>GCtXw-ZN7(]HyW?4f^,+ETsQ;VUW#L]u$em8~'+,2u;l,sS_f.*'Kt-F-4K^H`)=Rq}ws7Y
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: 62 26 7b f2 48 6f 2c 09 4b f4 6e 21 b8 94 de 2d bd ee 40 8f 81 f6 ff f0 d5 a5 84 86 25 51 6e 2c 80 23 0b 91 d1 dd c2 0f e0 90 61 7e 00 99 1e e0 b6 e3 84 d1 d5 63 20 fb 9b 8f a9 94 8a cc ac 9c cf e0 e9 c6 e3 b7 80 9d 86 96 88 e9 0c ff 59 5b 74 b1 41 17 37 6f 54 e8 6c e9 52 38 24 04 d5 a1 25 39 2e 49 5b e0 3b f4 b7 87 23 7b c3 83 70 3a b5 d8 74 68 bd 6a f5 9c ee 71 ad e5 74 7b 9d 89 d3 ed 88 ff e0 77 ab dd c3 1e 9d 5e af eb 37 7a 4e b3 dd ae e1 5f b7 53 eb 88 14 9c 8d 96 d3 e9 76 9d a3 a3 be df 70 80 13 71 da ed be eb 74 1c f5 d9 e9 f4 8f f0 cf c0 c7 2f 58 a4 93 55 ae 41 bd 23 6a a1 ef 53 e3 d8 45 eb d8 85 7e b1 6f 59 08 7b 87 0a af 3a b5 f6 fc c8 39 7a 79 5c eb 38 47 df 76 b2 5e 9a 0d 7c bc 39 d6 de d4 f0 71 9e 7b 03 c5 7e 18 38 83 41 cf 6f 39 d8 ed d1 0f Data Ascii: b&{Ho,Kn!-@%Qn,#a~c Y[tA7oTlR8$%9.I[;#{p:thjqt{w^7zN_Svpqt/XUA#jSE~oY{:9zy\8Gv^\|9q{~8Ao9
2024-04-18 16:59:03 UTC	9200	IN	Data Raw: 4d 97 4f 17 f5 92 56 9e ef 62 3f 43 5d 39 6c 71 9a 73 e1 89 40 ed f2 3b a0 64 77 90 c8 01 01 f3 ad ca 21 83 5c 24 24 6d 18 e0 30 45 8f d1 d3 ec b0 49 05 e7 79 a4 f2 05 84 bc 5c 46 a6 c0 17 13 a3 58 02 e3 db f1 8d 14 c2 32 3d 71 20 44 6f fe 64 f2 22 18 07 20 f2 80 f1 9e 12 7a 27 1c ab e6 5d ca a6 28 37 84 45 24 39 8f 97 c1 4b b2 a9 41 44 c3 b8 25 26 8e df 55 2c 69 91 6e c1 c5 42 c5 91 aa 80 8b 80 8c 45 76 15 d8 a4 93 30 b8 0f 29 8e ee 43 68 19 1e 94 0a 2d f2 49 2b 46 96 36 35 39 dc 04 ba 6d 0d 43 24 fa a4 43 33 19 0f b9 b3 cd 46 98 aa d7 ba 33 55 15 36 18 4c a0 32 9a 7e dc df 4f f6 f7 43 b8 23 0a 40 66 7f 1f 93 0a 70 39 5c 51 b1 5a 31 cc 29 52 bc c4 79 0a 2e 52 ea 12 9d b2 d4 05 85 e4 fd b6 e9 b1 9b 23 77 18 ef 7c 95 08 84 90 98 08 21 b2 20 10 3f 7f cd a4 Data Ascii: MOVb?C]9lqs@;dw!\$$m0EIy\FX2=q Dod" z'](7E$9KAD%&U,inBEv0)Ch-I+F659mC$C3F3U6L2~OC#@fp9\QZ1)Ry.R#w\|! ?
2024-04-18 16:59:03 UTC	11642	IN	Data Raw: 2a f3 1e a7 7a 6d 1c 2e 9e 64 9e a2 02 a2 4e 68 d7 70 fe 66 0f 64 d2 93 a6 2e d9 e4 57 44 c9 b5 6e 44 e9 b2 de f2 a5 c9 ca 48 8f df e6 62 7d d9 c7 10 a6 4f 68 96 a9 61 c6 c6 13 a3 bc 35 00 bf 50 75 50 4c ae 96 8f 70 56 71 e2 86 75 f3 45 e4 71 19 d3 79 e7 ba 6a e0 f1 dd 02 5e 17 5e 71 40 e5 f7 5a 4d 8b 74 e9 41 99 74 ad 85 09 3d 30 df 38 a0 2c 4a b6 23 bb c0 cc 2a 55 0c 54 42 b6 8f 5b 67 93 ee aa 88 6a a7 81 0c 79 6c 38 95 22 d7 c8 66 b8 fe f1 03 4a 32 ec 37 9d 71 3f 5a 02 8a 23 01 9e 27 24 dc 5e ed 6e c4 77 c1 95 29 18 3b e5 f8 c1 35 a0 52 e9 fa e9 cb bd dd 9d 87 d1 02 3b 22 1a 48 2d 68 c0 0c eb 6c 1d 57 1e 2b 98 6f 3f 97 79 60 32 e8 db 82 79 21 84 b2 92 5b 48 47 c6 5d a9 f4 8e 88 28 a8 05 e8 e3 32 20 26 dd 03 70 51 6c 83 da 79 11 46 87 c7 b1 e5 31 06 18 Data Ascii: zm.dNhpfd.WDnDHb}Oha5PuPLpVquEqyj^^q@ZMtAt=08,J#UTB[gjyl8"fJ27q?Z#'$^nw);5R;"H-hlW+o?y`2y![HG](2 &pQlyF1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49987	18.164.78.19	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	504	OUT	GET /app-modern.1755769f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:03 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 136658 Connection: close Date: Thu, 18 Apr 2024 16:59:04 GMT Last-Modified: Thu, 18 Apr 2024 16:10:45 GMT ETag: "d973959c12cf835966f79aa4bb2fc28c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: AVtApjEvAzh0yjRrrTYjuCvuxz_Wps_8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d5906adfff127262fd3b731ede1244e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -CwCpHdbuVF8WWh_JVKRwOVakcxXUd-a5003VCqLar4E7V36H5ldPQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 72 1b c9 b2 20 f8 2b 64 b6 0e 0f f2 2a 98 85 85 e0 02 1c 14 0f 45 49 25 55 49 25 5d 51 aa e5 e8 ea 52 49 20 40 a4 08 64 42 99 09 2e 02 61 d6 cf 6d 36 6d 3d 0f 6d 36 6f 63 36 0f f3 36 cf f3 3e 9f d2 5f 30 9f 30 ee 1e 7b 2e 20 4b 55 f7 f4 3d 3d 7d 97 12 98 19 19 e1 11 e1 e1 bb 7b 78 8b 8c 6f 64 79 1a 0d 73 af df 38 9f 26 67 e1 f4 ed 24 ca 82 2b 7e 36 0f 87 17 c7 93 45 7c 11 c5 39 4f 87 c9 ec f4 53 36 b8 bb c9 ed ed fb 0f 7e 30 5f 64 93 c6 fb f7 9d 6e 7b e7 03 5b b6 f6 77 9b 9d 5e 83 b3 9c c5 fe e0 db 65 1c 8c 1a 39 5b 3e ea 35 e0 af 88 5d d2 bf c9 ca ef 5f 86 e9 46 3a 88 1b fb bb 07 ed 8e df 1f 26 71 96 6f 44 83 4e 9b 25 83 46 93 a5 c1 d1 8d df f0 42 8f 2d f3 30 3d e7 79 cf e3 07 d3 cb 83 34 69 7a 2b 78 31 8a b2 f9 34 Data Ascii: r +d*EI%UI%]QRI @dB.am6m=m6oc66>_00{. KU==}{xodys8&g$+~6E\|9OS6~0_dn{[w^e9[>5]_F:&qoDN%FB-0=y4iz+x14
2024-04-18 16:59:03 UTC	467	IN	Data Raw: d9 23 7e 67 cc 82 5e 92 ac f7 8b 5d fd 7f 1e a6 b9 b2 34 c4 a0 14 3a 37 52 16 64 8c 81 73 8d cc 72 bd 79 ac ac 6e 26 8e 8c 85 66 33 dd b3 32 33 1a 01 76 4a 01 c7 3f 92 38 85 b8 36 74 04 5a 7b 3a 23 3b d0 01 cd 68 f9 b7 b0 2f 23 5f 9a 1c 37 50 9a 92 17 4a 92 59 62 ce 88 d4 2d 6c eb c4 4c 4b 88 13 29 33 9e 5b 48 34 b6 14 e9 1b 4b c3 bc 44 d4 c4 82 22 67 0a 41 39 0e fc 6d 6b 6b 6b 73 08 67 eb 0c 2b e5 e5 0f 5b ab 8f 65 63 ee 1d 46 27 51 33 6f c6 d6 40 ac e0 b4 e0 51 e2 e7 99 35 1d 6b 45 eb 66 54 b9 57 6b 77 b7 b8 91 c6 4c bc ee 9e 5b c4 35 51 33 49 df fa fa 7c e4 ca ca 4c 1c fa 18 57 16 ef f9 b4 8f 3b bc 79 12 0e 27 94 9d 6e 16 82 e8 ec d2 98 70 8a d7 9a 3e c1 17 7a 5d 05 40 39 85 42 54 dd 1c 8a 4a 56 8e d7 7f 1b 04 f3 51 06 57 57 4b 8a 3b 0f cd bb ad 2d db Data Ascii: #~g^]4:7Rdsryn&f323vJ?86tZ{:#;h/#_7PJYb-lLK)3[H4KD"gA9mkkksg+[ecF'Q3o@Q5kEfTWkwL[5Q3I\|LW;y'np>z]@9BTJVQWWK;-
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: 40 5b 02 b4 7e d8 f2 eb f4 db 77 f2 7a b3 06 15 fa fb 86 ea 02 fa 5e 49 73 5e 2b a8 dc 43 8d fe 67 b6 b6 0b e7 36 52 e2 70 7c 65 5f 14 3a 09 33 71 a2 1c d3 a4 3c 63 bd ca a3 f4 93 75 db a8 8b 5e a5 a6 0f 4a 4d cd 7e d8 4f c5 89 b3 9f 94 ce 88 af a2 b7 62 4e e1 59 ed d6 be 0f 93 13 f1 57 dd 1d 18 9b 7e 1f ec e1 5d a5 09 fe 3e 68 1e 60 da 58 48 bf f7 f6 0f 0e 94 57 27 e3 22 93 10 fe 8a 81 f7 f8 0d f7 82 38 41 a8 d1 25 c1 52 ba 67 89 07 3f dd a0 ff f6 f6 96 07 33 01 4f e0 52 71 14 c0 b0 76 ad ca f0 5f 16 88 7c ca b0 4f f8 11 55 71 1b 8e de 44 04 47 3f 02 21 69 91 61 55 61 26 8c 53 25 59 01 6b ac b2 94 45 2c 61 a1 bf e4 58 ca 27 e5 c1 e3 5f fc 46 cc 41 2d 61 d6 6b 4a 78 e5 c1 c9 81 ef 30 8e 54 b8 4c eb 38 84 e8 33 e2 c1 cb 4b 24 c4 e8 53 13 15 9e 44 66 5f 85 Data Ascii: @[~wz^Is^+Cg6Rp\|e_:3q<cu^JM~ObNYW~]>h`XHW'"8A%Rg?3ORqv_\|OUqDG?!iaUa&S%YkE,aX'_FA-akJx0TL83K$SDf_
2024-04-18 16:59:03 UTC	9200	IN	Data Raw: f5 ad 9d 1e c5 c2 2d e4 6b 0d 1a a2 c9 fa 21 ea e0 10 09 0b 58 7b b0 c7 ea 50 88 a6 39 ed 39 15 a3 a2 93 bb 36 24 62 b5 25 c1 28 9c a7 7c 58 d4 78 f0 41 da a3 7b bc aa ad 36 dd 82 55 08 7f 0e 9d a5 14 24 74 64 95 37 84 a4 f2 86 4d 83 e4 ea cf 88 b3 28 e6 f1 36 bc 7e ff 15 2d 51 8e 96 30 bd 0a ff 11 c1 12 bf 27 ed a3 35 e5 e3 ef 8c 0a 10 29 b4 0a 67 a8 4a 2e fe bd 5e f8 66 43 f5 0c 23 85 a8 8b 8a 54 9e 99 8a b2 18 96 d6 83 1e 63 51 14 55 cb 9f a8 12 51 13 66 e2 a5 72 af d2 b2 e4 1c 33 bb 69 28 a8 b8 af a1 99 b2 f2 43 0d cd b4 f4 2c cf 22 56 ed 6a 59 31 1a 2a 89 04 f9 99 97 7c 2b f5 85 95 d0 5b c0 65 91 a9 38 c2 93 b2 e0 4a ac 29 08 f9 ed df ed 4a f9 c7 3d 26 b5 56 d8 7c 26 c3 8a a9 98 b0 3f d9 15 b2 88 20 2d 0e e0 78 3e 71 c7 e2 12 9d 32 e5 b2 08 6b 69 25 Data Ascii: -k!X{P996$b%(\|XxA{6U$td7M(6~-Q0'5)gJ.^fC#TcQUQfr3i(C,"VjY1*\|+[e8J)J=&V\|&? -x>q2ki%
2024-04-18 16:59:03 UTC	9232	IN	Data Raw: 16 2a 08 28 82 6c cc cb f1 43 79 50 83 2a 00 1c 35 7e 5a 69 74 02 41 fa e5 13 bb 61 07 1e 3d 9a f1 64 44 86 0d 40 08 04 52 98 11 0a 92 a7 29 6b 0a 8f 38 d7 de bc ca 91 2b 7d d7 74 1e 35 78 5c d9 64 a4 0a 03 03 8d 8d d4 43 da 88 c7 32 d9 97 c5 8d 2c dd dc 8f cc 4c 47 c1 5f 16 46 0a dc e3 fa 0f 50 e6 2a 17 d1 93 18 e9 bb 12 a5 2c ba 0c 66 0c 71 35 f5 04 46 13 21 97 d0 dc 65 8a 48 b4 2c 16 45 fa d1 1e c9 35 8c 61 72 67 e8 fb a0 3e c5 2b a7 7d 8d 6e 04 49 12 dc bd 1a d7 b4 76 e4 3b 38 de 0c 81 e2 f1 4c 0f ca 20 8b 25 be 39 0f 9f 4e 82 8b 54 ff a2 d0 7e a8 ca e8 6e e9 ea 29 38 a4 58 97 37 c0 cc ab 69 c9 bc a1 28 45 bb 21 45 2d 79 27 37 7c 68 99 a0 4a 96 01 55 5c 17 d0 44 33 0b 69 9d 0a c1 1a f6 dc 4f 24 5e da 9f 95 44 3e 59 ac 68 88 d1 ee 6b 12 a1 ba ab 89 c7 Data Ascii: (lCyP5~ZitAa=dD@R)k8+}t5x\dC2,LG_FP*,fq5F!eH,E5arg>+}nIv;8L %9NT~n)8X7i(E!E-y'7\|hJU\D3iO$^D>Yhk
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: d5 a1 55 76 b1 d6 0d 8e 5d 0a e8 93 ab 61 cf 91 3e bc 26 26 00 2a e3 5d d4 c5 2d 96 24 f6 66 1e bd 8a 4e 85 ef 2e 1e c7 91 8a b5 1d 62 5e e9 2c 88 32 5b 73 57 d9 58 be 6e a1 94 87 01 cf 71 33 3d 80 09 07 f0 58 e1 20 c8 32 98 74 cc 8b d7 72 22 52 1c 08 ef 6a 55 a9 76 15 84 4d d3 b5 9e 9b 55 9d 6e 40 57 33 5f d9 38 3d 67 51 7e 55 99 70 fc 83 fd 43 23 0e 57 54 59 49 d3 8a 85 ae d6 9f eb 8a 38 70 b5 6d 7c e2 62 80 b4 ec f2 a8 0f 19 36 6a 5a a6 da a8 0d c5 66 3f 8d 46 6b bd aa 68 2a ea 93 5e 90 f5 41 a3 bb 61 09 1b 9d 0f ee ce d9 2d 08 9d 21 8b 86 cc a1 55 1f 64 72 13 cd 78 a2 f0 1c 1f dc 94 d8 05 28 95 2d b5 7d 9e 41 46 9c 3a 26 f2 ac 8c 8e c3 43 cf 20 bf 18 53 2c 20 08 77 e0 a5 87 88 85 9a a2 87 2c 50 77 d0 57 bf 50 e5 38 1d b9 1e 9d 11 62 c6 e7 b4 cf 2f 29 Data Ascii: Uv]a>&&]-$fN.b^,2[sWXnq3=X 2tr"RjUvMUn@W3_8=gQ~UpC#WTYI8pm\|b6jZf?Fkh^Aa-!Udrx(-}AF:&C S, w,PwWP8b/)
2024-04-18 16:59:03 UTC	16384	IN	Data Raw: 89 d3 ed 12 07 99 5b 0b 2d a3 e9 25 81 d7 09 31 f0 79 dc 84 4f a2 5d e5 12 81 95 e9 be 07 eb 31 98 c2 93 33 2f 4c e1 2e 50 63 68 90 17 fa 98 7e 5e c2 5c 55 54 b6 32 d7 6e 59 d3 aa 31 4d 32 c7 98 dd ba 9b c3 c3 a0 7b b4 50 05 6d d4 6d ec 69 00 b8 1e d4 a8 35 7e 0d 4a ae 76 75 1b 23 e3 40 55 6d 83 1c aa 22 f2 0e c4 ed ef 61 62 ef fb fb 58 ef f3 fd 3c 36 0a 0e 55 08 0b e9 b1 a2 b5 ba 9e 16 16 a9 cf 89 ac be c8 79 20 4d 95 85 03 89 fc ff d6 65 9b 47 09 8d ae c4 1a 59 0c d2 23 f0 28 ce 7a 88 71 d6 31 5e 8f ac 91 eb 0a bf 02 cf 9b 70 45 c7 e4 07 69 7c f2 0f fc b1 fc 91 1d 60 d6 d8 94 f2 37 c4 26 37 40 b7 73 67 73 0e 1b c2 a5 06 1a db a0 e6 9c 8b 37 9f c6 70 c4 f9 68 ff 64 30 59 94 04 9e 52 7d b3 5f 4f 5f d0 2f c2 c8 8a 3d f3 27 f8 99 72 77 fb 4c f8 89 67 45 59 Data Ascii: [-%1yO]13/L.Pch~^\UT2nY1M2{Pmmi5~Jvu#@Um"abX<6Uy MeGY#(zq1^pEi\|`7&7@sgs7phd0YR}_O_/='rwLgEY
2024-04-18 16:59:04 UTC	16384	IN	Data Raw: 0c 5a 1f e6 9f 0f 72 63 f5 6d d0 9c ce a5 e7 37 6f c6 de ee 49 0b d6 2d b4 07 16 77 55 ff eb ac 72 2c e7 a0 b1 b0 3e de c1 cc bc 9a 5a b3 0f f3 41 f3 1d 52 c0 15 cc c8 ed c9 2f af 1a 83 17 30 5a b3 0f cd cf 1f 3b 37 9f 5f c0 ac b0 19 af 9f 5c 1d df 9f 1d 22 55 e3 8c bf 05 6a 9d 1c 9e 02 f5 9d 5e 1d 75 90 2a 4f 0f 3f 75 ce 2e 60 e5 48 f7 ce 2e ae 5b 44 a5 07 ed 05 ac 8e 7b a0 fa 26 ac b8 c5 e9 d5 fb ce c5 e1 10 66 0f a8 9e 56 1b ce de fb c6 eb f7 a7 b0 22 87 b0 02 80 5a 0e 69 75 b5 81 aa 80 2b b4 17 b0 ea 16 67 0b 58 89 30 bb af 0f 8f 80 f2 c6 50 fe a7 c6 d9 d5 b5 f4 fd 2d ae d4 16 ac a0 16 d6 ff fa e2 18 be 9b 02 47 3b 86 f6 0d db ac 7e a4 56 e2 6a 8b 93 ab fd d6 6b 5c 75 4e fb 16 ca 69 20 b7 4a be 97 fa 49 94 06 2b 7d 41 ab f6 0e 56 62 9d b5 ef 1a db 4a Data Ascii: Zrcm7oI-wUr,>ZAR/0Z;7_\"Uj^u*O?u.`H.[D{&fV"Ziu+gX0P-G;~Vjk\uNi JI+}AVbJ
2024-04-18 16:59:04 UTC	16384	IN	Data Raw: ca da ca 5c 7b de e1 62 dc 69 b4 76 eb 14 11 a0 f6 0d b0 ba ed 69 b3 45 0e 3d 15 14 e7 df 70 f7 1d 8a 77 dc 4a b9 80 70 c7 15 4d df e9 e8 1a 25 b4 41 c7 0d e1 e2 53 5b a4 02 d1 c9 87 60 8d f7 c0 3a a7 03 3f e7 ab 21 f9 ba a0 2f ce 32 1d ba 49 41 f2 2c 7c 90 91 d5 d9 0a a7 08 d6 71 d9 2b a8 31 71 06 e3 14 62 03 54 2d 81 97 48 3d e5 ee 4c 22 8f 48 de 15 26 ce 4c 70 ba b6 09 4d a9 09 9d 99 35 ef 4a 2d e0 58 27 08 e5 92 4a cd 53 27 e7 71 96 9c 87 52 24 14 36 80 c8 fc 70 26 40 29 1a f6 b7 f1 d0 f6 14 e1 a7 98 1b a5 2d 27 1e 3a 59 db 72 05 12 45 c1 4c ab d2 66 64 22 6b 69 f2 18 ea 0a 3c 9a 78 81 73 0f 65 98 d3 18 ce e2 10 33 a9 be 64 62 47 41 ae 04 d6 2c d9 e9 a6 d1 bd be 6b 0d e6 b9 11 15 39 3f 10 93 26 db b6 01 c2 fd 8a 79 4f 22 89 e9 5a 74 96 05 81 d6 58 04 Data Ascii: \{biviE=pwJpM%AS[`:?!/2IA,\|q+1qbT-H=L"H&LpM5J-X'JS'qR$6p&@)-':YrELfd"ki<xse3dbGA,k9?&yO"ZtX
2024-04-18 16:59:04 UTC	4096	IN	Data Raw: 28 fc df ab ff 6c fe ef e5 3f 87 ff 7b 75 27 fe ef d1 5f cc ff bd fa 17 f1 7f 8f fe cb ff fd 1b f0 7f 2f 56 dd 46 b5 ca 9e ad ba 07 f0 e7 29 9a 15 49 a2 c4 10 90 22 4b 74 04 45 8f a2 15 23 17 b8 c0 da 5e 75 cd ae e2 a2 fc 17 73 51 28 f8 24 2e 18 4e dc 54 a5 b0 1b af 29 12 81 0a bf 58 ad d9 fb 0d a5 91 c8 2a 45 3f 24 45 d1 07 57 2b 3a 9f 89 82 cf a0 e0 c7 0d 05 c9 35 36 29 7a 4f 10 e5 35 fb 65 13 63 dc 1f 7e 75 56 23 95 31 fe 3a 1b 4f f7 a7 9b 12 7d de c1 a5 85 9e c2 6d 74 dd a9 65 92 a5 21 73 fd db f6 3e 19 30 37 bf bd 2d 99 2d af fe 60 97 62 81 2a a4 f9 89 c1 d2 ab 0f d6 f2 f9 d2 8d 6e 92 9c 67 ea 63 b6 6b d1 0a f2 32 d9 1c 7e df d8 45 4a 5e 2a f3 fd 05 22 05 6d 9c 07 30 6f 00 4a 97 70 04 15 0e 3a ab f4 58 51 f7 88 87 85 22 83 fd cd 8a d3 50 1b 4e fa d5 Data Ascii: (l?{u'_/VF)I"KtE#^usQ($.NT)XE?$EW+:56)zO5ec~uV#1:O}mte!s>07--`bngck2~EJ^*"m0oJp:XQ"PN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49983	34.225.139.162	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=ZiFRUgAAAGGwyANw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dpm=03242510230966952991372664810416290409; demdex=03242510230966952991372664810416290409
2024-04-18 16:59:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: O1oL2i5wTGI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0b06604fe.edge-va6.demdex.com 4 ms set-cookie: dpm=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:59:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:59:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:59:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49985	34.225.139.162	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=ZiFRUgAAAB5dpgMv HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dpm=03242510230966952991372664810416290409; demdex=03242510230966952991372664810416290409
2024-04-18 16:59:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ihwgIXk4RV8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0914bb543.edge-va6.demdex.com 3 ms set-cookie: dpm=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:59:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=03242510230966952991372664810416290409; Max-Age=15552000; Expires=Tue, 15 Oct 2024 16:59:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 16:59:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49982	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	1109	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:03 UTC	1137	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:03 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:03 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:03 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:03 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: addce67896d340f48f1a9f0debfe74f7 Connection: close
2024-04-18 16:59:03 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49989	3.163.80.122	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	2287	OUT	GET /how-it-works/ HTTP/1.1 Host: marketing.docsend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656; dbx_js_analytics_id=AACVUOd1jedmfN441-SDrx45N_cZCQOlcqr_6nHPC81FxA; intercom-id-lv6lji7h=a137ebbf-dc09-49f7-86e5-a1d358505a6d; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=36e27699-029a-4cf0-bb93-e42fd544cf2e; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; s_ips=0; s_tp=0; gpv_pgn=marketing.docsend.com%7Chome; s_dur=1713459538903; s_vncm=1714514399906%26vn%3D1; s_ivc=true; s_lv_s=First%20Visit; s_visit=1; s_inv=0; gpv_c51=marketing.docsend.com%2F; s_plt=7.42; gpv_c_pagename=marketing.docsend.com%7Chome; s_pltp=marketing.docsend.com%7Chome; s_ptc=%5B%5BB%5D%5D; s_nr30=1713459538918-New; s_cc=true; s_lv=1713459538920; s_tslv=1713459538941; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=1176715910%7CMCIDTS%7C19832%7CvVersion%7C5.4.0%7CMCMID%7C03399203033517895891424532205099485311%7CMCAAMLH-1714064337%7C7%7CMCAAMB-1714064337%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1713466737s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T16:59:00.980Z","expireDate":"2024-10-18T16:59:00.980Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":2}; utag_main=v_id:018ef225a1b7000b51815568e3370506f001e06700918$_sn:1$_se:5$_ss:0$_st:1713461341012$ses_id:1713459536313%3Bexp-session$_pn:2%3Bexp-session$vapi_domain:docsend.com
2024-04-18 16:59:03 UTC	437	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 627 Connection: close Last-Modified: Wed, 31 May 2023 19:16:09 GMT Server: AmazonS3 Date: Thu, 18 Apr 2024 16:59:03 GMT ETag: "85c876eb10030058f29245148995cc2d" X-Cache: Error from cloudfront Via: 1.1 c2eb082c7c9da19c441d80e4c661fea8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: o4_0nwajU4bgOLhHt8_2Q02KtBj0Gji7IgAdDfaYKmAKuS_bhjGXnQ== Age: 48700
2024-04-18 16:59:03 UTC	627	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 20 5d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 68 74 74 70 73 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d Data Ascii: <html> <head> ...[if (gte IE 9) ]> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <![endif]--> <title>Dropbox</title> <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49990	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:03 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 830 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:03 UTC	830	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6c 61 74 65 6e 63 79 25 32 32 25 33 41 30 25 32 43 25 32 32 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 25 32 32 25 33 41 25 32 32 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 Data Ascii: event_type=page_view&extra_params=%7B%22page_view_latency%22%3A0%2C%22bfcache_eligible%22%3Afalse%2C%22page_view_origin%22%3A%22normal%22%2C%22hierarchy_group%22%3Anull%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3
2024-04-18 16:59:04 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:03 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8086ab266b464fb9a0b03a25e8b0bf74 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49999	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	1792	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s3864202734271?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=329867D088CC7215-5195E06B379548D8&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&h2=marketing.docsend.com&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=f94d9a1a-623f-4586-905c-dec298db1b9c&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:04 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:04 GMT expires: Wed, 17 Apr 2024 16:59:04 GMT last-modified: Fri, 19 Apr 2024 16:59:04 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626353728618496-4618615230935884994 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50000	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	1825	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36440170823801?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A58%3A58%204%20-120&sdid=2598E6178332AFE3-4B8015A8075EBAD8&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=92ec06e5-7cf2-4b6b-a970-de32b64e930a&v13=04%2F18%2F2024&v14=67742175460596105750453226224925927173&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2F&c19=dpi.prod.esntls&c20=D%3DpageName&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CServer%20Side%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:04 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:04 GMT expires: Wed, 17 Apr 2024 16:59:04 GMT last-modified: Fri, 19 Apr 2024 16:59:04 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626353306927104-4618239021298011390 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49994	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	1109	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:04 UTC	1137	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:04 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2eb7dfa4edaf4bc6a39d5cd3aad481f3 Connection: close
2024-04-18 16:59:04 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49995	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	1132	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:04 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:04 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:04 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4ea3ec5948df4eb885def85326688253 Connection: close
2024-04-18 16:59:04 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50001	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	634	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:04 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 18 Apr 2024 16:59:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3e47baa6eacb48dcb7ae5c2acfe9b3ea Connection: close
2024-04-18 16:59:04 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50002	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:04 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:04 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:03 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6de1760f13ab4311a434afb95ec710c8 Connection: close
2024-04-18 16:59:04 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50004	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:05 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:59:05 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0028kq8itr1rlt55kvg0 X-Runtime: 0.011667 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:59:05 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50006	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	1044	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s35818256649679?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=3243BC8676BB5756-380C39292852D8B9&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=2083&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:05 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:05 GMT expires: Wed, 17 Apr 2024 16:59:05 GMT last-modified: Fri, 19 Apr 2024 16:59:05 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626354497191936-4618415193225301662 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50005	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:05 UTC	768	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 35 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 35 31 38 33 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A15%2C%22time_on_page_ms%22%3A15183%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22ur
2024-04-18 16:59:05 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:05 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:05 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:05 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8f4b408f3ed54629a07b70a3de0b1086 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50007	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	809	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 783 STATSIG-CLIENT-TIME: 1713459543895 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:05 UTC	783	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 61 70 70 5f 6d 65 74 72 69 63 73 3a 3a 70 61 67 65 5f 6c 6f 61 64 5f 74 69 6d 65 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 32 31 36 32 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 68 6f 77 2d 69 74 2d 77 6f 72 6b 73 2f 22 7d 2c 22 74 69 6d 65 22 3a 31 37 31 33 34 35 39 35 34 30 37 39 34 2c 22 73 74 61 74 73 69 67 4d 65 74 61 64 61 74 61 22 3a 7b Data Ascii: {"events":[{"eventName":"statsig::app_metrics::page_load_time","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":2162.2000000000116,"metadata":{"url":"https://www.docsend.com/how-it-works/"},"time":1713459540794,"statsigMetadata":{
2024-04-18 16:59:05 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:59:05 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:05 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50009	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	634	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:05 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 18 Apr 2024 16:59:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ab9085d8c02e4a8a9c560615fdede9dd Connection: close
2024-04-18 16:59:05 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50008	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	1044	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34999277203671?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=6073A750CB93F372-39DDC72BC3D3AA0B&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=1929&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:05 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:05 GMT expires: Wed, 17 Apr 2024 16:59:05 GMT last-modified: Fri, 19 Apr 2024 16:59:05 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626355100221440-4618685978372522368 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50010	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:05 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:05 UTC	780	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 32 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 32 30 30 37 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A2%2C%22time_on_page_ms%22%3A2007%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url%2
2024-04-18 16:59:05 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:05 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:05 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:05 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 39982844f27e4ab5a6600dda7765cb57 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50012	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	1593	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:06 UTC	5907	IN	HTTP/1.1 302 Found Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; default-src 'none' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; font-src https:// data: ; img-src https://* data: blob: ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; base-uri 'self' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:59:06 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ce102355a7f44a9ab395e52daae90f86 Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:06 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50011	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	1132	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:06 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 13 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fdf9e671d9c6468f8262ce6f7af34a8e Connection: close
2024-04-18 16:59:06 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50014	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	824	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:06 UTC	1147	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 13e604af943e4ccba19cac2d61c1e37d Connection: close
2024-04-18 16:59:06 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50015	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:06 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8ad8c4d90ffa43b9a0271aedeef9ed84 Connection: close
2024-04-18 16:59:06 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50016	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	1207	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	3325	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 95d1336d3023401891ce68fafb1dac57 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50018	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:06 UTC	815	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 30 33 36 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A10%2C%22time_on_page_ms%22%3A10360%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22
2024-04-18 16:59:06 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c680773c0ddf4ebb8c3a37075b0c8fcd Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50017	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	853	OUT	GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:06 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 28 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7719 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ee0a8c7f48a84509a683c71603d06169 Connection: close
2024-04-18 16:59:07 UTC	7719	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50021	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	803	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34999277203671?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=6073A750CB93F372-39DDC72BC3D3AA0B&mid=67742175460596105750453226224925927173&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=1929&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:06 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:06 GMT expires: Wed, 17 Apr 2024 16:59:06 GMT last-modified: Fri, 19 Apr 2024 16:59:06 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626358464053248-4618250794898923613 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50020	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	803	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s35818256649679?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A3%204%20-120&sdid=3243BC8676BB5756-380C39292852D8B9&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chome&g=https%3A%2F%2Fmarketing.docsend.com%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=2083&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:06 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:06 GMT expires: Wed, 17 Apr 2024 16:59:06 GMT last-modified: Fri, 19 Apr 2024 16:59:06 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626358656368640-4618613835609666081 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50019	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:06 UTC	1596	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	5244	IN	HTTP/1.1 200 OK Content-Security-Policy: style-src https://* 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: blob: ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; default-src 'none' ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; media-src https://* blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; font-src https://* data: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:59:07 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a3a3ae30997648f08697399d5b383709 Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:07 UTC	7361	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-04-18 16:59:07 UTC	16384	IN	Data Raw: 31 63 66 32 0d 0a 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 2d 76 66 6c 61 5a 6b 51 4f 42 22 2c 20 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 5f 65 64 69 73 6f 6e 5f 72 65 61 63 74 5f 70 61 67 65 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f Data Ascii: 1cf2pa_iframe_bundle_amd/dist/e_edison": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB", "atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/
2024-04-18 16:59:07 UTC	1422	IN	Data Raw: 6f 62 33 56 73 5a 46 39 6b 61 58 4e 68 59 6d 78 6c 58 32 4a 68 62 6d 35 6c 63 6a 31 6d 59 57 78 7a 5a 53 5a 6e 63 47 4e 66 63 32 6c 6e 62 6d 46 73 50 57 5a 68 62 48 4e 6c 4a 6d 39 79 61 57 64 70 62 6a 31 6f 64 48 52 77 63 79 55 79 4e 54 4e 42 4a 54 49 31 4d 6b 59 6c 4d 6a 55 79 52 6e 64 33 64 79 35 6b 62 32 4e 7a 5a 57 35 6b 4c 6d 4e 76 62 53 5a 7a 59 57 35 6b 59 6d 39 34 58 33 4a 6c 5a 47 6c 79 5a 57 4e 30 50 57 5a 68 62 48 4e 6c 4a 6d 78 76 59 32 46 73 5a 56 39 76 64 6d 56 79 63 6d 6c 6b 5a 54 31 6c 62 69 5a 77 59 58 4a 6c 62 6e 52 66 5a 47 39 74 59 57 6c 75 58 32 4e 76 62 6e 4e 6c 62 6e 52 66 59 32 39 76 61 32 6c 6c 50 53 55 79 4e 54 64 43 4a 54 49 31 4d 6a 4a 6a 62 32 35 7a 5a 57 35 30 56 48 6c 77 5a 53 55 79 4e 54 49 79 4a 54 49 31 4d 30 45 78 4a 54 Data Ascii: ob3VsZF9kaXNhYmxlX2Jhbm5lcj1mYWxzZSZncGNfc2lnbmFsPWZhbHNlJm9yaWdpbj1odHRwcyUyNTNBJTI1MkYlMjUyRnd3dy5kb2NzZW5kLmNvbSZzYW5kYm94X3JlZGlyZWN0PWZhbHNlJmxvY2FsZV9vdmVycmlkZT1lbiZwYXJlbnRfZG9tYWluX2NvbnNlbnRfY29va2llPSUyNTdCJTI1MjJjb25zZW50VHlwZSUyNTIyJTI1M0ExJT
2024-04-18 16:59:07 UTC	2170	IN	Data Raw: 38 37 33 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 70 59 4c 43 68 78 77 61 58 52 6f 62 33 4d 75 52 57 52 70 63 32 39 75 55 48 4a 6c 5a 6d 56 30 59 32 68 54 5a 58 4a 32 61 Data Ascii: 873<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EpYLChxwaXRob3MuRWRpc29uUHJlZmV0Y2hTZXJ2a
2024-04-18 16:59:07 UTC	9813	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2e 45 64 69 73 6f 6e 2e 72 65 67 69 73 74 65 72 53 74 72 65 61 6d 65 64 50 72 65 66 65 74 63 68 28 22 45 71 49 4c 43 69 5a 31 65 46 39 68 62 6d 46 73 65 58 52 70 59 33 4d 75 56 58 68 42 62 6d 46 73 65 58 52 70 59 33 4e 46 Data Ascii: 1000<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require(["js/edison/edison"], function (edisonModule) { edisonModule.Edison.registerStreamedPrefetch("EqILCiZ1eF9hbmFseXRpY3MuVXhBbmFseXRpY3NF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50023	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	792	OUT	GET /embed/pgLV0NmWnJ4 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:07 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 16:59:07 GMT Strict-Transport-Security: max-age=31536000 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=jMjPIpf7IRo; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=siVQ1TUXolU; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 16:59:07 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 16:59:07 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 38 4b 64 57 6d 36 67 41 61 45 6e 77 46 79 33 74 47 4a 51 42 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="E8KdWm6gAaEnwFy3tGJQBA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 Data Ascii: C,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 66 39 32 30 38 37 66 32 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 52 7a 6c 44 54 6d 74 6f 75 4a 63 52 45 58 6a 74 46 42 4a 76 6d 51 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 52 7a 6c 44 54 6d 74 6f 75 4a 63 52 45 58 6a 74 46 42 4a 76 6d 51 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 Data Ascii: href="/s/player/f92087f2/www-player.css" name="www-player" nonce="RzlDTmtouJcREXjtFBJvmQ"><style nonce="RzlDTmtouJcREXjtFBJvmQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width:
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 Data Ascii: )<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrer
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 75 69 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 74 68 75 6d 62 6e 61 69 6c 5f 70 72 65 6c 6f 61 64 69 6e 67 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 Data Ascii: ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"disable_thumbnail_preloading":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 5f 66 69 6c 74 65 72 5f 62 65 66 6f 72 65 5f 75 70 64 61 74 65 5f 6d 61 73 74 68 65 61 64 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 61 64 73 5f 63 6c 69 65 6e 74 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 6c 6f 67 5f 74 76 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 76 6f 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 75 65 2c 22 69 6c 5f 61 74 74 61 63 68 5f 63 61 63 Data Ascii: _filter_before_update_masthead":true,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_ads_client_monitoring_log_tv":true,"html5_enable_single_video_vod_ivar_on_pacf":true,"html5_log_trigger_events_with_debug_data":true,"il_attach_cac
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 6e 77 6c 5f 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 73 74 77 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 77 74 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 Data Ascii: nwl_initialization":true,"use_new_nwl_stw":true,"use_new_nwl_wts":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_a
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 72 76 61 6c 5f 6d 73 22 3a 32 38 30 30 30 2c 22 77 65 62 5f 67 65 6c 5f 64 65 62 6f 75 6e 63 65 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 Data Ascii: rval_ms":28000,"web_gel_debounce_ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProce
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 73 72 41 46 45 4d 37 59 73 41 55 51 6b 76 32 33 49 68 44 72 73 4c 41 46 45 4c 47 64 5f 78 49 51 75 71 58 5f 45 69 6f 67 51 30 46 4e 55 30 56 34 56 55 6b 74 57 6e 45 74 52 45 6c 50 65 6a 6c 42 64 6d 31 77 5a 30 78 4f 4d 46 6b 77 54 6b 68 52 59 7a 30 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c Data Ascii: srAFEM7YsAUQkv23IhDrsLAFELGd_xIQuqX_EiogQ0FNU0V4VUktWnEtRElPejlBdm1wZ0xOMFkwTkhRYz0%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\
2024-04-18 16:59:07 UTC	2099	IN	Data Raw: 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 Data Ascii: associate_survey_question\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_fet_wr\u003dtrue\u0026ab_det_fet_wr_en\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50024	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:06 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 053534f661f947be96959bc9859e8738 Connection: close
2024-04-18 16:59:07 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50022	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	1112	OUT	GET /s/player/f92087f2/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:07 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 381443 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 20:50:32 GMT Expires: Thu, 17 Apr 2025 20:50:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 04:18:33 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 72515 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:07 UTC	574	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 79 74 70 2d 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 Data Ascii: eo-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthe
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 34 32 34 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e Data Ascii: b{background-color:#8e8e8e;border:1px solid #424242;border-radius:5px}.ytp-big-mode:not(.ytp-touch-mode) ::-webkit-scrollbar-thumb{border-radius:8px}.html5-video-container{z-index:10;position:relative}.ytp-embed-error .html5-video-container{display:none}.
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 34 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 36 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 Data Ascii: ansition:bottom .25s cubic-bezier(0,0,.2,1),top .25s cubic-bezier(0,0,.2,1)}.ytp-small-mode .ytp-player-content{bottom:49px}.ytp-embed .ytp-player-content{bottom:53px}.ytp-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:60px}.ytp-big-mode
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 28 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 29 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 68 69 64 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 Data Ascii: (.ytp-ad-overlay-open) .ytp-iv-player-content,.ytp-big-mode.ytp-hide-controls .ytp-iv-player-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-color:transparent;padding:0;color:inheri
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 72 69 67 68 74 3a 30 7d 2e 79 74 70 2d 67 76 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2c 2e 79 74 70 2d 67 76 6e 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 68 Data Ascii: n:column;flex-direction:column;right:0}.ytp-gvn .ytp-chrome-top,.ytp-gvn.ytp-big-mode .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:ltr}.ytp-small-mode .ytp-chrome-bottom{h
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 Data Ascii: 0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}.ytp-embed .ytp-chrome-controls .ytp-b
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 65 Data Ascii: bsolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-button-playlist)::before
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 72 65 64 2d 69 6e 64 69 63 61 74 6f 72 2c 23 66 66 61 35 30 30 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b Data Ascii: hrome-controls .ytp-button[aria-pressed]:after{background-color:var(--yt-spec-red-indicator,#ffa500)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-button[aria-pressed]:after{
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 70 61 72 74 79 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f 6e Data Ascii: ria-pressed]:after{background-color:#ddd}.ytp-color-party .ytp-chrome-controls .ytp-button[aria-pressed]:after{-webkit-animation:ytp-party-background-color .1s linear infinite;animation:ytp-party-background-color .1s linear infinite}.ytp-chrome-top-button

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50025	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	776	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 72 65 61 64 79 5f 66 6f 72 5f 75 78 61 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 25 32 32 25 33 41 25 32 32 43 4c 49 45 4e 54 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: event_type=marketing_tracker_ready_for_uxa&extra_params=%7B%22marketing_tracker_inclusion_method%22%3A%22CLIENT%22%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url%22%3A
2024-04-18 16:59:07 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cbe7b22f420742cd862f54a9c675050b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50026	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	1207	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	3326	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:07 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a66cb959dbd642fb8a88cb86e4cb29e9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50027	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	639	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: adb3881097cb404da3beba117943f9ce Connection: close
2024-04-18 16:59:07 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50029	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:07 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 40ee59a2532345af9fbda453ce68f104 Connection: close
2024-04-18 16:59:07 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50030	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	1116	OUT	GET /s/player/f92087f2/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:07 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 58775 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 14:10:01 GMT Expires: Wed, 16 Apr 2025 14:10:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 04:18:33 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 182946 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:07 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 76 67 2d 66 69 6c 6c 22 2c 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d Data Ascii: vg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d 30 2e 37 Data Ascii: ,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -0.7
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 20 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c Data Ascii: 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 29 7b 62 3d 61 3b 76 61 72 20 65 3d 64 2c 66 3d 63 5b 64 5d 3b 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 3f 62 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 66 29 3a 62 5b 65 5d 3d 66 7d 7d 7d 2c 61 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 63 3b 0a 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 64 3f 61 5b 62 5d 3d 63 3a 59 71 62 28 61 2c 62 2c 63 29 7d 2c 62 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 57 71 62 3b 0a 61 2e 5f 5f 64 65 66 61 75 6c 74 3d 61 72 62 3b 61 2e 73 74 79 6c 65 3d 24 71 62 3b 72 65 74 75 72 6e 20 61 7d 2c 63 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 64 5b 62 5d 7c 7c 64 2e 5f 5f 64 65 Data Ascii: ){b=a;var e=d,f=c[d];0<=e.indexOf("-")?b.setProperty(e,f):b[e]=f}}},arb=function(a,b,c){var d=typeof c;"object"===d\|\|"function"===d?a[b]=c:Yqb(a,b,c)},brb=function(){var a=new Wqb;a.__default=arb;a.style=$qb;return a},crb=function(a,b,c,d){(d[b]\|\|d.__de
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 3a 63 3d 28 64 3d 22 73 76 67 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3a 22 6d 61 74 68 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 38 2f 4d 61 74 68 2f 4d 61 74 68 4d 4c 22 3a 6e 75 6c 6c 3d 3d 64 7c 7c 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 65 35 28 64 29 2e 42 3f 6e 75 6c 6c 3a 64 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 29 3f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 64 2c 61 29 3a 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 66 72 62 28 63 2c 61 2c 62 29 2c 61 3d 63 29 2c 68 35 2e 63 72 65 61 74 65 64 2e 70 75 73 68 28 61 29 2c 63 3d 61 29 3b 61 3d 63 3b 69 66 28 61 21 3d 3d 6a 35 29 7b 69 66 28 30 3c 3d 6d 35 2e Data Ascii: :c=(d="svg"===a?"http://www.w3.org/2000/svg":"math"===a?"http://www.w3.org/1998/Math/MathML":null==d\|\|"foreignObject"===e5(d).B?null:d.namespaceURI)?c.createElementNS(d,a):c.createElement(a),frb(c,a,b),a=c),h5.created.push(a),c=a);a=c;if(a!==j5){if(0<=m5.
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 65 63 74 2e 69 73 28 61 2c 62 29 7d 2c 73 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6f 72 62 3b 0a 6f 72 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 2c 70 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 68 6d 3d 21 30 3b 0a 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 68 6b 29 7b 76 61 72 20 62 3d 74 35 3b 74 35 3d 21 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 67 2e 75 28 61 2e 68 6b 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 2e 68 6d 7c 7c 70 72 62 28 65 29 7d 7d 66 69 6e 61 6c 6c 79 7b 74 35 3d 62 7d 7d 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 28 66 3d 61 2e 65 57 29 7c 7c 66 2e 63 61 6c 6c 28 61 2c 61 29 7d 2c 71 72 62 3d 66 75 6e 63 74 69 Data Ascii: ect.is(a,b)},s5=function(a){var b=orb;orb=a;return b},prb=function(a){a.hm=!0;if(void 0!==a.hk){var b=t5;t5=!0;try{for(var c=g.u(a.hk),d=c.next();!d.done;d=c.next()){var e=d.value;e.hm\|\|prb(e)}}finally{t5=b}}var f;null==(f=a.eW)\|\|f.call(a,a)},qrb=functi
2024-04-18 16:59:07 UTC	1255	IN	Data Raw: 3d 7b 7d 3b 65 2e 6f 42 3d 28 61 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 72 62 28 65 29 7d 2c 61 2e 58 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 2e 50 73 29 7b 69 66 28 74 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 63 68 65 64 75 6c 65 72 73 20 63 61 6e 6e 6f 74 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 65 78 65 63 75 74 65 20 77 61 74 63 68 65 73 20 77 68 69 6c 65 20 73 63 68 65 64 75 6c 69 6e 67 2e 22 29 3b 0a 65 2e 68 6d 3d 21 31 3b 69 66 28 21 65 2e 54 58 7c 7c 75 72 62 28 65 29 29 7b 65 2e 54 58 3d 21 30 3b 76 61 72 20 66 3d 71 72 62 28 65 29 3b 74 72 79 7b 65 2e 5a 79 28 29 2c 65 2e 5a 79 3d 77 72 62 2c 65 2e 50 73 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 74 72 62 28 65 2c 66 Data Ascii: ={};e.oB=(a.notify=function(){return prb(e)},a.XF=function(){if(null!==e.Ps){if(t5)throw Error("Schedulers cannot synchronously execute watches while scheduling.");e.hm=!1;if(!e.TX\|\|urb(e)){e.TX=!0;var f=qrb(e);try{e.Zy(),e.Zy=wrb,e.Ps(d)}finally{trb(e,f
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 3d 3d 46 72 62 26 26 28 62 2e 65 44 7c 7c 28 62 2e 65 44 3d 5b 5d 29 2c 62 2e 65 44 2e 70 75 73 68 28 61 29 29 7d 2c 79 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 61 3b 0a 74 68 69 73 2e 43 3d 21 31 7d 2c 48 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 35 26 26 7a 35 2e 79 77 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 69 76 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 75 73 65 53 74 61 74 65 20 6f 72 20 6f 74 68 65 72 20 6d 65 6d 6f 69 7a 61 74 69 6f 6e 20 62 61 73 65 64 20 68 6f 6f 6b 73 2e 22 29 3b 0a 72 65 74 75 72 6e 20 41 35 7d 2c 49 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7a 35 3d 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a Data Ascii: ==Frb&&(b.eD\|\|(b.eD=[]),b.eD.push(a))},y5=function(a){this.props=a;this.C=!1},Hrb=function(){if(z5&&z5.yw)throw Error("Reactive components are not allowed to use useState or other memoization based hooks.");return A5},Irb=function(a){z5=(null==a?void 0:
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 2c 47 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 35 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 61 2c 0a 62 5d 2e 63 6f 6e 63 61 74 28 67 2e 71 61 28 67 2e 49 61 2e 61 70 70 6c 79 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 2c 48 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 46 35 3b 0a 46 35 3d 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 29 7d 66 69 6e 61 6c 6c 79 7b 46 35 3d 63 7d 7d 2c 49 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 22 29 7d 2c 4a 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 53 74 72 69 6e 67 28 61 29 29 3b 0a 61 2e 5f 69 Data Ascii: ,G5=function(a,b){return F5.apply(null,[a,b].concat(g.qa(g.Ia.apply(2,arguments))))},H5=function(a,b){var c=F5;F5=a;try{return b()}finally{F5=c}},I5=function(){return document.createTextNode("")},J5=function(a){a=document.createTextNode(String(a));a._i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50031	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:07 UTC	2168	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36399109084315?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A6%204%20-120&sdid=48460D2BB9BD3B8B-2F71EB08861286A5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14%2Cevent11%3D3%2Cevent12%3D9%2Cevent13&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com%3Ahow-it-works&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=df5943e1-a463-4b37-9a45-9029109f6174&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fhow-it-works%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=how-it-works&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:08 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:08 GMT expires: Wed, 17 Apr 2024 16:59:08 GMT last-modified: Fri, 19 Apr 2024 16:59:08 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626362542751744-4618457216401507561 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50033	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	1594	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=a3a3ae30997648f08697399d5b383709&time=1713459547 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:08 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f27c2150486e4eb7a0507b257935b6aa Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50036	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	1127	OUT	GET /s/player/f92087f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:08 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 327827 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 20:50:32 GMT Expires: Thu, 17 Apr 2025 20:50:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 04:18:33 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 72516 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:08 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 Data Ascii: ;function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 Data Ascii: h)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.call(
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 77 61 3d 73 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 71 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 77 61 29 77 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 Data Ascii: (a+" is not extensible");return a}:null}var wa=sa;function w(a,b){a.prototype=qa(b.prototype);a.prototype.constructor=a;if(wa)wa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.d
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 7a 61 28 61 2e 68 2c 67 29 2c 49 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 49 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 Data Ascii: TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.u=!1,e;var f=e.value}catch(g){return a.h.m=null,za(a.h,g),Ia(a)}a.h.m=null;d.call(a.h,f);return Ia(a)}function Ia(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.u=!1,{value:b.va
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 28 Data Ascii: turn!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.u=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if(
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 66 61 28 29 3b 74 68 69 73 2e 49 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 55 28 29 29 7b 76 61 72 20 68 3d 66 61 2e 63 6f 6e Data Ascii: 1,g)};b.prototype.D=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.fa();this.I()};b.prototype.fa=function(){var g=this;e(function(){if(g.U()){var h=fa.con
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 57 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 Data Ascii: Wb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 6b 29 3b 6e 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c 67 Data Ascii: k);n.set(l,4);return!n.has(k)&&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,g
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 28 Data Ascii: (){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50037	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	1115	OUT	GET /s/player/f92087f2/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:08 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2544526 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 08:42:58 GMT Expires: Wed, 16 Apr 2025 08:42:58 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 04:18:33 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 202570 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:08 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 62 61 2c 6f 65 2c 74 65 2c 43 62 61 2c 41 62 61 2c 42 62 61 2c 45 62 61 2c 46 62 61 2c 79 65 2c 41 65 2c 48 62 61 2c 42 65 2c 49 62 61 2c 4a 62 61 2c 4b 62 61 2c 4f 62 61 2c 4e 62 61 2c 4b 65 2c 4d 65 2c 50 62 61 2c 52 65 2c 57 65 2c 58 65 2c 51 62 61 2c 0a 24 65 2c 66 66 2c 67 66 2c 52 62 61 2c 53 62 61 2c 54 62 61 2c 55 62 61 2c 72 66 2c 77 66 2c 42 66 2c 58 62 61 2c 5a 62 61 2c 59 62 61 2c 44 66 2c 48 66 2c 24 62 61 2c 45 66 2c 52 66 2c 71 66 2c 58 66 2c 62 63 61 2c 64 67 2c 59 66 2c 70 66 2c 66 67 2c 63 63 61 2c 67 67 2c 68 67 2c 69 67 2c 64 63 61 2c 66 63 61 2c 68 63 61 2c 77 67 2c 78 67 2c 79 67 2c 6c 63 61 2c 6e 63 61 2c 41 67 2c 6f 63 61 2c 7a 67 2c 73 63 61 2c 6e 67 2c 6a 63 61 2c 75 63 61 2c 72 63 61 2c 70 63 61 2c 71 63 61 2c 76 63 61 2c 74 63 Data Ascii: ba,oe,te,Cba,Aba,Bba,Eba,Fba,ye,Ae,Hba,Be,Iba,Jba,Kba,Oba,Nba,Ke,Me,Pba,Re,We,Xe,Qba,$e,ff,gf,Rba,Sba,Tba,Uba,rf,wf,Bf,Xba,Zba,Yba,Df,Hf,$ba,Ef,Rf,qf,Xf,bca,dg,Yf,pf,fg,cca,gg,hg,ig,dca,fca,hca,wg,xg,yg,lca,nca,Ag,oca,zg,sca,ng,jca,uca,rca,pca,qca,vca,tc
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 2c 79 66 61 2c 54 6d 2c 7a 66 61 2c 56 6d 2c 41 66 61 2c 44 66 61 2c 57 6d 2c 58 6d 2c 59 6d 2c 5a 6d 2c 46 66 61 2c 63 6e 2c 47 66 61 2c 64 6e 2c 65 6e 2c 66 6e 2c 48 66 61 2c 49 66 61 2c 4b 6e 2c 4a 66 61 2c 4c 6e 2c 4d 6e 2c 4d 66 61 2c 4f 66 61 2c 50 66 61 2c 52 66 61 2c 51 66 61 2c 53 66 61 2c 4f 6e 2c 54 66 61 2c 52 6e 2c 56 6e 2c 57 6e 2c 58 6e 2c 57 66 61 2c 58 66 61 2c 59 66 61 2c 59 6e 2c 24 66 61 2c 5a 6e 2c 61 67 61 2c 63 67 61 2c 66 67 61 2c 65 67 61 2c 64 67 61 2c 69 67 61 2c 67 67 61 2c 61 6f 2c 63 6f 2c 6a 67 61 2c 65 6f 2c 66 6f 2c 62 6f 2c 67 6f 2c 68 6f 2c 69 6f 2c 6b 6f 2c 6b 67 61 2c 6c 6f 2c 6d 6f 2c 6d 67 61 2c 6c 67 61 2c 6e 67 61 2c 6f 67 61 2c 70 67 61 2c 72 67 61 2c 6e 6f 2c 6f 6f 2c 70 6f 2c 71 6f 2c 72 6f 2c 73 6f 2c 74 6f 2c Data Ascii: ,yfa,Tm,zfa,Vm,Afa,Dfa,Wm,Xm,Ym,Zm,Ffa,cn,Gfa,dn,en,fn,Hfa,Ifa,Kn,Jfa,Ln,Mn,Mfa,Ofa,Pfa,Rfa,Qfa,Sfa,On,Tfa,Rn,Vn,Wn,Xn,Wfa,Xfa,Yfa,Yn,$fa,Zn,aga,cga,fga,ega,dga,iga,gga,ao,co,jga,eo,fo,bo,go,ho,io,ko,kga,lo,mo,mga,lga,nga,oga,pga,rga,no,oo,po,qo,ro,so,to,
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 74 6a 61 2c 78 6a 61 2c 41 6a 61 2c 7a 6a 61 2c 58 74 2c 42 6a 61 2c 43 6a 61 2c 44 6a 61 2c 46 6a 61 2c 45 6a 61 2c 47 6a 61 2c 59 74 2c 48 6a 61 2c 49 6a 61 2c 24 74 2c 4a 6a 61 2c 4b 6a 61 2c 4c 6a 61 2c 4d 6a 61 2c 61 75 2c 4e 6a 61 2c 62 75 2c 4f 6a 61 2c 63 75 2c 64 75 2c 0a 51 6a 61 2c 65 75 2c 52 6a 61 2c 66 75 2c 67 75 2c 53 6a 61 2c 54 6a 61 2c 68 75 2c 6a 75 2c 56 6a 61 2c 6b 75 2c 55 6a 61 2c 57 6a 61 2c 58 6a 61 2c 59 6a 61 2c 24 6a 61 2c 6c 75 2c 61 6b 61 2c 6f 75 2c 70 75 2c 63 6b 61 2c 64 6b 61 2c 67 6b 61 2c 68 6b 61 2c 71 75 2c 72 75 2c 74 75 2c 75 75 2c 76 75 2c 77 75 2c 78 75 2c 79 75 2c 7a 75 2c 41 75 2c 42 75 2c 43 75 2c 44 75 2c 6c 6b 61 2c 6b 6b 61 2c 6d 6b 61 2c 6f 6b 61 2c 6e 6b 61 2c 71 6b 61 2c 6a 6b 61 2c 70 6b 61 2c 69 6b 61 Data Ascii: tja,xja,Aja,zja,Xt,Bja,Cja,Dja,Fja,Eja,Gja,Yt,Hja,Ija,$t,Jja,Kja,Lja,Mja,au,Nja,bu,Oja,cu,du,Qja,eu,Rja,fu,gu,Sja,Tja,hu,ju,Vja,ku,Uja,Wja,Xja,Yja,$ja,lu,aka,ou,pu,cka,dka,gka,hka,qu,ru,tu,uu,vu,wu,xu,yu,zu,Au,Bu,Cu,Du,lka,kka,mka,oka,nka,qka,jka,pka,ika
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 64 6e 61 2c 67 7a 2c 68 7a 2c 65 6e 61 2c 69 7a 2c 66 6e 61 2c 6a 7a 2c 67 6e 61 2c 68 6e 61 2c 69 6e 61 2c 6b 7a 2c 6a 6e 61 2c 6c 7a 2c 6d 7a 2c 6e 7a 2c 6b 6e 61 2c 6f 7a 2c 6c 6e 61 2c 70 7a 2c 71 7a 2c 72 7a 2c 73 7a 2c 76 7a 2c 77 7a 2c 78 7a 2c 6d 6e 61 2c 79 7a 2c 7a 7a 2c 41 7a 2c 6e 6e 61 2c 42 7a 2c 43 7a 2c 44 7a 2c 45 7a 2c 6f 6e 61 2c 46 7a 2c 47 7a 2c 48 7a 2c 49 7a 2c 4a 7a 2c 70 6e 61 2c 4b 7a 2c 71 6e 61 2c 4c 7a 2c 72 6e 61 2c 73 6e 61 2c 4d 7a 2c 4e 7a 2c 74 6e 61 2c 4f 7a 2c 50 7a 2c 51 7a 2c 75 6e 61 2c 76 6e 61 2c 77 6e 61 2c 78 6e 61 2c 52 7a 2c 53 7a 2c 79 6e 61 2c 54 7a 2c 7a 6e 61 2c 41 6e 61 2c 42 6e 61 2c 43 6e 61 2c 44 6e 61 2c 55 7a 2c 56 7a 2c 45 6e 61 2c 46 6e 61 2c 57 7a 2c 58 7a 2c 47 6e 61 2c 59 7a 2c 48 6e 61 2c 49 6e Data Ascii: dna,gz,hz,ena,iz,fna,jz,gna,hna,ina,kz,jna,lz,mz,nz,kna,oz,lna,pz,qz,rz,sz,vz,wz,xz,mna,yz,zz,Az,nna,Bz,Cz,Dz,Ez,ona,Fz,Gz,Hz,Iz,Jz,pna,Kz,qna,Lz,rna,sna,Mz,Nz,tna,Oz,Pz,Qz,una,vna,wna,xna,Rz,Sz,yna,Tz,zna,Ana,Bna,Cna,Dna,Uz,Vz,Ena,Fna,Wz,Xz,Gna,Yz,Hna,In
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 2c 48 72 61 2c 49 72 61 2c 4b 72 61 2c 4a 72 61 2c 63 44 2c 45 72 61 2c 4e 72 61 2c 4f 72 61 2c 68 44 2c 4d 72 61 2c 50 72 61 2c 51 72 61 2c 69 44 2c 6a 44 2c 52 72 61 2c 54 72 61 2c 6c 44 2c 55 72 61 2c 56 72 61 2c 58 72 61 2c 5a 72 61 2c 6f 44 2c 24 72 61 2c 61 73 61 2c 62 73 61 2c 63 73 61 2c 0a 64 73 61 2c 65 73 61 2c 66 73 61 2c 67 73 61 2c 71 44 2c 68 73 61 2c 73 44 2c 6a 73 61 2c 6b 73 61 2c 6c 73 61 2c 6d 73 61 2c 6e 73 61 2c 6f 73 61 2c 78 44 2c 72 73 61 2c 75 73 61 2c 79 44 2c 76 73 61 2c 78 73 61 2c 71 73 61 2c 79 73 61 2c 7a 73 61 2c 41 73 61 2c 73 73 61 2c 74 73 61 2c 74 44 2c 70 73 61 2c 77 44 2c 77 73 61 2c 76 44 2c 75 44 2c 42 73 61 2c 43 73 61 2c 44 73 61 2c 45 73 61 2c 46 73 61 2c 47 73 61 2c 4d 73 61 2c 48 73 61 2c 42 44 2c 43 44 2c 44 Data Ascii: ,Hra,Ira,Kra,Jra,cD,Era,Nra,Ora,hD,Mra,Pra,Qra,iD,jD,Rra,Tra,lD,Ura,Vra,Xra,Zra,oD,$ra,asa,bsa,csa,dsa,esa,fsa,gsa,qD,hsa,sD,jsa,ksa,lsa,msa,nsa,osa,xD,rsa,usa,yD,vsa,xsa,qsa,ysa,zsa,Asa,ssa,tsa,tD,psa,wD,wsa,vD,uD,Bsa,Csa,Dsa,Esa,Fsa,Gsa,Msa,Hsa,BD,CD,D
2024-04-18 16:59:08 UTC	1255	IN	Data Raw: 54 78 61 2c 55 78 61 2c 53 78 61 2c 56 78 61 2c 68 47 2c 6b 47 2c 6d 47 2c 58 78 61 2c 57 78 61 2c 6f 47 2c 59 78 61 2c 5a 78 61 2c 70 47 2c 71 47 2c 72 47 2c 73 47 2c 42 47 2c 61 79 61 2c 43 47 2c 44 47 2c 45 47 2c 46 47 2c 62 79 61 2c 63 79 61 2c 49 47 2c 64 79 61 2c 4a 47 2c 67 79 61 2c 69 79 61 2c 6b 79 61 2c 6d 79 61 2c 6f 79 61 2c 71 79 61 2c 4c 47 2c 72 79 61 2c 4d 47 2c 73 79 61 2c 76 79 61 2c 77 79 61 2c 78 79 61 2c 4f 47 2c 50 47 2c 7a 79 61 2c 41 79 61 2c 52 47 2c 53 47 2c 54 47 2c 43 79 61 2c 55 47 2c 56 47 2c 57 47 2c 44 79 61 2c 58 47 2c 42 79 61 2c 45 79 61 2c 59 47 2c 47 79 61 2c 46 79 61 2c 5a 47 2c 49 79 61 2c 24 47 2c 61 48 2c 63 48 2c 4a 79 61 2c 4b 79 61 2c 65 48 2c 66 48 2c 68 48 2c 74 48 2c 73 48 2c 4d 79 61 2c 67 48 2c 50 79 61 2c Data Ascii: Txa,Uxa,Sxa,Vxa,hG,kG,mG,Xxa,Wxa,oG,Yxa,Zxa,pG,qG,rG,sG,BG,aya,CG,DG,EG,FG,bya,cya,IG,dya,JG,gya,iya,kya,mya,oya,qya,LG,rya,MG,sya,vya,wya,xya,OG,PG,zya,Aya,RG,SG,TG,Cya,UG,VG,WG,Dya,XG,Bya,Eya,YG,Gya,Fya,ZG,Iya,$G,aH,cH,Jya,Kya,eH,fH,hH,tH,sH,Mya,gH,Pya,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50035	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:08 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4600f3b4aee6408fa3d3b1ff60372d47 Connection: close
2024-04-18 16:59:08 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50034	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	1462	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:08 UTC	1137	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:08 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:08 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:08 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bec03cb19f2840fc8b31833889a6cfb5 Connection: close
2024-04-18 16:59:08 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50039	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	1927	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36399109084315?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A6%204%20-120&sdid=48460D2BB9BD3B8B-2F71EB08861286A5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14%2Cevent11%3D3%2Cevent12%3D9%2Cevent13&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2F&h2=marketing.docsend.com%3Ahow-it-works&c3=marketing.docsend.com%7Chome&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chome&v11=New%20Visitor&c12=df5943e1-a463-4b37-9a45-9029109f6174&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fhow-it-works%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=how-it-works&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:08 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:08 GMT expires: Wed, 17 Apr 2024 16:59:08 GMT last-modified: Fri, 19 Apr 2024 16:59:08 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626362170441728-4618418286816710676 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50038	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	639	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:08 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2056ae11ef2b4bd9855a81db3615a3b6 Connection: close
2024-04-18 16:59:08 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50041	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:08 UTC	780	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 35 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 35 30 30 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A5%2C%22time_on_page_ms%22%3A5002%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url%2
2024-04-18 16:59:09 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:09 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:09 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:09 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a86f472415c3485ca575fe55b8f46304 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50042	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:08 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:09 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cb024faf8a4445fd832bd800e2f5ec2c Connection: close
2024-04-18 16:59:09 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50043	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	1485	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:09 UTC	3035	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:09 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:09 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:09 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 32e4d194cdd0462e875038f3d30b6f89 Connection: close
2024-04-18 16:59:09 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50044	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	1066	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s39880090925491?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A7%204%20-120&sdid=42976C63264AA87C-16E601D8DA92C8B0&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=487&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:09 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:09 GMT expires: Wed, 17 Apr 2024 16:59:09 GMT last-modified: Fri, 19 Apr 2024 16:59:09 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626363223605248-4618446416243393917 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50045	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:09 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:09 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 30e107c7a70c44789928c3070bc841ef Connection: close
2024-04-18 16:59:09 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50046	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	1117	OUT	GET /s/player/f92087f2/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:09 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120953 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 19:32:18 GMT Expires: Wed, 16 Apr 2025 19:32:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 04:18:33 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 163611 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:09 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 45 70 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 3b 0a 65 6c 73 65 20 66 6f 72 28 61 3d 49 41 62 28 61 29 3b 3b 29 7b 76 61 72 20 64 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 64 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 62 2e 63 61 6c 6c 28 63 2c 64 2e 76 61 6c 75 65 2c 76 6f 69 64 20 30 2c 61 29 7d 7d 2c 4b 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 0a 4a 41 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 4f 76 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 3f Data Ascii: ;else for(a=IAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},KAb=function(a,b){var c=[];JAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 72 6e 20 51 41 62 28 61 29 7d 2c 52 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 70 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6d 29 72 65 74 75 72 6e 20 61 2e 70 6d 28 29 3b 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 76 61 6c 75 65 73 28 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 22 29 3b 69 66 28 67 2e 61 62 28 61 29 29 7b 66 6f 72 28 76 61 Data Ascii: rn QAb(a)},RAb=function(a){if(a.pm&&"function"==typeof a.pm)return a.pm();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(g.ab(a)){for(va
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 7b 4f 63 3a 33 2c 4e 63 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 59 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 4f 69 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 62 29 7d 2c 5a 41 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 64 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4f 68 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 6d 65 Data Ascii: ient_streamz/youtube/living_room/mdx/channel/closed",{Oc:3,Nc:"channel_type"})},YAb=function(a,b){a.j.Oi("/client_streamz/youtube/living_room/mdx/channel/closed",b)},ZAb=function(){this.j=d8();this.j.Oh("/client_streamz/youtube/living_room/mdx/channel/me
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e 61 70 70 2c 74 68 69 73 2e 74 79 70 65 3d 61 2e 74 79 70 65 7c 7c 22 52 45 4d 4f 54 45 5f 43 4f 4e 54 52 4f 4c 22 2c 74 68 69 73 2e 75 73 65 72 6e 61 6d 65 3d 61 2e 75 73 65 72 7c 7c 22 22 2c 74 68 69 73 2e 61 76 61 74 61 72 3d 61 2e 75 73 65 72 41 76 61 74 61 72 55 72 69 7c 7c 22 22 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 61 2e 6f 62 Data Ascii: N";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.app,this.type=a.type\|\|"REMOTE_CONTROL",this.username=a.user\|\|"",this.avatar=a.userAvatarUri\|\|"",this.obfuscatedGaiaId=a.ob
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 65 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 Data Ascii: Bb=function(a,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},e8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.s
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 29 7c 7c 5b 5d 3b 0a 67 2e 57 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 2c 73 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 30 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 2d 31 3d 3d 62 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 51 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 74 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 70 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d Data Ascii: mote-connected-devices")\|\|[];g.Wb(a);return a},sBb=function(a){if(0==a.length)return[];var b=a[0].indexOf("#"),c=-1==b?a[0]:a[0].substring(0,b);return g.Qr(a,function(d,e){return 0==e?d:d.substring(c.length)})},tBb=function(a){g.pC("yt-remote-connected-
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 0a 72 65 74 75 72 6e 20 6c 38 3f 21 21 6c 38 2e 67 65 74 28 22 79 74 2d 72 65 6d 6f 74 65 2d 75 73 65 2d 73 74 61 67 69 6e 67 2d 73 65 72 76 65 72 22 29 3a 21 31 7d 2c 6d 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 63 45 5b 61 5d 3d 21 30 3b 0a 76 61 72 20 63 3d 67 2e 61 45 28 29 3b 63 26 26 63 2e 70 75 62 6c 69 73 68 2e 61 70 70 6c 79 28 63 2c 61 72 67 75 6d 65 6e 74 73 29 3b 67 2e 63 45 5b 61 5d 3d 21 31 7d 2c 43 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6e 38 29 7b 6e 38 3d 6e 65 77 20 67 2e 46 67 28 6e 65 77 20 43 42 62 29 3b 0a 76 61 72 20 61 3d 67 2e 76 42 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 2d 31 21 3d Data Ascii: return l8?!!l8.get("yt-remote-use-staging-server"):!1},m8=function(a,b){g.cE[a]=!0;var c=g.aE();c&&c.publish.apply(c,arguments);g.cE[a]=!1},CBb=function(){},d8=function(){if(!n8){n8=new g.Fg(new CBb);var a=g.vB("client_streamz_web_flush_count",-1);-1!=
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 6f 6e 47 43 61 73 74 41 70 69 41 76 61 69 6c 61 62 6c 65 3d 63 3b 47 42 62 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 61 73 74 2f 73 64 6b 2f 6c 69 62 73 2f 73 65 6e 64 65 72 2f 31 2e 30 2f 63 61 73 74 5f 66 72 61 6d 65 77 6f 72 6b 2e 6a 73 22 2c 48 42 62 2c 63 29 7d 7d 2c 4d 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 42 62 28 29 3b 0a 76 61 72 20 61 3d 4a 42 62 28 29 3b 61 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 3b 6f 38 28 61 29 7d 2c 4f 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 42 62 28 29 3b 0a 76 61 72 20 61 3d 4a 42 62 28 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 67 2e 71 61 28 4e 42 62 2e 6d 61 Data Ascii: onGCastApiAvailable=c;GBb("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",HBb,c)}},MBb=function(){LBb();var a=JBb();a.push("//www.gstatic.com/eureka/clank/cast_sender.js");o8(a)},OBb=function(){LBb();var a=JBb();a.push.apply(a,g.qa(NBb.ma
2024-04-18 16:59:09 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 67 2e 54 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 7d 2c 62 29 7d 2c 76 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 47 3d 61 3b 0a 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 75 63 3d 63 3b 74 68 69 73 2e 61 63 3d 64 7c 7c 31 3b 74 68 69 73 2e 5a 61 3d 6e 65 77 20 67 2e 4a 70 28 74 68 69 73 29 3b 74 68 69 73 2e 77 62 3d 34 35 45 33 3b 61 3d 67 2e 63 53 3f 31 32 35 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 62 3d 6e 65 77 20 67 2e 43 67 28 61 29 3b 74 68 69 73 2e 4d 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 43 3d 21 31 3b 74 68 69 73 2e 59 3d 74 68 69 73 2e 59 61 3d 74 68 69 73 2e 5a 3d 74 68 69 73 2e 51 61 3d 74 68 69 73 2e 42 Data Ascii: return g.Ta.setTimeout(function(){a()},b)},v8=function(){},w8=function(a,b,c,d){this.G=a;this.D=b;this.uc=c;this.ac=d\|\|1;this.Za=new g.Jp(this);this.wb=45E3;a=g.cS?125:void 0;this.eb=new g.Cg(a);this.Ma=null;this.C=!1;this.Y=this.Ya=this.Z=this.Qa=this.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50048	142.250.105.149	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	972	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:09 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 16:52:03 GMT Expires: Thu, 18 Apr 2024 17:07:03 GMT Cache-Control: public, max-age=900 Age: 426 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:09 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50047	173.194.219.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	994	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:09 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Thu, 18 Apr 2024 16:59:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50032	172.253.124.119	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	1038	OUT	GET /vi_webp/pgLV0NmWnJ4/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 20608 Date: Thu, 18 Apr 2024 16:59:10 GMT Expires: Thu, 18 Apr 2024 18:59:10 GMT Cache-Control: public, max-age=7200 ETag: "1650324015" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:10 UTC	632	IN	Data Raw: 52 49 46 46 78 50 00 00 57 45 42 50 56 50 38 20 6c 50 00 00 30 07 02 9d 01 2a 00 05 d0 02 3e 6d 36 97 49 24 23 25 28 a2 51 58 d1 10 0d 89 67 6e e1 75 3e a2 7a 51 e2 6d 2d c9 47 f6 7d e7 5f d3 c8 ff 71 fd c1 fe f3 ef f3 61 fe f1 fd d7 fc 77 fa af ee df b7 ff 7c 5f d1 f2 4f b5 7c d7 7c e7 f6 5f fa df e0 bf 27 3e 6a 7f a3 ff b3 fe 47 dd 0f e8 2f fb ff 9f ff 40 9f a8 ff ef bf c2 ff 80 fd 9a f8 da fd 80 f7 89 fb c1 ea 3b fa b7 fa 2f dc 1f 77 9f f7 5f b4 7e f7 ff b6 ff c8 fd a3 f8 16 fe c1 fe 5f ff 47 fc ce d5 ff 42 ef de 0f 57 6f fc 3f ba 9f 0f 9f b6 bf ba 9f 03 df af bf fe fb 3c fa 4d fd 07 fc a7 fa df 52 3e 36 fe 9b fc 3f ee 37 f7 df 58 fc ba fa 5f f7 9f dc 6f f0 3f 3f bf a2 e7 0e d4 3f 94 fd f5 fd f7 f7 1f dd 3f 8d 5f dd ff d1 f0 bf e6 9f fa ff e3 3d 82 3f Data Ascii: RIFFxPWEBPVP8 lP0*>m6I$#%(QXgnu>zQm-G}_qaw\|_O\|\|_'>jG/@;/w_~_GBWo?<MR>6?7X_o????_=?
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: f1 b0 b0 4c 6b a8 53 df b5 46 eb 57 8b 86 d5 ea 51 1e 50 bb a1 9f 82 f9 57 d5 99 1a 27 8e 6b b8 24 54 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba ae 74 5c 30 0e 22 3a 18 83 d9 dc 98 86 99 da 31 ca 49 e1 08 0e 23 ae ad 2e 95 53 4f f6 c9 47 b1 6d 02 6b 74 ac 34 5a fc 65 07 e0 60 50 e9 9d 77 01 ea 96 97 74 34 cf 86 96 97 74 34 cf 86 96 97 74 34 cf 86 93 93 59 ab 1f a8 03 70 84 f8 65 4e f7 9c d8 48 e4 21 71 b0 31 22 7b 8d 75 23 a9 28 7f 2c ab a0 e2 3f 01 c1 73 43 df 66 de 34 b4 95 a7 85 d4 44 83 c5 70 ae 6a 85 dd 0d 33 e1 a5 a5 dd 0d 33 e1 a5 a5 dd 0d 33 e1 a5 a5 dd 0d 33 90 2f e7 0c ca 29 aa d9 2e 35 88 d9 67 f5 b5 d0 5d bb 84 ed df 2b 7c 5f 40 a5 06 16 06 57 ff 48 ca e9 f1 c7 c0 82 a6 71 7c 8c e1 ff 5f 43 24 0c 85 0c 90 85 fa c5 17 bb ed Data Ascii: LkSFWQPW'k$Tt\0":1I#.SOGmkt4Ze`Pwt4t4t4YpeNH!q1"{u#(,?sCf4Dpj3333/).5g]+\|_@WHq\|_C$
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 7c c7 ea 9f 2a c3 12 22 ad 13 3b ef 56 ea 20 51 21 f7 e0 26 3f 3a 38 29 e9 66 b3 41 e1 a5 a8 da 93 90 57 56 1a 3a 93 90 57 56 1a 3a 93 90 57 52 6a 98 fc 6d 4f b7 fc 91 e4 8c 94 7d a8 1a a6 3e 94 02 13 40 2e b2 d9 04 a1 14 76 f0 b5 cf e8 11 42 ff 16 f9 ef fa 20 e8 85 f3 3b e7 15 65 75 30 46 54 3c 05 6a 0d 3e 10 d3 d5 4f 50 e4 d3 86 3c a1 86 04 e4 15 d5 86 8e a4 e4 15 d5 86 8e a4 e4 15 d5 79 59 8c 3c 8c 28 86 85 55 90 0a b2 2c 73 c6 d2 29 d5 87 b5 b7 51 9a 5c c7 f7 3e b7 d3 e0 4a bf fc 79 db e7 c7 5f 74 c6 01 ee 43 65 7d f3 53 d6 58 4e e8 91 c0 68 46 36 fe f2 1c ef 70 24 60 d2 3a c7 1e ee 43 8c 0a 3c 06 67 2f 01 da 33 19 23 96 68 ed 2b e3 2f 0d 2f a4 69 9f 90 b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 89 65 29 71 36 94 c6 3e bb 7c 5e 6d bd 0d 87 aa 5b Data Ascii: \|*";V Q!&?:8)fAWV:WV:WRjmO}>@.vB ;eu0FT<j>OP<yY<(U,s)Q\>Jy_tCe}SXNhF6p$`:C<g/3#h+//ie)q6>\|^m[
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 30 49 d0 8c 27 0e 3d 05 bd 31 b8 a7 a8 66 94 cf eb 4e 39 fc 48 79 ba 9b c8 20 ad a7 38 95 ca 97 f6 48 47 fd 20 3d 52 ea bf bd e7 ee d4 01 ae c1 e3 92 d9 17 3b 7d 6c 9a bc 26 ea bc dd 35 0f 54 b4 bb a1 a6 7c 34 b4 bc bf b4 68 f6 92 de 28 35 41 f6 40 8b cc 9a 2c f1 1c 98 1c 9c 2a f0 32 a4 8b a0 d7 da d3 69 6e f5 3d 67 6d dd f0 6f 7b c6 ba 6a 8f a5 9d 6e c3 09 cf d3 8a 34 7a 3a 3a ff 49 ac cc a5 27 f8 9f 63 56 ce 56 b6 90 5c bb cf 87 c5 d8 69 9f ae 62 c7 d3 a9 39 05 75 61 a3 a9 39 05 75 61 a3 a9 39 05 75 61 a3 ad d3 58 94 00 9a fc 7a e1 ff 8a 94 41 80 60 a6 ac d6 8b a7 46 5a 82 04 0a 97 4b 0f bc 41 eb 60 96 8d 47 a1 7e 35 ce 98 39 fd cc fc fd 94 2e e8 ae 2b 94 2e e8 69 9f 0d 2d 2e e8 69 9f 0d 2d 2e e8 69 9f 0d 2d 2e e8 c5 e8 c4 05 ae ea 10 6f 3a 85 08 d2 90 Data Ascii: 0I'=1fN9Hy 8HG =R;}l&5T\|4h(5A@,*2in=gmo{jn4z::I'cVV\ib9ua9ua9uaXzA`FZKA`G~59.+.i-.i-.i-.o:
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d9 54 66 b1 b0 3f 6f 11 a0 fd 1d 5f 54 00 00 04 3f da 14 f0 0d ed 83 4c f6 a6 b5 2e be b9 6d 62 dc 87 2c ac 76 21 28 96 82 64 1e c5 be be 25 f1 c4 25 8e 97 b7 43 bb 25 4e 8a 78 af 0e 79 cf 3f e1 77 c8 63 90 aa ff 23 b2 91 fd 75 c4 34 25 b6 85 70 37 ad c0 ff 81 1c 66 36 23 78 29 7d 58 68 3b 8c 96 20 d4 bf 5e aa 6f 6f a9 16 db 7e c6 c4 82 b7 76 90 36 f1 cc 91 a0 28 fb a5 07 11 07 76 13 19 94 da 5c 6d 29 49 37 64 1a 1b af 5c e3 33 09 62 6c 08 dc 02 d4 93 c0 e3 d7 9f 88 6a 04 6b ec 4b 3d c9 17 0e 5d ff f8 aa 09 e1 92 11 5d 74 05 65 56 f2 02 d8 7d 10 23 54 71 b9 8b 8f 02 48 b8 98 4e 82 35 84 6c c7 b9 93 75 13 a7 5c 6b b3 f3 88 d8 5b 0c 14 e8 46 6e 4d c4 e3 fa 3d fa 0f c8 48 d6 de b4 c2 9a 0e 65 ae 3e 5c 13 90 54 86 f2 d3 05 b4 b3 ec 3e 04 8b 12 1f 7c 49 58 e4 Data Ascii: Tf?o_T?L.mb,v!(d%%C%Nxy?wc#u4%p7f6#x)}Xh; ^oo~v6(v\m)I7d\3bljkK=]]teV}#TqHN5lu\k[FnM=He>\T>\|IX
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: df 01 22 09 e4 22 32 c4 30 7c e3 9b ef 1e ed e5 54 51 fd df e9 e8 4b d2 a4 15 7f 87 dd 3d 89 8f b6 49 fb f3 ac fb a5 2b cb 34 d6 d8 db b9 6d 1e d4 5c 0f d6 55 e7 1c 2d c7 23 6f 62 ba 38 82 5e a7 61 e8 86 ee 40 61 57 e2 79 f0 72 9d 9d cf 32 56 d7 94 f9 c2 24 25 73 5e ef ce e7 8c db 93 44 40 1e 68 39 7e 00 fa 1b 69 94 88 fb 26 0f 5c 93 88 31 16 55 4e 67 43 80 00 08 ae 89 88 e9 7b 9e c1 57 bf 67 8e a1 16 b2 39 84 1d 83 86 1d 5c 1e 5c 9c 78 ca 66 f1 fe 7a 15 77 14 6c af b5 1a 09 2c bf 0a a6 f4 65 c5 31 2e d1 b4 b7 20 8a b8 8f 61 f9 ff 51 00 13 23 02 7d a5 f1 7a dc 1d 43 a4 36 13 6c 19 2d 9b 6a 5d 79 d3 bb 88 d1 d4 76 3b 31 3b 82 01 da 22 97 c4 c5 9e 60 45 8f 8b f3 a5 8c a4 2b 08 f3 04 06 b9 ae 9b 4f 97 b3 ce 7e a5 29 d1 c2 fc 26 fe c7 81 f0 e6 4b a5 55 99 dd Data Ascii: ""20\|TQK=I+4m\U-#ob8^a@aWyr2V$%s^D@h9~i&\1UNgC{Wg9\\xfzwl,e1. aQ#}zC6l-j]yv;1;"`E+O~)&KU
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d6 bc 66 a5 c7 07 93 fe 19 5a bd c3 c5 11 b6 87 b9 aa 03 b1 77 e1 4b a3 0d 26 81 2c 8a 51 c4 15 66 05 bc 8f 95 91 fc 0b 08 df 40 99 68 77 8c 7b 5f c5 ad 6b b3 01 74 e1 50 dd 7f c5 b5 e3 00 e9 64 4e 86 76 bc 25 2e b0 69 ac 24 61 1b 68 6c b9 ce e9 25 1e ba b7 ac ac 98 07 fe 69 f5 c5 e9 4d c0 b8 54 0a 47 da 13 3e bb d4 2b 4e 9e d5 31 c6 77 37 5e 50 8a a0 89 a7 45 bf 33 0b ef bc 66 49 03 57 07 ea c7 54 0a b4 be c9 6f ea a7 df f3 96 e9 87 f2 81 a6 8e d2 77 3a 6b e8 87 fe 3d 60 c6 46 2b f8 8c d3 5d a8 00 0a c1 e1 d4 a5 4a 1c 11 1f a0 ea b6 e0 53 e2 80 55 a2 c6 73 de 6d f7 d0 0a b4 97 bc 9a 25 83 4a a2 e8 ea 0a 7f 63 47 19 38 48 6b 47 32 45 87 cf 19 6b 22 9f 67 7b 2c d7 32 e7 93 b3 b9 dc af db a4 cb 1c 6b a9 d3 f8 c4 1a 16 04 64 08 25 0b 01 7e f3 72 02 6c 37 f6 Data Ascii: fZwK&,Qf@hw{_ktPdNv%.i$ahl%iMTG>+N1w7^PE3fIWTow:k=`F+]JSUsm%JcG8HkG2Ek"g{,2kd%~rl7
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d4 2f 30 7e 37 90 6e 11 8f ee 63 f8 f3 a3 6e a4 06 2b db b2 61 b1 26 0f ff 1e 79 f8 96 d3 8a 7f 8d 2a 84 5f 38 71 ee cf c5 9f 3c b7 d5 3e 9a 41 04 c4 98 09 ee a2 2f d8 00 a6 20 40 5a 5e 35 94 c8 bc 6f eb 4f d9 66 b5 9b cd 61 78 8c ea 44 14 2f 4b 25 fa d5 cb af 4d ad 64 7d 01 8e ed 82 e4 d0 54 7e d8 45 af 8b 84 81 13 83 18 2a 5a e5 4e 85 32 d2 dd 00 80 28 00 01 85 48 3f f3 ee d9 b9 95 c2 c3 19 a3 1b f9 44 ca 76 e2 b2 b6 1d 7b ad e3 44 46 f2 2b f2 39 59 7d f5 6a e2 00 8d 1f 77 a6 e9 8a ff 30 dd 53 2d 8f 9a 69 3d 17 21 5f 3a 7e c1 0d 97 de 27 1f 8b a8 21 df 61 d3 4b 80 45 2b 93 0e de 6b 3d f2 e6 96 09 21 95 16 98 8a 2d 4c 6c 58 b2 cd 26 85 83 f7 74 83 48 b2 91 84 f7 b3 65 fb 5d 64 25 c9 8e 91 ef 10 29 6d ec d2 4c fc 40 41 c1 e3 bd 4d c6 85 e9 fa 8a 7b 02 98 Data Ascii: /0~7ncn+a&y_8q<>A/ @Z^5oOfaxD/K%Md}T~EZN2(H?Dv{DF+9Y}jw0S-i=!_:~'!aKE+k=!-LlX&tHe]d%)mL@AM{
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: cd f8 7d a2 f9 21 1e d0 25 73 e7 07 58 b9 16 1c 47 2f d0 2d a7 12 03 b5 7b 66 f5 1f 45 18 2f ea f2 77 bb 04 6e 0d 68 ba 30 f7 9c 52 db b8 ea 34 cd 61 b0 91 cb b9 86 6d 28 b2 29 2d b8 2c 22 ac cf 1d 5b 84 49 4d 79 73 9c 70 8f 83 31 9d b3 94 97 4f be 97 90 54 38 9d 8e c0 e9 15 7c 20 62 ce 3b a7 94 84 78 53 eb 32 d4 9b 77 1c 3e ef dc 6e bb 0d 27 7d c9 78 bb 25 40 01 7c 2f f2 4e 89 6e bd 6b 80 d9 7d 59 c4 19 90 50 7d 30 81 bb 00 66 a5 67 eb bb b7 4f 5a 13 f4 c5 7c df 30 82 e5 14 8f e0 2d 5e 36 70 1b 36 55 ef 01 01 72 f5 2e bb a7 3b 5e 3b 36 03 39 4b 76 f2 8c 8b fa 55 e8 41 7e 64 0f 6b ac e6 d9 5a 42 fd de 83 0a 3f 38 b7 ab 1c d4 d9 20 3b 4e a1 d0 0e b5 1e 06 55 21 67 29 f9 fc c5 e4 74 2e aa 64 5a e7 61 ce c8 18 ed 93 2d ea 09 44 31 9a 84 a5 30 06 c7 79 c7 2a Data Ascii: }!%sXG/-{fE/wnh0R4am()-,"[IMysp1OT8\| b;xS2w>n'}x%@\|/Nnk}YP}0fgOZ\|0-^6p6Ur.;^;69KvUA~dkZB?8 ;NU!g)t.dZa-D10y*
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: f2 ee 87 56 47 81 df 94 44 cc 43 4f 9c f9 d0 d0 10 a7 e4 bd 15 a6 e7 d5 e3 82 14 34 79 8c fe 5e ad 79 c8 0e 24 67 c7 ad a5 87 17 53 29 e0 05 c9 a4 57 4f 8f 73 01 7b e1 5e d4 9d e8 e7 83 0e 27 70 00 26 1a 2b e6 5c 67 2c ce 4a e5 26 eb 8e 55 89 53 ac bc 36 35 40 2f 36 73 26 88 9f 49 6b 83 4d 5e 5b 42 dd 18 9b 88 f2 0e e6 50 4a 60 88 56 1d 91 e1 cb c3 9a 69 e5 e8 a7 95 c3 a7 3a eb e7 95 06 6c 56 01 b2 d9 54 45 21 67 70 c7 4e 2a b3 11 be 27 5b aa ee 24 59 71 a6 6a 73 5f 48 5d 2c de ff 66 1a 52 36 ca ae 8f ad 94 81 2c f2 94 38 88 d6 da 08 12 aa 70 8d 02 1a 20 8e 64 6b 60 fa d6 c9 4a a4 17 23 86 e0 4c 10 4f 88 8c cc 51 a7 a2 5d 26 fe 54 e1 a0 67 b9 cc e5 4a 36 c7 70 05 0a 6d 91 84 05 8d 5e b0 1b 8a 75 99 15 23 61 c8 26 ff 27 94 e6 1b e9 ab ef d1 c5 98 26 e9 ed Data Ascii: VGDCO4y^y$gS)WOs{^'p&+\g,J&US65@/6s&IkM^[BPJ`Vi:lVTE!gpN*'[$Yqjs_H],fR6,8p dk`J#LOQ]&TgJ6pm^u#a&'&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50050	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	1560	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:10 UTC	3325	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:10 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:10 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:10 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:09 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bbe7a334e7c94a98aee61c37158c7f7d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50051	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:10 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:09 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ff1fa3f5a7d84943b6e8fb12b42c19e4 Connection: close
2024-04-18 16:59:10 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50052	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:09 UTC	825	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s39880090925491?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A7%204%20-120&sdid=42976C63264AA87C-16E601D8DA92C8B0&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=487&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:10 GMT expires: Wed, 17 Apr 2024 16:59:10 GMT last-modified: Fri, 19 Apr 2024 16:59:10 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626366707204096-4618537563161328357 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50053	173.194.219.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	1003	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:10 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 7a 4a 53 67 74 46 45 4d 78 5a 61 6e 44 30 55 63 56 63 4e 4c 50 76 32 48 37 49 51 36 37 6d 78 4c 37 67 55 4a 72 31 72 5a 58 39 61 62 6e 55 47 65 52 67 44 32 38 62 77 46 6a 32 45 77 63 2d 51 31 49 4b 74 66 58 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqzJSgtFEMxZanD0UcVcNLPv2H7IQ67mxL7gUJr1rZX9abnUGeRgD28bwFj2Ewc-Q1IKtfX","type":4}
2024-04-18 16:59:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50054	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	995	OUT	GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 52717 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 15:32:57 GMT Expires: Thu, 17 Apr 2025 15:32:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 91573 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:10 UTC	444	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 65 6c 73 65 20 69 66 28 75 3d 3d 72 29 75 3d 77 26 26 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 44 3a 34 34 3b 65 6c 73 65 20 69 66 28 75 3d 3d 44 29 61 3d 44 2c 6d 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 51 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 65 7d 29 2c 75 3d 49 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 52 2e 63 6f 6e 73 6f 6c 65 3f 57 3a 49 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 75 29 77 3d 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6d 3d 46 2c 75 3d 72 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 75 29 72 65 74 75 72 6e 20 6d 7d 7d 63 61 74 63 68 28 53 29 7b 69 66 28 38 36 3d 3d 61 29 74 68 72 6f 77 20 53 3b 61 3d 3d 44 26 26 28 4a 3d Data Ascii: else if(u==r)u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J=
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 77 3d 65 5b 62 5d 29 26 26 21 77 2e 70 61 26 26 77 2e 63 61 70 74 75 72 65 3d 3d 49 26 26 28 53 3d 77 2e 4e 47 7c 7c 77 2e 73 72 63 2c 4a 3d 77 2e 6c 69 73 74 65 6e 65 72 2c 77 2e 51 43 26 26 6e 28 6e 75 6c 6c 2c 32 32 2c 77 2c 44 2e 69 29 2c 75 3d 66 61 6c 73 65 21 3d 3d 4a 2e 63 61 6c 6c 28 53 2c 61 29 26 26 75 29 3b 46 3d 75 26 26 21 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 65 6c 73 65 20 46 3d 74 72 75 65 3b 6d 3d 34 34 7d 65 6c 73 65 20 69 66 28 34 39 3d 3d 6d 29 75 2b 2b 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 31 3d 3d 6d 29 75 3d 30 2c 6d 3d 35 35 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 6d 29 6d 3d 36 38 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 6d 29 6d 3d 33 3d 3d 28 57 3e 3e 32 26 31 31 29 3f 33 35 3a 35 38 3b 65 6c 73 65 7b 69 Data Ascii: w=e[b])&&!w.pa&&w.capture==I&&(S=w.NG\|\|w.src,J=w.listener,w.QC&&n(null,22,w,D.i),u=false!==J.call(S,a)&&u);F=u&&!a.defaultPrevented}else F=true;m=44}else if(49==m)u++,m=29;else if(11==m)u=0,m=55;else if(39==m)m=68;else if(44==m)m=3==(W>>2&11)?35:58;else{i
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 52 72 5d 3d 61 2c 4a 3d 36 29 7d 7d 2c 78 33 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 2c 4a 2c 65 29 7b 66 6f 72 28 4a 3d 31 3b 37 39 21 3d 4a 3b 29 69 66 28 34 32 3d 3d 4a 29 4a 3d 53 35 3f 31 37 3a 38 33 3b 65 6c 73 65 20 69 66 28 36 38 3d 3d 4a 29 65 3d 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 6e 61 2f 74 68 69 73 2e 6e 29 2c 4a 3d 31 39 3b 65 6c 73 65 20 69 66 28 38 33 3d 3d 4a 29 62 3d 7b 7d 2c 53 35 3d 28 62 2e 61 74 6f 6d 69 63 3d 66 61 6c 73 65 2c 62 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 49 2c 62 2e 64 72 6f 70 65 66 66 65 63 74 3d 49 2c 62 2e 68 61 73 70 6f 70 75 70 3d 66 61 6c 73 65 2c 62 2e 6c 69 76 65 3d 22 6f 66 66 22 2c 62 2e 6d 75 6c 74 69 6c 69 6e Data Ascii: Rr]=a,J=6)}},x3=function(W,r,a,I,D,R,w,S,u,b,J,e){for(J=1;79!=J;)if(42==J)J=S5?17:83;else if(68==J)e=0===this.n?0:Math.sqrt(this.na/this.n),J=19;else if(83==J)b={},S5=(b.atomic=false,b.autocomplete=I,b.dropeffect=I,b.haspopup=false,b.live="off",b.multilin
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 49 4a 26 26 44 2e 49 4a 28 53 2c 44 2e 5a 2c 44 2e 4c 2c 44 2e 6c 2c 44 2e 49 29 2c 44 2e 49 3d 57 2c 44 2e 5a 3d 57 2c 44 2e 4c 3d 57 2c 44 2e 6c 3d 57 2c 53 3c 77 7c 7c 30 3e 3d 44 2e 5a 48 2d 2d 7c 7c 28 53 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 53 29 2c 44 2e 6f 4a 2e 70 75 73 68 28 32 35 34 3e 3d 53 3f 53 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 44 2e 56 43 3d 57 7d 4a 3d 52 7d 62 3d 37 7d 65 6c 73 65 20 38 34 3d 3d 62 3f 62 3d 44 20 69 6e 20 49 2e 48 26 26 58 28 49 2e 48 5b 44 5d 2c 30 2c 32 34 2c 61 29 3f 37 35 3a 38 32 3a 34 32 3d 3d 62 3f 62 3d 34 39 3a 37 39 3d 3d 62 3f 28 64 65 6c 65 74 65 20 49 2e 48 5b 44 5d 2c 49 2e 55 38 2d 2d 2c 62 3d 38 32 29 3a 34 39 3d 3d 62 3f 62 3d 28 72 26 34 32 29 3d 3d 72 3f 39 36 3a 39 32 3a 37 35 3d 3d 62 3f 28 Data Ascii: IJ&&D.IJ(S,D.Z,D.L,D.l,D.I),D.I=W,D.Z=W,D.L=W,D.l=W,S<w\|\|0>=D.ZH--\|\|(S=Math.floor(S),D.oJ.push(254>=S?S:254))}finally{D.VC=W}J=R}b=7}else 84==b?b=D in I.H&&X(I.H[D],0,24,a)?75:82:42==b?b=49:79==b?(delete I.H[D],I.U8--,b=82):49==b?b=(r&42)==r?96:92:75==b?(
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 53 74 61 6d 70 3d 30 2c 74 68 69 73 2e 47 3d 6e 75 6c 6c 2c 75 3d 35 30 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 44 3f 33 38 3a 33 32 3b 65 6c 73 65 20 69 66 28 35 30 3d 3d 75 29 75 3d 72 3f 32 38 3a 36 35 3b 65 6c 73 65 20 69 66 28 33 38 3d 3d 75 29 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 44 2c 75 3d 35 34 3b 65 6c 73 65 20 69 66 28 35 34 3d 3d 75 29 75 3d 49 3f 31 32 3a 39 3b 65 6c 73 65 20 69 66 28 39 3d 3d 75 29 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 72 2e 6f 66 66 73 65 74 58 2c 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 72 2e 6f 66 66 73 65 74 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 63 6c 69 65 6e 74 58 3f 72 2e 63 6c 69 65 6e 74 58 3a 72 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e Data Ascii: Stamp=0,this.G=null,u=50;else if(41==u)u=D?38:32;else if(50==u)u=r?28:65;else if(38==u)this.relatedTarget=D,u=54;else if(54==u)u=I?12:9;else if(9==u)this.offsetX=r.offsetX,this.offsetY=r.offsetY,this.clientX=void 0!==r.clientX?r.clientX:r.pageX,this.clien
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 6e 74 58 3f 49 2e 63 6c 69 65 6e 74 58 3a 49 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 76 6f 69 64 20 30 21 3d 3d 49 2e 63 6c 69 65 6e 74 59 3f 49 2e 63 6c 69 65 6e 74 59 3a 49 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 49 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 49 2e 73 63 72 65 65 6e 59 7c 7c 30 2c 75 3d 39 34 29 3a 33 32 3d 3d 75 3f 75 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3d 3d 52 3f 32 33 3a 33 35 3a 36 33 3d 3d 75 3f 75 3d 33 3d 3d 57 2d 31 3e 3e 33 3f 38 38 3a 31 37 3a 38 38 3d 3d 75 26 26 28 53 3d 72 2c 75 3d 31 37 29 7d 7d 2c 77 36 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 29 7b 66 6f 72 28 75 3d 32 33 3b 33 38 21 3d 75 3b 29 69 66 28 Data Ascii: ntX?I.clientX:I.pageX,this.clientY=void 0!==I.clientY?I.clientY:I.pageY,this.screenX=I.screenX\|\|0,this.screenY=I.screenY\|\|0,u=94):32==u?u="mouseover"==R?23:35:63==u?u=3==W-1>>3?88:17:88==u&&(S=r,u=17)}},w6=function(W,r,a,I,D,R,w,S,u,b){for(u=23;38!=u;)if(
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 6d 5b 72 5d 29 3f 36 3a 35 31 3b 65 6c 73 65 20 69 66 28 35 38 3d 3d 6d 29 6d 3d 44 3f 37 34 3a 39 34 3b 65 6c 73 65 20 69 66 28 33 3d 3d 6d 29 43 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 37 3d 3d 6d 29 6d 3d 35 38 3b 65 6c 73 65 20 69 66 28 39 36 3d 3d 6d 29 74 68 69 73 2e 44 3d 75 2c 6d 3d 38 33 3b 65 6c 73 65 20 69 66 28 32 39 3d 3d 6d 29 6d 3d 28 75 3d 52 29 3f 39 36 3a 37 33 3b 65 6c 73 65 20 69 66 28 35 31 3d 3d 6d 29 44 3d 28 62 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 44 2e 70 72 6f 74 6f 74 79 70 65 29 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6d 3d 31 37 3b 65 6c 73 65 20 69 66 28 39 34 3d 3d 6d 29 75 3d 77 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f Data Ascii: m[r])?6:51;else if(58==m)m=D?74:94;else if(3==m)Cm.call(this,a),m=29;else if(17==m)m=58;else if(96==m)this.D=u,m=83;else if(29==m)m=(u=R)?96:73;else if(51==m)D=(b=Object.getPrototypeOf(D.prototype))&&b.constructor,m=17;else if(94==m)u=w?"function"===typeo
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 77 7c 7c 53 2d 49 2e 61 4a 3c 49 2e 64 34 2d 28 52 3f 32 35 35 3a 61 3f 35 3a 32 29 3f 6d 3d 66 61 6c 73 65 3a 28 49 2e 48 58 3d 44 2c 75 3d 68 28 49 2c 61 3f 33 37 3a 32 39 32 29 2c 41 28 32 39 32 2c 49 2c 49 2e 56 29 2c 49 2e 76 2e 70 75 73 68 28 5b 58 38 2c 75 2c 61 3f 44 2b 31 3a 44 2c 49 2e 5a 2c 49 2e 4c 2c 49 2e 6c 2c 49 2e 49 5d 29 2c 49 2e 41 3d 6c 52 2c 6d 3d 74 72 75 65 29 2c 46 3d 35 37 7d 65 6c 73 65 20 69 66 28 31 3d 3d 46 29 46 3d 35 39 3b 65 6c 73 65 7b 69 66 28 33 39 3d 3d 46 29 72 65 74 75 72 6e 20 6d 3b 39 32 3d 3d 46 3f 28 6d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 42 74 29 26 26 72 5b 42 74 5d 7c 7c 28 72 5b 42 74 5d 3d 2b 2b 64 36 29 2c 46 3d 34 34 29 3a Data Ascii: w\|\|S-I.aJ<I.d4-(R?255:a?5:2)?m=false:(I.HX=D,u=h(I,a?37:292),A(292,I,I.V),I.v.push([X8,u,a?D+1:D,I.Z,I.L,I.l,I.I]),I.A=lR,m=true),F=57}else if(1==F)F=59;else{if(39==F)return m;92==F?(m=Object.prototype.hasOwnProperty.call(r,Bt)&&r[Bt]\|\|(r[Bt]=++d6),F=44):
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 3d 3d 6d 3f 28 4a 3d 70 28 31 32 2c 52 29 2c 6d 3d 33 29 3a 33 3d 3d 6d 26 26 28 6d 3d 4a 3f 37 37 3a 38 29 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 29 7b 66 6f 72 28 44 3d 38 39 3b 32 34 21 3d 44 3b 29 69 66 28 39 32 3d 3d 44 29 44 3d 32 3d 3d 28 57 3c 3c 31 26 31 35 29 3f 38 38 3a 31 32 3b 65 6c 73 65 20 69 66 28 31 30 3d 3d 44 29 61 2e 4b 3d 72 2c 61 2e 46 28 29 2c 44 3d 39 38 3b 65 6c 73 65 20 69 66 28 35 3d 3d 44 29 54 78 2e 63 61 6c 6c 28 74 68 69 73 29 2c 72 7c 7c 69 52 7c 7c 28 69 52 3d 6e 65 77 20 76 74 29 2c 74 68 69 73 2e 57 3d 74 68 69 73 2e 67 34 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6a 4d 3d 74 68 69 73 2e 45 38 3d 66 61 6c 73 65 2c 74 68 69 73 2e 69 62 3d 74 68 69 73 2e 4f 76 3d 74 68 69 73 2e 58 38 3d 6e 75 6c Data Ascii: ==m?(J=p(12,R),m=3):3==m&&(m=J?77:8)}},g=function(W,r,a,I,D,R){for(D=89;24!=D;)if(92==D)D=2==(W<<1&15)?88:12;else if(10==D)a.K=r,a.F(),D=98;else if(5==D)Tx.call(this),r\|\|iR\|\|(iR=new vt),this.W=this.g4=null,this.jM=this.E8=false,this.ib=this.Ov=this.X8=nul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50056	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	639	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:10 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 997fea37a3414d1388695dd0b53509c5 Connection: close
2024-04-18 16:59:10 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50058	142.250.105.119	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	470	OUT	GET /vi_webp/pgLV0NmWnJ4/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 20608 Date: Thu, 18 Apr 2024 16:59:10 GMT Expires: Thu, 18 Apr 2024 18:59:10 GMT Cache-Control: public, max-age=7200 ETag: "1650324015" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:10 UTC	632	IN	Data Raw: 52 49 46 46 78 50 00 00 57 45 42 50 56 50 38 20 6c 50 00 00 30 07 02 9d 01 2a 00 05 d0 02 3e 6d 36 97 49 24 23 25 28 a2 51 58 d1 10 0d 89 67 6e e1 75 3e a2 7a 51 e2 6d 2d c9 47 f6 7d e7 5f d3 c8 ff 71 fd c1 fe f3 ef f3 61 fe f1 fd d7 fc 77 fa af ee df b7 ff 7c 5f d1 f2 4f b5 7c d7 7c e7 f6 5f fa df e0 bf 27 3e 6a 7f a3 ff b3 fe 47 dd 0f e8 2f fb ff 9f ff 40 9f a8 ff ef bf c2 ff 80 fd 9a f8 da fd 80 f7 89 fb c1 ea 3b fa b7 fa 2f dc 1f 77 9f f7 5f b4 7e f7 ff b6 ff c8 fd a3 f8 16 fe c1 fe 5f ff 47 fc ce d5 ff 42 ef de 0f 57 6f fc 3f ba 9f 0f 9f b6 bf ba 9f 03 df af bf fe fb 3c fa 4d fd 07 fc a7 fa df 52 3e 36 fe 9b fc 3f ee 37 f7 df 58 fc ba fa 5f f7 9f dc 6f f0 3f 3f bf a2 e7 0e d4 3f 94 fd f5 fd f7 f7 1f dd 3f 8d 5f dd ff d1 f0 bf e6 9f fa ff e3 3d 82 3f Data Ascii: RIFFxPWEBPVP8 lP0*>m6I$#%(QXgnu>zQm-G}_qaw\|_O\|\|_'>jG/@;/w_~_GBWo?<MR>6?7X_o????_=?
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: f1 b0 b0 4c 6b a8 53 df b5 46 eb 57 8b 86 d5 ea 51 1e 50 bb a1 9f 82 f9 57 d5 99 1a 27 8e 6b b8 24 54 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba ae 74 5c 30 0e 22 3a 18 83 d9 dc 98 86 99 da 31 ca 49 e1 08 0e 23 ae ad 2e 95 53 4f f6 c9 47 b1 6d 02 6b 74 ac 34 5a fc 65 07 e0 60 50 e9 9d 77 01 ea 96 97 74 34 cf 86 96 97 74 34 cf 86 96 97 74 34 cf 86 93 93 59 ab 1f a8 03 70 84 f8 65 4e f7 9c d8 48 e4 21 71 b0 31 22 7b 8d 75 23 a9 28 7f 2c ab a0 e2 3f 01 c1 73 43 df 66 de 34 b4 95 a7 85 d4 44 83 c5 70 ae 6a 85 dd 0d 33 e1 a5 a5 dd 0d 33 e1 a5 a5 dd 0d 33 e1 a5 a5 dd 0d 33 90 2f e7 0c ca 29 aa d9 2e 35 88 d9 67 f5 b5 d0 5d bb 84 ed df 2b 7c 5f 40 a5 06 16 06 57 ff 48 ca e9 f1 c7 c0 82 a6 71 7c 8c e1 ff 5f 43 24 0c 85 0c 90 85 fa c5 17 bb ed Data Ascii: LkSFWQPW'k$Tt\0":1I#.SOGmkt4Ze`Pwt4t4t4YpeNH!q1"{u#(,?sCf4Dpj3333/).5g]+\|_@WHq\|_C$
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 7c c7 ea 9f 2a c3 12 22 ad 13 3b ef 56 ea 20 51 21 f7 e0 26 3f 3a 38 29 e9 66 b3 41 e1 a5 a8 da 93 90 57 56 1a 3a 93 90 57 56 1a 3a 93 90 57 52 6a 98 fc 6d 4f b7 fc 91 e4 8c 94 7d a8 1a a6 3e 94 02 13 40 2e b2 d9 04 a1 14 76 f0 b5 cf e8 11 42 ff 16 f9 ef fa 20 e8 85 f3 3b e7 15 65 75 30 46 54 3c 05 6a 0d 3e 10 d3 d5 4f 50 e4 d3 86 3c a1 86 04 e4 15 d5 86 8e a4 e4 15 d5 86 8e a4 e4 15 d5 79 59 8c 3c 8c 28 86 85 55 90 0a b2 2c 73 c6 d2 29 d5 87 b5 b7 51 9a 5c c7 f7 3e b7 d3 e0 4a bf fc 79 db e7 c7 5f 74 c6 01 ee 43 65 7d f3 53 d6 58 4e e8 91 c0 68 46 36 fe f2 1c ef 70 24 60 d2 3a c7 1e ee 43 8c 0a 3c 06 67 2f 01 da 33 19 23 96 68 ed 2b e3 2f 0d 2f a4 69 9f 90 b0 d1 d4 9c 82 ba b0 d1 d4 9c 82 ba b0 d1 d4 9c 89 65 29 71 36 94 c6 3e bb 7c 5e 6d bd 0d 87 aa 5b Data Ascii: \|*";V Q!&?:8)fAWV:WV:WRjmO}>@.vB ;eu0FT<j>OP<yY<(U,s)Q\>Jy_tCe}SXNhF6p$`:C<g/3#h+//ie)q6>\|^m[
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: 30 49 d0 8c 27 0e 3d 05 bd 31 b8 a7 a8 66 94 cf eb 4e 39 fc 48 79 ba 9b c8 20 ad a7 38 95 ca 97 f6 48 47 fd 20 3d 52 ea bf bd e7 ee d4 01 ae c1 e3 92 d9 17 3b 7d 6c 9a bc 26 ea bc dd 35 0f 54 b4 bb a1 a6 7c 34 b4 bc bf b4 68 f6 92 de 28 35 41 f6 40 8b cc 9a 2c f1 1c 98 1c 9c 2a f0 32 a4 8b a0 d7 da d3 69 6e f5 3d 67 6d dd f0 6f 7b c6 ba 6a 8f a5 9d 6e c3 09 cf d3 8a 34 7a 3a 3a ff 49 ac cc a5 27 f8 9f 63 56 ce 56 b6 90 5c bb cf 87 c5 d8 69 9f ae 62 c7 d3 a9 39 05 75 61 a3 a9 39 05 75 61 a3 a9 39 05 75 61 a3 ad d3 58 94 00 9a fc 7a e1 ff 8a 94 41 80 60 a6 ac d6 8b a7 46 5a 82 04 0a 97 4b 0f bc 41 eb 60 96 8d 47 a1 7e 35 ce 98 39 fd cc fc fd 94 2e e8 ae 2b 94 2e e8 69 9f 0d 2d 2e e8 69 9f 0d 2d 2e e8 69 9f 0d 2d 2e e8 c5 e8 c4 05 ae ea 10 6f 3a 85 08 d2 90 Data Ascii: 0I'=1fN9Hy 8HG =R;}l&5T\|4h(5A@,*2in=gmo{jn4z::I'cVV\ib9ua9ua9uaXzA`FZKA`G~59.+.i-.i-.i-.o:
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d9 54 66 b1 b0 3f 6f 11 a0 fd 1d 5f 54 00 00 04 3f da 14 f0 0d ed 83 4c f6 a6 b5 2e be b9 6d 62 dc 87 2c ac 76 21 28 96 82 64 1e c5 be be 25 f1 c4 25 8e 97 b7 43 bb 25 4e 8a 78 af 0e 79 cf 3f e1 77 c8 63 90 aa ff 23 b2 91 fd 75 c4 34 25 b6 85 70 37 ad c0 ff 81 1c 66 36 23 78 29 7d 58 68 3b 8c 96 20 d4 bf 5e aa 6f 6f a9 16 db 7e c6 c4 82 b7 76 90 36 f1 cc 91 a0 28 fb a5 07 11 07 76 13 19 94 da 5c 6d 29 49 37 64 1a 1b af 5c e3 33 09 62 6c 08 dc 02 d4 93 c0 e3 d7 9f 88 6a 04 6b ec 4b 3d c9 17 0e 5d ff f8 aa 09 e1 92 11 5d 74 05 65 56 f2 02 d8 7d 10 23 54 71 b9 8b 8f 02 48 b8 98 4e 82 35 84 6c c7 b9 93 75 13 a7 5c 6b b3 f3 88 d8 5b 0c 14 e8 46 6e 4d c4 e3 fa 3d fa 0f c8 48 d6 de b4 c2 9a 0e 65 ae 3e 5c 13 90 54 86 f2 d3 05 b4 b3 ec 3e 04 8b 12 1f 7c 49 58 e4 Data Ascii: Tf?o_T?L.mb,v!(d%%C%Nxy?wc#u4%p7f6#x)}Xh; ^oo~v6(v\m)I7d\3bljkK=]]teV}#TqHN5lu\k[FnM=He>\T>\|IX
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: df 01 22 09 e4 22 32 c4 30 7c e3 9b ef 1e ed e5 54 51 fd df e9 e8 4b d2 a4 15 7f 87 dd 3d 89 8f b6 49 fb f3 ac fb a5 2b cb 34 d6 d8 db b9 6d 1e d4 5c 0f d6 55 e7 1c 2d c7 23 6f 62 ba 38 82 5e a7 61 e8 86 ee 40 61 57 e2 79 f0 72 9d 9d cf 32 56 d7 94 f9 c2 24 25 73 5e ef ce e7 8c db 93 44 40 1e 68 39 7e 00 fa 1b 69 94 88 fb 26 0f 5c 93 88 31 16 55 4e 67 43 80 00 08 ae 89 88 e9 7b 9e c1 57 bf 67 8e a1 16 b2 39 84 1d 83 86 1d 5c 1e 5c 9c 78 ca 66 f1 fe 7a 15 77 14 6c af b5 1a 09 2c bf 0a a6 f4 65 c5 31 2e d1 b4 b7 20 8a b8 8f 61 f9 ff 51 00 13 23 02 7d a5 f1 7a dc 1d 43 a4 36 13 6c 19 2d 9b 6a 5d 79 d3 bb 88 d1 d4 76 3b 31 3b 82 01 da 22 97 c4 c5 9e 60 45 8f 8b f3 a5 8c a4 2b 08 f3 04 06 b9 ae 9b 4f 97 b3 ce 7e a5 29 d1 c2 fc 26 fe c7 81 f0 e6 4b a5 55 99 dd Data Ascii: ""20\|TQK=I+4m\U-#ob8^a@aWyr2V$%s^D@h9~i&\1UNgC{Wg9\\xfzwl,e1. aQ#}zC6l-j]yv;1;"`E+O~)&KU
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d6 bc 66 a5 c7 07 93 fe 19 5a bd c3 c5 11 b6 87 b9 aa 03 b1 77 e1 4b a3 0d 26 81 2c 8a 51 c4 15 66 05 bc 8f 95 91 fc 0b 08 df 40 99 68 77 8c 7b 5f c5 ad 6b b3 01 74 e1 50 dd 7f c5 b5 e3 00 e9 64 4e 86 76 bc 25 2e b0 69 ac 24 61 1b 68 6c b9 ce e9 25 1e ba b7 ac ac 98 07 fe 69 f5 c5 e9 4d c0 b8 54 0a 47 da 13 3e bb d4 2b 4e 9e d5 31 c6 77 37 5e 50 8a a0 89 a7 45 bf 33 0b ef bc 66 49 03 57 07 ea c7 54 0a b4 be c9 6f ea a7 df f3 96 e9 87 f2 81 a6 8e d2 77 3a 6b e8 87 fe 3d 60 c6 46 2b f8 8c d3 5d a8 00 0a c1 e1 d4 a5 4a 1c 11 1f a0 ea b6 e0 53 e2 80 55 a2 c6 73 de 6d f7 d0 0a b4 97 bc 9a 25 83 4a a2 e8 ea 0a 7f 63 47 19 38 48 6b 47 32 45 87 cf 19 6b 22 9f 67 7b 2c d7 32 e7 93 b3 b9 dc af db a4 cb 1c 6b a9 d3 f8 c4 1a 16 04 64 08 25 0b 01 7e f3 72 02 6c 37 f6 Data Ascii: fZwK&,Qf@hw{_ktPdNv%.i$ahl%iMTG>+N1w7^PE3fIWTow:k=`F+]JSUsm%JcG8HkG2Ek"g{,2kd%~rl7
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d4 2f 30 7e 37 90 6e 11 8f ee 63 f8 f3 a3 6e a4 06 2b db b2 61 b1 26 0f ff 1e 79 f8 96 d3 8a 7f 8d 2a 84 5f 38 71 ee cf c5 9f 3c b7 d5 3e 9a 41 04 c4 98 09 ee a2 2f d8 00 a6 20 40 5a 5e 35 94 c8 bc 6f eb 4f d9 66 b5 9b cd 61 78 8c ea 44 14 2f 4b 25 fa d5 cb af 4d ad 64 7d 01 8e ed 82 e4 d0 54 7e d8 45 af 8b 84 81 13 83 18 2a 5a e5 4e 85 32 d2 dd 00 80 28 00 01 85 48 3f f3 ee d9 b9 95 c2 c3 19 a3 1b f9 44 ca 76 e2 b2 b6 1d 7b ad e3 44 46 f2 2b f2 39 59 7d f5 6a e2 00 8d 1f 77 a6 e9 8a ff 30 dd 53 2d 8f 9a 69 3d 17 21 5f 3a 7e c1 0d 97 de 27 1f 8b a8 21 df 61 d3 4b 80 45 2b 93 0e de 6b 3d f2 e6 96 09 21 95 16 98 8a 2d 4c 6c 58 b2 cd 26 85 83 f7 74 83 48 b2 91 84 f7 b3 65 fb 5d 64 25 c9 8e 91 ef 10 29 6d ec d2 4c fc 40 41 c1 e3 bd 4d c6 85 e9 fa 8a 7b 02 98 Data Ascii: /0~7ncn+a&y_8q<>A/ @Z^5oOfaxD/K%Md}T~EZN2(H?Dv{DF+9Y}jw0S-i=!_:~'!aKE+k=!-LlX&tHe]d%)mL@AM{
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: cd f8 7d a2 f9 21 1e d0 25 73 e7 07 58 b9 16 1c 47 2f d0 2d a7 12 03 b5 7b 66 f5 1f 45 18 2f ea f2 77 bb 04 6e 0d 68 ba 30 f7 9c 52 db b8 ea 34 cd 61 b0 91 cb b9 86 6d 28 b2 29 2d b8 2c 22 ac cf 1d 5b 84 49 4d 79 73 9c 70 8f 83 31 9d b3 94 97 4f be 97 90 54 38 9d 8e c0 e9 15 7c 20 62 ce 3b a7 94 84 78 53 eb 32 d4 9b 77 1c 3e ef dc 6e bb 0d 27 7d c9 78 bb 25 40 01 7c 2f f2 4e 89 6e bd 6b 80 d9 7d 59 c4 19 90 50 7d 30 81 bb 00 66 a5 67 eb bb b7 4f 5a 13 f4 c5 7c df 30 82 e5 14 8f e0 2d 5e 36 70 1b 36 55 ef 01 01 72 f5 2e bb a7 3b 5e 3b 36 03 39 4b 76 f2 8c 8b fa 55 e8 41 7e 64 0f 6b ac e6 d9 5a 42 fd de 83 0a 3f 38 b7 ab 1c d4 d9 20 3b 4e a1 d0 0e b5 1e 06 55 21 67 29 f9 fc c5 e4 74 2e aa 64 5a e7 61 ce c8 18 ed 93 2d ea 09 44 31 9a 84 a5 30 06 c7 79 c7 2a Data Ascii: }!%sXG/-{fE/wnh0R4am()-,"[IMysp1OT8\| b;xS2w>n'}x%@\|/Nnk}YP}0fgOZ\|0-^6p6Ur.;^;69KvUA~dkZB?8 ;NU!g)t.dZa-D10y*
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: f2 ee 87 56 47 81 df 94 44 cc 43 4f 9c f9 d0 d0 10 a7 e4 bd 15 a6 e7 d5 e3 82 14 34 79 8c fe 5e ad 79 c8 0e 24 67 c7 ad a5 87 17 53 29 e0 05 c9 a4 57 4f 8f 73 01 7b e1 5e d4 9d e8 e7 83 0e 27 70 00 26 1a 2b e6 5c 67 2c ce 4a e5 26 eb 8e 55 89 53 ac bc 36 35 40 2f 36 73 26 88 9f 49 6b 83 4d 5e 5b 42 dd 18 9b 88 f2 0e e6 50 4a 60 88 56 1d 91 e1 cb c3 9a 69 e5 e8 a7 95 c3 a7 3a eb e7 95 06 6c 56 01 b2 d9 54 45 21 67 70 c7 4e 2a b3 11 be 27 5b aa ee 24 59 71 a6 6a 73 5f 48 5d 2c de ff 66 1a 52 36 ca ae 8f ad 94 81 2c f2 94 38 88 d6 da 08 12 aa 70 8d 02 1a 20 8e 64 6b 60 fa d6 c9 4a a4 17 23 86 e0 4c 10 4f 88 8c cc 51 a7 a2 5d 26 fe 54 e1 a0 67 b9 cc e5 4a 36 c7 70 05 0a 6d 91 84 05 8d 5e b0 1b 8a 75 99 15 23 61 c8 26 ff 27 94 e6 1b e9 ab ef d1 c5 98 26 e9 ed Data Ascii: VGDCO4y^y$gS)WOs{^'p&+\g,J&US65@/6s&IkM^[BPJ`Vi:lVTE!gpN*'[$Yqjs_H],fR6,8p dk`J#LOQ]&TgJ6pm^u#a&'&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50057	142.250.105.132	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	1102	OUT	GET /SP5bjmT1BELkpOWyl51KAcOQZym0oxIKK-_0gBTcM0L23chpkrsV8FbaqVwaVl_f5zZw4piZTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Apr 2024 16:59:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 16:59:10 GMT Server: fife Content-Length: 2132 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:10 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0d 0a 09 08 08 08 08 08 0d 08 0b 07 08 08 08 09 09 07 08 0a 09 0a 08 08 08 09 08 0c 08 0b 09 08 09 0a 0a 08 08 0d 08 08 08 16 0e 08 08 08 15 0a 15 0b 08 0d 0d 0b 08 0e 0b 0a 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0b 0e 0f 10 11 13 12 0f 11 12 0d 0d 11 10 0e 0b 0d 10 13 0d 0e 0f 10 10 0d 13 14 11 10 0f 0d 11 0e 0e 10 0f 15 0d 10 10 0e 10 0f 0f 14 0e 0d 0f 0d 0d 0a 10 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 03 00 02 02 03 00 00 00 00 00 00 00 00 00 00 07 08 09 05 06 02 04 01 03 0a ff c4 00 3c 10 00 02 01 03 01 05 03 08 06 0b 01 00 00 00 00 00 01 02 03 00 04 11 05 06 08 12 21 31 13 14 22 07 09 15 36 41 61 72 b5 32 51 55 75 91 d5 Data Ascii: JFIFDD<!1"6Aar2QUu
2024-04-18 16:59:10 UTC	1255	IN	Data Raw: d3 b4 d9 2e 22 c7 6f 3b 2d ad 98 23 20 4b 22 b1 2e 46 08 22 04 49 25 c3 0c 31 54 42 47 1d 6e ba 23 81 0c 67 11 6c 32 7d 5b 46 bb fc 90 47 73 bb be 24 37 2c c0 24 ee 58 2c 6b 11 fa 05 2b a5 1d f1 c9 bc 4f c3 6f ab 7a c9 fb ab a6 66 69 24 66 76 91 99 e4 77 62 ee ee e4 b3 b3 b3 12 59 dc 92 c4 b1 24 92 49 26 bb 19 8c 6b 1a 18 c0 00 00 00 06 40 00 2c 00 1b 80 19 01 cc b9 f5 ef 74 8e 2f 79 24 9d a4 e6 57 d5 55 2f 35 a9 5b 8d 7a bf 61 f1 6a 3f 31 bb ae 46 ec 81 e1 da 8e 11 fe 84 6a 7d d1 bf 06 c5 c0 fb ee 54 db ce 2d b8 3f 07 6f b4 5a 1c 1e 0f 1c da ae 9f 12 fd 0e ad 25 d5 aa 28 fa 1d 5e 48 d4 72 f1 4a a3 f5 a2 a3 a5 b4 02 b3 75 5b da 39 e7 98 35 4a ad 7e 82 f7 48 f5 77 67 be e9 d1 3e 5f 6f 55 af 25 2c d1 12 88 a8 4f 9c ab 5c 26 e3 4d b6 c9 c4 71 5d 4e 57 27 04 Data Ascii: ."o;-# K".F"I%1TBGn#gl2}[FGs$7,$X,k+Oozfi$fvwbY$I&k@,t/y$WU/5[zaj?1Fj}T-?oZ%(^HrJu[95J~Hwg>_oU%,O\&Mq]NW'
2024-04-18 16:59:10 UTC	153	IN	Data Raw: 2d 1d 53 cf 97 69 3d f0 e5 85 9f 04 a1 9f bf 85 be 6e e7 aa cb 84 b5 dc 7f 40 04 37 a3 99 b0 41 01 af 35 26 1c be b0 6e b0 47 b9 81 cf d5 57 ef d3 fc 75 c2 df 48 03 83 23 07 d3 a9 d4 ad 46 8d e1 c0 df 91 1e 97 7c 54 a3 b1 de 4d 6c ad 41 5b 1b 2b 6b 4e 2c 71 98 62 8e 36 7c 74 e3 65 5e 27 c7 f5 b1 ad 46 bb 15 ac af 20 d5 4c f7 db 66 b3 89 03 80 d8 3c cb 37 05 2c 30 0b 44 c6 b7 80 01 76 5a c5 ab a4 a2 25 11 28 89 44 4a 22 51 12 88 94 44 a2 25 11 28 8b ff d9 Data Ascii: -Si=n@7A5&nGWuH#F\|TMlA[+kN,qb6\|te^'F Lf<7,0DvZ%(DJ"QD%(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50060	142.250.105.155	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:10 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:10 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:10 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 4c 34 7a 55 73 4d 58 59 56 56 5f 55 58 43 6b 62 77 36 35 35 55 6c 77 71 57 79 57 73 4e 48 4f 53 45 71 4b 7a 5f 56 68 6b 5a 64 53 71 44 4e 61 46 63 62 72 78 44 57 48 62 67 45 6c 63 50 5f 75 4f 6f 31 68 35 48 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpL4zUsMXYVV_UXCkbw655UlwqWyWsNHOSEqKz_VhkZdSqDNaFcbrxDWHbgElcP_uOo1h5H","type":4}
2024-04-18 16:59:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50063	142.250.105.132	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:11 UTC	534	OUT	GET /SP5bjmT1BELkpOWyl51KAcOQZym0oxIKK-_0gBTcM0L23chpkrsV8FbaqVwaVl_f5zZw4piZTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:11 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Apr 2024 16:59:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 16:59:11 GMT Server: fife Content-Length: 2132 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:11 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0d 0a 09 08 08 08 08 08 0d 08 0b 07 08 08 08 09 09 07 08 0a 09 0a 08 08 08 09 08 0c 08 0b 09 08 09 0a 0a 08 08 0d 08 08 08 16 0e 08 08 08 15 0a 15 0b 08 0d 0d 0b 08 0e 0b 0a 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0b 0e 0f 10 11 13 12 0f 11 12 0d 0d 11 10 0e 0b 0d 10 13 0d 0e 0f 10 10 0d 13 14 11 10 0f 0d 11 0e 0e 10 0f 15 0d 10 10 0e 10 0f 0f 14 0e 0d 0f 0d 0d 0a 10 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 03 00 02 02 03 00 00 00 00 00 00 00 00 00 00 07 08 09 05 06 02 04 01 03 0a ff c4 00 3c 10 00 02 01 03 01 05 03 08 06 0b 01 00 00 00 00 00 01 02 03 00 04 11 05 06 08 12 21 31 13 14 22 07 09 15 36 41 61 72 b5 32 51 55 75 91 d5 Data Ascii: JFIFDD<!1"6Aar2QUu
2024-04-18 16:59:11 UTC	1255	IN	Data Raw: d3 b4 d9 2e 22 c7 6f 3b 2d ad 98 23 20 4b 22 b1 2e 46 08 22 04 49 25 c3 0c 31 54 42 47 1d 6e ba 23 81 0c 67 11 6c 32 7d 5b 46 bb fc 90 47 73 bb be 24 37 2c c0 24 ee 58 2c 6b 11 fa 05 2b a5 1d f1 c9 bc 4f c3 6f ab 7a c9 fb ab a6 66 69 24 66 76 91 99 e4 77 62 ee ee e4 b3 b3 b3 12 59 dc 92 c4 b1 24 92 49 26 bb 19 8c 6b 1a 18 c0 00 00 00 06 40 00 2c 00 1b 80 19 01 cc b9 f5 ef 74 8e 2f 79 24 9d a4 e6 57 d5 55 2f 35 a9 5b 8d 7a bf 61 f1 6a 3f 31 bb ae 46 ec 81 e1 da 8e 11 fe 84 6a 7d d1 bf 06 c5 c0 fb ee 54 db ce 2d b8 3f 07 6f b4 5a 1c 1e 0f 1c da ae 9f 12 fd 0e ad 25 d5 aa 28 fa 1d 5e 48 d4 72 f1 4a a3 f5 a2 a3 a5 b4 02 b3 75 5b da 39 e7 98 35 4a ad 7e 82 f7 48 f5 77 67 be e9 d1 3e 5f 6f 55 af 25 2c d1 12 88 a8 4f 9c ab 5c 26 e3 4d b6 c9 c4 71 5d 4e 57 27 04 Data Ascii: ."o;-# K".F"I%1TBGn#gl2}[FGs$7,$X,k+Oozfi$fvwbY$I&k@,t/y$WU/5[zaj?1Fj}T-?oZ%(^HrJu[95J~Hwg>_oU%,O\&Mq]NW'
2024-04-18 16:59:11 UTC	153	IN	Data Raw: 2d 1d 53 cf 97 69 3d f0 e5 85 9f 04 a1 9f bf 85 be 6e e7 aa cb 84 b5 dc 7f 40 04 37 a3 99 b0 41 01 af 35 26 1c be b0 6e b0 47 b9 81 cf d5 57 ef d3 fc 75 c2 df 48 03 83 23 07 d3 a9 d4 ad 46 8d e1 c0 df 91 1e 97 7c 54 a3 b1 de 4d 6c ad 41 5b 1b 2b 6b 4e 2c 71 98 62 8e 36 7c 74 e3 65 5e 27 c7 f5 b1 ad 46 bb 15 ac af 20 d5 4c f7 db 66 b3 89 03 80 d8 3c cb 37 05 2c 30 0b 44 c6 b7 80 01 76 5a c5 ab a4 a2 25 11 28 89 44 4a 22 51 12 88 94 44 a2 25 11 28 8b ff d9 Data Ascii: -Si=n@7A5&nGWuH#F\|TMlA[+kN,qb6\|te^'F Lf<7,0DvZ%(DJ"QD%(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50065	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:11 UTC	1145	OUT	GET /generate_204?vA9NyQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:11 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:11 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50068	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:11 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAqBAZuIIBLwVWyhC Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:11 UTC	1333	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 71 42 41 5a 75 49 49 42 4c 77 56 57 79 68 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 71 42 41 5a 75 49 49 42 4c 77 56 57 79 68 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 71 42 41 5a 75 49 49 42 4c 77 56 57 79 68 43 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryAqBAZuIIBLwVWyhCContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryAqBAZuIIBLwVWyhCContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryAqBAZuIIBLwVWyhCCont
2024-04-18 16:59:12 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:12 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:12 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: de6cf7e1edb84b519ef083f9151449a3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50069	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:11 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:11 UTC	815	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 36 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 35 35 30 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A16%2C%22time_on_page_ms%22%3A15502%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22
2024-04-18 16:59:12 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:12 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:12 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7fb7b9d82bad430b8e7e6b9a3b381a33 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50071	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:12 UTC	1137	OUT	GET /favicon.ico HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:12 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 1150 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Apr 2024 13:01:56 GMT Expires: Sat, 12 Apr 2025 13:01:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Sun, 25 Jun 2023 02:58:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 532636 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:12 UTC	549	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 70 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( @@p@@
2024-04-18 16:59:12 UTC	601	IN	Data Raw: ff 20 20 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 80 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff ff ff ff ff ff ff ff ff b0 b0 ff ff 20 20 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 80 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff e0 e0 ff ff 40 40 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 50 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 00 00 ff 30 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: @@P`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50072	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:12 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:12 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 067f1c6d8a9547bcb7db7c40914b1717 Connection: close
2024-04-18 16:59:12 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50074	172.253.124.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:12 UTC	551	OUT	GET /favicon.ico HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:12 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 1150 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Apr 2024 18:17:56 GMT Expires: Fri, 11 Apr 2025 18:17:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Sun, 25 Jun 2023 02:58:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 600076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:12 UTC	549	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 70 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( @@p@@
2024-04-18 16:59:12 UTC	601	IN	Data Raw: ff 20 20 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 80 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff ff ff ff ff ff ff ff ff b0 b0 ff ff 20 20 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 80 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff e0 e0 ff ff 40 40 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 80 00 00 ff 50 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 00 00 ff 30 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: @@P`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50075	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:12 UTC	1721	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10986 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1713459551458 sec-ch-ua-platform-version: "10.0.0" X-Goog-Event-Time: 1713459551458 X-YouTube-Utc-Offset: 120 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: Europe/Zurich sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240415.01.00 X-Goog-Visitor-Id: CgtzaVZRMVRVWG9sVSjbooWxBjIKCgJVUxIEGgAgUg%3D%3D X-YouTube-Ad-Signals: dt=1713459548052&flash=0&frm&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/pgLV0NmWnJ4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:12 UTC	10986	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 35 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 75 69 68 62 45 47 45 4f 75 54 72 67 55 51 76 76 6d 76 42 52 43 61 38 4b 38 46 45 4f 5f 4e 73 41 55 51 74 2d 72 2d 45 68 43 44 76 37 41 46 45 4c 37 59 73 41 55 51 6c 63 2d 77 42 52 44 48 7a 72 41 46 45 4e 33 64 73 41 55 51 30 75 43 77 42 52 43 38 2d 61 38 46 45 49 50 65 73 41 55 51 36 2d 6a 2d 45 68 44 71 77 36 38 46 45 4e 43 4e 73 41 55 51 71 64 43 77 42 52 44 7a 6f 62 41 46 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240415.01.00","configInfo":{"appInstallData":"CNuihbEGEOuTrgUQvvmvBRCa8K8FEO_NsAUQt-r-EhCDv7AFEL7YsAUQlc-wBRDHzrAFEN3dsAUQ0uCwBRC8-a8FEIPesAUQ6-j-EhDqw68FENCNsAUQqdCwBRDzobAFEO
2024-04-18 16:59:13 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 16:59:13 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:13 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 16:59:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50076	172.253.124.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:13 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:13 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 16:59:13 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:13 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 16:59:13 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50077	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:13 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:13 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 30 30 31 37 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A10%2C%22time_on_page_ms%22%3A10017%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url
2024-04-18 16:59:14 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:14 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 25 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c03ef4f36e974bc681f556820ad9f274 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50078	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:13 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1304 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryb6iwAyqLSU71WJIR Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:13 UTC	1304	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 36 69 77 41 79 71 4c 53 55 37 31 57 4a 49 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 36 69 77 41 79 71 4c 53 55 37 31 57 4a 49 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 36 69 77 41 79 71 4c 53 55 37 31 57 4a 49 52 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryb6iwAyqLSU71WJIRContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryb6iwAyqLSU71WJIRContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryb6iwAyqLSU71WJIRCont
2024-04-18 16:59:14 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:14 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5e7e719310bc448b9c9c7c91c28b732c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50079	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:13 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary70ABDPAT0raZTZVz Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:13 UTC	1294	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 30 41 42 44 50 41 54 30 72 61 5a 54 5a 56 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 30 41 42 44 50 41 54 30 72 61 5a 54 5a 56 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 30 41 42 44 50 41 54 30 72 61 5a 54 5a 56 7a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary70ABDPAT0raZTZVzContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary70ABDPAT0raZTZVzContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundary70ABDPAT0raZTZVzCont
2024-04-18 16:59:14 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:14 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:14 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:14 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e4c85bf1077f457fba53e2d786fbc557 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50080	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:14 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:14 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:14 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3ea5eaa4ae5e4c56bcb6ec48ab560a84 Connection: close
2024-04-18 16:59:14 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50081	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:15 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1265 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBmb6gUHVhgghRfvP Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:15 UTC	1265	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 6d 62 36 67 55 48 56 68 67 67 68 52 66 76 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 6d 62 36 67 55 48 56 68 67 67 68 52 66 76 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 6d 62 36 67 55 48 56 68 67 67 68 52 66 76 50 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryBmb6gUHVhgghRfvPContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryBmb6gUHVhgghRfvPContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryBmb6gUHVhgghRfvPCont
2024-04-18 16:59:15 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:15 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:15 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:15 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 40904d4cb1af43bc86769f35386df089 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50082	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:16 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryzwb5oLmzAV6cvL7D Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:16 UTC	1294	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 7a 77 62 35 6f 4c 6d 7a 41 56 36 63 76 4c 37 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 7a 77 62 35 6f 4c 6d 7a 41 56 36 63 76 4c 37 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 7a 77 62 35 6f 4c 6d 7a 41 56 36 63 76 4c 37 44 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryzwb5oLmzAV6cvL7DContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryzwb5oLmzAV6cvL7DContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryzwb5oLmzAV6cvL7DCont
2024-04-18 16:59:17 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:17 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:17 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 45 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 77823a90d13740df9c947c0a6bc77e6c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50083	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1656 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarythjlew8JYNTTNzqr Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:19 UTC	1656	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 68 6a 6c 65 77 38 4a 59 4e 54 54 4e 7a 71 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 68 6a 6c 65 77 38 4a 59 4e 54 54 4e 7a 71 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 68 6a 6c 65 77 38 4a 59 4e 54 54 4e 7a 71 72 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarythjlew8JYNTTNzqrContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarythjlew8JYNTTNzqrContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundarythjlew8JYNTTNzqrCont
2024-04-18 16:59:19 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 23 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 106f054e57d34be39ab97518e7152916 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50086	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1265 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryoNlwORiaBMrFn9E2 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:19 UTC	1265	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 4e 6c 77 4f 52 69 61 42 4d 72 46 6e 39 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 4e 6c 77 4f 52 69 61 42 4d 72 46 6e 39 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 4e 6c 77 4f 52 69 61 42 4d 72 46 6e 39 45 32 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryoNlwORiaBMrFn9E2Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryoNlwORiaBMrFn9E2Content-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryoNlwORiaBMrFn9E2Cont
2024-04-18 16:59:19 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 15 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 641a22f526b44386954c3988b0f9f1e4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50084	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:19 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 36 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 35 37 32 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A16%2C%22time_on_page_ms%22%3A15720%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url
2024-04-18 16:59:19 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 40 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8251b8d77c66420a8397d49c1349ed8d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50085	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryKeTWq8XEnNm9aNnC Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:19 UTC	1718	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4b 65 54 57 71 38 58 45 6e 4e 6d 39 61 4e 6e 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4b 65 54 57 71 38 58 45 6e 4e 6d 39 61 4e 6e 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4b 65 54 57 71 38 58 45 6e 4e 6d 39 61 4e 6e 43 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryKeTWq8XEnNm9aNnCContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryKeTWq8XEnNm9aNnCContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryKeTWq8XEnNm9aNnCCont
2024-04-18 16:59:19 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0344886c2e974ad78ca7d33a231b8904 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50087	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	605	OUT	POST /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 1113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:19 UTC	1113	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 33 31 62 64 36 32 39 38 2d 66 39 61 62 2d 34 32 65 37 2d 38 62 63 39 2d 38 32 33 32 36 34 33 64 34 66 36 66 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 66 36 39 33 38 65 31 39 66 35 65 66 30 62 30 37 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 6e 75 6c 6c 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 65 63 75 72 65 25 32 30 44 6f 63 75 6d 65 6e 74 25 32 30 53 68 61 72 69 6e Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=31bd6298-f9ab-42e7-8bc9-8232643d4f6f&r=&platform=web&installation_type=js-snippet&Idempotency-Key=f6938e19f5ef0b07&internal=&is_intersection_booted=null&page_title=Secure%20Document%20Sharin
2024-04-18 16:59:19 UTC	866	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: no-cache Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0003qu52vn5tpnrfgp7g Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS X-Runtime: 0.023605 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:59:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50089	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:19 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:19 UTC	768	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 33 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 33 30 31 35 39 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A30%2C%22time_on_page_ms%22%3A30159%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22ur
2024-04-18 16:59:20 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:19 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b85e1acaed8d4b598a29cf5dc327d0eb Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50090	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:20 UTC	364	OUT	GET /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:20 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:59:20 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 000523uadk7minlmtk6g X-Runtime: 0.016797 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:59:20 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50091	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:20 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:20 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c7da79c03d074820852df28526c3623c Connection: close
2024-04-18 16:59:20 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50092	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:20 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1617 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9LiHvHybLKkPBMht Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:20 UTC	1617	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 4c 69 48 76 48 79 62 4c 4b 6b 50 42 4d 68 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 4c 69 48 76 48 79 62 4c 4b 6b 50 42 4d 68 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 4c 69 48 76 48 79 62 4c 4b 6b 50 42 4d 68 74 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary9LiHvHybLKkPBMhtContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary9LiHvHybLKkPBMhtContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundary9LiHvHybLKkPBMhtCont
2024-04-18 16:59:20 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:20 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:20 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:20 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b88821b4de2f49028fb81aa2cf0d420a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50093	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:20 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:20 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cd5f5d2a3fe54228a6ef72ab64c4802e Connection: close
2024-04-18 16:59:20 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50094	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:21 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryWMi4XABQunGbAplv Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:21 UTC	1296	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 4d 69 34 58 41 42 51 75 6e 47 62 41 70 6c 76 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 4d 69 34 58 41 42 51 75 6e 47 62 41 70 6c 76 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 4d 69 34 58 41 42 51 75 6e 47 62 41 70 6c 76 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryWMi4XABQunGbAplvContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryWMi4XABQunGbAplvContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryWMi4XABQunGbAplvCont
2024-04-18 16:59:22 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:22 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:22 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:21 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 343e128abc81426fb8e4e94dfe4430d6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50095	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:23 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1617 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryobBhuKnZZaKPEOzO Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:23 UTC	1617	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 62 42 68 75 4b 6e 5a 5a 61 4b 50 45 4f 7a 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 62 42 68 75 4b 6e 5a 5a 61 4b 50 45 4f 7a 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6f 62 42 68 75 4b 6e 5a 5a 61 4b 50 45 4f 7a 4f 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryobBhuKnZZaKPEOzOContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryobBhuKnZZaKPEOzOContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryobBhuKnZZaKPEOzOCont
2024-04-18 16:59:23 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:23 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:23 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:23 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 20 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e99b14ebdce142b2aa6cf232ea08c9bd Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50096	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:23 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrImAjavtGXNl6G8G Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:23 UTC	1267	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 49 6d 41 6a 61 76 74 47 58 4e 6c 36 47 38 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 49 6d 41 6a 61 76 74 47 58 4e 6c 36 47 38 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 49 6d 41 6a 61 76 74 47 58 4e 6c 36 47 38 47 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryrImAjavtGXNl6G8GContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryrImAjavtGXNl6G8GContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryrImAjavtGXNl6G8GCont
2024-04-18 16:59:24 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:24 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 42 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4247e10aad1c42069231cf263733b028 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50097	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1883 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUdMkimo3kZZWPEOx Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:24 UTC	1883	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 64 4d 6b 69 6d 6f 33 6b 5a 5a 57 50 45 4f 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 64 4d 6b 69 6d 6f 33 6b 5a 5a 57 50 45 4f 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 64 4d 6b 69 6d 6f 33 6b 5a 5a 57 50 45 4f 78 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryUdMkimo3kZZWPEOxContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryUdMkimo3kZZWPEOxContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryUdMkimo3kZZWPEOxCont
2024-04-18 16:59:24 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:24 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 92ef518904f94a9ab1ad87ac444d02f4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50098	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1751 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarytABH4n7sjL6a07ut Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:24 UTC	1751	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 41 42 48 34 6e 37 73 6a 4c 36 61 30 37 75 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 41 42 48 34 6e 37 73 6a 4c 36 61 30 37 75 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 74 41 42 48 34 6e 37 73 6a 4c 36 61 30 37 75 74 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarytABH4n7sjL6a07utContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarytABH4n7sjL6a07utContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundarytABH4n7sjL6a07utCont
2024-04-18 16:59:24 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:24 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:24 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 58 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 61a6606c4f2b4a9d96c4e8fad11fee1b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50099	104.16.141.209	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	526	OUT	GET /6191183.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:24 UTC	920	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:24 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.docsend.com x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: ef0f5e3d-2a53-484b-b0d8-4e1b2686bc55 x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-697677dfc-qg74c x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: ef0f5e3d-2a53-484b-b0d8-4e1b2686bc55 CF-Cache-Status: EXPIRED Last-Modified: Thu, 18 Apr 2024 16:46:02 GMT Expires: Thu, 18 Apr 2024 17:00:54 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 876634848bea12d3-ATL
2024-04-18 16:59:24 UTC	449	IN	Data Raw: 35 66 34 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 70 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 45 6e 61 62 6c 65 64 46 65 61 74 75 72 65 47 61 74 65 73 27 2c 20 5b 5d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 75 73 65 56 32 57 69 6c 64 63 61 72 64 27 2c 20 74 72 75 65 5d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 Data Ascii: 5f4// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0var _hsp = window._hsp = window._hsp \|\| [];_hsp.push(['addEnabledFeatureGates', []]);_hsp.push(['useV2Wildcard', true]);!function(t,e,r){if(!document.g
2024-04-18 16:59:24 UTC	1082	IN	Data Raw: 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 36 31 39 31 31 38 33 22 2c 30 2c 7b 22 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 22 3a 22 69 67 6e 6f 72 65 22 2c 22 64 61 74 61 2d 68 73 2d 69 67 6e 6f 72 65 22 3a 74 72 75 65 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 36 31 39 31 31 38 33 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c Data Ascii: r i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-6191183",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":6191183,"data-hsjs-env":"prod","data-hsjs-hubl
2024-04-18 16:59:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50101	104.18.140.17	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	559	OUT	GET /leadflows.js HTTP/1.1 Host: js.hsleadflows.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.docsend.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:24 UTC	1347	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 03 Apr 2024 09:27:53 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: FzXUOelq5PzvbDhLOc3Au0ThiCBuXHAc ETag: W/"d252299cef5b9176cf0435e72e0baeeb" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 e8eec15d9551dd475d4c478f9fbb5f04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: hW5qBzW1l61VU9fDx2s1KY2dByDhPOF8RbD4bVmqbvQJvsm_DSfo-g== Age: 65686 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.1338/bundle/main/lead-flows-release.js&cfRay=875ff0df4b46458e-ATL Cache-Control: s-maxage=86400, max-age=0 X-HS-Target-Asset: lead-flows-js/static-1.1338/bundle/main/lead-flows-release.js X-Content-Type-Options: nosniff X-HS-Cache-Status: MISS x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 42ae77b4-b681-42fc-b7ac-f0df4ff6bfb1
2024-04-18 16:59:24 UTC	359	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 36 38 62 37 66 37 66 62 66 66 2d 68 64 62 36 35 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 34 32 61 65 37 37 62 34 2d 62 36 38 31 2d 34 32 66 63 2d 62 37 61 63 2d 66 30 64 66 34 66 66 36 62 66 62 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 6c 65 61 64 2d 66 6c 6f 77 73 2d 63 6c 6f 75 64 66 6c 61 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-68b7f7fbff-hdb65x-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: 42ae77b4-b681-42fc-b7ac-f0df4ff6bfb1cache-tag: staticjsapp-lead-flows-cloudfla
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 61 2c 74 3b 6e 75 6c 6c 3d 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 26 26 28 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 26 26 28 65 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 26 26 28 61 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 65 5d 3d Data Ascii: 7ff9!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 65 5b 61 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 6c 2e 70 75 73 68 28 7b 74 61 72 3a 65 2c 66 6e 3a 69 28 65 2c 6e 29 7d 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 7c 7c 74 28 74 68 69 73 29 7d 2c 74 61 6b 65 52 65 63 6f 72 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 61 3d 74 68 69 73 2e 5f 77 61 74 63 68 65 64 2c 74 3d 30 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 5d 2e 66 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 77 61 74 63 68 65 64 3d 5b 5d 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 7d 7d 3b 66 Data Ascii: e[a]=!0;return e}),{}));l.push({tar:e,fn:i(e,n)});this._timeout\|\|t(this)},takeRecords:function(){for(var e=[],a=this._watched,t=0;t<a.length;t++)a[t].fn(e);return e},disconnect:function(){this._watched=[];clearTimeout(this._timeout);this._timeout=null}};f
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 65 2e 70 6f 70 28 29 3b 29 7b 66 3d 69 5b 6d 2e 69 5d 3b 75 3d 6f 5b 6d 2e 6a 5d 3b 69 66 28 6c 2e 6b 69 64 73 26 26 70 26 26 4d 61 74 68 2e 61 62 73 28 6d 2e 69 2d 6d 2e 6a 29 3e 3d 63 29 7b 61 2e 70 75 73 68 28 6e 28 7b 74 79 70 65 3a 22 63 68 69 6c 64 4c 69 73 74 22 2c 74 61 72 67 65 74 3a 74 2c 61 64 64 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 6e 65 78 74 53 69 62 6c 69 6e 67 3a 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3a 66 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 29 29 3b 70 2d 2d 7d 6c 2e 61 74 74 72 26 26 75 2e 61 74 74 72 26 26 72 28 61 2c 66 2c 75 2e 61 74 74 72 2c 6c 2e 61 66 69 6c 74 65 72 29 3b 6c 2e 63 68 61 72 44 61 74 61 26 26 33 3d 3d 3d Data Ascii: e.pop();){f=i[m.i];u=o[m.j];if(l.kids&&p&&Math.abs(m.i-m.j)>=c){a.push(n({type:"childList",target:t,addedNodes:[f],removedNodes:[f],nextSibling:f.nextSibling,previousSibling:f.previousSibling}));p--}l.attr&&u.attr&&r(a,f,u.attr,l.afilter);l.charData&&3===
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2e 61 74 74 72 3d 62 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 61 66 69 6c 74 65 72 26 26 21 61 2e 61 66 69 6c 74 65 72 5b 74 2e 6e 61 6d 65 5d 7c 7c 28 65 5b 74 2e 6e 61 6d 65 5d 3d 64 28 6e 2c 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 74 26 26 28 61 2e 6b 69 64 73 7c 7c 61 2e 63 68 61 72 44 61 74 61 7c 7c 61 2e 61 74 74 72 26 26 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 29 26 26 28 69 2e 6b 69 64 73 3d 5f 28 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 65 29 29 3b 74 3d 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 7d 65 6c 73 65 20 69 2e 63 68 61 72 44 61 74 61 3d 6e 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 69 7d 28 65 29 7d 66 75 6e Data Ascii: 1===n.nodeType&&(i.attr=b(n.attributes,(function(e,t){a.afilter&&!a.afilter[t.name]\|\|(e[t.name]=d(n,t));return e}),{}));t&&(a.kids\|\|a.charData\|\|a.attr&&a.descendents)&&(i.kids=_(n.childNodes,e));t=a.descendents}else i.charData=n.nodeValue;return i}(e)}fun
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 63 65 5b 6d 5d 2e 6e 6f 64 65 54 79 70 65 3f 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 3d 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 21 3d 3d 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 26 26 69 2e 70 75 73 68 28 7b 71 53 6f 75 72 63 65 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 2c 71 54 61 72 67 65 74 3a 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 7d 29 29 7d 7d 65 6c 73 65 20 6e 5b 75 5d 3d 61 5b 75 5d 7d 65 6c 73 65 20 73 5b 74 5d 3d 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 68 75 62 73 70 6f 74 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 28 65 29 3b 72 65 74 75 72 6e 20 73 5b 74 5d 7d 3b 68 6e 73 28 Data Ascii: ce[m].nodeType?l.qTarget[m]=l.qSource[m]:l.qSource[m]!==l.qTarget[m]&&i.push({qSource:l.qSource[m],qTarget:l.qTarget[m]}))}}else n[u]=a[u]}else s[t]=a;"undefined"!=typeof hubspot&&hubspot.updateDependencies&&hubspot.updateDependencies(e);return s[t]};hns(
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 61 79 3d 3d 21 31 26 26 28 74 3d 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 6c 6f 63 61 6c 65 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 69 3d 5b 5d 3b 61 26 26 6e 2e 70 75 73 68 28 61 29 3b 21 61 26 26 65 2e 6c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 6c 6f 63 61 6c 65 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 3d 61 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3b 7e 69 2e 69 6e 64 65 78 4f 66 28 61 29 7c 7c 69 2e 70 75 73 68 28 61 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 74 26 26 74 21 3d Data Ascii: ay==!1&&(t=[t]);return t};e.locales.default=function(a){var t,n=[],i=[];a&&n.push(a);!a&&e.locale&&n.push(e.locale);e.fallbacks&&e.defaultLocale&&n.push(e.defaultLocale);n.forEach((function(a){t=a.split("-")[0];~i.indexOf(a)\|\|i.push(a);e.fallbacks&&t&&t!=
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 2c 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 6e 3d 74 68 69 73 2e 69 6e 74 65 72 70 6f 6c 61 74 65 28 6e 2c 74 29 3b 65 6c 73 65 20 69 66 28 66 28 6e 29 26 26 74 68 69 73 2e 69 73 53 65 74 28 74 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 74 68 69 73 2e 70 6c 75 72 61 6c 69 7a 65 28 74 2e 63 6f 75 6e 74 2c 6e 2c 74 29 29 26 26 74 2e 6c 6f 63 61 6c 65 21 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 72 65 74 75 72 6e 20 65 2e 74 72 Data Ascii: f(null==n)return this.missingTranslation(a,t);if(null==n)return this.missingTranslation(a);if("string"==typeof n)n=this.interpolate(n,t);else if(f(n)&&this.isSet(t.count)&&void 0===(n=this.pluralize(t.count,n,t))&&t.locale!==this.defaultLocale)return e.tr
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 75 2e 73 69 6e 67 6c 65 51 75 6f 74 52 65 5f 2c 22 26 23 78 32 37 3b 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 65 2e 6d 69 73 73 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 74 3d 22 5b 6d 69 73 73 69 6e 67 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 2b 22 5d 22 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 31 38 6e 3a 20 4d 69 73 73 69 6e 67 20 74 65 6d 70 6c 61 74 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 76 61 6c 75 65 20 28 22 2b 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 6c 65 28 29 2b 22 29 3a 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 70 6c 75 72 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (e=e.replace(u.singleQuotRe_,"'"));return e};e.missingValue=function(e,a){var t="[missing "+a+" value from "+e+"]";console.warn("I18n: Missing template placeholder value ("+this.currentLocale()+"): "+a+" value from "+e);return t};e.pluralize=function
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 7d 29 2c 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 6e 75 6d 62 65 72 2e 66 6f 72 6d 61 74 22 2c 7b 6c 6f 63 61 6c 65 3a 6e 7d 29 2c 6f 29 3b 69 66 28 69 2e 61 62 62 72 65 76 69 61 74 65 29 7b 76 61 72 20 6c 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 2e 61 62 62 72 65 76 69 61 74 65 3f 69 2e 61 62 62 72 65 76 69 61 74 65 3a 22 73 68 6f 72 74 22 2c 73 3d 65 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 28 7b 74 79 70 65 3a 6c 2c 70 72 65 63 69 73 69 6f 6e 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 70 72 65 63 69 73 69 6f 6e 3f 74 2e 70 72 65 63 69 73 69 6f 6e 3a 30 7d 2c 69 29 3b 61 3d 74 68 69 73 2e 61 62 62 72 65 76 69 61 74 65 4e 75 6d 62 65 72 28 61 2c 73 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 74 6f 4e 75 6d 62 65 72 28 61 2c 69 29 3b 69 2e 63 75 Data Ascii: }),this.lookup("number.format",{locale:n}),o);if(i.abbreviate){var l="string"==typeof i.abbreviate?i.abbreviate:"short",s=e.prepareOptions({type:l,precision:void 0!==t.precision?t.precision:0},i);a=this.abbreviateNumber(a,s)}else a=this.toNumber(a,i);i.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50100	104.18.34.229	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	525	OUT	GET /6191183.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:24 UTC	1328	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:24 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: b4Dd0tA4bSwspSzfcNZdLlLeXCe8I/Y5REwrpMuXYcUjyWrONCD9+O4oybQC8JnWbPA3b/Wm0lw= x-amz-request-id: 63C0QKTQC5MSGWZD Last-Modified: Fri, 29 Mar 2024 16:29:17 GMT ETag: W/"23641b232f78d034b3780943727244e4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: pNVQjX8hkv4gRtVlacjPurjJtRazTBhr Access-Control-Allow-Origin: https://docsend.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-04-18 16:59:24 UTC	763	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 36 30 34 38 30 30 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 56 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 38 20 41 70 72 20 32 30 32 34 20 31 Data Ascii: Access-Control-Expose-Headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-TimingAccess-Control-Allow-Credentials: trueAccess-Control-Max-Age: 604800Timing-Allow-Origin: *Vary: originExpires: Thu, 18 Apr 2024 1
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 6f 6f 6b 69 65 50 6f 6c 69 63 79 27 2c 20 5b 7b 22 70 6f 72 74 61 6c 49 64 22 3a 36 31 39 31 31 38 33 2c 22 69 64 22 3a 32 31 35 36 30 33 38 34 2c 22 64 6f 6d 61 69 6e 22 3a 22 74 72 79 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 22 4c 61 6e 64 69 6e 67 20 50 61 67 65 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 33 2c 22 70 72 69 76 61 63 79 48 69 64 65 44 65 63 6c 69 6e 65 22 3a 66 61 6c 73 Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setCookiePolicy', [{"portalId":6191183,"id":21560384,"domain":"try.docsend.com","path":null,"label":"Landing Page Cookie Policy","enabled":true,"privacyPolicy":3,"privacyHideDecline":fals
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 43 6c 69 63 6b 20 6f 6e 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 61 74 65 67 6f 72 79 20 68 65 61 64 69 6e 67 73 20 74 6f 20 66 69 6e 64 20 6f 75 74 20 6d 6f 72 65 20 61 6e 64 20 63 68 61 6e 67 65 20 79 6f 75 72 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 2e 20 42 6c 6f 63 6b 69 6e 67 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 6e 65 67 61 74 69 76 65 6c 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 65 20 73 69 74 65 20 61 6e 64 20 6c 69 6d 69 74 20 74 68 65 20 73 65 72 76 Data Ascii: to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change your default settings. Blocking some types of cookies may negatively impact your experience on the site and limit the serv
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 68 61 74 2d 63 6f 6f 6b 69 65 73 2d 64 6f 65 73 2d 68 75 62 73 70 6f 74 2d 73 65 74 2d 69 6e 2d 61 2d 76 69 73 69 74 6f 72 2d 73 2d 62 72 6f 77 73 65 72 23 61 6e 61 6c 79 74 69 63 73 2d 63 6f 6f 6b 69 65 73 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 61 6e 61 6c 79 74 69 63 73 20 63 6f 6f 6b 69 65 73 2e 3c 2f 61 3e 3c 2f 70 3e 22 2c 22 6c 61 62 65 6c 22 3a 22 41 6e 61 6c 79 74 69 63 73 22 2c 22 74 6f 67 67 6c 65 4c 61 62 65 6c 22 3a 6e 75 6c 6c 7d 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 57 65 20 75 73 65 20 61 20 73 65 74 20 6f 66 20 63 6f 6f 6b 69 65 73 20 74 68 61 74 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 20 66 6f 72 Data Ascii: hat-cookies-does-hubspot-set-in-a-visitor-s-browser#analytics-cookies\" target=\"_blank\">Learn more about analytics cookies.</a></p>","label":"Analytics","toggleLabel":null},"functionality":{"description":"<p>We use a set of cookies that are optional for
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 20 50 61 67 65 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 33 2c 22 70 72 69 76 61 63 79 48 69 64 65 44 65 63 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 70 72 69 76 61 63 79 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 72 69 76 61 63 79 50 6f 6c 69 63 79 57 6f 72 64 69 6e 67 22 3a 22 3c 70 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 73 74 6f 72 65 73 20 63 6f 6f 6b 69 65 73 20 6f 6e 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 2e 20 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6c 6c 65 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 68 6f 77 20 79 6f 75 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6f 75 72 20 Data Ascii: Page Cookie Policy","enabled":true,"privacyPolicy":3,"privacyHideDecline":false,"privacyDefault":false,"privacyPolicyWording":"<p>This website stores cookies on your computer. These cookies are used to collect information about how you interact with our
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 6f 66 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 6e 65 67 61 74 69 76 65 6c 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 65 20 73 69 74 65 20 61 6e 64 20 6c 69 6d 69 74 20 74 68 65 20 73 65 72 76 69 63 65 73 20 77 65 20 61 72 65 20 61 62 6c 65 20 74 6f 20 70 72 6f 76 69 64 65 2e 3c 2f 70 3e 22 2c 22 6c 61 62 65 6c 22 3a 22 41 62 6f 75 74 20 43 6f 6f 6b 69 65 73 22 2c 22 74 6f 67 67 6c 65 4c 61 62 65 6c 22 3a 6e 75 6c 6c 7d 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 7b 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 74 6f 20 6d 61 6b 65 20 6f 75 72 20 61 64 73 20 6d 6f 72 65 20 65 6e 67 61 67 69 6e 67 20 61 6e 64 20 Data Ascii: of cookies may negatively impact your experience on the site and limit the services we are able to provide.</p>","label":"About Cookies","toggleLabel":null},"categories":{"advertisement":{"description":"<p>We use cookies to make our ads more engaging and
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 57 65 20 75 73 65 20 61 20 73 65 74 20 6f 66 20 63 6f 6f 6b 69 65 73 20 74 68 61 74 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 64 20 74 6f 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 7a 65 20 61 6e 64 20 6f 70 74 69 6d 69 7a 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 61 73 20 77 65 6c 6c 20 61 73 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 63 68 61 74 Data Ascii: functionality":{"description":"<p>We use a set of cookies that are optional for the website to function. They are usually only set in response to information provided to the website to personalize and optimize your experience as well as remember your chat
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 20 74 6f 20 63 6f 6c 6c 65 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 68 6f 77 20 79 6f 75 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6f 75 72 20 77 65 62 73 69 74 65 20 61 6e 64 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 2e 20 57 65 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 72 6f 76 65 20 61 6e 64 20 63 75 73 74 6f 6d 69 7a 65 20 79 6f 75 72 20 62 72 6f 77 73 69 6e 67 20 65 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 66 6f 72 20 61 6e 61 6c 79 74 69 63 73 20 61 6e 64 20 6d 65 74 72 69 63 73 20 61 62 6f 75 74 20 6f 75 72 20 76 69 73 69 74 6f 72 73 20 62 6f 74 68 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 61 6e 64 20 6f 74 68 65 Data Ascii: to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and othe
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 29 3b 6f 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 3b 69 2e 63 3d 65 3b 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 3b 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: );o.l=!0;return o.exports}i.m=t;i.c=e;i.d=function(t,e,n){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})};i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"});Object.defin
2024-04-18 16:59:24 UTC	1369	IN	Data Raw: 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 74 6f 70 3a 61 75 74 6f 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 33 70 78 20 23 65 61 66 30 66 36 7d 64 69 76 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 7d 64 69 76 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 64 69 76 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: ottom{position:fixed;border-bottom:0;bottom:0;top:auto;box-shadow:0 -1px 3px #eaf0f6}div#hs-eu-cookie-confirmation *{box-sizing:border-box!important}div#hs-eu-cookie-confirmation div#hs-eu-cookie-confirmation-inner{background:#fff;margin:0 auto;max-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50102	104.17.175.201	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	552	OUT	GET /analytics/1713459300000/6191183.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: cT/1xZd8GylzltfXk34KD/IdqLY4shH0MWqYUjhCTthg290gIAiCnWTpDcUfW7hxgaTtXzbQByw= x-amz-request-id: E3787FDEJ20YTC6G Last-Modified: Wed, 17 Apr 2024 21:27:51 GMT ETag: W/"cb84d302567e4ec61e1b28ac3b716748" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null Access-Control-Allow-Credentials: false Vary: origin Expires: Thu, 18 Apr 2024 17:04:24 GMT x-envoy-upstream-service-time: 14 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 3dcf050f-3124-425a-8008-ce38470d24c7 x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-6685c9958f-fp48c x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 3dcf050f-3124-425a-8008-ce38470d24c7 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 87663488cf84ada7-ATL
2024-04-18 16:59:25 UTC	343	IN	Data Raw: 37 62 39 63 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 36 33 39 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 76 61 72 20 5f 70 61 71 20 3d 20 5f 70 61 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 54 72 61 63 6b 69 6e 67 47 61 74 65 27 2c 20 27 41 6e 61 6c 79 74 69 63 73 54 72 61 63 6b 69 6e 67 3a 55 73 65 48 61 73 68 65 64 44 6f 6d 61 69 6e 73 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 Data Ascii: 7b9c/** * HubSpot Analytics Tracking Code Build Number 1.639 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];var _paq = _paq \|\| [];_hsq.push(['setTrackingGate', 'AnalyticsTracking:UseHashedDomains']);_hsq.push(['se
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 73 71 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 2d 73 69 74 65 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 75 62 73 70 6f 74 70 61 67 65 62 75 69 6c 64 65 72 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 71 2e Data Ascii: sq.push(['addCookieDomain', '.hs-sites.com']);_hsq.push(['addCookieDomain', '.docsend.com']);_hsq.push(['addCookieDomain', '.hubspotpagebuilder.com']);_hsq.push(['addCookieDomain', '.hubspot.com']);_hsq.push(['addCookieDomain', '.hsforms.com']);_hsq.
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 77 2e 6d 73 43 72 79 70 74 6f 2c 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 38 29 3b 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 65 2e 6c 65 6e 67 74 68 3c 34 3b 29 65 3d 22 30 22 2b 65 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 65 5b 30 5d 29 2b 69 28 65 5b 31 5d 29 2b 69 28 65 5b 32 5d 29 2b 69 28 65 5b 33 5d 29 2b 69 28 65 5b 34 5d 29 2b 69 28 65 5b 35 5d 29 2b 69 28 65 5b 36 5d 29 2b 69 28 65 5b 37 5d 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 2e 75 74 69 6c 73 2e 6c 6f 67 45 72 72 6f 72 28 6e 65 77 20 Data Ascii: w.msCrypto,e=new Uint16Array(8);t.getRandomValues(e);var i=function(t){for(var e=t.toString(16);e.length<4;)e="0"+e;return e};return i(e[0])+i(e[1])+i(e[2])+i(e[3])+i(e[4])+i(e[5])+i(e[6])+i(e[7])}};Math.uuid=Math.uuid\|\|function(){hstc.utils.logError(new
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 64 6f 6d 61 69 6e 7d 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 74 68 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 70 61 74 68 6e 61 6d 65 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 Data Ascii: urn this.doc.domain}};hstc.global.Context.prototype.getPathName=function(){return this.loc.pathname};hstc.global.Context.prototype.getTop=function(){return this.top};hstc.global.Context.prototype.getParent=function(){return this.parent};hstc.global.Contex
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 30 3b 65 2e 73 65 74 44 61 74 65 28 65 2e 67 65 74 44 61 74 65 28 29 2b 31 29 7d 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 48 6f 75 72 73 28 30 29 3b 74 2e 73 65 74 4d 69 6e 75 74 65 73 28 30 29 3b 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 30 29 3b 74 2e 73 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 74 72 75 6e 63 61 74 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 65 3f 74 2e 73 75 62 73 74 72 28 30 2c 65 29 3a 74 3a 22 22 Data Ascii: 0;e.setDate(e.getDate()+1)}return hstc.utils.clearTimePart(e)};hstc.utils.clearTimePart=function(t){t.setHours(0);t.setMinutes(0);t.setSeconds(0);t.setMilliseconds(0);return t};hstc.utils.truncateString=function(t,e){return t?t.length>e?t.substr(0,e):t:""
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 3d 3d 63 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 7b 7d 29 2c 63 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 65 5b 73 5d 3d 63 29 29 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 66 6f 72 28 69 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 2e 63 61 6c 6c 28 74 5b 69 5d 2c 69 2c 74 5b 69 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 74 5b 30 5d 3b 6e 3c 72 26 26 21 31 21 3d 3d 65 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 Data Ascii: ==c.length?[]:{}),c):void 0!==c&&(e[s]=c))}return e};hstc.utils.each=function(t,e){var i,n=0,r=t.length;if(void 0===r){for(i in t)if(!1===e.call(t[i],i,t[i]))break}else for(var s=t[0];n<r&&!1!==e.call(s,n,s);s=t[++n]);return t};hstc.utils.isDefined=functi
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 69 3d 65 3f 64 65 63 6f 64 65 55 52 49 28 74 29 3a 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 75 6e 65 73 63 61 70 65 28 74 29 7d 65 6c 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 74 6f 73 74 72 2e 63 61 6c 6c 28 74 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 75 74 63 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 68 61 73 68 53 74 72 69 Data Ascii: eof Function)try{i=e?decodeURI(t):n(t)}catch(e){i=unescape(t)}else i=unescape(t);return i};hstc.utils.isFunction=function(t){return"[object Function]"===hstc.utils.tostr.call(t)};hstc.utils.utcnow=function(){return(new Date).getTime()};hstc.utils.hashStri
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 69 64 20 30 21 3d 3d 6e 5b 73 5d 3f 6e 5b 73 5d 3a 73 29 3b 69 66 28 6c 29 66 6f 72 28 3b 68 3c 3d 6c 3b 68 2b 2b 29 7b 63 3d 22 22 3d 3d 3d 75 5b 68 5d 3f 61 2e 6c 65 6e 67 74 68 3a 75 5b 68 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c 6c 3f 61 5b 63 5d 7c 7c 28 75 5b 68 2b 31 5d 26 26 69 73 4e 61 4e 28 75 5b 68 2b 31 5d 29 3f 7b 7d 3a 5b 5d 29 3a 73 7d 65 6c 73 65 7b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 69 5b 63 5d 29 3f 69 5b 63 5d 2e 70 75 73 68 28 73 29 3a 76 6f 69 64 20 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a 69 5b 63 5d 3d 73 7d 7d 65 6c 73 65 20 63 26 26 28 69 5b 63 5d 3d 65 3f 76 6f 69 64 20 30 3a 22 22 29 7d 29 29 Data Ascii: id 0!==n[s]?n[s]:s);if(l)for(;h<=l;h++){c=""===u[h]?a.length:u[h];a=a[c=sanitizeKey(c)]=h<l?a[c]\|\|(u[h+1]&&isNaN(u[h+1])?{}:[]):s}else{c=sanitizeKey(c);hstc.utils.isArray(i[c])?i[c].push(s):void 0!==i[c]?i[c]=[i[c],s]:i[c]=s}}else c&&(i[c]=e?void 0:"")}))
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 73 2e 73 74 72 69 70 4e 75 6d 65 72 69 63 42 72 61 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5e 2e 2b 3f 29 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 73 65 43 75 72 72 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 74 2e 6d 61 74 63 68 28 2f 28 5b 5e 5c 64 5d 2a 29 28 5b 5c 64 5c 2e 2c 5d 2b 29 28 5b 5e 5c 64 5c 2e 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b 32 5d 2c 73 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 6e 3d 73 2e Data Ascii: s.stripNumericBrackets=function(t){return(t\|\|"").replace(/(^.+?)\[(.+?)\]/,"$1_$2")};hstc.utils.parseCurrency=function(t,e){if("number"==typeof t)return t;var i=t.match(/([^\d])([\d\.,]+)([^\d\.,])/);if(i){var n,r=i[2],s=r.split("."),o=r.split(",");n=s.
2024-04-18 16:59:25 UTC	1369	IN	Data Raw: 6e 21 31 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 20 74 3d 3d 53 74 72 69 6e 67 28 65 29 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 3f 65 21 3d 2b 65 3a 30 3d 3d 74 3f 31 2f 74 3d 3d 31 2f 65 3a 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 63 65 26 26 74 2e 67 6c 6f 62 61 6c 3d 3d 65 2e 67 6c 6f 62 61 6c 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 3d 3d Data Ascii: n!1;switch(n){case"[object String]":return t==String(e);case"[object Number]":return t!=+t?e!=+e:0==t?1/t==1/e:t==+e;case"[object Date]":case"[object Boolean]":return+t==+e;case"[object RegExp]":return t.source==e.source&&t.global==e.global&&t.multiline==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50103	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.35.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23919 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "261a6b567cdb0d004f86d922f69dcaf3" x-amz-server-side-encryption: AES256 x-amz-version-id: asMrsamDMvKgZIUJhr1wBo.2SpPb0xJp Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 83cc202d5ffc6f570c302a437a549f3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: fSBzEGTZ19rKmF9eNlfh6AJzRqV_l5-KnJvh4SsqZbsyaAdeUOnuow== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	6396	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 35 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e Data Ascii: //tealium universal tag - utag.35 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.
2024-04-18 16:59:25 UTC	2032	IN	Data Raw: 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 33 5b 69 5d 29 7b 67 2e 63 61 74 65 67 6f 72 79 33 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 33 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 34 5b 69 5d 29 7b 67 2e 63 61 74 65 67 6f 72 79 34 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 34 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 35 5b 69 5d 29 7b 67 2e 63 61 74 65 67 6f 72 79 35 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 63 61 74 65 67 6f 72 79 35 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 70 72 6f 6d 6f 5f 63 6f 64 65 5b 69 5d 29 7b 67 Data Ascii: f(u.data.product_category3[i]){g.category3=u.data.product_category3[i];}if(u.data.product_category4[i]){g.category4=u.data.product_category4[i];}if(u.data.product_category5[i]){g.category5=u.data.product_category5[i];}if(u.data.product_promo_code[i]){g
2024-04-18 16:59:25 UTC	9000	IN	Data Raw: 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 6d 6f 5f 63 72 65 61 74 69 76 65 5f 73 6c 6f 74 5b 66 5d 29 7b 67 2e 63 72 65 61 74 69 76 65 5f 73 6c 6f 74 3d 75 2e 64 61 74 61 2e 70 72 6f 6d 6f 5f 63 72 65 61 74 69 76 65 5f 73 6c 6f 74 5b 66 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 6d 6f 5f 6c 6f 63 61 74 69 6f 6e 5f 69 64 5b 66 5d 29 7b 67 2e 6c 6f 63 61 74 69 6f 6e 5f 69 64 3d 75 2e 64 61 74 61 2e 70 72 6f 6d 6f 5f 6c 6f 63 61 74 69 6f 6e 5f 69 64 5b 66 5d 3b 7d 0a 70 72 6f 6d 6f 2e 70 75 73 68 28 67 29 3b 7d 0a 72 65 74 75 72 6e 20 70 72 6f 6d 6f 3b 7d 3b 75 2e 65 76 65 6e 74 5f 6d 61 70 3d 7b 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 76 61 6c 75 65 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 63 75 72 72 65 6e 63 79 22 7d 2c 7b Data Ascii: if(u.data.promo_creative_slot[f]){g.creative_slot=u.data.promo_creative_slot[f];}if(u.data.promo_location_id[f]){g.location_id=u.data.promo_location_id[f];}promo.push(g);}return promo;};u.event_map={"add_to_cart":[{"name":"value"},{"name":"currency"},{
2024-04-18 16:59:25 UTC	6491	IN	Data Raw: 7b 63 64 6d 5f 65 76 65 6e 74 5f 66 6c 61 67 3d 66 61 6c 73 65 3b 63 64 6d 3d 64 2e 73 70 6c 69 74 28 22 2d 22 29 3b 76 61 72 20 63 64 6d 5f 6e 61 6d 65 2c 63 64 6d 5f 65 76 65 6e 74 3b 63 64 6d 5b 30 5d 3d 63 64 6d 5b 30 5d 2e 72 65 70 6c 61 63 65 28 22 63 6f 6e 74 65 6e 74 47 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 22 29 3b 69 66 28 63 64 6d 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 22 29 3e 3d 30 29 7b 63 64 6d 5f 6e 61 6d 65 3d 63 64 6d 5b 30 5d 3b 63 64 6d 5f 65 76 65 6e 74 3d 63 64 6d 5b 32 5d 7c 7c 63 64 6d 5b 31 5d 7c 7c 22 61 6c 6c 22 3b 7d 65 6c 73 65 7b 63 64 6d 5f 6e 61 6d 65 3d 63 64 6d 5b 31 5d 7c 7c 63 64 6d 5b 30 5d 3b 63 64 6d 5f 65 76 65 6e 74 3d 63 64 6d 5b 32 5d 3b 69 66 28 63 64 Data Ascii: {cdm_event_flag=false;cdm=d.split("-");var cdm_name,cdm_event;cdm[0]=cdm[0].replace("contentGroup","content_group");if(cdm[0].indexOf("content_group")>=0){cdm_name=cdm[0];cdm_event=cdm[2]\|\|cdm[1]\|\|"all";}else{cdm_name=cdm[1]\|\|cdm[0];cdm_event=cdm[2];if(cd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50104	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:24 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.40.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3850 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "b83ffdb979c228710d12a5f93f82f389" x-amz-server-side-encryption: AES256 x-amz-version-id: P53BuqzYG18pRl_b.Rs_Zb6iE0O6.ehv Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 edfe021cc573c40ebd669f3ba56d478e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: zwYYH4v-oxm0hf8stIlfzEr7hqYEcVk2o3doXmBCjtyah-HY1nQIjg== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	3850	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 30 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b Data Ascii: //tealium universal tag - utag.40 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.o[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50105	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.46.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1878 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "2231bae4566078a61424e541b984882c" x-amz-server-side-encryption: AES256 x-amz-version-id: bDYQuQbnzrJAn_8wQfmzaZNsEcjvJygS Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 45cccfef5c489e18337d3f412e9cfe24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: 61Ulzz_1JBHP6nP7mdgt8sckRu_-t_Aj70gvLKnhoD1qtw8GfcaTXA== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	1878	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 36 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 21 66 75 6e 63 74 69 6f 6e 28 71 2c 65 2c 76 2c 6e 2c 74 2c 73 29 7b 69 66 28 71 2e 71 70 29 72 65 74 75 72 6e 3b 6e 3d 71 2e 71 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 71 70 3f 6e 2e 71 70 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 6e 2e 71 75 65 75 65 3d 5b 5d 3b 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 Data Ascii: //tealium universal tag - utag.46 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.!function(q,e,v,n,t,s){if(q.qp)return;n=q.qp=function(){n.qp?n.qp.apply(n,arguments):n.queue.push(arguments);};n.queue=[];t=document.createElement(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50108	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.47.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26110 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:34 GMT ETag: "9b0b92715601739cf2d1fd5fb5db08bf" x-amz-server-side-encryption: AES256 x-amz-version-id: EwkdlpvjP3fhgT3gFmEFai8FHA3DbhuK Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 28a9ced33e36c97d5b67b60196e1b63e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: 5PBj8F-CW-DPKGXULulhuSA7IzMfmfbwF6KtDT4lCAU2zuJtuS1PBA== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 37 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e Data Ascii: //tealium universal tag - utag.47 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d*)\.
2024-04-18 16:59:25 UTC	1045	IN	Data Raw: 3b 7d 7d 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 6c 6f 61 64 65 72 5f 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 34 37 3a 43 41 4c 4c 42 41 43 4b 22 29 3b 69 66 28 21 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 7b 76 61 72 20 6f 3d 7b 74 69 3a 75 2e 64 61 74 61 2e 74 61 67 69 64 7d 3b 6f 2e 71 3d 75 65 74 71 3b 75 65 74 71 3d 6e 65 77 20 55 45 54 28 6f 29 3b 75 65 74 71 2e 70 75 73 68 28 22 70 61 67 65 4c 6f 61 64 22 29 3b 7d 0a 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 74 72 75 65 3b 76 61 72 20 69 2c 6a 2c 65 76 65 6e 74 5f 70 61 72 61 6d 2c 5f 65 76 65 6e 74 3b 66 6f 72 28 69 3d 30 3b 69 3c 75 2e 64 61 74 61 2e 65 76 65 6e 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b Data Ascii: ;}}};u.map={};u.extend=[];u.loader_cb=function(a,b,c){utag.DB("send:47:CALLBACK");if(!u.initialized){var o={ti:u.data.tagid};o.q=uetq;uetq=new UET(o);uetq.push("pageLoad");}u.initialized=true;var i,j,event_param,_event;for(i=0;i<u.data.event.length;i++){
2024-04-18 16:59:25 UTC	8681	IN	Data Raw: 7b 63 61 73 65 22 61 64 64 5f 70 61 79 6d 65 6e 74 5f 69 6e 66 6f 22 3a 63 61 73 65 22 70 61 67 65 5f 76 69 65 77 22 3a 77 69 6e 64 6f 77 2e 75 65 74 71 2e 70 75 73 68 28 22 65 76 65 6e 74 22 2c 5f 65 76 65 6e 74 2c 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 3a 63 61 73 65 22 72 65 6d 6f 76 65 5f 66 72 6f 6d 5f 63 61 72 74 22 3a 63 61 73 65 22 61 64 64 5f 74 6f 5f 77 69 73 68 6c 69 73 74 22 3a 63 61 73 65 22 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 22 3a 63 61 73 65 22 63 68 65 63 6b 6f 75 74 5f 70 72 6f 67 72 65 73 73 22 3a 64 61 74 61 3d 7b 65 76 65 6e 74 5f 76 61 6c 75 65 3a 75 2e 64 61 74 61 2e 65 76 65 6e 74 44 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 65 76 65 6e 74 5f 76 61 6c 75 Data Ascii: {case"add_payment_info":case"page_view":window.uetq.push("event",_event,u.data[_event]);break;case"add_to_cart":case"remove_from_cart":case"add_to_wishlist":case"begin_checkout":case"checkout_progress":data={event_value:u.data.eventData[_event].event_valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50107	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.48.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12413 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "b4880869bb31abd815d3aec2f4c50e06" x-amz-server-side-encryption: AES256 x-amz-version-id: Ac0Yp5Apdb3hN0Po2.QIUgiLxOuMXRg_ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 28a9ced33e36c97d5b67b60196e1b63e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: W1g7OivY7cyU8Y61WO7hHGZYEEykPn1XaAmedGLcKjT4gkJuBY7wcQ== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	12413	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 38 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e Data Ascii: //tealium universal tag - utag.48 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50106	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.50.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6355 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "c14ff8fd589f4a81b678402da478328f" x-amz-server-side-encryption: AES256 x-amz-version-id: hsLG9UZusXbvgQIoYh2CUNa0bl0HW.tn Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d81d9aa1c644a6b2b23d647e507c61f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: 2MHxjscQa-dBAMS1zTEGS8qw-Ra-RA9woqdyb-pOsqQk1z9TJgsP7A== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	6355	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 30 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6b 6d 71 3d 5f 6b 6d 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 Data Ascii: //tealium universal tag - utag.50 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.var _kmq=_kmq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50109	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	1067	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36297445788951?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A23%204%20-120&sdid=2663114D288F0848-571389B8AE568641&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=536&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:25 GMT expires: Wed, 17 Apr 2024 16:59:25 GMT last-modified: Fri, 19 Apr 2024 16:59:25 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626397724180480-4618487556596949299 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50110	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.51.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2626 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:34 GMT ETag: "41ff913c299c30e59f2ebbf6e367be77" x-amz-server-side-encryption: AES256 x-amz-version-id: alrbMM3C31vCDOctvIeJX.ssoB0RpUNT Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 532a309337a742b782e48474131af65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: ekq242FcYaKs0hgldatQJIJQ2vzA7UUaTcn6cEiVyK-VXLEWvqYi-g== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	2626	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 31 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 6e 61 6c 79 74 69 63 73 3d 77 69 6e 64 6f 77 2e 61 6e 61 6c 79 74 69 63 73 3d 77 69 6e 64 6f 77 2e 61 6e 61 6c 79 74 69 63 73 7c 7c 5b 5d 3b 69 66 28 21 61 6e 61 6c 79 74 69 63 73 2e 69 6e 69 74 69 61 6c 69 7a 65 29 69 66 28 61 6e 61 6c 79 74 69 63 73 2e 69 6e 76 6f 6b 65 64 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 Data Ascii: //tealium universal tag - utag.51 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.!function(){var analytics=window.analytics=window.analytics\|\|[];if(!analytics.initialize)if(analytics.invoked)window.console&&console.error&&console

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50112	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	997	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&t=How+Our+Secure+Document+Sharing+Works+-+DocSend&cts=1713459564051&vi=c45e810271b520e7349a9be4a5f70f0a&nc=true&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.1.1713459564046&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	1123	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:25 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8766348d7b1b44ea-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-76d96f8b5d-rk2jf x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 7878e772-555d-4836-a594-c4a4cfb9c5fb x-request-id: 7878e772-555d-4836-a594-c4a4cfb9c5fb X-Robots-Tag: none Set-Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; path=/; expires=Thu, 18-Apr-24 17:29:25 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-04-18 16:59:25 UTC	507	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6a 64 75 25 32 42 68 5a 38 54 44 6c 4c 50 44 69 59 57 4c 32 68 51 48 34 77 62 45 6b 4d 64 4d 4b 65 78 55 38 45 54 46 46 70 58 58 50 68 64 78 47 32 55 64 4d 4a 71 77 61 39 33 79 50 38 66 57 6b 53 44 67 64 44 71 6d 66 76 65 68 63 46 33 34 58 42 52 64 31 45 72 25 32 42 57 62 38 6d 37 64 33 70 4c 67 56 25 32 46 44 59 59 74 74 52 73 71 44 42 34 72 54 6e 5a 34 56 7a 47 72 78 36 37 78 58 5a 79 45 31 4e 31 53 71 4c 67 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jdu%2BhZ8TDlLPDiYWL2hQH4wbEkMdMKexU8ETFFpXXPhdxG2UdMJqwa93yP8fWkSDgdDqmfvehcF34XBRd1Er%2BWb8m7d3pLgV%2FDYYttRsqDB4rTnZ4VzGrx67xXZyE1N1SqLg"}],"group":"cf-nel","max_age":604800}
2024-04-18 16:59:25 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50111	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.52.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3670 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "fcc1267301b53851dd157a1649a1246c" x-amz-server-side-encryption: AES256 x-amz-version-id: nAEJoRvy1vGhxfZdh0LxNpnjkXV0t1Dn Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 83cc202d5ffc6f570c302a437a549f3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: aKvL4WOMKlJ-MxnNLLv15hQIYbSSyuuuS7WDMDUBgvGCLZrFUDKXBw== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	3670	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 32 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 69 64 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 76 69 65 77 3a 31 2c 6c 69 6e 6b 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 71 75 65 75 65 3d 5b 5d 3b 75 2e 6d 61 70 Data Ascii: //tealium universal tag - utag.52 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50114	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.58.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1825 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:35 GMT ETag: "4f4a4d6cb38af0978e283ccd8eb6e693" x-amz-server-side-encryption: AES256 x-amz-version-id: BQJqQdDCEzanXrMinGl01AOlioRrNCzh Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 532a309337a742b782e48474131af65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: pWuOI8uf5j-TjAsYPzo-LNMrX_EMwimBZU0Tk7UTE4u-A8hpmPLq1Q== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	1825	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 38 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 63 2c 70 2c 64 2c 75 2c 69 64 2c 69 29 7b 69 64 3d 27 27 3b 75 3d 27 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 69 6e 67 2e 67 32 63 72 6f 77 64 2e 63 6f 6d 2f 61 74 74 72 69 62 75 74 69 6f 6e 5f 74 72 61 63 6b 69 6e 67 2f 63 6f 6e 76 65 72 73 69 6f 6e 73 2f 27 2b 63 2b 27 2e 6a 73 3f 70 3d 27 2b 65 6e 63 6f 64 65 55 52 49 28 70 29 2b 27 26 65 3d 27 2b 69 64 3b 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 Data Ascii: //tealium universal tag - utag.58 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.(function(c,p,d,u,id,i){id='';u='https://tracking.g2crowd.com/attribution_tracking/conversions/'+c+'.js?p='+encodeURI(p)+'&e='+id;i=document.createE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50113	3.161.163.124	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	580	OUT	GET /utag/dropbox/docsend/prod/utag.63.js?utv=ut4.48.202403080337 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1947 Connection: close Date: Thu, 18 Apr 2024 16:59:26 GMT Last-Modified: Fri, 08 Mar 2024 03:37:34 GMT ETag: "5439bcaf10bcf48aaf914b8995b910ab" x-amz-server-side-encryption: AES256 x-amz-version-id: 8AveWJm_RuDPnWDHncPR2eBEPqYwF77C Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6ad9ac20a3a3a2b6b8ec8fc6709630fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: EIyzNM_bC0CwKgYX22bjnVsy_ZjNOXOP-7OSR6KhW-Wlw_S6HepcAA== Cache-Control: max-age=1296000
2024-04-18 16:59:25 UTC	1947	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 36 33 20 75 74 34 2e 30 2e 32 30 32 34 30 33 30 38 30 33 33 37 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 21 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 65 2c 76 2c 6e 2c 74 2c 73 29 0a 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 66 28 21 66 2e 5f 66 62 71 29 66 2e 5f 66 62 71 Data Ascii: //tealium universal tag - utag.63 ut4.0.202403080337, Copyright 2024 Tealium.com Inc. All Rights Reserved.!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50116	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	826	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s36297445788951?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A23%204%20-120&sdid=2663114D288F0848-571389B8AE568641&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Chow-it-works&g=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&lrt=536&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:25 GMT expires: Wed, 17 Apr 2024 16:59:25 GMT last-modified: Fri, 19 Apr 2024 16:59:25 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626397723590656-4618427445839406426 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50119	45.55.99.106	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	526	OUT	GET /i.js HTTP/1.1 Host: i.kissmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	300	IN	HTTP/1.1 200 OK server: nginx date: Thu, 18 Apr 2024 16:59:25 GMT content-type: application/javascript,application/x-javascript content-length: 39 expires: Sat, 18 May 2024 16:59:25 GMT cache-control: max-age=2592000 p3p: CP="NOI CURa ADMa DEVa TAIa OUR IND UNI NAV INT" connection: close
2024-04-18 16:59:25 UTC	39	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 28 5f 6b 6d 69 6c 29 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 5f 6b 6d 69 6c 28 29 3b Data Ascii: if(typeof(_kmil) == 'function')_kmil();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50121	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	815	OUT	GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.1.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	1288	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: application/json;charset=utf-8 Content-Length: 177 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 23 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 11c023be-299b-43a7-b602-cf8643c6e2ff x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-8b4sh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 11c023be-299b-43a7-b602-cf8643c6e2ff CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=WzCNRHSaEUyIkG6iGdG.HJKgiqwXrENPuvZHJpobtvw-1713459566-1.0.1.1-QV_mfHq_0fJHXxfXhNceaDC1l.ebfoxMrybZ3rRXLdTXstARSH.VTvK7DIDra1FdV6rBHOJVH8qdMynnGsxRww; path=/; expires=Thu, 18-Apr-24 17:29:26 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-04-18 16:59:26 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 31 74 70 75 25 32 42 77 78 6a 25 32 42 62 35 71 5a 47 4b 57 47 36 63 25 32 42 70 65 73 72 50 69 39 51 68 61 73 50 25 32 46 65 47 6c 46 25 32 42 6d 77 37 35 70 37 4f 51 57 4d 31 78 33 62 46 30 36 54 4c 25 32 42 4e 33 54 54 51 6e 37 44 47 75 6a 50 33 72 51 6f 6e 43 38 5a 51 25 32 42 45 4e 42 67 6b 61 59 43 62 63 45 70 25 32 46 39 53 64 45 6e 32 69 45 66 69 55 31 6e 50 49 4d 43 6d 36 39 76 78 30 37 6f 48 6e 5a 69 77 47 32 78 58 66 6d 4d 35 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=41tpu%2Bwxj%2Bb5qZGKWG6c%2BpesrPi9QhasP%2FeGlF%2Bmw75p7OQWM1x3bF06TL%2BN3TTQn7DGujP3rQonC8ZQ%2BENBgkaYCbcEp%2F9SdEn2iEfiU1nPIMCm69vx07oHnZiwG2xXfmM5"}],"group":"cf-nel","max_age
2024-04-18 16:59:26 UTC	177	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 34 35 39 35 36 36 30 32 35 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":true,"timestamp":1713459566025,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50122	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	605	OUT	POST /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 1308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:25 UTC	1308	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 64 38 64 63 30 32 66 31 2d 39 34 66 32 2d 34 61 30 63 2d 62 62 37 32 2d 63 32 35 35 63 32 34 61 39 30 38 63 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 35 38 37 61 37 34 39 36 30 61 36 62 30 38 31 64 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 6e 75 6c 6c 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 65 63 75 72 65 25 32 30 44 6f 63 75 6d 65 6e 74 25 32 30 53 68 61 72 69 6e Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=d8dc02f1-94f2-4a0c-bb72-c255c24a908c&r=&platform=web&installation_type=js-snippet&Idempotency-Key=587a74960a6b081d&internal=&is_intersection_booted=null&page_title=Secure%20Document%20Sharin
2024-04-18 16:59:26 UTC	869	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: no-cache Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 1000 X-Request-Id: 00030svgngte5tmi23ig Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS X-Runtime: 0.028435 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50123	31.13.65.7	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:25 UTC	542	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 16:59:26 UTC	1511	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 16:59:26 UTC	24	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 Data Ascii: /*** Copyright (c) 2017
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 Data Ascii: -present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 61 3b 21 Data Ascii: nsole.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),a;!
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,w
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c Data Ascii: ent))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})();return k.exports}(a,
2024-04-18 16:59:26 UTC	726	IN	Data Raw: 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6d 28 7b 74 79 70 65 3a 22 4e 4f 5f 45 56 45 4e 54 5f 4e 41 Data Ascii: l,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return m({type:"NO_EVENT_NA
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 22 4e 45 47 41 54 49 56 45 5f 45 56 45 4e 54 5f 50 41 52 41 4d 22 7d 29 3b 6f 3d 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 3a 6f 3d 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 21 21 67 5b 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3b 62 72 65 61 6b 7d 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6d 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 61 2c 70 61 72 61 6d 3a 69 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 50 41 52 41 4d 22 7d 29 7d 7d 7d 72 65 74 75 72 6e 20 6e 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 61 3d 70 28 61 2c 63 29 3b 61 2e 65 72 72 6f 72 26 26 62 28 61 2e 65 72 72 6f 72 29 3b 69 66 28 61 2e 77 61 72 6e 69 6e 67 73 29 66 6f 72 28 63 3d 30 3b 63 3c 61 2e 77 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b Data Ascii: "NEGATIVE_EVENT_PARAM"});o=k;break;case e:o=typeof l==="string"&&!!g[l.toUpperCase()];break}if(!o)return m({eventName:a,param:i,type:"INVALID_PARAM"})}}}return n(h)}function r(a,c){a=p(a,c);a.error&&b(a.error);if(a.warnings)for(c=0;c<a.warnings.length;c++
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 46 42 45 76 65 6e 74 73 42 61 74 63 68 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 31 65 33 2c 63 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 28 6e 75 6c 6c 2c 22 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 62 2e 6d 61 78 42 61 74 63 68 53 69 7a 65 3a 63 7d 66 75 6e 63 74 69 Data Ascii: FBEventsBatcher",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=1e3,c=10;function d(){var b=a.get(null,"batching");return b!=null?b.maxBatchSize:c}functi
2024-04-18 16:59:26 UTC	1500	IN	Data Raw: 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 75 66 66 65 72 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b Data Ascii: xports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBufferConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50124	3.163.113.148	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	585	OUT	GET /analytics.js/v1/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	759	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 112229 Connection: close Date: Thu, 18 Apr 2024 16:59:27 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Apr 2024 22:26:19 GMT ETag: "3aaf3196ddd813f9c2068fbd217377cc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=120 x-amz-version-id: J6FRsn8PNpx9Oi4iFR9LEJZwHcIVMdsn Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6417444f186fcad59e9411723c25d4ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: sO0Q2If8oMaziKDv3UZGzkI9IOqoOxwlr2kbf5fQTCyNzVWdE9Ffyw==
2024-04-18 16:59:26 UTC	10164	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-04-18 16:59:26 UTC	8459	IN	Data Raw: 61 6c 65 73 66 6f 72 63 65 3a 21 30 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 6e 5b 74 5d 7d 7d 2c 35 39 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 50 61 67 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 72 28 6e 28 31 32 38 35 29 29 2c 6f 3d 6e 28 39 35 31 Data Ascii: alesforce:!0};e.default=function(t){return!n[t]}},5926:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Page=void 0;var i=r(n(1285)),o=n(951
2024-04-18 16:59:26 UTC	16384	IN	Data Raw: 72 6f 70 65 72 74 79 28 65 29 26 26 28 74 5b 65 5d 3d 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5c 2e 5d 2b 2f 67 2c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 74 2e 65 78 70 6f 72 74 73 3d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 2c 74 2e 65 78 70 6f 72 74 73 2e 66 69 6e 64 3d 74 2e 65 78 70 6f 72 74 73 2c 74 2e 65 78 70 6f 72 74 73 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 65 28 72 29 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 6e 2c 69 2c 6f 29 2c 74 7d 2c 74 2e 65 78 Data Ascii: roperty(e)&&(t[e]=n),t}function i(t){return t.replace(/[^a-zA-Z0-9\.]+/g,"").toLowerCase()}t.exports=e((function(t,e){if(t.hasOwnProperty(e))return t[e]})),t.exports.find=t.exports,t.exports.replace=function(t,n,i,o){return e(r).call(this,t,n,i,o),t},t.ex
2024-04-18 16:59:26 UTC	16384	IN	Data Raw: 29 3b 69 26 26 69 5b 31 5d 26 26 28 6e 3d 69 5b 31 5d 29 7d 29 29 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 65 67 6d 65 6e 74 2e 63 6f 6d 22 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 28 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 6e 65 78 74 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 2c 6e 2c 72 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 28 30 2c 6f 2e 4d 29 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 28 30 2c 69 2e 77 49 29 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 5f 77 72 69 74 65 4b 65 79 2c 75 3d 76 6f 69 64 20 30 2c 61 3d Data Ascii: );i&&i[1]&&(n=i[1])})),n);return o\|\|"https://cdn.segment.com"},c=function(){var t=a();return"".concat(t,"/next-integrations")};function l(){for(var t,e,n,r=null!==(t=(0,o.M)())&&void 0!==t?t:null===(e=(0,i.wI)())\|\|void 0===e?void 0:e._writeKey,u=void 0,a=
2024-04-18 16:59:26 UTC	16384	IN	Data Raw: 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 3b 65 3d 69 3d 30 7d 66 6f 72 28 3b 65 3c 31 36 3b 65 2b 2b 29 74 3d 72 5b 69 2b 65 5d 2c 6e 2b 3d 36 3d 3d 65 3f 6f 5b 31 35 26 74 7c 36 34 5d 3a 38 3d 3d 65 3f 6f 5b 36 33 26 74 7c 31 32 38 5d 3a 6f 5b 74 5d 2c 31 26 65 26 26 65 3e 31 26 26 65 3c 31 31 26 26 28 6e 2b 3d 22 2d 22 29 3b 72 65 74 75 72 6e 20 69 2b 2b 2c 6e 7d 7d 2c 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 65 2e 73 70 6c 69 74 26 26 28 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 73 3d 65 2e 6c 65 6e 67 74 68 2c 75 3d 74 3b 6f 3c 73 26 26 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d Data Ascii: 6*Math.random()\|0;e=i=0}for(;e<16;e++)t=r[i+e],n+=6==e?o[15&t\|64]:8==e?o[63&t\|128]:o[t],1&e&&e>1&&e<11&&(n+="-");return i++,n}},380:function(t,e,n){"use strict";function r(t,e,n){e.split&&(e=e.split("."));for(var r,i,o=0,s=e.length,u=t;o<s&&"__proto__"!==
2024-04-18 16:59:26 UTC	9973	IN	Data Raw: 27 29 2e 63 6f 6e 63 61 74 28 72 29 29 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 73 74 6f 72 65 73 3d 74 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 75 6c 6c 2c 6e 3d 30 2c 72 3d 74 68 69 73 2e 73 74 6f 72 65 73 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 6e 5d 3b 74 72 79 7b 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 69 2e 67 65 74 28 74 29 29 29 72 65 74 75 72 6e 20 65 7d 63 61 74 63 68 28 65 29 7b 4a 28 69 2c 22 67 65 74 22 2c 74 2c 65 29 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 Data Ascii: ').concat(r))},N=function(){function t(t){this.stores=t}return t.prototype.get=function(t){for(var e=null,n=0,r=this.stores;n<r.length;n++){var i=r[n];try{if(null!=(e=i.get(t)))return e}catch(e){J(i,"get",t,e)}}return null},t.prototype.set=function(t,e){t
2024-04-18 16:59:26 UTC	8459	IN	Data Raw: 5b 33 2c 34 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 69 3d 74 2e 73 65 6e 74 28 29 2c 6e 2e 72 65 6a 65 63 74 28 69 29 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 5b 32 5d 7d 76 61 72 20 6f 7d 29 29 7d 29 29 7d 76 61 72 20 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 74 72 61 63 6b 53 75 62 6d 69 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 4d 65 74 68 6f 64 28 22 74 72 61 63 6b 53 75 62 6d 69 74 22 29 2c 74 68 69 73 2e 74 72 61 63 6b 43 6c 69 63 6b 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 4d 65 74 68 6f 64 28 22 74 72 61 63 6b 43 6c 69 63 6b 22 29 2c 74 68 69 73 2e 74 72 61 63 6b 4c 69 6e 6b 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 4d 65 74 68 6f 64 28 Data Ascii: [3,4];case 3:return i=t.sent(),n.reject(i),[3,4];case 4:return[2]}var o}))}))}var lt=function(){function t(t){var e=this;this.trackSubmit=this._createMethod("trackSubmit"),this.trackClick=this._createMethod("trackClick"),this.trackLink=this._createMethod(
2024-04-18 16:59:26 UTC	16384	IN	Data Raw: 2e 71 75 65 75 65 2e 70 6c 75 67 69 6e 73 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 74 7d 29 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 69 2e 71 75 65 75 65 2e 64 65 72 65 67 69 73 74 65 72 28 6e 2c 65 2c 69 29 3b 6e 2e 6c 6f 67 28 22 77 61 72 6e 22 2c 22 70 6c 75 67 69 6e 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 6e 6f 74 20 66 6f 75 6e 64 22 29 29 7d 29 29 2c 5b 34 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 72 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 2e 73 65 6e 74 28 29 2c 5b 32 2c 6e 5d 7d 7d 29 29 7d 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 74 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: .queue.plugins.find((function(e){return e.name===t}));if(e)return i.queue.deregister(n,e,i);n.log("warn","plugin ".concat(t," not found"))})),[4,Promise.all(r)];case 1:return t.sent(),[2,n]}}))}))},n.prototype.debug=function(t){return!1===t&&localStorage.
2024-04-18 16:59:26 UTC	9638	IN	Data Raw: 61 73 3a 62 2c 67 72 6f 75 70 3a 62 2c 73 63 72 65 65 6e 3a 62 7d 3b 72 65 74 75 72 6e 20 6c 2e 74 6f 64 6f 26 26 4e 74 28 64 2c 6c 2c 77 2c 4e 74 29 2c 77 7d 76 61 72 20 4c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 6e 29 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 66 69 65 6c 64 3d 74 2c 72 7d 72 65 74 75 72 6e 28 30 2c 74 2e 5a 54 29 28 6e 2c 65 29 2c 6e 7d 28 45 72 72 6f 72 29 2c 42 74 3d 22 69 73 20 6e 6f 74 20 61 20 73 74 72 69 6e 67 22 2c 55 74 3d 22 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 2c 52 74 3d 22 69 73 20 6e 69 6c 22 3b 66 75 6e 63 74 69 6f 6e 20 7a 74 Data Ascii: as:b,group:b,screen:b};return l.todo&&Nt(d,l,w,Nt),w}var Lt=function(e){function n(t,n){var r=e.call(this,"".concat(t," ").concat(n))\|\|this;return r.field=t,r}return(0,t.ZT)(n,e),n}(Error),Bt="is not a string",Ut="is not an object",Rt="is nil";function zt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50126	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1014	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F&t=How+Our+Secure+Document+Sharing+Works+-+DocSend&cts=1713459564051&vi=c45e810271b520e7349a9be4a5f70f0a&nc=true&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.1.1713459564046&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
2024-04-18 16:59:26 UTC	1200	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 876634917f53b03f-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 15 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-76d96f8b5d-fb59n x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: b907c762-7554-44d3-957a-97d092237158 x-request-id: b907c762-7554-44d3-957a-97d092237158 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0ItZxXH60uiMhT5VZRtU9nCNkGG%2BX4weiGcd4xKbHzzFKFkGo4X1v4fNUZtPMkpwFMLBw7TextVEllO1KCvvjlQyRU10k8TJZfw6BVVjpjdRtXQhpnbK%2F07eDRE0bJBn9zT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-18 16:59:26 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50127	104.18.43.31	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	613	OUT	GET /attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/how-it-works/&e= HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	1261	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=59621bb1112b965f64d3ecefd5a5f189; path=/; expires=Thu, 02 May 2024 16:59:26 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: 245f2098-472a-4ed5-94b1-591f937baadf x-runtime: 0.004018 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC
2024-04-18 16:59:26 UTC	322	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 50 64 75 6f 7a 74 46 78 54 50 62 36 6f 7a 2e 5a 48 4f 49 5a 77 36 73 4b 4b 74 72 4b 67 50 34 32 49 34 66 6e 5f 2e 65 51 50 4a 67 2d 31 37 31 33 34 35 39 35 36 36 2d 31 2e 30 2e 31 2e 31 2d 57 66 52 58 6e 64 54 77 78 4e 69 67 73 59 4b 72 71 34 47 43 30 6a 39 78 37 36 76 55 74 37 65 69 56 4d 54 43 6c 59 58 57 53 50 4b 30 2e 66 37 66 78 67 63 61 55 51 50 58 51 77 36 33 77 74 6f 54 68 4f 38 34 4a 65 46 42 45 6a 72 52 4f 31 5f 79 32 43 69 63 77 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 31 38 2d 41 70 72 2d 32 34 20 31 37 3a 32 39 3a 32 36 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 67 32 63 72 6f 77 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=PduoztFxTPb6oz.ZHOIZw6sKKtrKgP42I4fn_.eQPJg-1713459566-1.0.1.1-WfRXndTwxNigsYKrq4GC0j9x76vUt7eiVMTClYXWSPK0.f7fxgcaUQPXQw63wtoThO84JeFBEjrRO1_y2Cicww; path=/; expires=Thu, 18-Apr-24 17:29:26 GMT; domain=.g2crowd.com; HttpOnly; Secure;
2024-04-18 16:59:26 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50125	146.75.40.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	533	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Thu, 18 Apr 2024 16:59:26 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-bfi-kbfi7400065-BFI X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-18 16:59:26 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50131	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	364	OUT	GET /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0028643icp4181anhd40 X-Runtime: 0.019308 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:59:26 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50132	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	863	OUT	GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.1.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fhow-it-works%2F HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
2024-04-18 16:59:26 UTC	1365	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:26 GMT Content-Type: application/json;charset=utf-8 Content-Length: 177 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 56 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: ac1d5d82-2897-4586-9c30-6c2d02d321ca x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-8b4sh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: ac1d5d82-2897-4586-9c30-6c2d02d321ca CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=12Jua8HQuCzIxf0IR%2BrpFC6VdPrGy5GJ%2B19vwn7e8BAyvn1VbYqo8wKyHFkbxaz9Jxrs0PaZhlPVF59a7e28BA8tpHYgFZH3lPFQtFXVu%2BWFKykoGjKJ19Ae5rB%2FlwFzPkb9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-18 16:59:26 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 36 33 34 39 33 35 39 38 30 35 33 63 36 2d 41 54 4c 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 87663493598053c6-ATL
2024-04-18 16:59:26 UTC	177	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 34 35 39 35 36 36 36 39 32 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":true,"timestamp":1713459566692,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50135	108.177.122.156	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1220	OUT	GET /pagead/viewthroughconversion/982651595/?random=1713459565211&cv=11&fst=1713459565211&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:14:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:26 UTC	413	IN	Data Raw: 38 63 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8c1(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-18 16:59:26 UTC	580	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 54 6b 31 4e 6a 55 79 4d 54 45 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 39 38 32 36 35 31 35 39 35 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 33 34 35 39 35 36 35 32 31 31 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 36 30 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 32 34 35 31 33 39 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 Data Ascii: (this);;s.ss_(window,'OjE3MTM0NTk1NjUyMTE',['https://www.google.com/pagead/1p-user-list/982651595/?random\x3d1713459565211\x26cv\x3d11\x26fst\x3d1713456000000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v892451398za200\x26gcd\x3d13l3l3l3
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50136	108.177.122.156	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1218	OUT	GET /pagead/viewthroughconversion/982651595/?random=1713459565240&cv=11&fst=1713459565240&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:14:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:26 UTC	413	IN	Data Raw: 38 62 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8bf(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-18 16:59:26 UTC	578	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 54 6b 31 4e 6a 55 79 4e 44 41 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 39 38 32 36 35 31 35 39 35 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 33 34 35 39 35 36 35 32 34 30 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 36 30 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 32 34 35 31 33 39 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 Data Ascii: (this);;s.ss_(window,'OjE3MTM0NTk1NjUyNDA',['https://www.google.com/pagead/1p-user-list/982651595/?random\x3d1713459565240\x26cv\x3d11\x26fst\x3d1713456000000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v892451398za200\x26gcd\x3d13l3l3l3
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50137	172.253.124.154	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1344	OUT	GET /td/rul/982651595?random=1713459565211&cv=11&fst=1713459565211&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:14:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:26 UTC	470	IN	Data Raw: 65 65 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: ee6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 65 22 3a 22 31 6a 35 39 37 34 38 31 39 34 32 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 35 39 37 34 38 31 39 34 32 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 35 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b Data Ascii: e":"1j597481942","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j597481942\u0026tag_eid=44805655","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsK
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 4b 65 79 73 22 3a 5b 22 31 73 59 56 33 66 44 41 21 32 73 5a 6b 6a 65 62 67 21 33 73 41 41 70 74 44 56 35 5a 43 45 57 64 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 38 33 30 37 33 37 37 34 39 39 22 2c 22 35 39 37 34 38 31 39 34 32 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 35 39 35 36 36 38 35 30 31 31 33 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 34 39 35 35 34 37 35 35 31 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 36 37 30 32 36 32 37 34 39 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 Data Ascii: Keys":["1sYV3fDA!2sZkjebg!3sAAptDV5ZCEWd"],"userBiddingSignals":[["8307377499","597481942"],null,1713459566850113],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_W
2024-04-18 16:59:26 UTC	841	IN	Data Raw: 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 33 30 37 33 37 37 34 39 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 34 39 35 35 34 37 35 35 31 22 2c 22 36 39 36 37 30 32 36 32 37 34 39 36 22 2c 6e 75 6c 6c 2c 22 32 30 39 39 32 30 39 34 35 32 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 66 65 37 75 72 79 34 37 48 34 73 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e Data Ascii: D_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j8307377499","metadata":["161495547551","696702627496",null,"20992094523"],"adRenderId":"fe7ury47H4s"}],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50138	172.253.124.154	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1342	OUT	GET /td/rul/982651595?random=1713459565240&cv=11&fst=1713459565240&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:26 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:14:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:26 UTC	470	IN	Data Raw: 65 65 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: ee6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 65 22 3a 22 31 6a 37 36 38 39 30 37 31 36 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 38 39 30 37 31 36 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 35 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b Data Ascii: e":"1j768907168","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j768907168\u0026tag_eid=44805655","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsK
2024-04-18 16:59:26 UTC	1255	IN	Data Raw: 4b 65 79 73 22 3a 5b 22 31 73 4c 61 68 30 42 77 21 32 73 5a 6b 6a 65 62 67 21 33 73 41 41 70 74 44 56 36 58 31 50 43 47 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 38 33 30 37 33 37 37 34 39 39 22 2c 22 37 36 38 39 30 37 31 36 38 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 35 39 35 36 36 38 35 34 33 32 31 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 34 39 35 35 34 37 35 35 31 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 36 37 30 32 36 32 37 34 39 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 Data Ascii: Keys":["1sLah0Bw!2sZkjebg!3sAAptDV6X1PCG"],"userBiddingSignals":[["8307377499","768907168"],null,1713459566854321],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_W
2024-04-18 16:59:26 UTC	841	IN	Data Raw: 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 33 30 37 33 37 37 34 39 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 34 39 35 35 34 37 35 35 31 22 2c 22 36 39 36 37 30 32 36 32 37 34 39 36 22 2c 6e 75 6c 6c 2c 22 32 30 39 39 32 30 39 34 35 32 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 66 65 37 75 72 79 34 37 48 34 73 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e Data Ascii: D_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j8307377499","metadata":["161495547551","696702627496",null,"20992094523"],"adRenderId":"fe7ury47H4s"}],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.
2024-04-18 16:59:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50140	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:26 UTC	815	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 33 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 33 30 34 39 39 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A30%2C%22time_on_page_ms%22%3A30499%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22
2024-04-18 16:59:27 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:27 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:27 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:27 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5b42622e36a94b11a4fa804e12cc561c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50141	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryi5y8zMEvgGyUTQiI Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:26 UTC	1296	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 35 79 38 7a 4d 45 76 67 47 79 55 54 51 69 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 35 79 38 7a 4d 45 76 67 47 79 55 54 51 69 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 35 79 38 7a 4d 45 76 67 47 79 55 54 51 69 49 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryi5y8zMEvgGyUTQiIContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryi5y8zMEvgGyUTQiIContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryi5y8zMEvgGyUTQiICont
2024-04-18 16:59:27 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:27 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:27 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:27 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 27 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7987f179bf4448a38d855b0cc43b6385 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50143	31.13.65.7	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:26 UTC	1321	OUT	GET /signals/config/176175412745322?v=2.9.154&r=stable&domain=marketing.docsend.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 16:59:27 UTC	1513	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-04-18 16:59:27 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50144	3.163.113.148	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	608	OUT	GET /v1/projects/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	736	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 565 Connection: close Date: Thu, 18 Apr 2024 16:59:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 11 Jan 2023 18:10:48 GMT ETag: "bc775a8a3cd1b92c6c2066e255af778a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: X7PcbiDNxzSRh7JM_dWEgcJ4JHRnvkdM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7d2e8c2396efd943b9c80d028e8585f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: yTzQnGvHwav5dAStoQofq1sTX8qNJ_u_tQf0krO4hrB6Ev0BdIYyHA==
2024-04-18 16:59:27 UTC	565	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 53 65 67 6d 65 6e 74 2e 69 6f 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 70 45 45 38 4e 5a 6a 54 5a 74 41 64 66 41 66 78 73 65 78 52 56 47 4c 4c 32 56 7a 4d 6a 51 38 57 22 2c 22 75 6e 62 75 6e 64 6c 65 64 49 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 2c 22 61 64 64 42 75 6e 64 6c 65 64 4d 65 74 61 64 61 74 61 22 3a 74 72 75 65 2c 22 6d 61 79 62 65 42 75 6e 64 6c 65 64 43 6f 6e 66 69 67 49 64 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 53 65 74 74 69 6e 67 73 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 34 2e 37 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 73 22 3a 5b 22 62 72 6f 77 73 65 72 22 5d 7d 2c 22 72 65 74 72 79 51 75 65 75 65 22 3a 66 61 6c 73 65 7d 7d 2c 22 70 6c 61 6e 22 3a 7b 22 74 72 61 Data Ascii: {"integrations":{"Segment.io":{"apiKey":"pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]},"retryQueue":false}},"plan":{"tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50145	104.244.42.133	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	874	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	551	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:26 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0; Max-Age=63072000; Expires=Sat, 18 Apr 2026 16:59:27 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f07711e4d28bcb06 strict-transport-security: max-age=0 x-response-time: 8 x-connection-hash: dc336f3421d3ef1234e0957758fa6c29e76756698a9a7e3fe7fce6f4647bf778 connection: close
2024-04-18 16:59:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50146	104.244.42.67	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	891	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	1050	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:26 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A171345956725996146; Max-Age=63072000; Expires=Sat, 18 Apr 2026 16:59:27 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171345956725996146; Max-Age=63072000; Expires=Sat, 18 Apr 2026 16:59:27 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; Max-Age=63072000; Expires=Sat, 18 Apr 2026 16:59:27 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171345956725996146; Max-Age=63072000; Expires=Sat, 18 Apr 2026 16:59:27 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: c4e048c00a4b7a9d strict-transport-security: max-age=631138519 x-response-time: 8 x-connection-hash: f2069a1d2190264019729043c1cee767f6c3d7acc2f6dc63e04e868779c3cc55 connection: close
2024-04-18 16:59:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50147	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	1048	OUT	GET /pagead/1p-user-list/982651595/?random=1713459565211&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqP6maxz1Skmkf-yNMFc-bDiPv_83x2w&random=2658280308&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50148	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	1046	OUT	GET /pagead/1p-user-list/982651595/?random=1713459565240&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqXAsUCwFei-LJI3IaXns33M1Dt6S_lA&random=3446291755&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50150	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:27 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4455b190e4bb47988ec2b63b25f134f5 Connection: close
2024-04-18 16:59:27 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50154	104.244.42.197	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	687	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
2024-04-18 16:59:28 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:27 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 526e31c46d02134b strict-transport-security: max-age=0 x-response-time: 68 x-connection-hash: 4e79b7146f4380f6caa2d6c1005bd8c350214818dc022a28431b3b08a02aa2f8 connection: close
2024-04-18 16:59:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50153	104.244.42.195	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	824	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f6c069da-6944-4dfc-9b55-93cbc5cf8efc&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=eb806cd2-e26c-4323-80ad-51d28a1299ee&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
2024-04-18 16:59:28 UTC	401	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:27 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bc145c81cae9cf97 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 7bd54a8bb4d4573fd9da0c75980afc9356dc448d9a85fc5de3e60b9cc6a08700 connection: close
2024-04-18 16:59:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50156	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	846	OUT	GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 16:59:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50155	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	956	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 16:59:27 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 16:59:27 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 16:59:27 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50158	74.125.138.147	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	807	OUT	GET /pagead/1p-user-list/982651595/?random=1713459565211&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqP6maxz1Skmkf-yNMFc-bDiPv_83x2w&random=2658280308&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50159	74.125.138.147	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	805	OUT	GET /pagead/1p-user-list/982651595/?random=1713459565240&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqXAsUCwFei-LJI3IaXns33M1Dt6S_lA&random=3446291755&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:27 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50162	3.163.113.148	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:27 UTC	392	OUT	GET /v1/projects/pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:28 UTC	743	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 565 Connection: close Date: Thu, 18 Apr 2024 16:59:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 11 Jan 2023 18:10:48 GMT ETag: "bc775a8a3cd1b92c6c2066e255af778a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: X7PcbiDNxzSRh7JM_dWEgcJ4JHRnvkdM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a1b2735f2a7b650b7f10bffd38aa8ffa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: 9iTpy6jYB7sdN-zLpdvVU2EItnlPRdObYOppHI_zBv3xuVmBDp5IHg== Age: 1
2024-04-18 16:59:28 UTC	565	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 53 65 67 6d 65 6e 74 2e 69 6f 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 70 45 45 38 4e 5a 6a 54 5a 74 41 64 66 41 66 78 73 65 78 52 56 47 4c 4c 32 56 7a 4d 6a 51 38 57 22 2c 22 75 6e 62 75 6e 64 6c 65 64 49 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 2c 22 61 64 64 42 75 6e 64 6c 65 64 4d 65 74 61 64 61 74 61 22 3a 74 72 75 65 2c 22 6d 61 79 62 65 42 75 6e 64 6c 65 64 43 6f 6e 66 69 67 49 64 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 53 65 74 74 69 6e 67 73 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 34 2e 37 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 73 22 3a 5b 22 62 72 6f 77 73 65 72 22 5d 7d 2c 22 72 65 74 72 79 51 75 65 75 65 22 3a 66 61 6c 73 65 7d 7d 2c 22 70 6c 61 6e 22 3a 7b 22 74 72 61 Data Ascii: {"integrations":{"Segment.io":{"apiKey":"pEE8NZjTZtAdfAfxsexRVGLL2VzMjQ8W","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]},"retryQueue":false}},"plan":{"tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50161	44.234.198.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:28 UTC	607	OUT	POST /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1033 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:28 UTC	1033	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 36 3a 35 39 3a 32 36 2e 34 36 32 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 64 63 31 38 32 39 36 38 2d 65 36 61 37 2d 34 65 61 62 2d 61 62 34 62 2d 30 39 64 64 31 62 32 35 31 30 35 32 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 68 6f 77 2d 69 74 2d 77 6f 72 6b 73 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 44 72 6f 70 62 6f 78 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 68 6f 77 2d 69 74 2d 77 6f 72 6b Data Ascii: {"timestamp":"2024-04-18T16:59:26.462Z","integrations":{},"anonymousId":"dc182968-e6a7-4eab-ab4b-09dd1b251052","type":"page","properties":{"path":"/how-it-works/","referrer":"","search":"","title":"Dropbox","url":"https://marketing.docsend.com/how-it-work
2024-04-18 16:59:28 UTC	246	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:28 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://marketing.docsend.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-18 16:59:28 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50163	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:28 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1619 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6X3b7fghrWY0XdJt Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:28 UTC	1619	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 58 33 62 37 66 67 68 72 57 59 30 58 64 4a 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 58 33 62 37 66 67 68 72 57 59 30 58 64 4a 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 58 33 62 37 66 67 68 72 57 59 30 58 64 4a 74 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary6X3b7fghrWY0XdJtContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary6X3b7fghrWY0XdJtContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundary6X3b7fghrWY0XdJtCont
2024-04-18 16:59:28 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:28 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:28 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:28 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 65 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b3fa0fa7382645dbab1b82028ee046ff Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50167	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:28 UTC	605	OUT	GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:28 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=3, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 16:59:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50166	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:28 UTC	642	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fhow-it-works%2F&rl=&if=true&ts=1713459566301&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459565578&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:28 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 16:59:28 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 16:59:28 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50169	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:28 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryffRaxurxVkrK1MPV Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:28 UTC	1267	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 66 66 52 61 78 75 72 78 56 6b 72 4b 31 4d 50 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 66 66 52 61 78 75 72 78 56 6b 72 4b 31 4d 50 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 66 66 52 61 78 75 72 78 56 6b 72 4b 31 4d 50 56 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryffRaxurxVkrK1MPVContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryffRaxurxVkrK1MPVContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryffRaxurxVkrK1MPVCont
2024-04-18 16:59:29 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:29 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:29 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:29 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:28 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c79d2664e19d4e108047ded66522caca Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50171	44.240.52.117	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:29 UTC	342	OUT	GET /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:29 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 16:59:29 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-18 16:59:29 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50172	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:30 UTC	1332	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:30 UTC	3296	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 65 74 72 69 63 73 2f 6e 61 76 69 67 61 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 2c 22 69 64 22 3a 22 62 35 61 65 66 61 63 37 2d 61 31 63 62 2d 34 35 30 65 2d 61 62 62 35 2d 30 31 39 39 62 63 34 63 39 30 33 66 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 61 74 6c 61 73 73 65 72 76 6c 65 74 5c 22 3a 5c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5c 22 2c 5c 22 70 61 67 65 5f 6e 61 6d 65 5c 22 3a 5c 22 63 63 70 61 5f 69 66 72 61 6d 65 5c 22 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 5c 22 3a 30 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 53 74 61 72 74 Data Ascii: {"events":[{"type":"event","name":"performance_metrics/navigation_timing","id":"b5aefac7-a1cb-450e-abb5-0199bc4c903f","detail":"{\"atlasservlet\":\"privacy_consent\",\"page_name\":\"ccpa_iframe\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart
2024-04-18 16:59:31 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 121 X-Webkit-Csp: sandbox Content-Length: 51 Date: Thu, 18 Apr 2024 16:59:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7da4a3fc83e54c7ea17282afa39e173a Connection: close
2024-04-18 16:59:31 UTC	51	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 32 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 32 22 7d Data Ascii: {"msg":"Measures processed: 2 Events processed: 2"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50173	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:31 UTC	628	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:31 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Thu, 18 Apr 2024 16:59:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 83fb6116713948faa721e494e6682f98 Connection: close
2024-04-18 16:59:31 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50174	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:32 UTC	1332	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3268 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:32 UTC	3268	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 65 74 72 69 63 73 2f 6e 61 76 69 67 61 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 2c 22 69 64 22 3a 22 32 38 34 63 34 38 38 34 2d 64 35 31 66 2d 34 63 65 37 2d 61 31 65 37 2d 30 31 35 32 61 63 61 36 32 33 63 36 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 61 74 6c 61 73 73 65 72 76 6c 65 74 5c 22 3a 5c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5c 22 2c 5c 22 70 61 67 65 5f 6e 61 6d 65 5c 22 3a 5c 22 63 63 70 61 5f 69 66 72 61 6d 65 5c 22 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 5c 22 3a 30 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 53 74 61 72 74 Data Ascii: {"events":[{"type":"event","name":"performance_metrics/navigation_timing","id":"284c4884-d51f-4ce7-a1e7-0152aca623c6","detail":"{\"atlasservlet\":\"privacy_consent\",\"page_name\":\"ccpa_iframe\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart
2024-04-18 16:59:33 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 122 X-Webkit-Csp: sandbox Content-Length: 51 Date: Thu, 18 Apr 2024 16:59:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a00fafaee1aa424ca5510c36e0a3a5ad Connection: close
2024-04-18 16:59:33 UTC	51	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 32 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 32 22 7d Data Ascii: {"msg":"Measures processed: 2 Events processed: 2"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50175	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:33 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1619 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryVofdgO0iMXQrXb5h Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:33 UTC	1619	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 6f 66 64 67 4f 30 69 4d 58 51 72 58 62 35 68 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 6f 66 64 67 4f 30 69 4d 58 51 72 58 62 35 68 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 6f 66 64 67 4f 30 69 4d 58 51 72 58 62 35 68 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryVofdgO0iMXQrXb5hContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryVofdgO0iMXQrXb5hContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryVofdgO0iMXQrXb5hCont
2024-04-18 16:59:33 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:33 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:33 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:33 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:33 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ddd45a0c887544268e8fff45e050f9d9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50176	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:33 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:33 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 33 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 33 30 30 30 37 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A30%2C%22time_on_page_ms%22%3A30007%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url
2024-04-18 16:59:34 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:34 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:34 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:34 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:33 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1c70c65a0fa143bea546b5a0a8b3a2ec Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50177	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:33 UTC	628	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:33 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Thu, 18 Apr 2024 16:59:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 042d55042d9f40b697140eb64c316a8c Connection: close
2024-04-18 16:59:33 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50179	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:34 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:34 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:34 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9850ed5729ef469a84e81d009a074fef Connection: close
2024-04-18 16:59:34 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50180	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:36 UTC	1189	OUT	GET /embed/lvEU8OcKg2k HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:37 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 16:59:37 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4c 30 51 65 4a 4d 77 33 39 68 55 62 5f 32 50 6a 5a 4f 4d 5f 4e 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="L0QeJMw39hUb_2PjZOM_NQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 74 74 6f 6e Data Ascii: login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 Data Ascii: populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":tru
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 Data Ascii: rue,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_log
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 Data Ascii: se_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"w
2024-04-18 16:59:37 UTC	1592	IN	Data Raw: 63 68 5f 6f 66 66 73 65 74 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d Data Ascii: ch_offset_sec_for_livestream_optimization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50182	172.253.124.119	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:37 UTC	1038	OUT	GET /vi_webp/lvEU8OcKg2k/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:38 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 17514 Date: Thu, 18 Apr 2024 16:59:38 GMT Expires: Thu, 18 Apr 2024 18:59:38 GMT Cache-Control: public, max-age=7200 ETag: "1597431015" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:38 UTC	632	IN	Data Raw: 52 49 46 46 62 44 00 00 57 45 42 50 56 50 38 20 56 44 00 00 30 ec 01 9d 01 2a 00 05 d0 02 3e 6d 34 96 49 24 22 a2 31 21 91 99 0a 20 0d 89 67 6e fc 3a 99 a8 d3 fa a7 56 ff f3 fc 68 7f cf 6f 2b 38 5c ff 9f 3f 39 f1 77 fc 5e eb 78 e7 d4 df 99 ff 1d fb bf fe 53 df e7 90 fb ad f5 67 d9 3f 64 ff 64 f7 a5 df c7 6c f9 72 f9 af ed 1f f6 bf c6 7e 63 fc c7 ff 67 ff 93 fc 77 ba ef d6 7f fa 3d c1 bf 5a bf de ff 84 ff 39 fb 2d f1 97 fb 25 ee b7 f7 87 d4 57 f5 ef f2 ff fa 7f c8 7b b0 ff bb ff c9 fe ab de 2f f6 8f f8 5f f5 3f 60 3e 40 ff a9 ff 9c ff e1 d8 b7 fe 73 fe ff b1 57 f4 3f f5 5f ff fd 9e bf ef fe e3 7c 35 7f 5b ff 8f fb 5f ff 73 e4 7b f6 2b ff 57 67 4f 4b ff 64 ff d2 7a 82 f1 4b f5 1f e1 bf 6e bd 19 fc 83 e9 ff c6 7e 5b fa fd 66 9f 8c cf 43 bf 94 fd ec fd 47 f9 Data Ascii: RIFFbDWEBPVP8 VD0*>m4I$"1! gn:Vho+8\?9w^xSg?ddlr~cgw=Z9-%W{/_?`>@sW?_\|5[_s{+WgOKdzKn~[fCG
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: b6 0f 2b 55 79 d9 f8 fd 2c 36 c1 e5 6a af 3b 3f 1f a5 86 d6 87 fd a6 29 96 a7 31 a6 94 b2 b5 57 9d 9f 8f cf f4 d6 79 e2 2a 27 b3 f1 fa 58 6d 83 a5 d5 19 2c 1a 43 7b e8 36 c5 34 bf bb 3f 1f a5 86 d8 3c ad 55 e7 67 e3 f4 b0 db 07 95 aa bc ec fc 7a 0f 90 b1 6f c4 ce 66 07 f5 19 aa bc ec fc 7e 96 12 81 e2 db 5a ef 60 06 65 14 47 76 7e 3f 4b 0d b0 79 5a a3 2a 20 4e ca 02 89 5a ab ce cf c7 e9 61 b6 0f 2b 55 79 d9 f8 fd 2c 36 c1 e5 6a af 3b 37 33 fc 6a 05 aa bc ec fc 7e 7d c6 6b f6 b1 08 1f 35 f0 db 80 1c 2a 84 21 c1 ba 56 21 03 e6 bd eb af 5d 8c 24 78 14 f1 5c 36 ea c7 bb 10 ea 56 3d d8 87 52 b1 ee c4 3a 95 8f 76 21 d4 ac 7b b1 0b e2 6a e8 10 3e 53 fc 77 31 0c 9c ea 56 3d d8 87 56 6c 6b e1 b7 56 3d d8 87 52 b1 ee c4 3a 95 8f 76 21 d4 ac 7b b1 0e a5 63 dd 88 75 Data Ascii: +Uy,6j;?)1Wy'Xm,C{64?<Ugzof~Z`eGv~?KyZ NZa+Uy,6j;73j~}k5*!V!]$x\6V=R:v!{j>Sw1V=VlkV=R:v!{cu
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 43 fb 7e cf f6 63 48 eb ff 1f 35 f0 db ab 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 3d d8 87 4f db 04 ad 10 0f 73 b4 e6 f6 24 5c 54 62 1f af 65 08 1d 50 a8 e2 3e 84 c6 c7 7b 71 8e c9 06 66 dd 7d 55 1e b1 c2 2e 2c 7b b1 0e a5 63 dd 88 75 2b 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 48 57 45 9f 80 06 bf f2 a0 d2 df 14 2a 5e b5 bd 8c 4b b5 38 06 67 d7 03 1f a2 c2 96 88 f1 9a dc cf 57 c2 27 47 8e ec 96 cf ff f8 88 a3 09 9b 2a 21 72 0d 5f e1 54 f8 45 0b 98 fe d5 8f 76 21 d4 ac 7b b1 0e a5 63 dd 88 75 2b 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 3d 6d 66 8d 03 54 12 cb b9 4d 88 09 33 fc 9c 0e 06 67 ae fb 46 b8 6d 46 ff 07 ac 3d c8 62 17 57 ec a0 ae 96 27 41 af 9b 64 7b dd 1a 95 54 aa 55 2a 95 4a a5 52 a9 44 8e d8 90 37 1b b8 d1 3d d8 87 52 b1 ee c4 3a 95 8f 76 Data Ascii: C~cH5CXbJV=Os$\TbeP>{qf}U.,{cu+CXbJVHWE^K8gW'G!r_TEv!{cu+CXbJV=mfTM3gFmF=bW'Ad{TU*JRD7=R:v
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: ca 7f de b1 3a 20 37 0b 1b bb 7f 33 cb f7 25 f3 54 28 57 19 75 ee aa e1 72 cc a5 14 44 67 2f 82 5c 89 c3 f4 3b 7c fe a1 5b 9a 16 aa f3 b3 f1 fa 58 6d 83 ca d5 5e 76 32 7e 93 11 17 bb cf 8b 04 5b 73 84 f3 84 27 3d 1c 02 30 cf 9b 11 8d 20 e0 e3 72 7b 0c 88 1a fb 0f 85 52 c4 61 9f 36 23 1a 41 c1 c6 e4 f6 19 10 35 f6 1f 0a a5 88 c3 3e 6c 46 34 83 83 8d c9 ec 32 19 c8 5f 82 7e 17 87 d8 07 5f fa 62 88 bd b9 03 44 eb 89 52 01 ab fe 32 13 4a 51 a2 bd e9 64 32 61 3a ed 1a ff 0a 5f 8c 53 56 75 69 12 af 5f c0 23 29 68 96 f7 fe e1 c1 e9 1a 4f bb 20 6a 15 b9 a1 6a af 3b 3f 1f a5 86 d8 3c ad 55 e6 e2 cf d2 48 9c 8d 83 ca d5 5e 76 7e 3f 4b 0d b0 79 36 d0 32 e7 f6 f3 3d 24 d7 ff 9e b4 06 d0 ac c8 cc b9 09 8e 46 77 27 f7 40 6b 62 de 0a 97 00 2b c4 06 1c c1 55 5c b2 4c 16 Data Ascii: : 73%T(WurDg/\;\|[Xm^v2~[s'=0 r{Ra6#A5>lF42_~_bDR2JQd2a:_SVui_#)hO jj;?<UH^v~?Ky62=$Fw'@kb+U\L
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 5e 34 5f 8f 8f fa 34 3f e7 81 9d 22 74 4e 09 16 a9 7c 89 41 f6 4e 20 81 7d e9 6a ac 3e 84 93 9a 4c 4f 7c a5 05 b6 cf ea 2b f0 60 03 33 94 d9 be b7 5d 3a 96 88 37 09 89 5e 54 15 2c c5 80 dd f5 d6 e9 d3 c0 97 93 d6 14 18 c9 56 ab 1b d9 46 bb 4a 08 7a 26 b9 be 8c c7 93 98 00 00 29 3b 37 6a 71 f9 e0 8e 7c 04 ab 3c 5e e6 36 f9 48 57 03 cd b6 ea 30 fd 32 b0 83 20 9b e7 e3 6f 46 49 8f 46 00 00 00 06 a7 13 60 84 32 d5 57 c7 24 c1 cc 77 78 93 70 a7 a4 af 7e d7 9f e4 d0 ec 40 f6 c6 eb a0 c7 3b 73 dd df e4 85 34 76 90 4a f6 58 00 00 01 ad ec 88 0a c1 48 18 3b 24 02 68 96 5f 46 7a 28 2b 39 80 00 0f 19 35 e5 b2 84 11 92 71 e5 4c 0d 1c 16 ad 6a d3 63 8f dc 36 99 1d 02 42 22 d3 24 5c e5 0a 3e e6 5f da a7 98 af d3 e0 a2 82 a1 31 d1 c4 33 1a d0 e7 6b 4c c0 24 07 47 2f 82 Data Ascii: ^4_4?"tN\|AN }j>LO\|+`3]:7^T,VFJz&);7jq\|<^6HW02 oFIF`2W$wxp~@;s4vJXH;$h_Fz(+95qLjc6B"$\>_13kL$G/
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 71 04 18 8e f4 9b a3 d4 09 66 09 b7 63 f5 c5 80 00 31 f1 78 c4 a2 82 c8 e8 20 69 21 e8 c0 dc 93 3a a6 04 3b 0d a8 e8 26 d2 03 d9 4e 38 a9 76 60 88 b7 62 fc 3e 13 71 59 f1 cd 3e 16 58 c7 53 6a 3a 4b d7 eb 51 fb 00 d2 44 24 5a 78 b2 b8 2c 85 f4 fc 35 f5 7a 21 07 60 4d b3 ec 29 79 bc 45 56 ae 6c c2 ce d8 80 dc 87 53 c0 e1 18 e6 d3 63 78 69 6d c1 a7 47 66 26 17 6e ed 4b 2e 59 0a b9 5a 0d ed fc 0c de 62 1c 08 e1 e1 f2 a4 05 71 e5 da da bc a0 93 45 d2 5d 9c cd 2c e9 f5 f9 80 53 fe d8 20 9b db 05 cf a6 cc b2 b6 93 61 c4 da 06 97 72 e7 1a 5f 38 59 6d bb cc 72 74 96 22 ed 39 52 4c a8 67 83 cd 34 1b ab e9 17 aa 70 81 1e aa ad 58 6f d1 73 82 93 0e 6d 09 82 c8 fc b7 eb bd 65 6f 36 e1 20 a2 2d 17 5b f0 89 44 5d 06 25 e1 80 24 a9 50 ec f7 27 7f 3d 0b 85 b0 bf 57 ea 07 Data Ascii: qfc1x i!:;&N8v`b>qY>XSj:KQD$Zx,5z!`M)yEVlScximGf&nK.YZbqE],S ar_8Ymrt"9RLg4pXosmeo6 -[D]%$P'=W
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 41 79 8a b7 f1 f3 92 11 24 2b 99 9f 2b 8a 7d 5e e2 be 45 de 92 6a 46 af e1 f8 9c 09 e3 ff 3e 23 04 62 78 2c e9 d3 49 e3 a8 7b 5a 79 3b 3e 33 f1 31 60 22 84 7c ef 4a 9d a9 c1 55 b3 85 9c b3 cd a6 a8 7a 53 64 60 74 c6 64 e8 79 e3 6b e0 7e e3 c5 0b 4d 15 d4 fb 79 2b 29 eb f3 8e 56 b2 9d 46 94 21 cc 24 5b 95 60 cd 74 10 7f ad c0 00 72 91 16 49 3e ac 1c 6b f9 5d 47 82 36 8c a6 95 85 98 42 ec 9e 24 be 07 3f 40 c9 60 57 db d0 3d 8b b5 61 04 aa 08 8a 85 a4 d4 7c 2e ad e9 e5 2e 63 e2 56 ba 82 d7 8f 09 de 41 65 1f e9 f4 08 3a 60 c8 6c c3 fa 10 ee f3 16 5e 64 ab 5c 6f a6 cc c1 1d 8d a1 12 cb ec b2 49 19 1a 8e a2 22 aa b4 ea 67 d2 02 73 84 24 c2 19 d6 df 83 ee a8 7a 2d 12 54 2c 7f 7a 86 2a 0a 7a 85 9e 54 06 fb 9c 3e b0 b5 3d 2e 64 6e f0 dd 99 bd 51 9e 07 7c e5 38 3f Data Ascii: Ay$++}^EjF>#bx,I{Zy;>31`"\|JUzSd`tdyk~My+)VF!$[`trI>k]G6B$?@`W=a\|..cVAe:`l^d\oI"gs$z-T,z*zT>=.dnQ\|8?
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: f5 3e 75 fd 27 ab 97 84 51 0d 5f a0 5d ae 2e 9c df cb c7 5d 91 e0 80 f3 29 6e 9b de e9 cb 1c eb c7 5c 94 8d 6b 0f ef 5e d6 76 8a a5 e4 10 21 04 7d 1a 81 e9 7f 1f 39 5b 5b ec d0 49 21 6a ac 5a b3 a6 9f 95 f6 b5 8b a4 8d 2f 05 b3 6e f5 1e 66 c1 c5 7e b9 58 37 d3 c8 43 29 76 94 60 47 a8 b8 85 12 64 1d c3 aa 8e cd d2 51 76 af 55 94 f5 dd 33 a0 33 a8 59 c5 00 f2 3a a7 b5 7e 08 ad 84 ab 5d 7f 63 01 ce 17 50 b4 c9 06 a9 cb 92 ec 31 f8 fa 4a a7 f2 c4 c6 c4 65 52 84 99 c2 f6 43 02 c4 de c5 2e 88 d6 b8 7d b1 1f 3e 31 31 f3 e5 49 73 22 6e 3f ab 26 32 2d 87 be 10 f1 10 f3 2a 5d a6 95 c0 ed fa 51 be 95 ed 90 10 e5 2a 77 93 58 80 e3 70 46 60 79 9e e9 90 98 ad f4 61 6b 53 2e 56 0a 90 a6 e3 70 3a 40 ff f0 3e 16 ed 56 2c e2 ca 4b 3f b6 0c 9e 64 e8 dc 9a 19 1d f8 43 c6 17 Data Ascii: >u'Q_].])n\k^v!}9[[I!jZ/nf~X7C)v`GdQvU33Y:~]cP1JeRC.}>11Is"n?&2-]QwXpF`yakS.Vp:@>V,K?dC
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 2f 47 49 54 e1 4a 39 21 df 6e 2f 79 90 3d 5c 41 53 52 80 ef 81 68 9d eb fe 94 7f a4 49 6f ec e7 72 fd 89 67 7f fe 80 04 a2 22 88 4e 88 f9 b1 30 bc 53 34 b6 5d 4c a9 7e ec 2e 34 e7 10 2f 31 a2 3c 23 20 ae 6f e3 ff 6e 29 9e 91 13 69 30 a0 b5 29 08 04 ef 22 0c d5 f2 04 0d 2b 91 3a bc 48 99 77 a1 b8 ba ec a5 d8 37 7e 08 67 cc 4b 73 f2 fb 84 ef f6 0f ab 16 aa 8c 84 88 c4 c4 f5 1d ef b3 3a 20 14 7a 87 a3 70 5f 2c 0c 4e 2e e1 f5 8c 99 86 3a 52 45 8f cf 4c 6b f5 59 00 92 13 28 6c 43 ce 63 a3 d1 78 b4 10 44 bd 60 ad d6 0c 77 b6 c0 af 2a eb 09 3d ce 19 76 95 b2 68 9b 52 00 ed cf e1 28 64 2b e6 6a 61 19 9b 24 5d 0f 72 a4 2c 68 a6 d4 45 d1 ca 23 5d d8 55 af bd de 77 94 eb ad 41 d9 14 bb b3 9a f2 28 3d 46 58 16 be 16 25 2c 1e 7e c7 88 f1 0e 38 45 4d af 2a e8 65 01 de Data Ascii: /GITJ9!n/y=\ASRhIorg"N0S4]L~.4/1<# on)i0)"+:Hw7~gKs: zp_,N.:RELkY(lCcxD`w=vhR(d+ja$]r,hE#]UwA(=FX%,~8EMe
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 0d e5 d5 1a 2c 8f 07 19 0e e0 7b 44 7c f6 62 29 3d 3d e4 79 de c6 dc 43 53 e1 cd 27 32 c2 19 a5 47 ee c3 d0 3c 9e d8 f7 9c ff 38 1b 7b 62 da 95 97 ef fd 1c d8 84 2f 4b 0d ca 77 5e 92 25 6e 81 06 a3 ae af d0 fa 83 2b f9 fd dd 94 3f 84 ed 49 79 33 bc 0c 45 04 37 cd 98 6f 6a 56 40 be ea c9 d2 bc bf 82 cd 75 d3 1e a9 d7 11 d8 cd 28 84 10 05 9a f1 38 a3 7f e3 10 76 18 3d c2 4e 41 22 62 d0 04 fe 99 e1 db 3a a1 ba 83 ed d0 e7 e8 e1 34 90 7b 84 d9 a1 91 6a 10 3f 12 fd 23 5e 0a 12 ab 93 62 4b 3b 03 98 a6 9b e4 f2 7f bb 6b 56 06 c9 55 b1 56 9a 04 34 4b 95 47 64 ab 1c e3 49 70 da 19 88 ba 01 8e ef e0 a7 5f 2b 17 cd 17 13 2d 61 01 55 e6 80 f2 ec 60 b9 c6 d8 5a 1c b6 40 7a ad 0f 07 5e 8f 8b ed 29 a3 c1 68 eb dd 1d 66 2c 88 7d d7 74 2e e0 6d c0 5a 2e 4f bc 13 d8 9a 97 Data Ascii: ,{D\|b)==yCS'2G<8{b/Kw^%n+?Iy3E7ojV@u(8v=NA"b:4{j?#^bK;kVUV4KGdIp_+-aU`Z@z^)hf,}t.mZ.O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50183	173.194.219.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	1034	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:38 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Thu, 18 Apr 2024 16:59:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50181	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	1145	OUT	GET /generate_204?Fbsz0w HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/lvEU8OcKg2k Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:38 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:38 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50186	173.194.219.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	1043	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:38 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:38 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 59 64 71 6c 7a 48 44 62 4f 70 4d 64 32 76 62 7a 4b 62 69 75 6c 36 34 4e 6a 56 31 55 50 50 5f 32 6f 73 52 53 67 55 37 57 63 71 75 67 57 4e 63 64 50 71 4c 39 38 50 30 63 6c 63 65 70 4f 46 79 5a 34 56 61 73 79 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpYdqlzHDbOpMd2vbzKbiul64NjV1UPP_2osRSgU7WcqugWNcdPqL98P0clcepOFyZ4Vasy","type":4}
2024-04-18 16:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50187	142.250.105.119	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	470	OUT	GET /vi_webp/lvEU8OcKg2k/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:38 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 17514 Date: Thu, 18 Apr 2024 16:59:38 GMT Expires: Thu, 18 Apr 2024 18:59:38 GMT Cache-Control: public, max-age=7200 ETag: "1597431015" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:38 UTC	632	IN	Data Raw: 52 49 46 46 62 44 00 00 57 45 42 50 56 50 38 20 56 44 00 00 30 ec 01 9d 01 2a 00 05 d0 02 3e 6d 34 96 49 24 22 a2 31 21 91 99 0a 20 0d 89 67 6e fc 3a 99 a8 d3 fa a7 56 ff f3 fc 68 7f cf 6f 2b 38 5c ff 9f 3f 39 f1 77 fc 5e eb 78 e7 d4 df 99 ff 1d fb bf fe 53 df e7 90 fb ad f5 67 d9 3f 64 ff 64 f7 a5 df c7 6c f9 72 f9 af ed 1f f6 bf c6 7e 63 fc c7 ff 67 ff 93 fc 77 ba ef d6 7f fa 3d c1 bf 5a bf de ff 84 ff 39 fb 2d f1 97 fb 25 ee b7 f7 87 d4 57 f5 ef f2 ff fa 7f c8 7b b0 ff bb ff c9 fe ab de 2f f6 8f f8 5f f5 3f 60 3e 40 ff a9 ff 9c ff e1 d8 b7 fe 73 fe ff b1 57 f4 3f f5 5f ff fd 9e bf ef fe e3 7c 35 7f 5b ff 8f fb 5f ff 73 e4 7b f6 2b ff 57 67 4f 4b ff 64 ff d2 7a 82 f1 4b f5 1f e1 bf 6e bd 19 fc 83 e9 ff c6 7e 5b fa fd 66 9f 8c cf 43 bf 94 fd ec fd 47 f9 Data Ascii: RIFFbDWEBPVP8 VD0*>m4I$"1! gn:Vho+8\?9w^xSg?ddlr~cgw=Z9-%W{/_?`>@sW?_\|5[_s{+WgOKdzKn~[fCG
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: b6 0f 2b 55 79 d9 f8 fd 2c 36 c1 e5 6a af 3b 3f 1f a5 86 d6 87 fd a6 29 96 a7 31 a6 94 b2 b5 57 9d 9f 8f cf f4 d6 79 e2 2a 27 b3 f1 fa 58 6d 83 a5 d5 19 2c 1a 43 7b e8 36 c5 34 bf bb 3f 1f a5 86 d8 3c ad 55 e7 67 e3 f4 b0 db 07 95 aa bc ec fc 7a 0f 90 b1 6f c4 ce 66 07 f5 19 aa bc ec fc 7e 96 12 81 e2 db 5a ef 60 06 65 14 47 76 7e 3f 4b 0d b0 79 5a a3 2a 20 4e ca 02 89 5a ab ce cf c7 e9 61 b6 0f 2b 55 79 d9 f8 fd 2c 36 c1 e5 6a af 3b 37 33 fc 6a 05 aa bc ec fc 7e 7d c6 6b f6 b1 08 1f 35 f0 db 80 1c 2a 84 21 c1 ba 56 21 03 e6 bd eb af 5d 8c 24 78 14 f1 5c 36 ea c7 bb 10 ea 56 3d d8 87 52 b1 ee c4 3a 95 8f 76 21 d4 ac 7b b1 0b e2 6a e8 10 3e 53 fc 77 31 0c 9c ea 56 3d d8 87 56 6c 6b e1 b7 56 3d d8 87 52 b1 ee c4 3a 95 8f 76 21 d4 ac 7b b1 0e a5 63 dd 88 75 Data Ascii: +Uy,6j;?)1Wy'Xm,C{64?<Ugzof~Z`eGv~?KyZ NZa+Uy,6j;73j~}k5*!V!]$x\6V=R:v!{j>Sw1V=VlkV=R:v!{cu
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 43 fb 7e cf f6 63 48 eb ff 1f 35 f0 db ab 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 3d d8 87 4f db 04 ad 10 0f 73 b4 e6 f6 24 5c 54 62 1f af 65 08 1d 50 a8 e2 3e 84 c6 c7 7b 71 8e c9 06 66 dd 7d 55 1e b1 c2 2e 2c 7b b1 0e a5 63 dd 88 75 2b 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 48 57 45 9f 80 06 bf f2 a0 d2 df 14 2a 5e b5 bd 8c 4b b5 38 06 67 d7 03 1f a2 c2 96 88 f1 9a dc cf 57 c2 27 47 8e ec 96 cf ff f8 88 a3 09 9b 2a 21 72 0d 5f e1 54 f8 45 0b 98 fe d5 8f 76 21 d4 ac 7b b1 0e a5 63 dd 88 75 2b 1e ec 43 a9 58 f7 62 1d 4a c7 bb 10 ea 56 3d 6d 66 8d 03 54 12 cb b9 4d 88 09 33 fc 9c 0e 06 67 ae fb 46 b8 6d 46 ff 07 ac 3d c8 62 17 57 ec a0 ae 96 27 41 af 9b 64 7b dd 1a 95 54 aa 55 2a 95 4a a5 52 a9 44 8e d8 90 37 1b b8 d1 3d d8 87 52 b1 ee c4 3a 95 8f 76 Data Ascii: C~cH5CXbJV=Os$\TbeP>{qf}U.,{cu+CXbJVHWE^K8gW'G!r_TEv!{cu+CXbJV=mfTM3gFmF=bW'Ad{TU*JRD7=R:v
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: ca 7f de b1 3a 20 37 0b 1b bb 7f 33 cb f7 25 f3 54 28 57 19 75 ee aa e1 72 cc a5 14 44 67 2f 82 5c 89 c3 f4 3b 7c fe a1 5b 9a 16 aa f3 b3 f1 fa 58 6d 83 ca d5 5e 76 32 7e 93 11 17 bb cf 8b 04 5b 73 84 f3 84 27 3d 1c 02 30 cf 9b 11 8d 20 e0 e3 72 7b 0c 88 1a fb 0f 85 52 c4 61 9f 36 23 1a 41 c1 c6 e4 f6 19 10 35 f6 1f 0a a5 88 c3 3e 6c 46 34 83 83 8d c9 ec 32 19 c8 5f 82 7e 17 87 d8 07 5f fa 62 88 bd b9 03 44 eb 89 52 01 ab fe 32 13 4a 51 a2 bd e9 64 32 61 3a ed 1a ff 0a 5f 8c 53 56 75 69 12 af 5f c0 23 29 68 96 f7 fe e1 c1 e9 1a 4f bb 20 6a 15 b9 a1 6a af 3b 3f 1f a5 86 d8 3c ad 55 e6 e2 cf d2 48 9c 8d 83 ca d5 5e 76 7e 3f 4b 0d b0 79 36 d0 32 e7 f6 f3 3d 24 d7 ff 9e b4 06 d0 ac c8 cc b9 09 8e 46 77 27 f7 40 6b 62 de 0a 97 00 2b c4 06 1c c1 55 5c b2 4c 16 Data Ascii: : 73%T(WurDg/\;\|[Xm^v2~[s'=0 r{Ra6#A5>lF42_~_bDR2JQd2a:_SVui_#)hO jj;?<UH^v~?Ky62=$Fw'@kb+U\L
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 5e 34 5f 8f 8f fa 34 3f e7 81 9d 22 74 4e 09 16 a9 7c 89 41 f6 4e 20 81 7d e9 6a ac 3e 84 93 9a 4c 4f 7c a5 05 b6 cf ea 2b f0 60 03 33 94 d9 be b7 5d 3a 96 88 37 09 89 5e 54 15 2c c5 80 dd f5 d6 e9 d3 c0 97 93 d6 14 18 c9 56 ab 1b d9 46 bb 4a 08 7a 26 b9 be 8c c7 93 98 00 00 29 3b 37 6a 71 f9 e0 8e 7c 04 ab 3c 5e e6 36 f9 48 57 03 cd b6 ea 30 fd 32 b0 83 20 9b e7 e3 6f 46 49 8f 46 00 00 00 06 a7 13 60 84 32 d5 57 c7 24 c1 cc 77 78 93 70 a7 a4 af 7e d7 9f e4 d0 ec 40 f6 c6 eb a0 c7 3b 73 dd df e4 85 34 76 90 4a f6 58 00 00 01 ad ec 88 0a c1 48 18 3b 24 02 68 96 5f 46 7a 28 2b 39 80 00 0f 19 35 e5 b2 84 11 92 71 e5 4c 0d 1c 16 ad 6a d3 63 8f dc 36 99 1d 02 42 22 d3 24 5c e5 0a 3e e6 5f da a7 98 af d3 e0 a2 82 a1 31 d1 c4 33 1a d0 e7 6b 4c c0 24 07 47 2f 82 Data Ascii: ^4_4?"tN\|AN }j>LO\|+`3]:7^T,VFJz&);7jq\|<^6HW02 oFIF`2W$wxp~@;s4vJXH;$h_Fz(+95qLjc6B"$\>_13kL$G/
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 71 04 18 8e f4 9b a3 d4 09 66 09 b7 63 f5 c5 80 00 31 f1 78 c4 a2 82 c8 e8 20 69 21 e8 c0 dc 93 3a a6 04 3b 0d a8 e8 26 d2 03 d9 4e 38 a9 76 60 88 b7 62 fc 3e 13 71 59 f1 cd 3e 16 58 c7 53 6a 3a 4b d7 eb 51 fb 00 d2 44 24 5a 78 b2 b8 2c 85 f4 fc 35 f5 7a 21 07 60 4d b3 ec 29 79 bc 45 56 ae 6c c2 ce d8 80 dc 87 53 c0 e1 18 e6 d3 63 78 69 6d c1 a7 47 66 26 17 6e ed 4b 2e 59 0a b9 5a 0d ed fc 0c de 62 1c 08 e1 e1 f2 a4 05 71 e5 da da bc a0 93 45 d2 5d 9c cd 2c e9 f5 f9 80 53 fe d8 20 9b db 05 cf a6 cc b2 b6 93 61 c4 da 06 97 72 e7 1a 5f 38 59 6d bb cc 72 74 96 22 ed 39 52 4c a8 67 83 cd 34 1b ab e9 17 aa 70 81 1e aa ad 58 6f d1 73 82 93 0e 6d 09 82 c8 fc b7 eb bd 65 6f 36 e1 20 a2 2d 17 5b f0 89 44 5d 06 25 e1 80 24 a9 50 ec f7 27 7f 3d 0b 85 b0 bf 57 ea 07 Data Ascii: qfc1x i!:;&N8v`b>qY>XSj:KQD$Zx,5z!`M)yEVlScximGf&nK.YZbqE],S ar_8Ymrt"9RLg4pXosmeo6 -[D]%$P'=W
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 41 79 8a b7 f1 f3 92 11 24 2b 99 9f 2b 8a 7d 5e e2 be 45 de 92 6a 46 af e1 f8 9c 09 e3 ff 3e 23 04 62 78 2c e9 d3 49 e3 a8 7b 5a 79 3b 3e 33 f1 31 60 22 84 7c ef 4a 9d a9 c1 55 b3 85 9c b3 cd a6 a8 7a 53 64 60 74 c6 64 e8 79 e3 6b e0 7e e3 c5 0b 4d 15 d4 fb 79 2b 29 eb f3 8e 56 b2 9d 46 94 21 cc 24 5b 95 60 cd 74 10 7f ad c0 00 72 91 16 49 3e ac 1c 6b f9 5d 47 82 36 8c a6 95 85 98 42 ec 9e 24 be 07 3f 40 c9 60 57 db d0 3d 8b b5 61 04 aa 08 8a 85 a4 d4 7c 2e ad e9 e5 2e 63 e2 56 ba 82 d7 8f 09 de 41 65 1f e9 f4 08 3a 60 c8 6c c3 fa 10 ee f3 16 5e 64 ab 5c 6f a6 cc c1 1d 8d a1 12 cb ec b2 49 19 1a 8e a2 22 aa b4 ea 67 d2 02 73 84 24 c2 19 d6 df 83 ee a8 7a 2d 12 54 2c 7f 7a 86 2a 0a 7a 85 9e 54 06 fb 9c 3e b0 b5 3d 2e 64 6e f0 dd 99 bd 51 9e 07 7c e5 38 3f Data Ascii: Ay$++}^EjF>#bx,I{Zy;>31`"\|JUzSd`tdyk~My+)VF!$[`trI>k]G6B$?@`W=a\|..cVAe:`l^d\oI"gs$z-T,z*zT>=.dnQ\|8?
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: f5 3e 75 fd 27 ab 97 84 51 0d 5f a0 5d ae 2e 9c df cb c7 5d 91 e0 80 f3 29 6e 9b de e9 cb 1c eb c7 5c 94 8d 6b 0f ef 5e d6 76 8a a5 e4 10 21 04 7d 1a 81 e9 7f 1f 39 5b 5b ec d0 49 21 6a ac 5a b3 a6 9f 95 f6 b5 8b a4 8d 2f 05 b3 6e f5 1e 66 c1 c5 7e b9 58 37 d3 c8 43 29 76 94 60 47 a8 b8 85 12 64 1d c3 aa 8e cd d2 51 76 af 55 94 f5 dd 33 a0 33 a8 59 c5 00 f2 3a a7 b5 7e 08 ad 84 ab 5d 7f 63 01 ce 17 50 b4 c9 06 a9 cb 92 ec 31 f8 fa 4a a7 f2 c4 c6 c4 65 52 84 99 c2 f6 43 02 c4 de c5 2e 88 d6 b8 7d b1 1f 3e 31 31 f3 e5 49 73 22 6e 3f ab 26 32 2d 87 be 10 f1 10 f3 2a 5d a6 95 c0 ed fa 51 be 95 ed 90 10 e5 2a 77 93 58 80 e3 70 46 60 79 9e e9 90 98 ad f4 61 6b 53 2e 56 0a 90 a6 e3 70 3a 40 ff f0 3e 16 ed 56 2c e2 ca 4b 3f b6 0c 9e 64 e8 dc 9a 19 1d f8 43 c6 17 Data Ascii: >u'Q_].])n\k^v!}9[[I!jZ/nf~X7C)v`GdQvU33Y:~]cP1JeRC.}>11Is"n?&2-]QwXpF`yakS.Vp:@>V,K?dC
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 2f 47 49 54 e1 4a 39 21 df 6e 2f 79 90 3d 5c 41 53 52 80 ef 81 68 9d eb fe 94 7f a4 49 6f ec e7 72 fd 89 67 7f fe 80 04 a2 22 88 4e 88 f9 b1 30 bc 53 34 b6 5d 4c a9 7e ec 2e 34 e7 10 2f 31 a2 3c 23 20 ae 6f e3 ff 6e 29 9e 91 13 69 30 a0 b5 29 08 04 ef 22 0c d5 f2 04 0d 2b 91 3a bc 48 99 77 a1 b8 ba ec a5 d8 37 7e 08 67 cc 4b 73 f2 fb 84 ef f6 0f ab 16 aa 8c 84 88 c4 c4 f5 1d ef b3 3a 20 14 7a 87 a3 70 5f 2c 0c 4e 2e e1 f5 8c 99 86 3a 52 45 8f cf 4c 6b f5 59 00 92 13 28 6c 43 ce 63 a3 d1 78 b4 10 44 bd 60 ad d6 0c 77 b6 c0 af 2a eb 09 3d ce 19 76 95 b2 68 9b 52 00 ed cf e1 28 64 2b e6 6a 61 19 9b 24 5d 0f 72 a4 2c 68 a6 d4 45 d1 ca 23 5d d8 55 af bd de 77 94 eb ad 41 d9 14 bb b3 9a f2 28 3d 46 58 16 be 16 25 2c 1e 7e c7 88 f1 0e 38 45 4d af 2a e8 65 01 de Data Ascii: /GITJ9!n/y=\ASRhIorg"N0S4]L~.4/1<# on)i0)"+:Hw7~gKs: zp_,N.:RELkY(lCcxD`w=vhR(d+ja$]r,hE#]UwA(=FX%,~8EMe
2024-04-18 16:59:38 UTC	1255	IN	Data Raw: 0d e5 d5 1a 2c 8f 07 19 0e e0 7b 44 7c f6 62 29 3d 3d e4 79 de c6 dc 43 53 e1 cd 27 32 c2 19 a5 47 ee c3 d0 3c 9e d8 f7 9c ff 38 1b 7b 62 da 95 97 ef fd 1c d8 84 2f 4b 0d ca 77 5e 92 25 6e 81 06 a3 ae af d0 fa 83 2b f9 fd dd 94 3f 84 ed 49 79 33 bc 0c 45 04 37 cd 98 6f 6a 56 40 be ea c9 d2 bc bf 82 cd 75 d3 1e a9 d7 11 d8 cd 28 84 10 05 9a f1 38 a3 7f e3 10 76 18 3d c2 4e 41 22 62 d0 04 fe 99 e1 db 3a a1 ba 83 ed d0 e7 e8 e1 34 90 7b 84 d9 a1 91 6a 10 3f 12 fd 23 5e 0a 12 ab 93 62 4b 3b 03 98 a6 9b e4 f2 7f bb 6b 56 06 c9 55 b1 56 9a 04 34 4b 95 47 64 ab 1c e3 49 70 da 19 88 ba 01 8e ef e0 a7 5f 2b 17 cd 17 13 2d 61 01 55 e6 80 f2 ec 60 b9 c6 d8 5a 1c b6 40 7a ad 0f 07 5e 8f 8b ed 29 a3 c1 68 eb dd 1d 66 2c 88 7d d7 74 2e e0 6d c0 5a 2e 4f bc 13 d8 9a 97 Data Ascii: ,{D\|b)==yCS'2G<8{b/Kw^%n+?Iy3E7ojV@u(8v=NA"b:4{j?#^bK;kVUV4KGdIp_+-aU`Z@z^)hf,}t.mZ.O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50188	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	1685	OUT	POST /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 5043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:38 UTC	5043	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 65 74 72 69 63 73 2f 6e 61 76 69 67 61 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 2c 22 69 64 22 3a 22 32 31 37 32 39 64 66 33 2d 65 63 32 66 2d 34 33 36 37 2d 62 62 64 63 2d 37 34 35 35 66 38 63 62 36 63 36 39 22 2c 22 64 65 74 61 69 6c 22 3a 22 7b 5c 22 61 74 6c 61 73 73 65 72 76 6c 65 74 5c 22 3a 5c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5c 22 2c 5c 22 70 61 67 65 5f 6e 61 6d 65 5c 22 3a 5c 22 63 63 70 61 5f 69 66 72 61 6d 65 5c 22 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 5c 22 3a 30 2c 5c 22 75 6e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 53 74 61 72 74 Data Ascii: {"events":[{"type":"event","name":"performance_metrics/navigation_timing","id":"21729df3-ec2f-4367-bbdc-7455f8cb6c69","detail":"{\"atlasservlet\":\"privacy_consent\",\"page_name\":\"ccpa_iframe\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart
2024-04-18 16:59:39 UTC	571	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 117 X-Webkit-Csp: sandbox Content-Length: 51 Date: Thu, 18 Apr 2024 16:59:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7e4598e5c983483d91634e58c4243c21 Connection: close
2024-04-18 16:59:39 UTC	51	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 4d 65 61 73 75 72 65 73 20 70 72 6f 63 65 73 73 65 64 3a 20 33 20 45 76 65 6e 74 73 20 70 72 6f 63 65 73 73 65 64 3a 20 34 22 7d Data Ascii: {"msg":"Measures processed: 3 Events processed: 4"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50191	142.250.105.155	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:38 UTC	506	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:39 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:39 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 78 35 39 78 50 62 47 66 63 45 58 46 58 59 4b 6e 31 38 43 57 38 69 66 7a 4e 49 4e 56 74 55 51 74 58 77 73 6b 48 51 73 64 4f 35 62 55 44 42 68 55 41 46 44 51 71 4f 31 46 31 5f 38 6f 4e 4a 6b 41 6b 49 6d 42 31 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrx59xPbGfcEXFXYKn18CW8ifzNINVtUQtXwskHQsdO5bUDBhUAFDQqO1F1_8oNJkAkImB1","type":4}
2024-04-18 16:59:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50193	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:39 UTC	628	OUT	GET /2/udcl/log_timing HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:39 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 110 Date: Thu, 18 Apr 2024 16:59:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3b15bff4d91b4eefb0b875e9732a6638 Connection: close
2024-04-18 16:59:39 UTC	110	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 75 64 63 6c 2f 6c 6f 67 5f 74 69 6d 69 6e 67 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "udcl/log_timing": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50194	142.250.105.138	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:39 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:40 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:40 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50195	142.250.105.138	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:40 UTC	1118	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1343 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:40 UTC	1343	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 31 39 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 35 34 2c 5b 5b 22 31 37 31 33 34 35 39 35 37 38 34 35 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"19",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1654,[["1713459578456",null,null,null
2024-04-18 16:59:40 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=X2Klb65k-ds-GM_hIseuh4W03LqfeffQVGUns0memKNhHs_3uPW9P1M_-v9UR-xfH10aA41QcAbtPeDlRaRxyp_kaHiiTm2DfLgFrnlcYag4EarauvfVxKUjLeYoDUnwGamZRcJ06xeDXbuwqR8RTJ32NADFvJ0fV9Z57f4Oz6A; expires=Fri, 18-Oct-2024 16:59:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 18 Apr 2024 16:59:40 GMT Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-18 16:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50198	108.177.122.91	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:40 UTC	1721	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 12347 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1713459579487 sec-ch-ua-platform-version: "10.0.0" X-Goog-Event-Time: 1713459579486 X-YouTube-Utc-Offset: 120 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: Europe/Zurich sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240415.01.00 X-Goog-Visitor-Id: CgtzaVZRMVRVWG9sVSj5ooWxBjIKCgJVUxIEGgAgUg%3D%3D X-YouTube-Ad-Signals: dt=1713459576394&flash=0&frm&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/lvEU8OcKg2k Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:40 UTC	12347	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 35 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 6d 69 68 62 45 47 45 4e 36 49 5f 78 49 51 75 74 69 77 42 52 43 43 6f 76 38 53 45 4c 37 35 72 77 55 51 74 37 4b 77 42 52 43 57 6c 62 41 46 45 4f 65 36 72 77 55 51 30 75 43 77 42 52 44 36 32 72 41 46 45 4d 66 4f 73 41 55 51 30 2d 47 76 42 52 44 4a 39 36 38 46 45 4a 58 50 73 41 55 51 7a 74 69 77 42 52 44 68 38 71 38 46 45 4d 62 39 74 79 49 51 33 75 43 77 42 52 43 70 30 4c 41 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240415.01.00","configInfo":{"appInstallData":"CPmihbEGEN6I_xIQutiwBRCCov8SEL75rwUQt7KwBRCWlbAFEOe6rwUQ0uCwBRD62rAFEMfOsAUQ0-GvBRDJ968FEJXPsAUQztiwBRDh8q8FEMb9tyIQ3uCwBRCp0LAFEN
2024-04-18 16:59:41 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 16:59:40 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:41 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 16:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50200	172.253.124.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:41 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jMjPIpf7IRo; VISITOR_INFO1_LIVE=siVQ1TUXolU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUg%3D%3D
2024-04-18 16:59:41 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 16:59:41 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:41 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 16:59:41 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50208	142.250.105.138	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:41 UTC	1306	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 527 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=X2Klb65k-ds-GM_hIseuh4W03LqfeffQVGUns0memKNhHs_3uPW9P1M_-v9UR-xfH10aA41QcAbtPeDlRaRxyp_kaHiiTm2DfLgFrnlcYag4EarauvfVxKUjLeYoDUnwGamZRcJ06xeDXbuwqR8RTJ32NADFvJ0fV9Z57f4Oz6A
2024-04-18 16:59:41 UTC	527	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 34 35 39 35 38 30 34 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1713459580454",null,null,null
2024-04-18 16:59:42 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=oDus5SbeUcfLVRLhiWacHnWrrSxz0QyqKx-QCHg4bglZhXMHKMSzD1_ZzSWNCBjHg7GLYbqiuYpL0toPFFPWHbgxeZo0efYpIJbvIKh4RhFWwPfBcDtln22AhJZJpvjR__gZJaJkqkqiKTBobduM64T_ZEJzqQh_MNmJbUPu3Yg; expires=Fri, 18-Oct-2024 16:59:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 18 Apr 2024 16:59:41 GMT Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-18 16:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50210	142.250.105.138	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:41 UTC	1306	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=X2Klb65k-ds-GM_hIseuh4W03LqfeffQVGUns0memKNhHs_3uPW9P1M_-v9UR-xfH10aA41QcAbtPeDlRaRxyp_kaHiiTm2DfLgFrnlcYag4EarauvfVxKUjLeYoDUnwGamZRcJ06xeDXbuwqR8RTJ32NADFvJ0fV9Z57f4Oz6A
2024-04-18 16:59:41 UTC	705	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 34 35 39 35 38 30 34 35 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1713459580456",null,null,null
2024-04-18 16:59:42 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4; expires=Fri, 18-Oct-2024 16:59:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 18 Apr 2024 16:59:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 18 Apr 2024 16:59:41 GMT Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-18 16:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50209	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:41 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryIAeHH1425vH7EicS Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:41 UTC	1296	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 41 65 48 48 31 34 32 35 76 48 37 45 69 63 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 41 65 48 48 31 34 32 35 76 48 37 45 69 63 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 41 65 48 48 31 34 32 35 76 48 37 45 69 63 53 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryIAeHH1425vH7EicSContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryIAeHH1425vH7EicSContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryIAeHH1425vH7EicSCont
2024-04-18 16:59:42 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:42 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:42 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:42 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 41 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:41 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cf754a4ccb4f47489e9ca9aba6a036ba Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50221	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:42 UTC	809	OUT	POST /v1/initialize HTTP/1.1 Host: featuregates.org Connection: keep-alive Content-Length: 588 STATSIG-CLIENT-TIME: 1713459581317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 1 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:42 UTC	588	OUT	Data Raw: 3d 30 58 66 69 38 6b 55 69 6f 6a 49 35 4a 48 64 75 56 33 62 6a 4a 43 4c 69 49 54 4e 75 63 54 4e 75 45 44 4f 78 34 53 4d 34 49 69 4f 69 41 58 61 69 77 69 49 32 4d 6a 4c 33 4d 54 4e 76 6b 6d 63 68 5a 57 59 54 42 43 4d 75 41 6a 4c 77 34 79 4e 78 45 7a 4c 6c 31 32 62 79 68 32 51 67 6b 79 62 72 4e 57 5a 48 42 53 5a 72 6c 47 62 67 77 43 54 4e 52 46 53 4c 68 43 49 32 4d 6a 4c 33 4d 54 4e 76 51 58 61 4c 4a 57 5a 58 56 47 62 77 42 58 51 67 6b 43 4e 32 67 48 49 37 51 6a 4e 75 6c 32 56 67 73 44 4d 75 41 54 4d 67 51 6c 54 67 4d 33 64 76 52 6d 62 70 64 46 4b 67 41 6a 4c 31 38 53 59 73 78 57 61 36 39 57 54 69 6f 6a 49 30 35 57 5a 6e 46 32 58 79 56 32 63 31 4a 79 65 36 49 79 63 6b 78 57 5a 70 5a 45 5a 6c 5a 58 61 79 56 47 52 7a 56 33 62 70 5a 58 5a 79 42 6e 49 73 49 69 Data Ascii: =0Xfi8kUiojI5JHduV3bjJCLiITNucTNuEDOx4SM4IiOiAXaiwiI2MjL3MTNvkmchZWYTBCMuAjLw4yNxEzLl12byh2QgkybrNWZHBSZrlGbgwCTNRFSLhCI2MjL3MTNvQXaLJWZXVGbwBXQgkCN2gHI7QjNul2VgsDMuATMgQlTgM3dvRmbpdFKgAjL18SYsxWa69WTiojI05WZnF2XyV2c1Jye6IyckxWZpZEZlZXayVGRzV3bpZXZyBnIsIi
2024-04-18 16:59:42 UTC	447	IN	HTTP/1.1 204 No Content access-control-allow-origin: * access-control-allow-methods: POST, GET, DELETE, PATCH access-control-max-age: 7200 date: Thu, 18 Apr 2024 16:59:42 GMT x-statsig-region: gke-us-east1 via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50220	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:42 UTC	846	OUT	GET /pithos/privacy_consent,marketing_tracker_client,ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:43 UTC	1173	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:42 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:42 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:42 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:42 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 214 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7c0b33d249dd4476bb5110ed461eadb3 Connection: close
2024-04-18 16:59:43 UTC	214	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 25 32 43 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 63 6c 69 65 6e 74 25 32 43 75 78 5f 61 6e 61 6c 79 74 69 63 73 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50222	104.17.73.206	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:42 UTC	862	OUT	GET /index.php/form/getForm?munchkinId=077-ZJT-858&form=20674&url=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&callback=jQuery37107759753487658225_1713459581265&_=1713459581266 HTTP/1.1 Host: lp.dropboxbusiness.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=J6G9jy2ZDlqkqyk4UrtMAJw.SOr0wtDRjvnt5ggWWe8-1713459524-1.0.1.1-mlRhOpsXT_Yp34jKFLNYu0o8XoA1LDx0UbzQRQiyUOtyNPZYqSQkGqV.5_yUGmBQCVFFmCa5HvV2rPgFG3KODA
2024-04-18 16:59:42 UTC	215	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19112 Connection: close cached: true Server: cloudflare CF-RAY: 876634f8c9e34577-ATL
2024-04-18 16:59:42 UTC	1154	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 37 37 35 39 37 35 33 34 38 37 36 35 38 32 32 35 5f 31 37 31 33 34 35 39 35 38 31 32 36 35 28 7b 22 49 64 22 3a 32 30 36 37 34 2c 22 56 69 64 22 3a 32 30 36 37 34 2c 22 53 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 4e 61 6d 65 22 3a 22 44 53 2d 44 65 6d 6f 20 52 65 71 75 65 73 74 20 2d 20 45 6d 62 65 64 64 65 64 20 46 6f 72 6d 20 6f 6e 20 57 65 62 73 69 74 65 2d 32 30 36 37 34 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 4c 61 79 6f 75 74 22 3a 22 6c 65 66 74 22 2c 22 47 75 74 74 65 72 57 69 64 74 68 22 3a 31 30 2c 22 4f 66 66 73 65 74 57 69 64 74 68 22 3a 31 30 2c 22 48 61 73 54 77 6f 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 53 75 62 6d 69 74 4c 61 62 65 6c 22 3a 22 53 75 62 6d 69 74 22 2c 22 Data Ascii: jQuery37107759753487658225_1713459581265({"Id":20674,"Vid":20674,"Status":"approved","Name":"DS-Demo Request - Embedded Form on Website-20674","Description":"","Layout":"left","GutterWidth":10,"OffsetWidth":10,"HasTwoButtons":true,"SubmitLabel":"Submit","
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 39 39 63 34 37 63 29 2c 20 74 6f 28 23 37 35 61 65 34 63 29 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 39 39 63 34 37 63 2c 20 23 37 35 61 65 34 63 29 3b 5c 6e 7d 5c 6e 2e Data Ascii: , left top, left bottom, from(#99c47c), to(#75ae4c));\nbackground-image: -webkit-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: -moz-linear-gradient(top, #99c47c, #75ae4c);\nbackground-image: linear-gradient(to bottom, #99c47c, #75ae4c);\n}\n.
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 72 69 64 65 22 3a 6e 75 6c 6c 2c 22 4c 69 76 65 53 74 72 65 61 6d 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 2c 22 72 6f 77 73 22 3a 5b 5b 7b 22 49 64 22 3a 32 36 33 38 30 32 2c 22 4e 61 6d 65 22 3a 22 46 69 72 73 74 4e 61 6d 65 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 49 6e 70 75 74 4c 61 62 65 6c 22 3a 22 46 69 72 73 74 20 6e 61 6d 65 22 2c 22 49 6e 70 75 74 49 6e 69 74 69 61 6c 56 61 6c 75 65 22 3a 22 22 2c 22 49 6e 70 75 74 53 6f 75 72 63 65 43 68 61 6e 6e 65 6c 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 46 69 72 73 74 20 4e 61 6d 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e Data Ascii: ride":null,"LiveStreamSettings":null,"rows":[[{"Id":263802,"Name":"FirstName","IsRequired":true,"Datatype":"string","Maxlength":255,"InputLabel":"First name","InputInitialValue":"","InputSourceChannel":"constant","PlaceholderText":"First Name","Validation
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 6e 74 22 2c 22 50 72 6f 66 69 6c 69 6e 67 46 69 65 6c 64 4e 75 6d 62 65 72 22 3a 30 2c 22 50 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 22 3a 22 65 2e 67 2e 20 44 6f 63 53 65 6e 64 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 5d 2c 5b 7b 22 49 64 22 3a 32 36 33 38 30 39 2c 22 4e 61 6d 65 22 3a 22 43 6f 75 6e 74 72 79 22 2c 22 49 73 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 44 61 74 61 74 79 70 65 22 3a 22 70 69 63 6b 6c 69 73 74 22 2c 22 4d 61 78 6c 65 6e 67 74 68 22 3a 32 35 35 2c 22 50 69 63 6b 6c 69 73 74 56 61 6c 75 65 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 53 65 6c 65 63 74 2e 2e 2e 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 73 65 6c 65 63 74 65 Data Ascii: nt","ProfilingFieldNumber":0,"PlaceholderText":"e.g. DocSend","ValidationMessage":"This field is required."}],[{"Id":263809,"Name":"Country","IsRequired":true,"Datatype":"picklist","Maxlength":255,"PicklistValues":[{"label":"Select...","value":"","selecte
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 3a 22 42 6f 6c 69 76 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 6e 61 69 72 65 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 6e 61 69 72 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 72 61 7a 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 42 72 61 7a 69 6c 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 42 Data Ascii: :"Bolivia"},{"label":"Bonaire","value":"Bonaire"},{"label":"Bosnia and Herzegovina","value":"Bosnia and Herzegovina"},{"label":"Botswana","value":"Botswana"},{"label":"Bouvet Island","value":"Bouvet Island"},{"label":"Brazil","value":"Brazil"},{"label":"B
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 22 6c 61 62 65 6c 22 3a 22 43 72 6f 61 74 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 43 72 6f 61 74 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 75 72 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 43 75 72 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 79 70 72 75 73 22 2c 22 76 61 6c 75 65 22 3a 22 43 79 70 72 75 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 65 6e 6d 61 72 6b 22 2c 22 76 61 6c 75 65 22 3a 22 44 65 6e 6d 61 72 6b 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6a 69 62 6f 75 74 69 22 2c 22 76 61 6c 75 65 22 3a 22 44 6a 69 62 6f 75 74 69 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 44 6f 6d 69 Data Ascii: "label":"Croatia","value":"Croatia"},{"label":"Curacao","value":"Curacao"},{"label":"Cyprus","value":"Cyprus"},{"label":"Czech Republic","value":"Czech Republic"},{"label":"Denmark","value":"Denmark"},{"label":"Djibouti","value":"Djibouti"},{"label":"Domi
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 64 65 6c 6f 75 70 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 6d 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 61 74 65 6d 61 6c 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 65 72 6e 73 65 79 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 65 72 6e 73 65 79 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 2c 22 76 61 6c 75 65 22 3a 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 47 75 79 Data Ascii: label":"Guadeloupe","value":"Guadeloupe"},{"label":"Guam","value":"Guam"},{"label":"Guatemala","value":"Guatemala"},{"label":"Guernsey","value":"Guernsey"},{"label":"Guinea","value":"Guinea"},{"label":"Guinea-Bissau","value":"Guinea-Bissau"},{"label":"Guy
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 22 3a 22 4c 69 62 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 62 79 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 62 79 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4c 69 74 68 75 61 6e 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 2c 22 76 61 6c 75 65 22 3a 22 4c 75 78 65 6d 62 6f 75 72 67 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 61 6f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 63 61 6f 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 61 63 65 64 6f 6e 69 61 2c 20 46 59 52 4f 22 2c 22 76 61 6c 75 65 22 3a 22 4d 61 Data Ascii: ":"Liberia"},{"label":"Libya","value":"Libya"},{"label":"Liechtenstein","value":"Liechtenstein"},{"label":"Lithuania","value":"Lithuania"},{"label":"Luxembourg","value":"Luxembourg"},{"label":"Macao","value":"Macao"},{"label":"Macedonia, FYRO","value":"Ma
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 63 61 72 61 67 75 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 63 61 72 61 67 75 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 67 65 72 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 67 65 72 69 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 69 75 65 22 2c 22 76 61 6c 75 65 22 3a 22 4e 69 75 65 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 74 68 65 72 6e 20 4d Data Ascii: },{"label":"Nicaragua","value":"Nicaragua"},{"label":"Niger","value":"Niger"},{"label":"Nigeria","value":"Nigeria"},{"label":"Niue","value":"Niue"},{"label":"Norfolk Island","value":"Norfolk Island"},{"label":"Northern Mariana Islands","value":"Northern M
2024-04-18 16:59:42 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 53 61 6d 6f 61 22 2c 22 76 61 6c 75 65 22 3a 22 53 61 6d 6f 61 22 7d 2c 7b 22 6c 61 62 65 6c 22 Data Ascii: "},{"label":"Saint Martin","value":"Saint Martin"},{"label":"Saint Pierre and Miquelon","value":"Saint Pierre and Miquelon"},{"label":"Saint Vincent and the Grenadines","value":"Saint Vincent and the Grenadines"},{"label":"Samoa","value":"Samoa"},{"label"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50224	52.55.103.136	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:42 UTC	601	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:42 UTC	516	OUT	Data Raw: 61 70 70 5f 69 64 3d 6c 76 36 6c 6a 69 37 68 26 76 3d 33 26 67 3d 61 34 31 37 37 61 34 35 32 65 39 63 37 39 37 34 64 65 64 61 63 33 64 61 39 62 32 35 64 65 35 36 62 34 32 33 36 34 36 36 26 73 3d 39 38 34 63 36 66 63 33 2d 34 34 34 35 2d 34 39 63 63 2d 39 66 34 32 2d 38 31 32 39 39 36 62 32 62 33 32 39 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 61 35 63 65 61 34 33 32 35 33 38 61 30 61 35 34 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 49 6e 74 65 67 72 61 74 69 6f 6e 73 25 32 30 2d 25 32 30 Data Ascii: app_id=lv6lji7h&v=3&g=a4177a452e9c7974dedac3da9b25de56b4236466&s=984c6fc3-4445-49cc-9f42-812996b2b329&r=&platform=web&installation_type=js-snippet&Idempotency-Key=a5cea432538a0a54&internal=%7B%7D&is_intersection_booted=false&page_title=Integrations%20-%20
2024-04-18 16:59:43 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:43 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.docsend.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: f1568ddf41251ba57524bc89a71f313ef50f629b X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0003r4309ds9kinp9f30 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"d0a3300fe6598bdc924c01990dc4551a" X-Runtime: 0.214245 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0b59e2d41804887a1
2024-04-18 16:59:43 UTC	4451	IN	Data Raw: 31 31 35 62 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 6f 63 53 65 6e 64 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 6e 75 6c 6c 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 61 5f 66 65 77 5f 6d 69 6e 75 74 65 73 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f Data Ascii: 115b{"app":{"name":"DocSend","audio_enabled":true,"show_powered_by":true,"team_intro":null,"team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"a_few_minutes","launcher_expected_response_delay_translatio
2024-04-18 16:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50226	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:43 UTC	873	OUT	GET /pithos/host%3Awww.docsend.com/privacy_consent%2Cmarketing_tracker_client%2Cux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:43 UTC	3037	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:43 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:43 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:43 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:43 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 13723 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4b4a2e4bb1d747ad8107df9773f3e0ed Connection: close
2024-04-18 16:59:43 UTC	13347	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()
2024-04-18 16:59:43 UTC	376	IN	Data Raw: 61 74 61 22 3a 20 7b 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 2a 6e 6f 6e 5f 64 72 6f 70 62 6f 78 5f 70 61 74 68 5f 6e 6f 5f 70 69 69 2a 22 2c 20 22 69 66 72 61 6d 65 4f 72 69 67 69 6e 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 22 2c 20 22 74 65 61 6c 69 75 6d 50 72 6f 66 69 6c 65 22 3a 20 22 64 6f 63 73 65 6e 64 22 2c 20 22 74 65 61 6c 69 75 6d 45 6e 76 22 3a 20 22 70 72 6f 64 22 7d 2c 20 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 69 6e 69 74 5f 64 61 74 61 22 3a 20 7b 22 69 66 72 61 6d 65 4f 72 69 67 69 6e 22 3a 20 22 63 6f 6e 73 65 6e 74 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 22 2c 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 Data Ascii: ata": {"src": "https://marketing.docsend.com/non_dropbox_path_no_pii", "iframeOrigin": "https://marketing.docsend.com", "tealiumProfile": "docsend", "tealiumEnv": "prod"}, "privacy_consent_init_data": {"iframeOrigin": "consent.dropbox.com", "countryCode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50227	34.196.172.205	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:43 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:43 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 18 Apr 2024 16:59:43 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0002gcbgpa1778ki8pg0 X-Runtime: 0.015620 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-18 16:59:43 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50228	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:43 UTC	810	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 1370 STATSIG-CLIENT-TIME: 1713459582318 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:43 UTC	1370	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 64 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6d 61 72 6b 65 72 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6f 76 65 72 61 6c 6c 22 2c 22 61 63 74 69 6f 6e 22 3a 22 73 74 61 72 74 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 39 30 34 7d 2c 7b 22 6b 65 79 22 3a 22 69 6e 69 74 69 61 6c 69 7a 65 22 2c 22 73 74 65 70 22 3a 22 6e 65 74 77 6f 72 6b 5f 72 65 71 75 65 73 74 22 2c 22 61 63 74 69 6f 6e 22 3a Data Ascii: {"events":[{"eventName":"statsig::diagnostics","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":null,"metadata":{"markers":[{"key":"overall","action":"start","timestamp":1904},{"key":"initialize","step":"network_request","action":
2024-04-18 16:59:43 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json permissions-policy: interest-cohort=() x-frame-options: SAMEORIGIN x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:59:43 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:43 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50229	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:43 UTC	1852	OUT	GET /ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:44 UTC	6166	IN	HTTP/1.1 302 Found Content-Security-Policy: default-src 'none' ; font-src https://* data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; img-src https:// data: blob: ; media-src https://* blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:59:44 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 97b805ce1b6748bc9c9e2792ec9b2dd5 Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:44 UTC	28	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 11...status=200-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50230	3.163.80.122	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:44 UTC	2957	OUT	GET /integrations/ HTTP/1.1 Host: marketing.docsend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dss_=8a8ec551db1488fbe3b3867782592f3b; __cf_bm=jIMGp8AsH.l3GbU6lqoAmAk_g6IaHi2MqZzvIM.eLyM-1713459517-1.0.1.1-vUeh3HBvo7cw_X7VdproBQSfGP0zQMn6vW_fvp9KPeAl9Tiy.DzxyVRRyp1CJ4iBB9MfDbCAjxjPDQS0HGhf4A; statsig_stable_id=6f9c4aa9-e04a-4d5e-9d34-eb9af0076656; dbx_js_analytics_id=AACVUOd1jedmfN441-SDrx45N_cZCQOlcqr_6nHPC81FxA; intercom-id-lv6lji7h=a137ebbf-dc09-49f7-86e5-a1d358505a6d; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=36e27699-029a-4cf0-bb93-e42fd544cf2e; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; s_ips=0; s_tp=0; s_dur=1713459538903; s_vncm=1714514399906%26vn%3D1; s_ivc=true; s_lv_s=First%20Visit; s_visit=1; s_inv=0; s_ptc=%5B%5BB%5D%5D; s_cc=true; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=1176715910%7CMCIDTS%7C19832%7CvVersion%7C5.4.0%7CMCMID%7C03399203033517895891424532205099485311%7CMCAAMLH-1714064337%7C7%7CMCAAMB-1714064337%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1713466737s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_plt=3.65; s_pltp=marketing.docsend.com%7Chow-it-works; gpv_pgn=marketing.docsend.com%7Chow-it-works; gpv_c51=marketing.docsend.com%2Fhow-it-works%2F; gpv_c_pagename=marketing.docsend.com%7Chow-it-works; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-04-18T16:59:22.622Z","expireDate":"2024-10-18T16:59:22.622Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":true,"numDots":2}; s_nr30=1713459563650-New; s_lv=1713459563652; s_tslv=1713459563655; __hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1; hubspotutk=c45e810271b520e7349a9be4a5f70f0a; __hssrc=1; __hssc=19306791.1.1713459564046; _gcl_au=1.1.2069947327.1713459565; _uetsid=02dbfef0fda511ee91d7db277dad5a16; _uetvid=02dc4d60fda511ee979821cfea6bdf6f; _fbp=fb.1.1713459566299.390803195; ajs_anonymous_id=dc182968-e6a7-4eab-ab4b-09dd1b251052; _ga=GA1.2.1733947432.1713459567; _gid=GA1.2.1042834324.1713459567; utag_main=v_id:018ef225a1b7000b51815568e3370506f001e06700918$_sn:1$_se:19$_ss:0$_st:1713461372312$ses_id:1713459536313%3Bexp-session$_pn:3%3Bexp-session$vapi_domain:docsend.com; s_tps=36; s_pvs=62
2024-04-18 16:59:44 UTC	437	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 627 Connection: close Last-Modified: Wed, 31 May 2023 19:16:09 GMT Server: AmazonS3 Date: Thu, 18 Apr 2024 16:59:03 GMT ETag: "85c876eb10030058f29245148995cc2d" X-Cache: Error from cloudfront Via: 1.1 9dd92bb62a9e5979e6e29d6b9db96954.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: fGdxPHnQIW1FO-ECLjQ4Y_zfzyScsMhjkOhOd0RIBgKYKp51dLfjdg== Age: 48741
2024-04-18 16:59:44 UTC	627	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 20 5d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 68 74 74 70 73 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d Data Ascii: <html> <head> ...[if (gte IE 9) ]> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <![endif]--> <title>Dropbox</title> <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50232	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:44 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 831 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:44 UTC	831	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6c 61 74 65 6e 63 79 25 32 32 25 33 41 2d 31 25 32 43 25 32 32 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 25 32 32 25 33 41 25 32 32 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 Data Ascii: event_type=page_view&extra_params=%7B%22page_view_latency%22%3A-1%2C%22bfcache_eligible%22%3Afalse%2C%22page_view_origin%22%3A%22normal%22%2C%22hierarchy_group%22%3Anull%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%
2024-04-18 16:59:44 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:44 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9ca13911b7794ed88bce81541bb778db Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50231	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:44 UTC	1236	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarySBQl9aDZGtqmKrCA Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:44 UTC	1267	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 42 51 6c 39 61 44 5a 47 74 71 6d 4b 72 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 42 51 6c 39 61 44 5a 47 74 71 6d 4b 72 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 42 51 6c 39 61 44 5a 47 74 71 6d 4b 72 43 41 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarySBQl9aDZGtqmKrCAContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarySBQl9aDZGtqmKrCAContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundarySBQl9aDZGtqmKrCACont
2024-04-18 16:59:44 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:44 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:44 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c406e655432b47168c538f7d95109015 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50233	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	1855	OUT	GET /en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:45 UTC	5244	IN	HTTP/1.1 200 OK Content-Security-Policy: child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; frame-ancestors 'self' https://.dropbox.com https://api.dropboxapi.com https://dropbox-prod.adobemsbasic.com https://dropbox-stage.adobemsbasic.com https://author-dropbox-stage.adobemsbasic.com https://author-dropbox-prod.adobemsbasic.com https://.dropboxforum.com https://hellosign.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://.helloworks.com https://.staging-helloworks.com https://.qa-helloworks.com https://.dev-helloworks.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://docsend.local https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://d1wiipx8u53ex4.amplifyapp.com https://.d1wiipx8u53ex4.amplifyapp.com https://d3bpch7nmgjx4e.amplifyapp.com https://.d3bpch7nmgjx4e.amplifyapp.com https://freddie-stage.netlify.app https://dropbox.gcs-web.com https://dropbox-preview.gcs-web.com https://d2dzj839csize7.amplifyapp.com https://.d2dzj839csize7.amplifyapp.com https://dropboxdesignstandards.com https://docsend-6191183.hs-sites.com https://portal.dropboxpartners.com https://dbx--uiux.sandbox.my.site.com https://sit-dropboxcommunity.cs171.force.com https://dbx--sit.sandbox.my.site.com https://dbxjobs.com https://d1y1b0jlagepgu.amplifyapp.com https://.d1y1b0jlagepgu.amplifyapp.com https://loc.formswift.com https://staging.formswift.com https://formswift.com https://sign.dropbox.com https://dropbox-sign.webflow.io https://.safebase.io https://d2unov8w0g44qf.amplifyapp.com https://.d2unov8w0g44qf.amplifyapp.com https://dash.ai https://.dash.ai https://dash-dropbox.webflow.io https://dropboxdash.com https://.dash-dropbox.webflow.io https://.dropboxdash.com ; img-src https:// data: blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; base-uri 'self' ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: ; font-src https://* data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVYuIeGwys=' 'nonce-oFrVz4A8VQC7Pn2VlKLM0OMadcE=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Domain=dropbox.com; Expires=Sun, 18 Apr 2027 16:59:45 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; Path=/; Expires=Sun, 18 Apr 2027 16:59:45 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=4D5o1qJMWY; Path=/; Expires=Sun, 18 Apr 2027 16:59:45 GMT; HttpOnly; Secure; SameSite=Strict X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d83eb17bfb3d41dcb7f64d5628e40157 Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:45 UTC	117	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>
2024-04-18 16:59:45 UTC	1269	IN	Data Raw: 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 0a 0d 0a 37 34 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 45 44 49 53 4f 4e 5f 4d 45 54 52 49 43 53 5f 4a 53 5f 45 58 Data Ascii: 19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-width, initial-scale=1" name="viewport" />74<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.EDISON_METRICS_JS_EX
2024-04-18 16:59:45 UTC	403	IN	Data Raw: 63 38 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 65 73 74 72 6f 5f 61 70 70 73 68 65 6c 6c 5f 73 74 79 6c 65 73 2d 76 66 6c 54 59 4d 54 70 37 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 70 72 65 6c 6f 61 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 66 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 Data Ascii: c8<link rel="stylesheet" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflTYMTp7.css" crossorigin type="text/css" data-loader="dbx_edison_page[preload_css]"/>bf<link rel="stylesheet" href="https://cfl.drop
2024-04-18 16:59:45 UTC	116	IN	Data Raw: 36 65 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 43 53 50 5f 53 43 52 49 50 54 5f 4e 4f 4e 43 45 20 3d 20 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 6e<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.CSP_SCRIPT_NONCE = "6qBsa6olnsURvJfiBPVYuIeGwys="</script>
2024-04-18 16:59:45 UTC	1127	IN	Data Raw: 33 35 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 3b 6c 65 74 20 61 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 7b 61 3d 5b 5d 2c 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 3d 65 3d 3e 61 2e 70 75 73 68 28 65 29 2c 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 65 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 65 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: 35f<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">(()=>{"use strict";const e=window;let a;const r=()=>{a=[],e.addRequireLoadCallback=e=>a.push(e),e.configureRequire=function(){const a=arguments;e.addRequireLoadCallback((()=>e.configureRequire.apply(null,a
2024-04-18 16:59:45 UTC	225	IN	Data Raw: 63 34 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6f 46 72 56 7a 34 41 38 56 51 43 37 50 6e 32 56 6c 4b 4c 4d 30 4f 4d 61 64 63 45 3d 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 5f 63 68 72 6f 6d 65 5f 65 6e 2d 76 66 6c 6d 65 73 4e 34 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 37 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 36 0d 0a 3c 62 6f 64 79 3e 0d 0a Data Ascii: c4<script nonce="oFrVz4A8VQC7Pn2VlKLM0OMadcE=" src="https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflmesN4r.js" crossorigin="anonymous"></script>7</head>6<body>
2024-04-18 16:59:45 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 52 55 4e 4e 49 4e 47 5f 49 4e 5f 45 44 49 53 4f 4e 20 3d 20 74 72 75 65 3b 0a 77 69 6e 64 6f 77 2e 5f 5f 53 45 52 56 45 44 5f 42 59 5f 45 44 49 53 4f 4e 5f 57 45 42 5f 53 45 52 56 45 52 5f 5f 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 72 65 71 75 69 72 65 43 6f 6e 66 69 67 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 20 22 77 61 69 74 53 65 63 6f 6e 64 73 22 3a 20 33 30 2c 20 22 70 61 74 68 73 22 3a 20 7b 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 Data Ascii: 1000<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.RUNNING_IN_EDISON = true;window.__SERVED_BY_EDISON_WEB_SERVER__ = true;var requireConfig = {"baseUrl": "https://cfl.dropboxstatic.com/", "waitSeconds": 30, "paths": {"atlas/privacy_consent/ccpa_i
2024-04-18 16:59:45 UTC	7418	IN	Data Raw: 31 63 66 32 0d 0a 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 2d 76 66 6c 61 5a 6b 51 4f 42 22 2c 20 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 65 5f 65 64 69 73 6f 6e 5f 65 64 69 73 6f 6e 5f 72 65 61 63 74 5f 70 61 67 65 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 63 70 61 5f 69 66 72 61 6d 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f Data Ascii: 1cf2pa_iframe_bundle_amd/dist/e_edison": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison-vflaZkQOB", "atlas/privacy_consent/ccpa_iframe_bundle_amd/dist/e_edison_edison_react_page": "static/atlas/privacy_consent/ccpa_iframe_bundle_amd/
2024-04-18 16:59:45 UTC	4657	IN	Data Raw: 31 30 30 30 0d 0a 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 28 72 65 71 75 69 72 65 43 6f 6e 66 69 67 2c 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6e 74 72 79 4f 70 74 69 6f 6e 73 3a 20 7b 22 72 65 6c 65 61 73 65 22 3a 22 39 37 36 38 34 35 63 63 66 33 36 66 66 32 31 62 61 66 38 63 37 64 32 66 32 31 66 31 66 64 39 33 31 32 37 34 62 37 38 32 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 74 61 67 73 22 3a 7b 22 65 64 69 73 6f 6e 5f 70 61 67 65 5f 6e 61 6d 65 22 3a 22 63 63 70 61 5f 69 66 72 61 6d 65 22 2c 22 62 72 6f 77 73 65 72 5f 69 64 22 3a 22 34 35 35 30 37 39 Data Ascii: 1000;window.addRequireLoadCallback(function() { window.configureRequire(requireConfig, { sentryOptions: {"release":"976845ccf36ff21baf8c7d2f21f1fd931274b782","environment":"prod","tags":{"edison_page_name":"ccpa_iframe","browser_id":"455079
2024-04-18 16:59:45 UTC	1705	IN	Data Raw: 36 61 32 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 71 42 73 61 36 6f 6c 6e 73 55 52 76 4a 66 69 42 50 56 59 75 49 65 47 77 79 73 3d 22 3e 77 69 6e 64 6f 77 2e 61 64 64 52 65 71 75 69 72 65 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 28 0a 20 20 20 20 5b 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 22 2c 20 22 6a 73 2f 65 64 69 73 6f 6e 2f 65 64 69 73 6f 6e 5f 72 65 61 63 74 5f 70 61 67 65 22 2c 20 22 61 74 6c 61 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 73 74 61 74 69 63 2f 63 63 70 61 5f 69 66 72 61 6d 65 22 5d 2c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 65 64 69 73 6f 6e 4d 6f 64 75 6c 65 2c 20 65 64 69 73 6f 6e 52 65 61 63 74 50 61 67 65 Data Ascii: 6a2<script nonce="6qBsa6olnsURvJfiBPVYuIeGwys=">window.addRequireLoadCallback(function() { window.require( ["js/edison/edison", "js/edison/edison_react_page", "atlas/privacy_consent/static/ccpa_iframe"], function(edisonModule, edisonReactPage

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50234	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	824	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:45 UTC	1147	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:45 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:45 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:45 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d70b90b70d7c405b8c128f0fd15eb133 Connection: close
2024-04-18 16:59:45 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50236	34.128.128.0	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	809	OUT	POST /v1/rgstr HTTP/1.1 Host: events.statsigapi.net Connection: keep-alive Content-Length: 758 STATSIG-CLIENT-TIME: 1713459583699 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" STATSIG-API-KEY: client-rUeuazmIIgsQ4DOPVC3ukXiZX1F0O99jg9P7egpXVxu STATSIG-SDK-VERSION: 4.50.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 STATSIG-ENCODED: 0 STATSIG-SDK-TYPE: js-client sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:45 UTC	758	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 73 74 61 74 73 69 67 3a 3a 61 70 70 5f 6d 65 74 72 69 63 73 3a 3a 70 61 67 65 5f 6c 6f 61 64 5f 74 69 6d 65 22 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 73 74 61 74 73 69 67 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 69 65 72 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 31 37 39 32 2e 35 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 22 7d 2c 22 74 69 6d 65 22 3a 31 37 31 33 34 35 39 35 38 32 33 34 38 2c 22 73 74 61 74 73 69 67 4d 65 74 61 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 50 61 67 65 Data Ascii: {"events":[{"eventName":"statsig::app_metrics::page_load_time","user":{"locale":"en","statsigEnvironment":{"tier":"production"}},"value":1792.5,"metadata":{"url":"https://www.docsend.com/integrations/"},"time":1713459582348,"statsigMetadata":{"currentPage
2024-04-18 16:59:45 UTC	519	IN	HTTP/1.1 202 Accepted content-type: application/json x-frame-options: SAMEORIGIN permissions-policy: interest-cohort=() x-response-time: 0 ms access-control-allow-credentials: true access-control-allow-origin: * Content-Length: 16 date: Thu, 18 Apr 2024 16:59:45 GMT via: 1.1 google content-security-policy: frame-ancestors *.statsig.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff,nosniff; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:45 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50238	104.16.188.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	665	OUT	GET /products/docsend-docsend/reviews HTTP/1.1 Host: www.g2.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:45 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Thu, 18 Apr 2024 16:59:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16716 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: u9XrU2ciN8C8N/Okh71iuv7Uipe8g77aXvF8BSX16Vy1R+WPz8fimxl8xoR+Bj4C+SgTs1ORWzJsf5FcdVjqnvj9kDzMd+PznrvAKChB1AYVu+KPDW0Aw8pC7c3mLPwAioBgNHjQbJgP+iPqPHaz5A==$D+od3pVPjsbZV4PvM3qtLg== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-18 16:59:45 UTC	423	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 78 75 7a 31 65 71 45 78 66 56 75 64 73 58 77 37 53 4b 39 4b 33 61 72 70 4d 30 6e 58 62 54 79 52 6b 6d 31 72 4a 7a 6f 36 6d 6c 6f 2d 31 37 31 33 34 35 39 35 38 35 2d 31 2e 30 2e 31 2e 31 2d 53 36 4e 5f 69 6f 79 4b 4b 75 6a 4b 71 6e 67 75 76 61 49 45 69 57 6c 77 4f 71 47 4d 33 48 41 62 6b 30 51 43 50 63 67 6f 58 35 72 5a 4e 39 75 69 49 78 2e 2e 36 37 6c 50 45 5a 41 5f 50 6f 70 50 5f 6e 71 70 62 58 79 64 70 75 36 62 5f 39 70 47 6c 6d 6c 75 47 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 31 38 2d 41 70 72 2d 32 34 20 31 37 3a 32 39 3a 34 35 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 67 32 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 Data Ascii: Set-Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; path=/; expires=Thu, 18-Apr-24 17:29:45 GMT; domain=.g2.com; HttpOnly; Secure; SameS
2024-04-18 16:59:45 UTC	1025	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 Data Ascii: 3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPS
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 Data Ascii: t-red{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGV
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 65 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: e}body.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 74 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d Data Ascii: t;color:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.m
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e Data Ascii: 5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challen
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: to;max-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 3a 62 6c 6f 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: :block}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 67 73 57 72 46 4b 6c 44 6c 5a 6f 30 66 46 61 76 35 43 75 45 65 42 4f 6f 69 71 6e 50 51 72 6b 65 69 53 35 64 50 6f 5a 5f 50 78 65 67 34 4e 79 75 33 7a 36 58 5f 6f 6b 36 63 58 4d 6d 77 63 65 67 6d 30 54 73 36 4f 49 2e 4e 47 4b 51 76 47 71 36 34 37 4c 69 42 38 4d 72 77 4b 55 4d 4f 74 34 6e 75 45 45 6d 4c 46 69 50 34 48 34 5f 57 41 51 6a 45 71 55 33 4a 30 46 50 56 68 5f 69 69 38 74 45 5a 36 67 32 4b 33 57 78 46 78 67 39 2e 56 4a 65 51 35 4a 45 42 6b 55 7a 67 56 6f 70 51 4c 45 47 59 75 42 70 49 43 76 6a 62 4c 79 42 6a 66 57 67 79 65 30 78 78 58 4e 6b 33 72 78 57 6d 38 77 36 31 4c 4f 4f 70 4b 6e 57 49 48 4f 56 6f 38 57 4f 4a 6c 5a 52 47 56 42 62 53 6c 49 73 59 32 4f 36 42 6e 46 73 65 38 74 42 45 57 6f 36 65 33 50 74 6d 47 6c 38 52 53 64 76 4d 39 76 6b 32 6b 37 Data Ascii: gsWrFKlDlZo0fFav5CuEeBOoiqnPQrkeiS5dPoZ_Pxeg4Nyu3z6X_ok6cXMmwcegm0Ts6OI.NGKQvGq647LiB8MrwKUMOt4nuEEmLFiP4H4_WAQjEqU3J0FPVh_ii8tEZ6g2K3WxFxg9.VJeQ5JEBkUzgVopQLEGYuBpICvjbLyBjfWgye0xxXNk3rxWm8w61LOOpKnWIHOVo8WOJlZRGVBbSlIsY2O6BnFse8tBEWo6e3PtmGl8RSdvM9vk2k7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50235	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:45 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ed761fb2d52a4237bf5178fe5264293e Connection: close
2024-04-18 16:59:45 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50237	104.16.188.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:45 UTC	1134	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87663508cb54677c HTTP/1.1 Host: www.g2.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.g2.com/products/docsend-docsend/reviews?__cf_chl_rt_tk=QiD10sYGYmIpDTZ9KxOwvHOvzBMUMuEHZ_QEgJehA88-1713459585-0.0.1.1-1642 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw
2024-04-18 16:59:45 UTC	434	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:45 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8766350a5aa7ad80-ATL
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 65 61 38 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 35 2c 66 75 2c 66 76 2c 66 77 2c 66 7a 2c 66 41 2c 67 38 2c 67 61 2c 67 65 2c 67 66 2c 67 6a 2c 67 6b 2c 67 72 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 66 Data Ascii: ea8window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;~function(i5,fu,fv,fw,fz,fA,g8,ga,ge,gf,gj,gk,gr,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,hf
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 28 67 29 7b 72 65 74 75 72 6e 20 67 30 28 65 5b 69 55 28 32 30 38 31 29 5d 28 67 31 2c 63 29 29 7d 7d 2c 67 38 3d 30 2c 66 75 5b 69 35 28 33 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 34 29 7b 6a 34 3d 69 35 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 67 38 29 2c 66 75 5b 6a 34 28 31 38 30 36 29 5d 3d 21 21 5b 5d 7d 2c 66 75 5b 69 35 28 35 35 38 29 5d 3d 21 5b 5d 2c 66 75 5b 69 35 28 32 34 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 39 29 7b 69 66 28 6a 39 3d 69 35 2c 66 75 5b 6a 39 28 35 35 38 29 5d 29 72 65 74 75 72 6e 3b 66 75 5b 6a 39 28 35 35 38 29 5d 3d 21 21 5b 5d 7d 2c 67 61 3d 30 2c 67 64 28 29 2c 67 65 3d 7b 7d 2c 67 65 5b 69 35 28 35 30 33 29 5d 3d 27 6f 27 2c 67 65 5b 69 35 28 31 37 34 37 29 5d 3d 27 73 27 2c 67 65 5b 69 35 28 31 35 31 39 29 Data Ascii: (g){return g0(e[iU(2081)](g1,c))}},g8=0,fu[i5(381)]=function(j4){j4=i5,clearTimeout(g8),fu[j4(1806)]=!![]},fu[i5(558)]=![],fu[i5(2428)]=function(j9){if(j9=i5,fu[j9(558)])return;fu[j9(558)]=!![]},ga=0,gd(),ge={},ge[i5(503)]='o',ge[i5(1747)]='s',ge[i5(1519)
2024-04-18 16:59:45 UTC	1021	IN	Data Raw: 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 6a 6d 29 7b 6a 6d 3d 6a 6c 2c 4f 62 6a 65 63 74 5b 6a 6d 28 32 30 34 39 29 5d 5b 6a 6d 28 34 35 38 29 5d 5b 6a 6d 28 35 32 39 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 6a 6d 28 32 31 31 33 29 5d 28 47 29 7d 7d 2c 67 6a 3d 69 35 28 31 36 30 29 5b 69 35 28 31 32 34 30 29 5d 28 27 3b 27 29 2c 67 6b 3d 67 6a 5b 69 35 28 31 33 37 39 29 5d 5b 69 35 28 31 31 32 38 29 5d 28 67 6a 29 2c 66 75 5b 69 35 28 32 34 33 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 6f 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 6a 6f 3d 69 35 2c 6a 3d 7b 7d 2c 6a 5b 6a 6f 28 31 31 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 6a 6f 28 32 39 35 29 5d Data Ascii: nction s(G,H,jm){jm=jl,Object[jm(2049)][jm(458)][jm(529)](j,H)\|\|(j[H]=[]),j[H][jm(2113)](G)}},gj=i5(160)[i5(1240)](';'),gk=gj[i5(1379)][i5(1128)](gj),fu[i5(2434)]=function(h,i,jo,j,k,l,m,n,o){for(jo=i5,j={},j[jo(1178)]=function(s,v){return s<v},j[jo(295)]
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 61 66 34 0d 0a 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 67 3d 63 5b 6a 73 28 31 39 33 34 29 5d 28 31 65 33 2c 66 75 5b 6a 73 28 31 35 30 32 29 5d 5b 6a 73 28 32 30 31 29 5d 28 63 5b 6a 73 28 39 33 35 29 5d 28 32 2c 66 29 2c 33 32 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 68 3d 63 5b 6a 73 28 38 32 39 29 5d 28 67 70 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 69 73 4e 61 4e 28 66 29 26 26 28 66 3d 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 2c 66 75 5b 69 35 28 31 35 38 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6a 75 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 6a 3d 28 6a 75 3d 69 35 2c 69 3d 7b 7d 2c 69 5b 6a 75 28 31 30 37 36 29 5d 3d 6a 75 28 31 Data Ascii: af4);continue;case'3':g=c[js(1934)](1e3,fu[js(1502)][js(201)](c[js(935)](2,f),32));continue;case'4':h=c[js(829)](gp);continue;case'5':isNaN(f)&&(f=0);continue}break}},fu[i5(1580)]=function(f,g,h,ju,i,j,k,l,m,n,o,s,x,B,C,D){j=(ju=i5,i={},i[ju(1076)]=ju(1
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 65 3b 63 61 73 65 27 31 31 27 3a 43 3d 6a 5b 6a 75 28 34 38 32 29 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 44 3d 6e 65 77 20 66 75 5b 28 6a 75 28 35 30 30 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 66 75 5b 69 35 28 37 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6a 76 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6a 76 3d 69 35 2c 69 3d 7b 7d 2c 69 5b 6a 76 28 31 36 35 37 29 5d 3d 6a 76 28 31 30 32 31 29 2c 69 5b 6a 76 28 36 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 69 5b 6a 76 28 32 30 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6a 76 28 38 38 36 29 5d Data Ascii: e;case'11':C=j[ju(482)];continue;case'12':D=new fu[(ju(500))]();continue}break}}catch(E){}},fu[i5(797)]=function(d,e,f,g,h,jv,i,j,k,l,m){(jv=i5,i={},i[jv(1657)]=jv(1021),i[jv(607)]=function(n,o){return n>o},i[jv(2026)]=function(n,o){return n+o},i[jv(886)]
2024-04-18 16:59:45 UTC	73	IN	Data Raw: 74 5b 69 35 28 32 32 35 31 29 5d 3d 69 35 28 31 37 37 36 29 2c 67 74 5b 69 35 28 34 32 38 29 5d 3d 69 35 28 32 31 35 31 29 2c 67 74 5b 69 35 28 31 31 32 31 29 5d 3d 69 35 28 32 30 39 31 29 2c 67 74 5b 69 35 28 31 0d 0a Data Ascii: t[i5(2251)]=i5(1776),gt[i5(428)]=i5(2151),gt[i5(1121)]=i5(2091),gt[i5(1
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 31 62 35 36 0d 0a 39 37 38 29 5d 3d 69 35 28 31 39 36 36 29 2c 67 74 5b 69 35 28 31 37 30 39 29 5d 3d 69 35 28 31 32 36 34 29 2c 67 74 5b 69 35 28 31 36 38 35 29 5d 3d 69 35 28 31 36 38 31 29 2c 67 74 5b 69 35 28 31 36 33 39 29 5d 3d 69 35 28 38 32 35 29 2c 67 74 5b 69 35 28 38 30 38 29 5d 3d 69 35 28 38 37 38 29 2c 67 74 5b 69 35 28 31 37 38 30 29 5d 3d 69 35 28 32 33 36 32 29 2c 67 74 5b 69 35 28 31 32 39 39 29 5d 3d 69 35 28 39 31 39 29 2c 67 74 5b 69 35 28 32 36 33 29 5d 3d 69 35 28 31 35 36 36 29 2c 67 74 5b 69 35 28 31 33 37 36 29 5d 3d 69 35 28 31 36 32 29 2c 67 74 5b 69 35 28 31 37 31 31 29 5d 3d 69 35 28 31 32 37 39 29 2c 67 74 5b 69 35 28 31 32 33 38 29 5d 3d 69 35 28 32 32 32 34 29 2c 67 74 5b 69 35 28 31 37 30 31 29 5d 3d 69 35 28 31 38 36 36 Data Ascii: 1b56978)]=i5(1966),gt[i5(1709)]=i5(1264),gt[i5(1685)]=i5(1681),gt[i5(1639)]=i5(825),gt[i5(808)]=i5(878),gt[i5(1780)]=i5(2362),gt[i5(1299)]=i5(919),gt[i5(263)]=i5(1566),gt[i5(1376)]=i5(162),gt[i5(1711)]=i5(1279),gt[i5(1238)]=i5(2224),gt[i5(1701)]=i5(1866
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 33 39 29 5d 3d 69 35 28 34 30 30 29 2c 67 76 5b 69 35 28 38 30 38 29 5d 3d 69 35 28 32 30 34 35 29 2c 67 76 5b 69 35 28 31 37 38 30 29 5d 3d 69 35 28 32 33 32 30 29 2c 67 76 5b 69 35 28 31 32 39 39 29 5d 3d 69 35 28 31 31 39 31 29 2c 67 76 5b 69 35 28 32 36 33 29 5d 3d 69 35 28 38 35 37 29 2c 67 76 5b 69 35 28 31 33 37 36 29 5d 3d 69 35 28 33 37 34 29 2c 67 76 5b 69 35 28 31 37 31 31 29 5d 3d 69 35 28 31 30 35 38 29 2c 67 76 5b 69 35 28 31 32 33 38 29 5d 3d 69 35 28 31 31 39 39 29 2c 67 76 5b 69 35 28 31 37 30 31 29 5d 3d 69 35 28 32 33 31 30 29 2c 67 76 5b 69 35 28 34 36 32 29 5d 3d 69 35 28 32 33 32 39 29 2c 67 76 5b 69 35 28 31 33 31 36 29 5d 3d 69 35 28 31 36 30 36 29 2c 67 76 5b 69 35 28 31 37 31 32 29 5d 3d 69 35 28 33 30 32 29 2c 67 76 5b 69 35 28 Data Ascii: 39)]=i5(400),gv[i5(808)]=i5(2045),gv[i5(1780)]=i5(2320),gv[i5(1299)]=i5(1191),gv[i5(263)]=i5(857),gv[i5(1376)]=i5(374),gv[i5(1711)]=i5(1058),gv[i5(1238)]=i5(1199),gv[i5(1701)]=i5(2310),gv[i5(462)]=i5(2329),gv[i5(1316)]=i5(1606),gv[i5(1712)]=i5(302),gv[i5(
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 36 29 2c 67 78 5b 69 35 28 32 36 33 29 5d 3d 69 35 28 31 37 37 30 29 2c 67 78 5b 69 35 28 31 33 37 36 29 5d 3d 69 35 28 31 31 39 36 29 2c 67 78 5b 69 35 28 31 37 31 31 29 5d 3d 69 35 28 32 30 39 32 29 2c 67 78 5b 69 35 28 31 32 33 38 29 5d 3d 69 35 28 31 33 39 34 29 2c 67 78 5b 69 35 28 31 37 30 31 29 5d 3d 69 35 28 32 38 30 29 2c 67 78 5b 69 35 28 34 36 32 29 5d 3d 69 35 28 31 34 39 30 29 2c 67 78 5b 69 35 28 31 33 31 36 29 5d 3d 69 35 28 32 31 30 35 29 2c 67 78 5b 69 35 28 31 37 31 32 29 5d 3d 69 35 28 31 37 39 37 29 2c 67 78 5b 69 35 28 31 32 31 39 29 5d 3d 69 35 28 31 31 30 35 29 2c 67 79 3d 7b 7d 2c 67 79 5b 69 35 28 32 33 34 34 29 5d 3d 69 35 28 31 38 31 36 29 2c 67 79 5b 69 35 28 32 33 31 36 29 5d 3d 69 35 28 35 31 35 29 2c 67 79 5b 69 35 28 36 35 Data Ascii: 6),gx[i5(263)]=i5(1770),gx[i5(1376)]=i5(1196),gx[i5(1711)]=i5(2092),gx[i5(1238)]=i5(1394),gx[i5(1701)]=i5(280),gx[i5(462)]=i5(1490),gx[i5(1316)]=i5(2105),gx[i5(1712)]=i5(1797),gx[i5(1219)]=i5(1105),gy={},gy[i5(2344)]=i5(1816),gy[i5(2316)]=i5(515),gy[i5(65
2024-04-18 16:59:45 UTC	1369	IN	Data Raw: 29 2c 67 7a 5b 69 35 28 31 32 33 38 29 5d 3d 69 35 28 32 31 33 39 29 2c 67 7a 5b 69 35 28 31 37 30 31 29 5d 3d 69 35 28 35 34 38 29 2c 67 7a 5b 69 35 28 34 36 32 29 5d 3d 69 35 28 31 39 30 39 29 2c 67 7a 5b 69 35 28 31 33 31 36 29 5d 3d 69 35 28 31 39 32 38 29 2c 67 7a 5b 69 35 28 31 37 31 32 29 5d 3d 69 35 28 38 34 33 29 2c 67 7a 5b 69 35 28 31 32 31 39 29 5d 3d 69 35 28 38 39 30 29 2c 67 41 3d 7b 7d 2c 67 41 5b 69 35 28 32 33 34 34 29 5d 3d 69 35 28 38 38 31 29 2c 67 41 5b 69 35 28 32 33 31 36 29 5d 3d 69 35 28 35 38 39 29 2c 67 41 5b 69 35 28 36 35 31 29 5d 3d 69 35 28 32 35 39 29 2c 67 41 5b 69 35 28 32 34 31 36 29 5d 3d 69 35 28 34 32 34 29 2c 67 41 5b 69 35 28 31 32 32 38 29 5d 3d 69 35 28 37 30 30 29 2c 67 41 5b 69 35 28 31 34 35 33 29 5d 3d 69 35 Data Ascii: ),gz[i5(1238)]=i5(2139),gz[i5(1701)]=i5(548),gz[i5(462)]=i5(1909),gz[i5(1316)]=i5(1928),gz[i5(1712)]=i5(843),gz[i5(1219)]=i5(890),gA={},gA[i5(2344)]=i5(881),gA[i5(2316)]=i5(589),gA[i5(651)]=i5(259),gA[i5(2416)]=i5(424),gA[i5(1228)]=i5(700),gA[i5(1453)]=i5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50239	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:46 UTC	853	OUT	GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:46 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:46 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:46 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:46 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 30 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7719 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c290c7e91c654634b6a9ea209cdef6b4 Connection: close
2024-04-18 16:59:46 UTC	7719	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50240	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:46 UTC	1853	OUT	GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=d83eb17bfb3d41dcb7f64d5628e40157&time=1713459585 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:46 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Thu, 18 Apr 2024 16:59:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5442c7f80e224dd2963e0ea060386c18 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50241	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:46 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:46 UTC	780	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 33 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 32 37 36 33 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 34 62 34 61 32 65 34 62 62 31 64 37 34 37 61 64 38 31 30 37 64 66 39 37 37 33 66 33 65 30 65 64 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A3%2C%22time_on_page_ms%22%3A2763%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%224b4a2e4bb1d747ad8107df9773f3e0ed%22%2C%22url%2
2024-04-18 16:59:47 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:47 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:47 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:47 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 78 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:47 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b4de0407f61a4a2299d93589cad4577f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50242	104.16.188.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	1266	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/453692618:1713457615:mDLVUnRUyHwQqLq27-ZukzIgg8qFi3lb2Vv2A2tfpY4/87663508cb54677c/6723587646fe441 HTTP/1.1 Host: www.g2.com Connection: keep-alive Content-Length: 2023 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 6723587646fe441 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.g2.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.g2.com/products/docsend-docsend/reviews Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
2024-04-18 16:59:47 UTC	2023	OUT	Data Raw: 76 5f 38 37 36 36 33 35 30 38 63 62 35 34 36 37 37 63 3d 39 33 49 6a 63 6a 44 6a 4a 6a 24 6a 4e 6a 79 78 4d 70 6a 24 67 6a 49 6b 77 51 45 71 45 6f 36 6d 65 42 6d 77 78 4c 33 77 47 6d 72 6a 50 49 74 6d 45 55 49 6d 4c 6d 45 46 49 6f 51 4c 68 6d 6f 6a 50 6b 4d 46 6d 79 49 31 74 6c 53 42 4d 72 6d 58 49 78 4d 53 6d 76 4e 49 4f 31 62 68 37 6d 6a 4d 64 6d 6b 25 32 62 33 6d 69 6d 50 70 76 75 6d 54 67 6d 4d 6c 6d 71 47 71 53 67 39 6a 77 31 48 6d 66 69 72 41 32 79 6a 4a 70 6d 48 2b 46 67 49 6d 41 6d 6d 74 31 50 4a 68 53 66 67 63 58 2b 4c 66 32 68 6a 33 4b 2b 67 49 7a 48 78 78 6d 2b 70 31 71 39 50 6b 75 47 4c 45 6d 42 4d 44 6d 4f 35 54 78 32 78 4d 32 65 6a 70 72 6f 71 72 6d 6b 75 6a 57 37 78 6d 68 24 49 4d 73 35 4e 65 48 50 63 47 4a 58 67 57 44 6a 4a 38 52 24 72 6d Data Ascii: v_87663508cb54677c=93IjcjDjJj$jNjyxMpj$gjIkwQEqEo6meBmwxL3wGmrjPItmEUImLmEFIoQLhmojPkMFmyI1tlSBMrmXIxMSmvNIO1bh7mjMdmk%2b3mimPpvumTgmMlmqGqSg9jw1HmfirA2yjJpmH+FgImAmmt1PJhSfgcX+Lf2hj3K+gIzHxxm+p1q9PkuGLEmBMDmO5Tx2xM2ejproqrmkujW7xmh$IMs5NeHPcGJXgWDjJ8R$rm
2024-04-18 16:59:47 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:47 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: S0W9zVFfUc9SbdSH8bVTFeKj0FU8nIASEYy5sVDwlxpBjY4+hy+C9HiVyslBKL6k$Jmo8CKEXWnaZLR9mriVBNA== vary: accept-encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876635131ce64513-ATL
2024-04-18 16:59:47 UTC	943	IN	Data Raw: 66 38 39 0d 0a 55 57 53 45 55 49 36 43 6d 34 4e 55 68 31 52 37 6e 57 70 77 6d 6d 43 61 66 6c 35 77 67 47 46 69 64 48 57 6f 66 6f 56 35 69 6f 35 2f 64 49 53 76 64 4b 36 4a 65 6f 79 74 69 72 69 52 65 48 79 4d 75 35 75 6e 78 5a 75 36 78 4a 57 62 76 4a 72 49 72 70 43 67 78 70 44 4b 6e 73 4b 6d 32 62 72 59 72 38 32 2f 74 64 37 4a 79 39 66 50 76 72 47 5a 73 2b 6d 70 76 62 58 71 71 62 75 37 33 36 69 38 36 36 66 58 39 73 48 53 7a 62 48 47 78 76 6e 56 2f 75 6e 4e 39 2b 55 45 7a 74 72 52 43 74 72 6d 31 76 33 4e 34 64 6b 50 7a 64 2f 66 42 4e 55 45 34 66 48 69 35 2b 63 4d 2b 76 62 57 45 66 48 56 32 75 54 30 46 2b 51 66 38 67 4c 33 48 53 45 41 2b 50 73 79 43 54 4d 65 43 69 77 6b 4b 51 4d 54 43 52 59 31 44 66 59 4b 50 41 51 54 4f 52 51 56 4d 6a 37 38 4c 55 67 46 48 55 Data Ascii: f89UWSEUI6Cm4NUh1R7nWpwmmCafl5wgGFidHWofoV5io5/dISvdK6JeoytiriReHyMu5unxZu6xJWbvJrIrpCgxpDKnsKm2brYr82/td7Jy9fPvrGZs+mpvbXqqbu736i866fX9sHSzbHGxvnV/unN9+UEztrRCtrm1v3N4dkPzd/fBNUE4fHi5+cM+vbWEfHV2uT0F+Qf8gL3HSEA+PsyCTMeCiwkKQMTCRY1DfYKPAQTORQVMj78LUgFHU
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 45 50 46 79 74 56 45 78 73 72 57 52 63 66 4b 31 30 62 4a 46 46 68 48 79 68 52 55 30 5a 69 54 43 78 4b 4f 30 41 77 54 6c 34 7a 5a 58 4e 4f 57 6e 6c 45 4d 6a 68 4c 4e 55 68 41 56 58 52 6b 68 55 56 33 61 46 64 46 67 49 30 2f 64 6e 78 65 63 49 42 64 63 6d 46 72 6b 47 52 75 55 49 69 47 6b 58 78 78 56 32 46 73 63 48 74 62 5a 70 32 61 6b 61 6d 6e 66 57 78 6b 6f 4a 46 37 63 61 4f 55 67 33 46 7a 72 61 79 43 68 72 75 4a 6a 70 53 49 73 35 71 4c 6a 4c 2b 51 6b 4d 6d 68 6d 35 65 64 78 5a 61 33 76 4a 79 38 71 6f 36 56 6c 71 57 70 75 64 6e 51 6d 4a 79 55 30 4d 44 64 6f 64 54 61 73 36 4b 6a 33 4c 71 79 73 38 4f 6c 76 4c 65 34 36 37 79 38 38 75 4b 6f 77 4f 58 36 72 4e 54 72 79 64 54 49 32 4e 33 55 7a 50 45 47 37 76 58 58 33 50 6e 56 78 4f 48 41 33 4f 66 48 30 67 6e 77 2f Data Ascii: EPFytVExsrWRcfK10bJFFhHyhRU0ZiTCxKO0AwTl4zZXNOWnlEMjhLNUhAVXRkhUV3aFdFgI0/dnxecIBdcmFrkGRuUIiGkXxxV2FscHtbZp2akamnfWxkoJF7caOUg3FzrayChruJjpSIs5qLjL+QkMmhm5edxZa3vJy8qo6VlqWpudnQmJyU0MDdodTas6Kj3Lqys8OlvLe467y88uKowOX6rNTrydTI2N3UzPEG7vXX3PnVxOHA3OfH0gnw/
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 63 53 78 56 64 47 43 77 75 55 6b 38 39 56 31 51 6e 55 6b 78 6e 4a 54 64 6c 4a 6b 39 76 59 32 4e 53 54 57 64 6e 57 6c 46 72 61 32 63 38 63 6b 78 54 57 58 4e 7a 64 55 5a 41 68 44 74 63 58 49 71 4c 58 56 70 64 53 33 47 52 55 55 39 31 6c 5a 42 54 65 5a 6d 45 56 33 32 64 63 6c 75 42 57 32 4e 65 65 36 65 66 6e 58 4f 67 58 6f 36 75 67 6f 71 6a 73 58 39 73 67 6f 2b 52 68 58 6d 53 6c 35 69 73 65 5a 75 71 6a 37 4e 2f 75 61 53 47 6b 4d 61 68 6e 71 53 36 70 5a 75 46 76 35 32 72 77 38 44 53 74 62 6a 44 6c 37 57 53 31 70 57 6e 31 5a 61 2f 33 39 50 53 75 72 33 58 31 38 4c 42 32 39 76 4b 78 64 2f 66 30 73 6e 6a 34 39 2b 30 36 73 54 4c 30 65 76 72 37 62 36 34 2f 4c 50 55 31 41 54 6c 2b 39 72 54 77 2b 6b 4b 79 63 66 74 44 67 76 4b 36 68 51 4d 43 74 38 4e 37 76 6f 61 34 2f Data Ascii: cSxVdGCwuUk89V1QnUkxnJTdlJk9vY2NSTWdnWlFra2c8ckxTWXNzdUZAhDtcXIqLXVpdS3GRUU91lZBTeZmEV32dcluBW2Nee6efnXOgXo6ugoqjsX9sgo+RhXmSl5iseZuqj7N/uaSGkMahnqS6pZuFv52rw8DStbjDl7WS1pWn1Za/39PSur3X18LB29vKxd/f0snj49+06sTL0evr7b64/LPU1ATl+9rTw+kKycftDgvK6hQMCt8N7voa4/
2024-04-18 16:59:47 UTC	303	IN	Data Raw: 4d 44 6f 63 56 69 56 5a 53 47 46 49 58 43 6c 4c 57 6a 39 6a 61 43 74 4a 4e 44 55 79 61 32 70 7a 61 55 68 62 5a 30 41 36 4f 54 6d 43 63 46 56 44 67 30 4a 67 69 34 4f 42 53 34 4b 48 51 34 4a 6c 58 55 78 70 63 35 6c 54 69 5a 42 6e 57 6e 32 4a 63 4a 61 64 57 33 47 6d 6b 36 69 54 65 6e 4f 67 67 6f 36 75 66 70 39 39 69 33 78 39 67 34 75 70 6a 4c 47 50 68 35 69 73 71 35 75 53 74 34 47 79 6c 4c 37 44 77 4a 32 2b 6c 6f 48 4b 75 71 57 4c 79 34 71 71 30 38 76 4b 71 38 6a 53 71 38 50 4a 76 5a 76 53 79 62 76 54 6e 72 66 55 78 64 6a 43 34 72 66 55 70 2b 44 4a 75 72 76 76 78 62 36 2f 7a 4c 54 4d 77 4e 44 76 30 73 62 36 38 38 62 59 37 73 6e 4f 7a 4e 7a 45 32 4e 44 67 78 4e 54 57 43 77 54 61 32 50 41 48 45 63 76 69 38 41 48 4f 45 52 6e 6c 43 64 63 49 48 52 4d 5a 37 76 49 Data Ascii: MDocViVZSGFIXClLWj9jaCtJNDUya2pzaUhbZ0A6OTmCcFVDg0Jgi4OBS4KHQ4JlXUxpc5lTiZBnWn2JcJadW3Gmk6iTenOggo6ufp99i3x9g4upjLGPh5isq5uSt4GylL7DwJ2+loHKuqWLy4qq08vKq8jSq8PJvZvSybvTnrfUxdjC4rfUp+DJurvvxb6/zLTMwNDv0sb688bY7snOzNzE2NDgxNTWCwTa2PAHEcvi8AHOERnlCdcIHRMZ7vI
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 65 62 33 0d 0a 6a 51 2b 4f 44 6f 33 46 67 55 69 44 77 73 79 55 41 56 48 44 79 41 6f 46 6b 51 7a 52 52 59 63 47 44 6b 34 53 54 59 65 58 53 42 66 47 55 4d 6b 59 79 46 48 4b 47 51 34 53 79 78 6f 50 55 38 77 62 45 4a 54 4e 48 42 58 56 7a 68 30 58 46 73 38 65 47 46 66 51 48 78 6d 58 6b 56 6a 56 58 31 49 68 47 2b 4e 66 49 75 51 68 49 57 44 6a 58 46 51 6d 49 5a 55 58 48 53 61 57 47 42 30 6e 6c 78 6b 64 4b 4a 67 61 48 53 6d 5a 47 32 59 69 49 70 2f 63 6f 6d 79 6c 6d 2b 6b 6a 36 39 7a 6b 4c 71 7a 76 35 53 78 75 35 53 61 73 71 61 45 75 37 50 48 74 4b 4b 58 76 62 79 6c 6d 70 71 6d 6f 34 71 51 72 71 79 53 32 73 33 48 71 4e 58 63 6e 73 32 63 79 71 48 58 31 65 47 38 76 38 4c 46 6f 62 58 67 35 62 33 71 30 71 2f 67 79 2b 75 76 7a 76 62 76 73 4e 44 74 35 39 44 55 37 75 4b Data Ascii: eb3jQ+ODo3FgUiDwsyUAVHDyAoFkQzRRYcGDk4STYeXSBfGUMkYyFHKGQ4SyxoPU8wbEJTNHBXVzh0XFs8eGFfQHxmXkVjVX1IhG+NfIuQhIWDjXFQmIZUXHSaWGB0nlxkdKJgaHSmZG2YiIp/comylm+kj69zkLqzv5Sxu5SasqaEu7PHtKKXvbylmpqmo4qQrqyS2s3HqNXcns2cyqHX1eG8v8LFobXg5b3q0q/gy+uvzvbvsNDt59DU7uK
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 7a 50 38 46 52 55 4a 4a 69 59 44 45 6b 38 6a 4a 43 4d 6e 51 79 59 70 4a 46 49 54 50 44 41 65 58 46 6c 58 48 6b 45 30 57 43 68 52 48 44 30 35 58 79 42 42 50 58 4a 75 54 30 78 72 4b 45 6c 47 54 44 52 6a 4f 6a 68 30 64 45 74 35 62 6e 32 42 63 48 4e 53 67 58 52 33 56 59 56 34 65 31 69 45 53 45 74 67 6a 58 56 4d 61 59 79 44 55 33 4f 5a 66 70 70 6f 6c 58 65 44 6f 32 2b 57 64 6e 56 32 59 58 68 38 61 70 69 6c 6f 32 71 63 66 34 4f 67 62 59 57 41 72 6d 75 62 75 6f 32 58 6e 6f 6d 52 6d 70 4f 73 77 71 61 45 75 37 48 4b 78 38 69 31 76 49 53 2b 78 6f 4f 7a 30 5a 33 55 30 34 32 70 74 4b 71 76 74 39 65 73 79 35 7a 57 74 5a 57 77 76 72 4b 7a 74 4d 54 6e 36 4e 58 63 70 4e 37 6d 6f 39 50 79 77 73 33 47 39 38 6a 54 73 74 48 53 72 37 37 37 7a 39 44 50 30 2b 2f 53 31 64 44 2b Data Ascii: zP8FRUJJiYDEk8jJCMnQyYpJFITPDAeXFlXHkE0WChRHD05XyBBPXJuT0xrKElGTDRjOjh0dEt5bn2BcHNSgXR3VYV4e1iESEtgjXVMaYyDU3OZfppolXeDo2+WdnV2YXh8apilo2qcf4OgbYWArmubuo2XnomRmpOswqaEu7HKx8i1vIS+xoOz0Z3U042ptKqvt9esy5zWtZWwvrKztMTn6NXcpN7mo9Pyws3G98jTstHSr777z9DP0+/S1dD+
2024-04-18 16:59:47 UTC	1032	IN	Data Raw: 6f 65 51 44 77 53 53 69 6f 54 45 7a 6f 59 54 30 67 6d 4c 52 45 57 4f 6a 45 56 4d 43 31 68 4e 54 4e 6e 59 44 6b 69 57 30 5a 46 4f 7a 42 41 4c 6a 42 71 52 6b 51 75 5a 7a 51 74 53 46 68 37 65 32 71 43 64 33 4a 35 67 57 64 42 55 46 46 61 57 6c 57 4c 57 6c 6c 59 57 59 4e 51 67 6c 46 49 69 6d 31 35 57 57 35 32 61 6f 79 49 58 70 5a 32 58 31 2b 47 5a 4a 75 53 63 6e 4a 39 64 32 4e 70 66 32 61 67 71 48 46 79 71 6f 71 6a 63 35 71 37 72 36 61 72 66 5a 4a 32 72 36 74 31 74 61 57 41 6d 62 79 7a 67 35 2f 4a 69 63 71 59 7a 4b 65 7a 30 35 36 65 7a 35 61 6a 74 74 61 73 6d 73 69 2f 33 35 72 4a 34 4a 58 52 6f 4e 61 69 32 39 71 34 31 36 6a 69 76 72 36 36 37 76 44 47 76 2f 62 52 72 63 4c 46 77 2b 2f 32 33 72 7a 7a 36 72 66 42 7a 64 44 64 39 4d 58 47 2f 74 62 34 76 73 51 4e 7a Data Ascii: oeQDwSSioTEzoYT0gmLREWOjEVMC1hNTNnYDkiW0ZFOzBALjBqRkQuZzQtSFh7e2qCd3J5gWdBUFFaWlWLWllYWYNQglFIim15WW52aoyIXpZ2X1+GZJuScnJ9d2Npf2agqHFyqoqjc5q7r6arfZJ2r6t1taWAmbyzg5/JicqYzKez056ez5ajttasmsi/35rJ4JXRoNai29q416jivr667vDGv/bRrcLFw+/23rzz6rfBzdDd9MXG/tb4vsQNz
2024-04-18 16:59:47 UTC	1106	IN	Data Raw: 34 34 62 0d 0a 4e 6c 67 53 52 69 74 61 47 31 49 63 45 31 74 6a 50 43 41 2f 58 53 51 6f 49 47 6c 56 58 6d 4a 5a 4a 69 78 48 4f 32 4a 69 50 32 77 75 57 45 4e 77 65 46 35 2f 53 6e 35 37 56 45 39 55 50 6c 36 48 66 6e 35 62 53 55 78 75 68 55 6c 6c 57 6b 69 44 6b 35 4b 42 62 58 5a 6c 62 33 6c 36 61 58 4f 59 62 48 5a 59 6c 4a 31 65 68 4b 5a 2f 61 49 42 36 65 6f 32 64 69 58 35 74 69 4b 53 55 61 34 43 71 6a 48 4b 51 75 62 4a 30 6c 35 42 36 6e 70 70 31 75 35 2b 7a 76 6f 43 79 70 5a 57 44 79 34 53 35 71 72 79 4a 72 36 2f 53 30 73 43 68 6b 38 6e 51 73 5a 58 62 76 39 37 43 31 71 48 4d 35 72 48 56 79 65 72 65 31 63 54 61 6f 4c 6a 64 37 38 6d 39 72 36 37 4e 31 65 36 79 39 66 54 51 30 38 66 30 30 63 43 34 32 62 62 42 77 74 62 77 77 75 45 4d 42 41 4c 58 42 66 7a 79 45 75 Data Ascii: 44bNlgSRitaG1IcE1tjPCA/XSQoIGlVXmJZJixHO2JiP2wuWENweF5/Sn57VE9UPl6Hfn5bSUxuhUllWkiDk5KBbXZlb3l6aXOYbHZYlJ1ehKZ/aIB6eo2diX5tiKSUa4CqjHKQubJ0l5B6npp1u5+zvoCypZWDy4S5qryJr6/S0sChk8nQsZXbv97C1qHM5rHVyere1cTaoLjd78m9r67N1e6y9fTQ08f00cC42bbBwtbwwuEMBALXBfzyEu
2024-04-18 16:59:47 UTC	259	IN	Data Raw: 66 64 0d 0a 45 5a 4a 42 66 6c 59 4e 77 55 4a 79 57 62 47 39 71 63 48 46 2b 6b 6e 69 66 65 59 42 6a 6b 58 32 71 71 6e 57 4d 6e 59 69 72 6a 6e 36 6d 71 6f 57 50 73 35 4b 43 69 49 79 34 69 62 78 2f 75 6f 76 42 70 4d 4f 56 74 59 65 32 6e 71 4f 2b 78 5a 71 71 6f 4a 2b 6d 71 38 37 4b 73 74 65 50 71 4b 76 4a 78 71 79 73 7a 62 44 61 72 4a 71 62 6f 73 4c 58 74 4d 4f 79 73 39 62 49 78 4e 2f 4d 36 73 6a 4c 73 2f 4c 4d 39 2b 72 6c 7a 75 37 51 2f 64 6b 41 75 38 2f 4f 30 50 72 52 33 41 6e 52 35 4e 30 4d 77 77 33 59 2f 4d 76 39 37 67 62 4c 45 75 6b 58 7a 78 76 74 39 4e 4d 61 2b 69 44 66 37 75 7a 77 2b 39 66 31 47 78 38 57 2f 53 7a 73 43 51 77 68 4c 69 38 64 2f 4f 59 78 4b 44 49 4c 46 6a 77 63 38 67 67 77 43 51 30 33 4c 2f 73 55 41 7a 6f 45 2b 6b 4e 4c 4a 41 67 4f 51 53 Data Ascii: fdEZJBflYNwUJyWbG9qcHF+knifeYBjkX2qqnWMnYirjn6mqoWPs5KCiIy4ibx/uovBpMOVtYe2nqO+xZqqoJ+mq87KstePqKvJxqyszbDarJqbosLXtMOys9bIxN/M6sjLs/LM9+rlzu7Q/dkAu8/O0PrR3AnR5N0Mww3Y/Mv97gbLEukXzxvt9NMa+iDf7uzw+9f1Gx8W/SzsCQwhLi8d/OYxKDILFjwc8ggwCQ03L/sUAzoE+kNLJAgOQS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50243	104.16.188.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	1073	OUT	GET /favicon.ico HTTP/1.1 Host: www.g2.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.g2.com/products/docsend-docsend/reviews Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
2024-04-18 16:59:47 UTC	493	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:47 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close CF-Ray: 87663514b8661375-ATL CF-Cache-Status: HIT Age: 2359784 Cache-Control: public, max-age=315360000 Expires: Sun, 16 Apr 2034 16:59:47 GMT Last-Modified: Thu, 21 Mar 2024 21:18:51 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Origin,Accept-Encoding X-Content-Type-Options: nosniff Server: cloudflare
2024-04-18 16:59:47 UTC	876	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2b 48 fe 30 2c 49 fe 96 2c 49 fe d6 2b 49 fe f6 2c 49 fe f6 2c 49 fe d6 2c 49 fe 94 2b 48 fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 48 ff 0a 2c 49 fe 98 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 96 2c 49 ff 08 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 0a 2c 49 fe c0 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe Data Ascii: 1536 h& ( +H0,I,I+I,I,I,I+H.,H,I+I+I+I+I+I+I+I+I+I,I,I,I,I,I,I,I,I,I,I,I
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 68 7d fe ff 9c a9 fe ff 90 9f fe ff 32 4e fe ff 59 70 fe ff 2e 4b fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 98 00 00 00 00 00 00 00 00 2c 48 fe 0a 2c 49 fe c4 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe c0 2c 48 fe 0a 00 00 00 00 00 00 00 00 00 00 00 00 2c 48 fe 0a 2b 49 fe 9c 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 9a 2c 48 fe 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2b 49 fe 34 2b 49 fe 9a 2c 49 fe da 2c 49 fe fa 2c 49 fe fa 2c 49 fe da 2b 49 fe 98 2b 49 fe 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 1f 00 00 e0 07 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 Data Ascii: h}2NYp.K+I+I+I,H,I,I,I,I,I,I,I,I,I,I,I,I,H,H+I+I+I+I+I+I+I+I+I+I,H+I4+I,I,I,I,I+I+I2
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 48 fe fa 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 55 6d fe ff db e0 fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff f2 f3 fe ff 61 77 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe f8 2c 49 fe 20 00 00 00 00 00 00 00 00 2c 49 fe 9e 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 68 7c fe ff f7 f8 fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff f2 f4 fe ff 3e 59 fe ff 4c 65 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe 96 00 00 00 00 2c 49 fe 10 2c 48 fe f6 Data Ascii: H+H+H,H,H+H+H,HUmaw,H+H+H,H,H+H+H+H,I ,I,I,I,I,I,I,I,Ih\|>YLe,I,I,I,I,I,I,I,I,I,H
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 48 fe c6 2b 48 fe 9e 2b 48 fe ff 2b 48 fe ff 2b 49 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 6b 7f fe ff fe fe fe ff fe fe fe ff fe fe fe ff fc fc fe ff 6b 80 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 50 68 fe ff fe fe fe ff d6 db fe ff cb d2 fe ff bc c5 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe 96 2c 48 fe 5e 2c 49 fe ff 2c 49 fe ff 2b 49 fe ff 2b 49 fe ff 2c 49 fe ff 2c 49 fe ff 2d 4a fe ff d5 db fe ff fe fe fe ff fe fe fe ff fe fe fe ff fb fb fe ff 96 a5 fe ff 3a 55 fe ff 2b 49 fe ff 2b 49 fe ff 2c 49 fe ff 2d 4a fe ff d7 dd fe ff be c7 fe ff 43 5d fe ff 2c 49 fe ff 2b 49 fe ff 2b Data Ascii: ,I,I,I,I,I,I,H+H+H+H+I+H+H+Hkk+H+H+H+H+HPh+H+H+H+H+H+H+H+H+H,H^,I,I+I+I,I,I-J:U+I+I,I-JC],I+I+
2024-04-18 16:59:47 UTC	455	IN	Data Raw: ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe fa 2c 49 fe 8c 2c 48 ff 0a 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 2a 2b 49 fe a2 2b 49 fe f8 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe f6 2b 49 fe 9e 2c 49 fe 26 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 12 2b 49 fe 5e 2b 49 fe 9e 2b 49 fe ce 2b 48 Data Ascii: ,H,H,H,H,H,H,H,H,H,I,H,I*+I+I+I+I+I+I+I+I+I+I+I+I+I+I,I&,I+I^+I+I+H
2024-04-18 16:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50244	104.17.3.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	577	OUT	GET /turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.g2.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:47 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87663514bad96750-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:47 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-18 16:59:47 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50246	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:48 UTC	1342	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 referrer-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin
2024-04-18 16:59:48 UTC	136	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 6a 73 2d 70 72 6f 66 69 6c 69 6e 67 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 36 33 35 31 38 63 38 30 34 31 33 38 62 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: document-policy: js-profilingvary: accept-encodingServer: cloudflareCF-RAY: 87663518c804138b-ATLalt-svc: h3=":443"; ma=86400
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 33 31 62 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 31b7<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: pacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left:
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: r-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-left: 0; width: 90px; text-align: center;}.rtl .size-com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50245	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:48 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:47 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b80ea0eea9474624801e474b94f4e918 Connection: close
2024-04-18 16:59:48 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50248	104.16.186.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	664	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/453692618:1713457615:mDLVUnRUyHwQqLq27-ZukzIgg8qFi3lb2Vv2A2tfpY4/87663508cb54677c/6723587646fe441 HTTP/1.1 Host: www.g2.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
2024-04-18 16:59:48 UTC	1199	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 16:59:48 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 8NiMdmcXm/Lth6z8TeqzRA==$SRxWkywCTJS+ZhNMq0WIhw== Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=YY0VyXe3MS3q0MyCzJp9VrBG9Wl2qrJZu_FoYjr0WdQ-1713459588-1.0.1.1-JHCHsFPwFpmIceWjoBY6j_Fn4HDBysUG7i60SBMtko4xY9Q63Mb4nDWCH1.tMfWbErhHCtRhN4fIBD5WqnORcZHF.FBzw7ExhSn65UrNWGiWg_KuZAz6LvCzb39jkwpuq31zc2QooW5v6XBxWX9Gkw"}],"group":"cf-csp-endpoint","max_age":86400} Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=YY0VyXe3MS3q0MyCzJp9VrBG9Wl2qrJZu_FoYjr0WdQ-1713459588-1.0.1.1-JHCHsFPwFpmIceWjoBY6j_Fn4HDBysUG7i60SBMtko4xY9Q63Mb4nDWCH1.tMfWbErhHCtRhN4fIBD5WqnORcZHF.FBzw7ExhSn65UrNWGiWg_KuZAz6LvCzb39jkwpuq31zc2QooW5v6XBxWX9Gkw; report-to cf-csp-endpoint Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876635195ab11363-ATL
2024-04-18 16:59:48 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50247	104.16.186.41	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:47 UTC	538	OUT	GET /favicon.ico HTTP/1.1 Host: www.g2.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xuz1eqExfVudsXw7SK9K3arpM0nXbTyRkm1rJzo6mlo-1713459585-1.0.1.1-S6N_ioyKKujKqnguvaIEiWlwOqGM3HAbk0QCPcgoX5rZN9uiIx..67lPEZA_PopP_nqpbXydpu6b_9pGlmluGw; cf_chl_3=6723587646fe441
2024-04-18 16:59:48 UTC	493	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:48 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close CF-Ray: 87663519599a17e7-ATL CF-Cache-Status: HIT Age: 2359785 Cache-Control: public, max-age=315360000 Expires: Sun, 16 Apr 2034 16:59:48 GMT Last-Modified: Thu, 21 Mar 2024 21:18:51 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Origin,Accept-Encoding X-Content-Type-Options: nosniff Server: cloudflare
2024-04-18 16:59:48 UTC	876	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2b 48 fe 30 2c 49 fe 96 2c 49 fe d6 2b 49 fe f6 2c 49 fe f6 2c 49 fe d6 2c 49 fe 94 2b 48 fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 48 ff 0a 2c 49 fe 98 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 96 2c 49 ff 08 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 0a 2c 49 fe c0 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe Data Ascii: 1536 h& ( +H0,I,I+I,I,I,I+H.,H,I+I+I+I+I+I+I+I+I+I,I,I,I,I,I,I,I,I,I,I,I
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 68 7d fe ff 9c a9 fe ff 90 9f fe ff 32 4e fe ff 59 70 fe ff 2e 4b fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 98 00 00 00 00 00 00 00 00 2c 48 fe 0a 2c 49 fe c4 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe c0 2c 48 fe 0a 00 00 00 00 00 00 00 00 00 00 00 00 2c 48 fe 0a 2b 49 fe 9c 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe 9a 2c 48 fe 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2b 49 fe 34 2b 49 fe 9a 2c 49 fe da 2c 49 fe fa 2c 49 fe fa 2c 49 fe da 2b 49 fe 98 2b 49 fe 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 1f 00 00 e0 07 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 Data Ascii: h}2NYp.K+I+I+I,H,I,I,I,I,I,I,I,I,I,I,I,I,H,H+I+I+I+I+I+I+I+I+I+I,H+I4+I,I,I,I,I+I+I2
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 48 fe fa 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 55 6d fe ff db e0 fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff f2 f3 fe ff 61 77 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2c 48 fe ff 2c 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe f8 2c 49 fe 20 00 00 00 00 00 00 00 00 2c 49 fe 9e 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 68 7c fe ff f7 f8 fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff fe fe fe ff f2 f4 fe ff 3e 59 fe ff 4c 65 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe 96 00 00 00 00 2c 49 fe 10 2c 48 fe f6 Data Ascii: H+H+H,H,H+H+H,HUmaw,H+H+H,H,H+H+H+H,I ,I,I,I,I,I,I,I,Ih\|>YLe,I,I,I,I,I,I,I,I,I,H
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 49 fe ff 2c 48 fe c6 2b 48 fe 9e 2b 48 fe ff 2b 48 fe ff 2b 49 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 6b 7f fe ff fe fe fe ff fe fe fe ff fe fe fe ff fc fc fe ff 6b 80 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 50 68 fe ff fe fe fe ff d6 db fe ff cb d2 fe ff bc c5 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe ff 2b 48 fe 96 2c 48 fe 5e 2c 49 fe ff 2c 49 fe ff 2b 49 fe ff 2b 49 fe ff 2c 49 fe ff 2c 49 fe ff 2d 4a fe ff d5 db fe ff fe fe fe ff fe fe fe ff fe fe fe ff fb fb fe ff 96 a5 fe ff 3a 55 fe ff 2b 49 fe ff 2b 49 fe ff 2c 49 fe ff 2d 4a fe ff d7 dd fe ff be c7 fe ff 43 5d fe ff 2c 49 fe ff 2b 49 fe ff 2b Data Ascii: ,I,I,I,I,I,I,H+H+H+H+I+H+H+Hkk+H+H+H+H+HPh+H+H+H+H+H+H+H+H+H,H^,I,I+I+I,I,I-J:U+I+I,I-JC],I+I+
2024-04-18 16:59:48 UTC	455	IN	Data Raw: ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe ff 2c 48 fe fa 2c 49 fe 8c 2c 48 ff 0a 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 2a 2b 49 fe a2 2b 49 fe f8 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe ff 2b 49 fe f6 2b 49 fe 9e 2c 49 fe 26 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 49 fe 12 2b 49 fe 5e 2b 49 fe 9e 2b 49 fe ce 2b 48 Data Ascii: ,H,H,H,H,H,H,H,H,H,I,H,I*+I+I+I+I+I+I+I+I+I+I+I+I+I+I,I&,I+I^+I+I+H
2024-04-18 16:59:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50252	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:48 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87663518c804138b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:48 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:48 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 8766351e0bad53c8-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:48 UTC	503	IN	Data Raw: 31 66 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4a 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 48 2c 67 54 2c 68 36 2c 68 62 2c 68 63 2c 68 64 2c 68 70 2c 68 41 2c 68 45 2c 68 Data Ascii: 1f0window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fJ,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gH,gT,h6,hb,hc,hd,hp,hA,hE,h
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 31 64 65 61 0d 0a 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 33 32 37 33 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 32 30 32 29 29 2f 39 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 36 33 34 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 32 38 37 37 29 29 2f 31 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 32 37 38 29 29 2f 31 32 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 38 34 39 39 38 33 29 2c 66 45 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 46 3d 66 45 5b 69 78 28 33 32 33 34 29 5d 2c 66 45 5b 69 78 28 31 33 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 79 2c 64 2c 65 2c 66 Data Ascii: 1dea)+parseInt(iw(3273))/8+parseInt(iw(1202))/9(-parseInt(iw(634))/10)+parseInt(iw(2877))/11(-parseInt(iw(2278))/12),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,849983),fE=this\|\|self,fF=fE[ix(3234)],fE[ix(1397)]=function(iy,d,e,f
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 5d 28 6a 5b 69 41 28 32 38 35 39 29 5d 28 6a 5b 69 41 28 35 34 32 29 5d 28 69 41 28 31 32 37 38 29 2c 6c 29 2b 69 41 28 31 39 32 35 29 2c 31 29 2b 69 41 28 31 31 36 30 29 2c 66 45 5b 69 41 28 32 38 38 30 29 5d 5b 69 41 28 31 32 33 38 29 5d 29 2b 27 2f 27 2b 66 45 5b 69 41 28 32 38 38 30 29 5d 5b 69 41 28 35 38 33 29 5d 2b 27 2f 27 2b 66 45 5b 69 41 28 32 38 38 30 29 5d 5b 69 41 28 31 33 38 32 29 5d 2c 6e 3d 6e 65 77 20 66 45 5b 28 69 41 28 32 35 36 33 29 29 5d 28 29 2c 21 6e 29 72 65 74 75 72 6e 3b 6f 3d 69 41 28 31 34 33 37 29 2c 6e 5b 69 41 28 31 34 32 32 29 5d 28 6f 2c 6d 2c 21 21 5b 5d 29 2c 6e 5b 69 41 28 31 38 31 35 29 5d 3d 32 35 30 30 2c 6e 5b 69 41 28 32 33 35 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 5b 69 41 28 32 32 37 37 29 5d 28 Data Ascii: ](j[iA(2859)](j[iA(542)](iA(1278),l)+iA(1925),1)+iA(1160),fE[iA(2880)][iA(1238)])+'/'+fE[iA(2880)][iA(583)]+'/'+fE[iA(2880)][iA(1382)],n=new fE[(iA(2563))](),!n)return;o=iA(1437),n[iA(1422)](o,m,!![]),n[iA(1815)]=2500,n[iA(2356)]=function(){},n[iA(2277)](
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 28 32 33 39 38 29 5d 3d 69 78 28 31 32 31 35 29 2c 66 4c 5b 69 78 28 33 31 33 38 29 5d 3d 69 78 28 31 38 34 35 29 2c 66 4c 5b 69 78 28 32 31 33 38 29 5d 3d 69 78 28 39 33 37 29 2c 66 4c 5b 69 78 28 31 35 32 37 29 5d 3d 69 78 28 31 31 33 30 29 2c 66 4c 5b 69 78 28 32 37 39 33 29 5d 3d 69 78 28 32 31 34 39 29 2c 66 4c 5b 69 78 28 31 31 31 32 29 5d 3d 69 78 28 31 30 33 36 29 2c 66 4c 5b 69 78 28 32 35 31 30 29 5d 3d 69 78 28 33 33 30 33 29 2c 66 4c 5b 69 78 28 31 37 33 32 29 5d 3d 69 78 28 31 34 30 31 29 2c 66 4c 5b 69 78 28 31 37 32 30 29 5d 3d 69 78 28 32 34 35 33 29 2c 66 4c 5b 69 78 28 37 30 31 29 5d 3d 69 78 28 32 30 38 31 29 2c 66 4c 5b 69 78 28 37 35 38 29 5d 3d 69 78 28 31 39 32 30 29 2c 66 4c 5b 69 78 28 33 31 35 30 29 5d 3d 69 78 28 31 39 38 34 29 Data Ascii: (2398)]=ix(1215),fL[ix(3138)]=ix(1845),fL[ix(2138)]=ix(937),fL[ix(1527)]=ix(1130),fL[ix(2793)]=ix(2149),fL[ix(1112)]=ix(1036),fL[ix(2510)]=ix(3303),fL[ix(1732)]=ix(1401),fL[ix(1720)]=ix(2453),fL[ix(701)]=ix(2081),fL[ix(758)]=ix(1920),fL[ix(3150)]=ix(1984)
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 29 2c 66 4e 5b 69 78 28 32 36 30 37 29 5d 3d 69 78 28 33 32 31 39 29 2c 66 4e 5b 69 78 28 31 30 39 31 29 5d 3d 69 78 28 31 34 35 33 29 2c 66 4e 5b 69 78 28 31 37 36 37 29 5d 3d 69 78 28 31 32 32 39 29 2c 66 4e 5b 69 78 28 31 39 37 39 29 5d 3d 69 78 28 31 33 37 37 29 2c 66 4e 5b 69 78 28 31 31 30 34 29 5d 3d 69 78 28 32 34 33 38 29 2c 66 4e 5b 69 78 28 31 38 36 31 29 5d 3d 69 78 28 34 34 37 29 2c 66 4e 5b 69 78 28 35 33 30 29 5d 3d 69 78 28 32 35 38 35 29 2c 66 4e 5b 69 78 28 37 31 32 29 5d 3d 69 78 28 31 39 34 30 29 2c 66 4e 5b 69 78 28 32 36 38 35 29 5d 3d 69 78 28 31 33 31 36 29 2c 66 4e 5b 69 78 28 32 30 31 36 29 5d 3d 69 78 28 31 37 39 34 29 2c 66 4e 5b 69 78 28 32 31 34 32 29 5d 3d 69 78 28 32 34 36 37 29 2c 66 4e 5b 69 78 28 32 30 37 39 29 5d 3d 69 Data Ascii: ),fN[ix(2607)]=ix(3219),fN[ix(1091)]=ix(1453),fN[ix(1767)]=ix(1229),fN[ix(1979)]=ix(1377),fN[ix(1104)]=ix(2438),fN[ix(1861)]=ix(447),fN[ix(530)]=ix(2585),fN[ix(712)]=ix(1940),fN[ix(2685)]=ix(1316),fN[ix(2016)]=ix(1794),fN[ix(2142)]=ix(2467),fN[ix(2079)]=i
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 39 33 29 2c 66 4f 5b 69 78 28 37 30 31 29 5d 3d 69 78 28 33 31 38 31 29 2c 66 4f 5b 69 78 28 37 35 38 29 5d 3d 69 78 28 32 37 37 35 29 2c 66 4f 5b 69 78 28 33 31 35 30 29 5d 3d 69 78 28 31 35 35 38 29 2c 66 4f 5b 69 78 28 31 33 33 31 29 5d 3d 69 78 28 32 39 39 31 29 2c 66 4f 5b 69 78 28 31 30 35 38 29 5d 3d 69 78 28 32 38 37 33 29 2c 66 4f 5b 69 78 28 32 30 30 35 29 5d 3d 69 78 28 32 35 30 39 29 2c 66 4f 5b 69 78 28 33 30 37 36 29 5d 3d 69 78 28 35 38 34 29 2c 66 4f 5b 69 78 28 32 32 36 33 29 5d 3d 69 78 28 32 37 33 32 29 2c 66 4f 5b 69 78 28 32 34 32 34 29 5d 3d 69 78 28 31 39 32 31 29 2c 66 4f 5b 69 78 28 31 30 35 30 29 5d 3d 69 78 28 31 37 35 30 29 2c 66 4f 5b 69 78 28 32 34 30 38 29 5d 3d 69 78 28 32 30 31 32 29 2c 66 4f 5b 69 78 28 31 38 32 30 29 5d Data Ascii: 93),fO[ix(701)]=ix(3181),fO[ix(758)]=ix(2775),fO[ix(3150)]=ix(1558),fO[ix(1331)]=ix(2991),fO[ix(1058)]=ix(2873),fO[ix(2005)]=ix(2509),fO[ix(3076)]=ix(584),fO[ix(2263)]=ix(2732),fO[ix(2424)]=ix(1921),fO[ix(1050)]=ix(1750),fO[ix(2408)]=ix(2012),fO[ix(1820)]
2024-04-18 16:59:48 UTC	821	IN	Data Raw: 3d 69 78 28 31 32 35 32 29 2c 66 51 5b 69 78 28 32 30 31 36 29 5d 3d 69 78 28 32 32 32 39 29 2c 66 51 5b 69 78 28 32 31 34 32 29 5d 3d 69 78 28 31 37 38 33 29 2c 66 51 5b 69 78 28 32 30 37 39 29 5d 3d 69 78 28 32 33 37 39 29 2c 66 51 5b 69 78 28 32 31 31 30 29 5d 3d 69 78 28 31 39 36 35 29 2c 66 51 5b 69 78 28 31 32 31 36 29 5d 3d 69 78 28 33 31 33 34 29 2c 66 51 5b 69 78 28 31 32 38 39 29 5d 3d 69 78 28 31 37 32 35 29 2c 66 51 5b 69 78 28 32 33 39 38 29 5d 3d 69 78 28 32 39 33 30 29 2c 66 51 5b 69 78 28 33 31 33 38 29 5d 3d 69 78 28 31 30 38 39 29 2c 66 51 5b 69 78 28 32 31 33 38 29 5d 3d 69 78 28 31 39 33 37 29 2c 66 51 5b 69 78 28 31 35 32 37 29 5d 3d 69 78 28 38 37 39 29 2c 66 51 5b 69 78 28 32 37 39 33 29 5d 3d 69 78 28 31 36 31 36 29 2c 66 51 5b 69 Data Ascii: =ix(1252),fQ[ix(2016)]=ix(2229),fQ[ix(2142)]=ix(1783),fQ[ix(2079)]=ix(2379),fQ[ix(2110)]=ix(1965),fQ[ix(1216)]=ix(3134),fQ[ix(1289)]=ix(1725),fQ[ix(2398)]=ix(2930),fQ[ix(3138)]=ix(1089),fQ[ix(2138)]=ix(1937),fQ[ix(1527)]=ix(879),fQ[ix(2793)]=ix(1616),fQ[i
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 37 63 61 32 0d 0a 39 29 2c 66 52 5b 69 78 28 37 31 32 29 5d 3d 69 78 28 31 36 33 39 29 2c 66 52 5b 69 78 28 32 36 38 35 29 5d 3d 69 78 28 32 37 35 39 29 2c 66 52 5b 69 78 28 32 30 31 36 29 5d 3d 69 78 28 31 32 35 31 29 2c 66 52 5b 69 78 28 32 31 34 32 29 5d 3d 69 78 28 31 30 36 32 29 2c 66 52 5b 69 78 28 32 30 37 39 29 5d 3d 69 78 28 31 30 33 35 29 2c 66 52 5b 69 78 28 32 31 31 30 29 5d 3d 69 78 28 32 33 32 39 29 2c 66 52 5b 69 78 28 31 32 31 36 29 5d 3d 69 78 28 31 30 38 38 29 2c 66 52 5b 69 78 28 31 32 38 39 29 5d 3d 69 78 28 36 30 34 29 2c 66 52 5b 69 78 28 32 33 39 38 29 5d 3d 69 78 28 32 38 38 32 29 2c 66 52 5b 69 78 28 33 31 33 38 29 5d 3d 69 78 28 32 34 33 39 29 2c 66 52 5b 69 78 28 32 31 33 38 29 5d 3d 69 78 28 32 34 38 35 29 2c 66 52 5b 69 78 28 Data Ascii: 7ca29),fR[ix(712)]=ix(1639),fR[ix(2685)]=ix(2759),fR[ix(2016)]=ix(1251),fR[ix(2142)]=ix(1062),fR[ix(2079)]=ix(1035),fR[ix(2110)]=ix(2329),fR[ix(1216)]=ix(1088),fR[ix(1289)]=ix(604),fR[ix(2398)]=ix(2882),fR[ix(3138)]=ix(2439),fR[ix(2138)]=ix(2485),fR[ix(
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 35 29 5d 3d 69 78 28 31 30 37 38 29 2c 66 53 5b 69 78 28 33 30 37 36 29 5d 3d 69 78 28 31 37 36 30 29 2c 66 53 5b 69 78 28 32 32 36 33 29 5d 3d 69 78 28 31 35 33 31 29 2c 66 53 5b 69 78 28 32 34 32 34 29 5d 3d 69 78 28 32 37 32 38 29 2c 66 53 5b 69 78 28 31 30 35 30 29 5d 3d 69 78 28 33 30 31 30 29 2c 66 53 5b 69 78 28 32 34 30 38 29 5d 3d 69 78 28 32 36 35 35 29 2c 66 53 5b 69 78 28 31 38 32 30 29 5d 3d 69 78 28 32 30 33 37 29 2c 66 53 5b 69 78 28 31 32 36 39 29 5d 3d 69 78 28 32 31 32 32 29 2c 66 53 5b 69 78 28 32 32 30 38 29 5d 3d 69 78 28 37 36 33 29 2c 66 54 3d 7b 7d 2c 66 54 5b 69 78 28 32 38 39 33 29 5d 3d 69 78 28 38 39 39 29 2c 66 54 5b 69 78 28 32 36 30 37 29 5d 3d 69 78 28 31 34 33 39 29 2c 66 54 5b 69 78 28 31 30 39 31 29 5d 3d 69 78 28 32 36 Data Ascii: 5)]=ix(1078),fS[ix(3076)]=ix(1760),fS[ix(2263)]=ix(1531),fS[ix(2424)]=ix(2728),fS[ix(1050)]=ix(3010),fS[ix(2408)]=ix(2655),fS[ix(1820)]=ix(2037),fS[ix(1269)]=ix(2122),fS[ix(2208)]=ix(763),fT={},fT[ix(2893)]=ix(899),fT[ix(2607)]=ix(1439),fT[ix(1091)]=ix(26
2024-04-18 16:59:48 UTC	1369	IN	Data Raw: 35 34 29 2c 66 55 5b 69 78 28 31 32 38 39 29 5d 3d 69 78 28 32 37 34 39 29 2c 66 55 5b 69 78 28 32 33 39 38 29 5d 3d 69 78 28 36 31 39 29 2c 66 55 5b 69 78 28 33 31 33 38 29 5d 3d 69 78 28 31 30 36 36 29 2c 66 55 5b 69 78 28 32 31 33 38 29 5d 3d 69 78 28 33 30 39 32 29 2c 66 55 5b 69 78 28 31 35 32 37 29 5d 3d 69 78 28 31 39 35 39 29 2c 66 55 5b 69 78 28 32 37 39 33 29 5d 3d 69 78 28 38 37 31 29 2c 66 55 5b 69 78 28 31 31 31 32 29 5d 3d 69 78 28 32 33 32 34 29 2c 66 55 5b 69 78 28 32 35 31 30 29 5d 3d 69 78 28 37 38 37 29 2c 66 55 5b 69 78 28 31 37 33 32 29 5d 3d 69 78 28 32 30 39 38 29 2c 66 55 5b 69 78 28 31 37 32 30 29 5d 3d 69 78 28 32 35 34 39 29 2c 66 55 5b 69 78 28 37 30 31 29 5d 3d 69 78 28 31 30 34 33 29 2c 66 55 5b 69 78 28 37 35 38 29 5d 3d 69 Data Ascii: 54),fU[ix(1289)]=ix(2749),fU[ix(2398)]=ix(619),fU[ix(3138)]=ix(1066),fU[ix(2138)]=ix(3092),fU[ix(1527)]=ix(1959),fU[ix(2793)]=ix(871),fU[ix(1112)]=ix(2324),fU[ix(2510)]=ix(787),fU[ix(1732)]=ix(2098),fU[ix(1720)]=ix(2549),fU[ix(701)]=ix(1043),fU[ix(758)]=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50251	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:48 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:48 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:48 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8766351e0c16454c-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:48 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50249	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:48 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:48 UTC	776	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 72 65 61 64 79 5f 66 6f 72 5f 75 78 61 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 69 6e 63 6c 75 73 69 6f 6e 5f 6d 65 74 68 6f 64 25 32 32 25 33 41 25 32 32 43 4c 49 45 4e 54 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 34 62 34 61 32 65 34 62 62 31 64 37 34 37 61 64 38 31 30 37 64 66 39 37 37 33 66 33 65 30 65 64 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: event_type=marketing_tracker_ready_for_uxa&extra_params=%7B%22marketing_tracker_inclusion_method%22%3A%22CLIENT%22%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%224b4a2e4bb1d747ad8107df9773f3e0ed%22%2C%22url%22%3A
2024-04-18 16:59:49 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 39 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 374c31cd61b04fe48d23bc94a7d0c1ea Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50250	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:48 UTC	1721	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:49 UTC	1137	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:48 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:48 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:48 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 14550966ee5c40fc990f3bba172242dc Connection: close
2024-04-18 16:59:49 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50254	104.18.140.17	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:49 UTC	662	OUT	GET /leadflows.js HTTP/1.1 Host: js.hsleadflows.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.docsend.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"d252299cef5b9176cf0435e72e0baeeb" If-Modified-Since: Wed, 03 Apr 2024 09:27:53 UTC
2024-04-18 16:59:49 UTC	1346	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 16:59:49 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 03 Apr 2024 09:27:53 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: FzXUOelq5PzvbDhLOc3Au0ThiCBuXHAc ETag: W/"d252299cef5b9176cf0435e72e0baeeb" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 e8eec15d9551dd475d4c478f9fbb5f04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: hW5qBzW1l61VU9fDx2s1KY2dByDhPOF8RbD4bVmqbvQJvsm_DSfo-g== Age: 65711 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.1338/bundle/main/lead-flows-release.js&cfRay=875ff0df4b46458e-ATL Cache-Control: s-maxage=86400, max-age=0 X-HS-Target-Asset: lead-flows-js/static-1.1338/bundle/main/lead-flows-release.js X-Content-Type-Options: nosniff X-HS-Cache-Status: MISS x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 42ae77b4-b681-42fc-b7ac-f0df4ff6bfb1 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-68b7f7fbff-hdb65
2024-04-18 16:59:49 UTC	289	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 34 32 61 65 37 37 62 34 2d 62 36 38 31 2d 34 32 66 63 2d 62 37 61 63 2d 66 30 64 66 34 66 66 36 62 66 62 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 6c 65 61 64 2d 66 6c 6f 77 73 2d 63 6c 6f 75 64 66 6c 61 72 65 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 Data Ascii: x-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: 42ae77b4-b681-42fc-b7ac-f0df4ff6bfb1cache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50253	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:49 UTC	1589	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1619 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryYH0z2rDdenl82m9J Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A00.980Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A00.980Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%257D%252C%2522userInteracted%2522%253Afalse%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:49 UTC	1619	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 48 30 7a 32 72 44 64 65 6e 6c 38 32 6d 39 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 48 30 7a 32 72 44 64 65 6e 6c 38 32 6d 39 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 59 48 30 7a 32 72 44 64 65 6e 6c 38 32 6d 39 4a 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryYH0z2rDdenl82m9JContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryYH0z2rDdenl82m9JContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryYH0z2rDdenl82m9JCont
2024-04-18 16:59:49 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 44 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e22b8b15be0b4e76b3a0d28ebe83d8b0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50257	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:49 UTC	1225	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&t=Integrations+-+DocSend&cts=1713459587974&vi=c45e810271b520e7349a9be4a5f70f0a&nc=false&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.2.1713459564046&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
2024-04-18 16:59:49 UTC	1208	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:49 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8766352289927b95-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 13 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-76d96f8b5d-zs6tk x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: cdacfe53-2f71-439a-bd81-eb13f9bdfc73 x-request-id: cdacfe53-2f71-439a-bd81-eb13f9bdfc73 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eI22RgsI5CW3Iy3yZeiijSdnzw%2BSL9C09TsquTZOwhJM%2F3IOJ%2FdpciQ5maqkjOECgdA5%2FdeWd21BR5nvn8QfhMdcol6qKT2hO0XzmkFM%2FGRXRl9wm%2FitZ2DoOWi0F98keGqG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-18 16:59:49 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50255	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:49 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:49 UTC	780	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 35 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 35 32 34 33 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 34 62 34 61 32 65 34 62 62 31 64 37 34 37 61 64 38 31 30 37 64 66 39 37 37 33 66 33 65 30 65 64 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A5%2C%22time_on_page_ms%22%3A5243%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%224b4a2e4bb1d747ad8107df9773f3e0ed%22%2C%22url%2
2024-04-18 16:59:49 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: aa282fd06b9e474fbd8373ea3da7267b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50256	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:49 UTC	1744	OUT	GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:49 UTC	3036	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:49 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7739 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8d3e4d7b29d8426b8e199bbabaf28b46 Connection: close
2024-04-18 16:59:49 UTC	7739	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50258	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	2162	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34843923331403?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=525872809AFEB107-71A1B9F231FF0A4D&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2Fhow-it-works%2F&h2=marketing.docsend.com%3Aintegrations&c3=marketing.docsend.com%7Chow-it-works&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chow-it-works&v11=New%20Visitor&c12=e1d8a241-9743-4be3-8234-0a6921058fae&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fintegrations%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=integrations&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:50 GMT expires: Wed, 17 Apr 2024 16:59:50 GMT last-modified: Fri, 19 Apr 2024 16:59:50 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626452529217536-4618424568734508785 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50261	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	815	OUT	GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.2.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	1288	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:50 GMT Content-Type: application/json;charset=utf-8 Content-Length: 177 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 64 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: f20da2c2-5f6f-467e-87f0-b73e1b9cc174 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-8b4sh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: f20da2c2-5f6f-467e-87f0-b73e1b9cc174 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=AYswVEXNmaZvOenrMwf3.AI22fOJpNYvfK3T_dQKRPE-1713459590-1.0.1.1-DW.F5yEhh2qI3LXWQ4eRe4bS3M10pQ3EZ06k6pyIXuOvN254yiE9rWuHBQdiqZhXqmLaQOB1Xib9mphO8Nqy_g; path=/; expires=Thu, 18-Apr-24 17:29:50 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-04-18 16:59:50 UTC	608	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 4d 61 59 73 42 76 48 77 6b 4b 6c 70 77 48 63 54 77 75 6c 52 6d 35 37 37 61 46 30 4a 65 76 31 41 65 56 4f 4f 70 69 6a 56 52 70 38 34 53 44 37 37 25 32 46 4f 51 58 74 38 76 6b 58 76 50 66 6f 71 4e 42 6c 71 73 64 47 4f 66 6c 49 76 4b 4b 4d 46 66 71 79 47 51 61 70 61 63 47 33 55 51 31 35 48 47 6b 73 77 31 77 49 74 63 35 4d 72 72 41 61 77 59 72 68 68 4b 6d 67 68 25 32 46 70 46 46 63 49 44 58 61 6c 61 30 70 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7MaYsBvHwkKlpwHcTwulRm577aF0Jev1AeVOOpijVRp84SD77%2FOQXt8vkXvPfoqNBlqsdGOflIvKKMFfqyGQapacG3UQ15HGksw1wItc5MrrAawYrhhKmgh%2FpFFcIDXala0p"}],"group":"cf-nel","max_age":604800}N
2024-04-18 16:59:50 UTC	177	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 34 35 39 35 39 30 33 34 36 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":true,"timestamp":1713459590346,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.4	50259	162.125.9.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	1819	OUT	POST /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:50 UTC	3325	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:50 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:50 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 07a0ce33f89f41029f4f02626c3bb7ea Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50265	104.18.43.31	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	826	OUT	GET /attribution_tracking/conversions/958.js?p=https://marketing.docsend.com/integrations/&e= HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=59621bb1112b965f64d3ecefd5a5f189; __cf_bm=PduoztFxTPb6oz.ZHOIZw6sKKtrKgP42I4fn_.eQPJg-1713459566-1.0.1.1-WfRXndTwxNigsYKrq4GC0j9x76vUt7eiVMTClYXWSPK0.f7fxgcaUQPXQw63wtoThO84JeFBEjrRO1_y2Cicww
2024-04-18 16:59:50 UTC	1313	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:50 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=59621bb1112b965f64d3ecefd5a5f189; path=/; expires=Thu, 02 May 2024 16:59:50 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: c75845e3-b549-4132-8e7e-11b4b95083b1 x-runtime: 0.003160 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87663527dd8e1f9e-ATL
2024-04-18 16:59:50 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-18 16:59:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50266	146.75.40.157	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	634	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-18 16:59:50 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 16:59:50 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-bfi-kbfi7400033-BFI X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50268	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	846	OUT	GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=108, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=4, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 16:59:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50269	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	961	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 16:59:50 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 16:59:50 UTC	1568	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 16:59:50 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50270	63.140.38.210	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	1059	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34652137582737?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=70683E4ED03C496D-740A0D7A94DD40E5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:50 GMT expires: Wed, 17 Apr 2024 16:59:50 GMT last-modified: Fri, 19 Apr 2024 16:59:50 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626451270959104-4618623780251602163 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50267	44.234.198.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	607	OUT	POST /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1033 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://marketing.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:50 UTC	1033	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 36 3a 35 39 3a 34 39 2e 30 30 34 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 64 63 31 38 32 39 36 38 2d 65 36 61 37 2d 34 65 61 62 2d 61 62 34 62 2d 30 39 64 64 31 62 32 35 31 30 35 32 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 44 72 6f 70 62 6f 78 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 69 6e 74 65 67 72 61 74 69 6f 6e Data Ascii: {"timestamp":"2024-04-18T16:59:49.004Z","integrations":{},"anonymousId":"dc182968-e6a7-4eab-ab4b-09dd1b251052","type":"page","properties":{"path":"/integrations/","referrer":"","search":"","title":"Dropbox","url":"https://marketing.docsend.com/integration
2024-04-18 16:59:51 UTC	246	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:50 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://marketing.docsend.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-18 16:59:51 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50274	104.244.42.67	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	1065	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
2024-04-18 16:59:51 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:50 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 74ce78f98899622f strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: d1f4988724bb95774e67f19ef0c5526659c3eb7176766059c0ba67c2791517c4 connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50273	104.244.42.133	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:50 UTC	928	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
2024-04-18 16:59:51 UTC	392	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:50 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d2de97e4d64c7db3 strict-transport-security: max-age=0 x-response-time: 7 x-connection-hash: 9e590f4f2d7cb61fa9b6b4d091b46ee1b5ce313d0a21fe68849bc883eeefabd6 connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50275	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:51 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fd3b816be7a24426a150855f47709b93 Connection: close
2024-04-18 16:59:51 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50277	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	990	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=6191183&rcu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&pu=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F&t=Integrations+-+DocSend&cts=1713459587974&vi=c45e810271b520e7349a9be4a5f70f0a&nc=false&u=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&b=19306791.2.1713459564046&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
2024-04-18 16:59:51 UTC	1210	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:51 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8766352fddce69ed-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 21 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-76d96f8b5d-rk2jf x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: d41f6ea1-38e0-4bfd-bd68-3e6357e9d0e9 x-request-id: d41f6ea1-38e0-4bfd-bd68-3e6357e9d0e9 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsOKuJXFqcskyXCkqbsZLjUp6Q67IhYBjvEYM7nRwrLfel1Tx4%2FqgN5%2BERdWTBwe6746%2FPu9hzgxJ%2Fc6dEGiZnThxHg4o7Dwf2v%2BZ2ooigFDe4FMtsmlC8y0%2BQ2LFicogF%2Bu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-18 16:59:51 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50276	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:51 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8766352f9ca644e2-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:51 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50280	104.16.117.116	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	863	OUT	GET /lead-flows-config/v1/config/json?portalId=6191183&utk=c45e810271b520e7349a9be4a5f70f0a&__hstc=19306791.c45e810271b520e7349a9be4a5f70f0a.1713459564046.1713459564046.1713459564046.1&__hssc=19306791.2.1713459564046&currentUrl=https%3A%2F%2Fwww.docsend.com%2Fintegrations%2F HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TaCsk65McrBeHBFURdpzbUAdfJLPo69sfOlR8fIQCfY-1713459565-1.0.1.1-qO0T5tg624Gv3UUy53Qu1V4516ce.FjppHWxfvJHu_qc9__OLg0e5KR3XgIToQXxNQ6pHa0Ykg.yDlaNif8WlQ; _cfuvid=x9uvA5Z2NBIuXobJZhEFUZYJ47YDteP1przcA7DDlAM-1713459565722-0.0.1.1-604800000
2024-04-18 16:59:51 UTC	1298	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:51 GMT Content-Type: application/json;charset=utf-8 Content-Length: 177 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 21 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 49f798e1-97d4-4a03-a510-93a828485e6d x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-25c9m x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 49f798e1-97d4-4a03-a510-93a828485e6d CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Le1fDaKUjU%2BB7tzAfnX%2BKdO2K18tGLO%2FFL%2BeMvAsg8PPkFzBNB8E01F9W7PZd13PdSmGHhQCgrbyvRBq%2BCJxOP7WFhKbZlpWejVB7dC0g5fK%2BqDqTiBL%2BA9VNsD1GchXiHpW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-04-18 16:59:51 UTC	125	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 36 33 35 33 30 31 63 65 38 31 33 38 66 2d 41 54 4c 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadServer: cloudflareCF-RAY: 876635301ce8138f-ATL
2024-04-18 16:59:51 UTC	177	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 34 35 39 35 39 31 37 35 34 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":true,"timestamp":1713459591754,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50288	104.244.42.195	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	824	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171345956725996146; guest_id_ads=v1%3A171345956725996146; personalization_id="v1_EWTMIKumDwLCcsnTdt/wBw=="; guest_id=v1%3A171345956725996146
2024-04-18 16:59:51 UTC	401	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:51 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 1b972ba57829b6f3 strict-transport-security: max-age=631138519 x-response-time: 74 x-connection-hash: 5f7a29ae005534243f618efa44caf8df7a0823f2023107369c6afdfbcac8587d connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50287	104.244.42.197	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	687	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c7fba15f-fad3-48c5-8d18-0a161569e36c&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=99cf9b28-289b-4d21-8092-90f7758b1150&tw_document_href=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&tw_iframe_status=1&txn_id=nw0ty&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f99432ae-12d7-47a4-901d-ed3d151a21f0
2024-04-18 16:59:51 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 16:59:51 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3028b4af3c152f86 strict-transport-security: max-age=0 x-response-time: 73 x-connection-hash: 5d60a4300f58579ed2c51b2b487571f60ce4fb24c7d7e26f6fbad205343c60b5 connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50283	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	605	OUT	GET /tr/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 16:59:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50278	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	818	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34652137582737?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=70683E4ED03C496D-740A0D7A94DD40E5&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&cc=USD&v1=D%3Dg&v11=New%20Visitor&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:51 GMT expires: Wed, 17 Apr 2024 16:59:51 GMT last-modified: Fri, 19 Apr 2024 16:59:51 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626453216296960-4618210800178688296 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50284	63.140.38.189	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	1921	OUT	GET /b/ss/dpi.prod.esntls/1/JS-2.22.4/s34843923331403?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2018%3A59%3A48%204%20-120&sdid=525872809AFEB107-71A1B9F231FF0A4D&mid=03399203033517895891424532205099485311&aamlh=7&ce=UTF-8&ns=docsend&cdp=2&pageName=marketing.docsend.com%7Cintegrations&g=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.docsend.com&events=event14&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v2=marketing.docsend.com%2Fhow-it-works%2F&h2=marketing.docsend.com%3Aintegrations&c3=marketing.docsend.com%7Chow-it-works&v3=%2B1&c5=less%20than%20a%20minute&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&c11=marketing.docsend.com%7Chow-it-works&v11=New%20Visitor&c12=e1d8a241-9743-4be3-8234-0a6921058fae&v13=04%2F18%2F2024&v14=03399203033517895891424532205099485311&v15=Visitor%20API%20Present&v16=marketing.docsend.com&v17=%2Fintegrations%2F&c19=dpi.prod.esntls&c20=D%3DpageName&v20=integrations&c23=marketing.docsend.com%7C2.22.4%7C5.4.0%7CExisting%20ID%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.docsend.com&v25=Dropbox&s=1280x1024&c=24&j=1.6&v=N&k=Y&mcorgid=B2AAF3C959275C660A495E7B%40AdobeOrg&AQE=1 HTTP/1.1 Host: dpiprodesntls.112.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 16:59:51 GMT expires: Wed, 17 Apr 2024 16:59:51 GMT last-modified: Fri, 19 Apr 2024 16:59:51 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679626454054928384-4618480504245529430 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 16:59:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50285	31.13.88.35	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	642	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=176175412745322&ev=PageView&dl=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&rl=&if=true&ts=1713459589080&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713459566299.390803195&ler=empty&cdl=API_unavailable&it=1713459588937&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 16:59:51 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 16:59:51 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50279	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	639	OUT	GET /pithos_api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:51 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8f6a73a2b2f4469d89590fcefee11706 Connection: close
2024-04-18 16:59:51 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50289	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3453 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 18686b3826d2821 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:51 UTC	3453	OUT	Data Raw: 76 5f 38 37 36 36 33 35 31 38 63 38 30 34 31 33 38 62 3d 67 4e 34 69 41 69 38 69 37 69 56 69 43 69 6d 78 57 72 69 56 72 69 6e 73 72 74 73 66 35 6a 4f 70 74 69 36 4c 49 69 69 70 35 34 70 30 69 6e 55 6a 79 70 73 55 72 70 42 55 69 6a 6e 70 25 32 62 70 36 72 70 7a 70 6f 43 55 69 70 6a 69 74 6e 70 4e 69 56 43 2d 47 70 6e 62 74 4f 70 74 58 43 70 32 70 64 30 38 70 59 4f 24 46 32 68 6a 70 4f 4e 57 24 6e 78 6a 53 76 76 68 69 37 53 72 70 4c 72 57 58 52 4a 66 34 37 70 47 56 33 42 31 4d 50 39 30 37 51 43 76 64 69 70 63 70 70 35 52 4f 74 46 2d 45 51 53 70 36 52 79 48 71 64 38 43 51 5a 4e 6b 64 51 56 32 57 70 57 45 48 79 56 2d 74 79 30 47 77 4a 6a 34 2b 67 6a 6f 32 56 70 62 70 56 6f 75 50 6a 69 34 56 69 72 70 37 78 57 31 78 72 70 46 48 34 53 75 69 37 35 70 6f 38 2d 70 Data Ascii: v_87663518c804138b=gN4iAi8i7iViCimxWriVrinsrtsf5jOpti6LIiip54p0inUjypsUrpBUijnp%2bp6rpzpoCUipjitnpNiVC-GpnbtOptXCp2pd08pYO$F2hjpONW$nxjSvvhi7SrpLrWXRJf47pGV3B1MP907QCvdipcpp5ROtF-EQSp6RyHqd8CQZNkdQV2WpWEHyV-ty0GwJj4+gjo2VpbpVouPji4Virp7xW1xrpFH4Sui75po8-p
2024-04-18 16:59:52 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:52 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 6E/egR1KQixIh9XuvqzgF1duP8K10gjf72wnHRmAxyQQGWr7ttdvPJq+2UCrV5ULzhLOx6rQH+0NWu9XUbBirM8W+F9ZIh8Es7iLIWs4+yC1gpec+aZAazjI97CKqetnF3xRrpqw9bworTotE/u4tlHlQcmgaz2kWPZIfqWOe9lFVtFIRVvgEJauHh73rJRid8SKn2Bf9TRvMmOtqXbQE7/C3K3lfnicZSU1kWCJ7AYz6PQjhneBoypdpmL8wzDEYJuBZuqGRxmRo0s9wy/dZqGkJq+T+BsaRYnuvmN3IRdo1/VFCwSx9bgDS7Rrd6thLusH8irB/DK6z19/6l6M+FHXGigNcjv5uejW7qbdVeceV0qsCqnoNuk61fNiitqQuz5p8iSUYLa6PdLXjhtBMm+2/0FtjYrDg5RefyN7Kt9hCbVQaxP+pcfb32zCZOCZ$LryPVwCYtw6cDafINmL2Bw== vary: accept-encoding Server: cloudflare CF-RAY: 876635310d70454b-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:52 UTC	362	IN	Data Raw: 31 36 33 0d 0a 75 4d 43 42 65 34 54 46 76 61 57 57 79 4a 32 30 6f 35 71 50 71 71 57 63 73 38 6d 6c 73 4d 58 57 30 72 65 4e 71 73 79 75 74 61 6a 4d 6e 72 6a 63 31 37 43 79 33 72 57 67 75 75 6d 6f 78 38 62 6d 72 36 69 2b 36 71 7a 47 38 2b 72 33 7a 74 58 6f 38 74 48 72 38 50 79 2f 31 66 66 36 41 4e 50 30 35 50 6f 47 43 65 51 4f 79 67 54 68 79 66 76 74 7a 50 58 6c 38 67 76 56 44 77 6e 2b 45 74 38 4d 44 50 67 6c 49 2f 44 2b 4a 52 6e 6c 4a 77 73 74 36 53 73 48 47 78 76 6b 42 2f 4d 41 4a 51 38 32 39 77 4d 54 4f 75 38 38 49 41 77 42 39 42 63 78 4a 6a 73 57 4b 44 34 62 50 30 45 36 4c 55 6c 4a 44 30 68 50 46 45 4d 6f 4c 45 49 57 58 42 51 57 53 6d 41 32 46 7a 34 5a 50 46 56 44 52 44 42 64 4f 47 6f 6e 5a 45 41 34 61 30 78 42 63 7a 77 79 63 54 42 31 57 6a 56 55 61 56 Data Ascii: 163uMCBe4TFvaWWyJ20o5qPqqWcs8mlsMXW0reNqsyutajMnrjc17Cy3rWguumox8bmr6i+6qzG8+r3ztXo8tHr8Py/1ff6ANP05PoGCeQOygThyfvtzPXl8gvVDwn+Et8MDPglI/D+JRnlJwst6SsHGxvkB/MAJQ829wMTOu88IAwB9BcxJjsWKD4bP0E6LUlJD0hPFEMoLEIWXBQWSmA2Fz4ZPFVDRDBdOGonZEA4a0xBczwycTB1WjVUaV
2024-04-18 16:59:52 UTC	1369	IN	Data Raw: 31 33 63 62 0d 0a 72 6c 62 69 49 72 34 6e 54 70 6f 32 2f 6a 71 4f 31 75 4b 57 4e 74 35 65 64 32 35 65 77 71 74 47 7a 32 4c 53 76 32 73 69 70 36 72 66 73 75 62 65 6d 38 62 37 55 30 38 50 49 7a 4c 4c 4c 75 65 69 37 78 38 72 58 76 2b 6d 2b 41 4f 4c 31 37 67 6e 62 42 4f 6f 45 79 4f 72 75 7a 4d 2f 4e 41 66 49 4d 30 66 55 4e 39 51 6e 36 43 67 55 65 39 51 77 53 41 78 67 66 48 76 73 69 45 52 6e 69 48 2b 6a 2b 4a 53 50 73 4b 53 73 45 49 43 7a 30 37 54 59 52 46 54 55 79 4f 44 4d 65 48 6a 55 71 4d 43 51 34 41 7a 67 45 49 79 49 2f 4c 55 55 5a 47 77 4a 46 4d 45 77 71 4c 43 6f 72 54 52 67 6d 45 6b 51 37 55 42 63 30 47 30 70 6b 58 7a 78 43 52 56 67 37 49 46 38 34 57 45 31 59 53 69 31 41 54 56 78 6d 53 48 46 68 52 45 6c 35 55 48 4a 49 67 44 39 56 51 6b 4f 46 62 58 31 56 Data Ascii: 13cbrlbiIr4nTpo2/jqO1uKWNt5ed25ewqtGz2LSv2sip6rfsubem8b7U08PIzLLLuei7x8rXv+m+AOL17gnbBOoEyOruzM/NAfIM0fUN9Qn6CgUe9QwSAxgfHvsiERniH+j+JSPsKSsEICz07TYRFTUyODMeHjUqMCQ4AzgEIyI/LUUZGwJFMEwqLCorTRgmEkQ7UBc0G0pkXzxCRVg7IF84WE1YSi1ATVxmSHFhREl5UHJIgD9VQkOFbX1V
2024-04-18 16:59:52 UTC	1369	IN	Data Raw: 47 66 75 71 43 73 70 49 7a 43 72 36 44 46 7a 4a 62 4a 73 4b 57 6e 33 72 72 43 73 4c 43 33 72 61 2f 53 33 74 33 69 35 64 54 5a 71 38 71 37 35 74 2f 65 76 4d 4c 44 37 76 66 45 38 4e 6a 33 7a 4d 32 33 32 64 72 58 33 76 50 77 31 76 66 36 38 39 76 36 78 77 48 6b 34 66 33 71 35 51 44 65 7a 41 34 51 39 68 4c 69 36 75 37 79 45 68 72 30 46 76 6a 32 41 67 4d 42 47 64 6f 59 4a 50 54 36 2b 41 34 6f 4b 79 6f 4c 2f 4f 33 78 37 54 41 6a 4f 52 67 50 4c 79 77 59 4c 78 59 41 4b 78 67 69 48 42 30 2b 2f 67 6f 46 48 68 6c 49 4b 6b 46 4f 4a 79 41 73 54 54 59 70 51 30 67 72 56 68 77 33 4a 31 6b 71 4e 54 63 38 4c 6b 41 30 49 30 42 4b 57 7a 35 66 50 54 35 47 51 6d 31 45 52 43 35 30 4c 57 4a 59 61 56 70 6f 4e 57 31 48 57 32 35 74 4f 56 39 79 65 6d 4e 43 58 56 75 46 68 6f 52 68 53 Data Ascii: GfuqCspIzCr6DFzJbJsKWn3rrCsLC3ra/S3t3i5dTZq8q75t/evMLD7vfE8Nj3zM232drX3vPw1vf689v6xwHk4f3q5QDezA4Q9hLi6u7yEhr0Fvj2AgMBGdoYJPT6+A4oKyoL/O3x7TAjORgPLywYLxYAKxgiHB0+/goFHhlIKkFOJyAsTTYpQ0grVhw3J1kqNTc8LkA0I0BKWz5fPT5GQm1ERC50LWJYaVpoNW1HW25tOV9yemNCXVuFhoRhS
2024-04-18 16:59:52 UTC	1369	IN	Data Raw: 4e 6b 5a 53 56 78 4b 61 62 74 4a 71 62 6e 38 2f 43 73 72 79 6b 78 63 54 42 77 62 53 2f 37 4c 57 73 37 39 75 34 33 65 37 76 38 64 48 6a 78 62 50 42 78 4d 50 62 73 2f 6e 4e 38 39 66 55 38 2f 50 63 34 76 59 44 79 4e 37 57 2b 4e 6a 47 43 38 66 36 44 52 49 49 46 51 63 4e 31 42 41 47 31 50 30 62 42 39 6e 78 49 77 76 79 45 74 30 69 42 4f 66 35 34 65 48 32 43 75 6e 6e 41 69 2f 79 43 7a 62 6e 39 65 30 55 4e 66 55 53 43 44 2f 35 44 68 49 72 4c 30 49 64 45 54 44 39 4e 42 55 69 54 54 74 4b 4c 55 45 51 51 69 6f 4d 51 43 63 30 49 69 34 6e 4e 78 4e 53 4b 53 73 2f 50 31 59 56 54 57 52 48 4e 6b 4a 4b 4e 45 64 65 4f 6b 35 47 63 57 31 4a 54 6b 42 43 50 31 52 71 53 45 35 74 4d 6d 39 34 62 32 68 57 63 6b 42 5a 62 6e 46 56 52 59 64 6f 64 33 6c 70 52 6f 46 71 68 47 78 76 58 6d Data Ascii: NkZSVxKabtJqbn8/CsrykxcTBwbS/7LWs79u43e7v8dHjxbPBxMPbs/nN89fU8/Pc4vYDyN7W+NjGC8f6DRIIFQcN1BAG1P0bB9nxIwvyEt0iBOf54eH2CunnAi/yCzbn9e0UNfUSCD/5DhIrL0IdETD9NBUiTTtKLUEQQioMQCc0Ii4nNxNSKSs/P1YVTWRHNkJKNEdeOk5GcW1JTkBCP1RqSE5tMm94b2hWckBZbnFVRYdod3lpRoFqhGxvXm
2024-04-18 16:59:52 UTC	968	IN	Data Raw: 30 5a 32 75 6d 74 79 76 74 73 2f 66 31 37 2b 6d 6f 63 47 30 76 73 33 71 33 4b 71 36 7a 2b 58 55 36 2b 54 67 37 61 72 51 37 4e 62 46 39 4c 7a 78 38 62 69 35 76 63 51 42 35 4f 54 56 38 63 54 69 33 51 41 51 44 39 6e 35 33 64 7a 30 34 51 58 6c 7a 78 72 6e 31 38 37 61 39 41 30 4d 44 2f 6a 63 39 68 44 38 39 79 45 71 4b 4f 72 36 4b 69 2f 74 34 75 34 73 38 51 67 66 39 67 4c 78 4d 53 38 6b 42 69 73 35 41 50 59 4d 43 78 38 69 51 6a 34 7a 49 54 34 61 50 43 59 75 42 6a 6c 4e 49 6a 51 68 54 7a 35 46 54 44 64 55 4b 31 30 63 50 45 38 75 55 30 4a 53 51 44 68 42 51 46 31 42 53 31 6f 6c 56 6d 39 51 58 30 74 6e 58 47 4e 78 4d 55 70 73 56 55 52 54 63 48 42 55 55 58 42 77 55 56 79 46 51 56 74 6b 59 6e 31 63 69 6c 31 6d 6a 55 46 2f 58 6f 56 50 58 35 43 47 6a 57 4a 33 62 4a 57 Data Ascii: 0Z2umtyvts/f17+mocG0vs3q3Kq6z+XU6+Tg7arQ7NbF9Lzx8bi5vcQB5OTV8cTi3QAQD9n53dz04QXlzxrn187a9A0MD/jc9hD89yEqKOr6Ki/t4u4s8Qgf9gLxMS8kBis5APYMCx8iQj4zIT4aPCYuBjlNIjQhTz5FTDdUK10cPE8uU0JSQDhBQF1BS1olVm9QX0tnXGNxMUpsVURTcHBUUXBwUVyFQVtkYn1cil1mjUF/XoVPX5CGjWJ3bJW
2024-04-18 16:59:52 UTC	1369	IN	Data Raw: 35 39 39 0d 0a 79 76 67 6e 57 7a 74 72 52 73 64 36 2b 72 70 34 65 73 6c 34 43 35 74 5a 36 77 78 58 71 34 75 6e 32 37 6d 5a 36 4a 6a 37 72 44 69 72 53 4e 73 71 65 72 31 4e 57 37 6b 39 79 62 7a 72 48 50 72 2b 47 75 76 62 2b 6b 6e 73 50 61 74 72 7a 68 72 63 2f 62 7a 72 7a 30 35 4f 2f 53 78 76 4b 78 35 50 50 34 38 39 47 34 76 67 50 55 34 74 6b 46 41 4e 4c 69 43 66 58 56 79 73 51 4a 45 65 38 4a 44 4d 6e 66 45 74 62 6b 34 74 4c 6b 35 2f 41 5a 41 43 48 32 32 4e 37 63 44 68 2f 37 38 53 6b 68 45 79 77 67 4a 77 49 63 4c 79 62 78 45 69 45 47 4d 2f 51 43 4e 51 51 62 2f 50 73 38 4c 68 6e 7a 51 68 66 32 44 79 41 59 46 41 42 4a 4c 42 59 41 43 69 41 72 4c 42 46 56 44 52 41 76 45 79 77 56 47 31 6c 4f 47 6b 77 7a 47 30 4a 54 49 6d 4a 46 4d 30 45 38 59 69 52 45 62 44 31 51 Data Ascii: 599yvgnWztrRsd6+rp4esl4C5tZ6wxXq4un27mZ6Jj7rDirSNsqer1NW7k9ybzrHPr+Guvb+knsPatrzhrc/bzrz05O/SxvKx5PP489G4vgPU4tkFANLiCfXVysQJEe8JDMnfEtbk4tLk5/AZACH22N7cDh/78SkhEywgJwIcLybxEiEGM/QCNQQb/Ps8LhnzQhf2DyAYFABJLBYACiArLBFVDRAvEywVG1lOGkwzG0JTImJFM0E8YiREbD1Q
2024-04-18 16:59:52 UTC	71	IN	Data Raw: 65 75 71 70 71 49 71 70 71 47 69 49 71 58 6f 72 53 59 6a 4a 75 51 67 36 61 6a 70 36 53 63 70 49 61 6f 6d 61 71 75 6e 4a 2b 76 77 4c 4c 50 71 63 4f 34 6d 4d 65 59 76 4e 37 43 72 64 71 73 73 71 57 6b 76 74 4f 0d 0a Data Ascii: euqpqIqpqGiIqXorSYjJuQg6ajp6ScpIaomaqunJ+vwLLPqcO4mMeYvN7CrdqssqWkvtO
2024-04-18 16:59:52 UTC	1369	IN	Data Raw: 36 66 30 0d 0a 35 79 62 33 4d 70 4b 2f 59 36 65 6a 74 38 4f 37 66 39 4d 6e 76 34 72 6a 70 39 62 7a 5a 37 66 7a 37 31 51 59 41 32 4d 49 47 32 76 62 32 78 65 51 4b 78 75 50 63 44 2f 77 42 30 52 50 79 46 73 73 4f 30 64 6e 79 38 41 48 79 2b 51 4c 65 49 67 66 7a 49 79 48 36 2b 41 30 56 47 42 2f 70 35 77 63 6a 38 79 30 6d 41 69 41 54 46 54 55 4f 4a 66 63 31 2f 51 38 4e 49 44 34 7a 4e 7a 63 51 50 78 6b 72 4b 42 63 67 48 30 38 6c 4a 41 55 75 54 6b 70 4b 4e 43 77 6e 4e 43 5a 57 56 7a 45 70 47 7a 63 72 54 45 4d 69 4e 57 46 4b 59 46 5a 6c 54 53 64 6f 63 43 35 78 58 6d 68 70 4b 48 4a 58 4e 6e 4d 30 55 46 42 79 53 33 56 74 65 46 35 35 63 58 42 6c 63 58 39 63 61 55 74 71 57 48 78 50 6b 47 52 69 61 57 32 57 64 31 68 6d 67 6d 71 48 6c 6f 6c 76 6e 6d 36 63 6b 35 57 68 58 Data Ascii: 6f05yb3MpK/Y6ejt8O7f9Mnv4rjp9bzZ7fz71QYA2MIG2vb2xeQKxuPcD/wB0RPyFssO0dny8AHy+QLeIgfzIyH6+A0VGB/p5wcj8y0mAiATFTUOJfc1/Q8NID4zNzcQPxkrKBcgH08lJAUuTkpKNCwnNCZWVzEpGzcrTEMiNWFKYFZlTSdocC5xXmhpKHJXNnM0UFByS3VteF55cXBlcX9caUtqWHxPkGRiaW2Wd1hmgmqHlolvnm6ck5WhX
2024-04-18 16:59:52 UTC	414	IN	Data Raw: 6a 76 65 54 6d 7a 4f 37 4d 76 38 43 31 7a 62 69 76 31 65 2f 57 2f 66 66 77 32 72 72 38 38 77 50 53 30 66 51 44 35 2b 65 39 36 2b 6a 68 41 76 37 64 36 4f 44 67 2f 75 54 31 44 76 6f 59 37 76 59 63 2f 64 34 42 47 66 30 61 2b 78 33 6b 2b 68 58 34 36 42 62 35 49 69 4c 72 47 78 34 71 45 53 34 69 38 54 63 70 45 6a 67 4a 37 76 30 65 45 76 49 6a 2f 55 41 6c 4d 7a 77 42 45 7a 59 70 52 42 77 39 43 6b 4a 48 52 30 52 47 48 53 6b 6a 55 69 55 61 4e 43 67 2b 4a 78 78 52 4b 6b 34 36 52 54 6c 47 49 43 45 6f 56 31 70 4b 4b 53 56 67 53 31 70 72 63 56 31 66 4c 48 56 6d 62 48 4e 6d 64 58 70 6d 54 6f 42 4b 54 44 56 42 62 6c 70 36 55 31 35 67 52 6d 46 68 69 34 75 4b 59 34 56 46 69 47 2b 55 56 6d 6c 32 6d 58 43 49 56 33 78 34 61 35 36 55 6c 6e 43 67 70 32 65 67 59 61 4b 69 5a 36 Data Ascii: jveTmzO7Mv8C1zbiv1e/W/ffw2rr88wPS0fQD5+e96+jhAv7d6ODg/uT1DvoY7vYc/d4BGf0a+x3k+hX46Bb5IiLrGx4qES4i8TcpEjgJ7v0eEvIj/UAlMzwBEzYpRBw9CkJHR0RGHSkjUiUaNCg+JxxRKk46RTlGICEoV1pKKSVgS1prcV1fLHVmbHNmdXpmToBKTDVBblp6U15gRmFhi4uKY4VFiG+UVml2mXCIV3x4a56UlnCgp2egYaKiZ6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50286	44.240.52.117	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	342	OUT	GET /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:52 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 16:59:51 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-18 16:59:52 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50290	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:51 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:51 UTC	768	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 32 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 36 32 33 32 33 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 31 31 35 36 31 34 33 30 37 32 37 32 39 31 33 32 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 62 37 38 63 62 30 34 65 32 39 61 34 38 64 35 61 36 34 64 39 34 37 37 31 64 32 34 64 35 32 39 25 32 32 25 32 43 25 32 32 75 72 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A62%2C%22time_on_page_ms%22%3A62323%2C%22visit_id%22%3A%2211561430727291322%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22ab78cb04e29a48d5a64d94771d24d529%22%2C%22ur
2024-04-18 16:59:52 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:52 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:52 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 65c06b51c8e94a1dadc78f9450f8c1d1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50291	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:52 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:52 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f2a701832f82442fb892c7870495aaf2 Connection: close
2024-04-18 16:59:52 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50294	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87663518c804138b/1713459591979/ENb54b6QumsEJ6F HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:54 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:54 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 876635414e7ab03c-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 1a 08 02 00 00 00 a1 19 32 9f 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+2IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50297	108.177.122.156	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	1260	OUT	GET /pagead/viewthroughconversion/982651595/?random=1713459593238&cv=11&fst=1713459593238&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:54 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUntvgNrugDTHypkjPDA2tIV4E5_e6Gs5xfnv0tF1NJysZyAdyYJZIVcEQid; expires=Sat, 18-Apr-2026 16:59:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:54 UTC	244	IN	Data Raw: 38 64 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: 8d2(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-18 16:59:54 UTC	766	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 54 6b 31 4f 54 4d 79 4d 7a 67 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTM0NTk1OTMyMzg',['https://www.google.com/pagead/1p-user-lis
2024-04-18 16:59:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50296	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	1076	OUT	POST /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=181672041.1713459593&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&dma=0&npa=0&gtm=45be44f0v892451398za200&auid=2069947327.1713459565&did=dYmQxMT&gdid=dYmQxMT HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://marketing.docsend.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
2024-04-18 16:59:54 UTC	866	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=181672041.1713459593&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&dma=0&npa=0&gtm=45be44f0v892451398za200&auid=2069947327.1713459565&did=dYmQxMT&gdid=dYmQxMT X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50298	172.253.124.154	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	1384	OUT	GET /td/rul/982651595?random=1713459593238&cv=11&fst=1713459593238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:54 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnLVQSExEplFZFWWCGGenCKHeUCbAvlusIJfwhT7w0D1WZm1ijif3TgAERC; expires=Sat, 18-Apr-2026 16:59:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:54 UTC	301	IN	Data Raw: 65 65 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: ee6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 3d 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 67 5f 6c 69 73 74 3d 7b 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 35 39 37 34 38 31 39 34 32 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c Data Ascii: ="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597481942","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 38 39 30 37 31 36 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 31 35 39 38 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 59 56 33 66 44 41 21 32 73 5a 6b 6a 65 69 67 21 33 73 41 41 70 74 44 56 34 5f 6a 6a 42 39 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 38 33 30 37 33 37 37 34 39 39 22 2c 22 35 39 37 34 38 31 Data Ascii: l":"https://td.doubleclick.net/td/update?ig_name=1j768907168\u0026tag_eid=44801598","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sYV3fDA!2sZkjeig!3sAAptDV4_jjB9"],"userBiddingSignals":[["8307377499","597481
2024-04-18 16:59:54 UTC	1010	IN	Data Raw: 39 30 37 31 36 38 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 35 39 35 39 34 38 30 39 38 35 39 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 34 39 35 35 34 37 35 35 31 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 36 37 30 32 36 32 37 34 39 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 33 30 37 33 37 37 34 39 39 22 2c 22 6d 65 Data Ascii: 907168"],null,1713459594809859],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j8307377499","me
2024-04-18 16:59:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50295	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:54 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 30 34 34 38 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 34 62 34 61 32 65 34 62 62 31 64 37 34 37 61 64 38 31 30 37 64 66 39 37 37 33 66 33 65 30 65 64 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A10%2C%22time_on_page_ms%22%3A10448%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%224b4a2e4bb1d747ad8107df9773f3e0ed%22%2C%22url
2024-04-18 16:59:55 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:54 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:54 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:54 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 47 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 35bba6d1f0554aa584dd9da790f25ce6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50299	108.177.122.156	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	1258	OUT	GET /pagead/viewthroughconversion/982651595/?random=1713459593334&cv=11&fst=1713459593334&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:54 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUn0NBs7lB_gCTuquLW6-hMTn2XyHJJi6Vm8QpmUVJseOp1MzQw-DOB382lx; expires=Sat, 18-Apr-2026 16:59:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:54 UTC	244	IN	Data Raw: 38 64 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: 8d1(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-18 16:59:54 UTC	765	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 54 6b 31 4f 54 4d 7a 4d 7a 51 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTM0NTk1OTMzMzQ',['https://www.google.com/pagead/1p-user-lis
2024-04-18 16:59:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50300	172.253.124.154	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:54 UTC	1382	OUT	GET /td/rul/982651595?random=1713459593334&cv=11&fst=1713459593334&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&top=https%3A%2F%2Fwww.docsend.com&hn=www.googleadservices.com&frm=2&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=2069947327.1713459565&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 16:59:54 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlPi_UXujdmL8e82F7sin1AVN5M1Baaw3-yL8gdrjf6a5QwhkA2wOCxV9OT; expires=Sat, 18-Apr-2026 16:59:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 16:59:54 UTC	301	IN	Data Raw: 65 65 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: ee6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 3d 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 67 5f 6c 69 73 74 3d 7b 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 31 35 35 35 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 33 30 37 33 37 37 34 39 39 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 Data Ascii: ="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8307377499","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateU
2024-04-18 16:59:54 UTC	1255	IN	Data Raw: 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 38 39 30 37 31 36 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 33 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 59 56 33 66 44 41 21 32 73 5a 6b 6a 65 69 67 21 33 73 41 41 70 74 44 56 34 5f 6a 6a 42 39 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 38 33 30 37 33 37 37 34 39 39 22 2c 22 35 39 37 Data Ascii: eUrl":"https://td.doubleclick.net/td/update?ig_name=1j768907168\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sYV3fDA!2sZkjeig!3sAAptDV4_jjB9"],"userBiddingSignals":[["8307377499","597
2024-04-18 16:59:54 UTC	1010	IN	Data Raw: 37 33 37 37 34 39 39 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 35 39 35 39 34 38 33 36 35 34 36 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 34 39 35 35 34 37 35 35 31 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 36 37 30 32 36 32 37 34 39 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 35 39 37 34 38 31 39 34 32 22 2c 22 6d 65 Data Ascii: 7377499"],null,1713459594836546],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161495547551\u0026cr_id=696702627496\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j597481942","me
2024-04-18 16:59:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50301	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/87663518c804138b/1713459591986/53659176bf42da0775cdf5ef10ff249570006ee4a8fa996068c90ad1c878c395/DGMZK89WITWdWca HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:55 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 18 Apr 2024 16:59:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-18 16:59:55 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 55 32 57 52 64 72 39 43 32 67 64 31 7a 66 58 76 45 50 38 6b 6c 58 41 41 62 75 53 6f 2d 70 6c 67 61 4d 6b 4b 30 63 68 34 77 35 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gU2WRdr9C2gd1zfXvEP8klXAAbuSo-plgaMkK0ch4w5UAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-18 16:59:55 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50302	108.177.122.156	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	919	OUT	GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=181672041.1713459593&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&dma=0&npa=0&gtm=45be44f0v892451398za200&auid=2069947327.1713459565&did=dYmQxMT&gdid=dYmQxMT HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlPi_UXujdmL8e82F7sin1AVN5M1Baaw3-yL8gdrjf6a5QwhkA2wOCxV9OT
2024-04-18 16:59:55 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50303	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	1254	OUT	GET /pagead/1p-user-list/982651595/?random=1713459593238&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqwcszhJW_PuRKZ4GeBijCXT1Yvpm6gmclq8jW7diZtzpGORWh&random=802722143&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
2024-04-18 16:59:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50304	74.125.138.99	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	1253	OUT	GET /pagead/1p-user-list/982651595/?random=1713459593334&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqUqpXDz2h0Jus_YXDGESDnJ6jT2mmcRhAevBkfF9XZSsawPqI&random=1294648323&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
2024-04-18 16:59:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50305	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:55 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 16:59:55 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: UOEKgsHAH+K9/hH6Shm3VA==$xd5yc+pXQN0pSFS4zhvnpw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8766354a7932b094-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:55 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50306	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:55 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:56 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dfe881257bcc472e8182d1941f77c87b Connection: close
2024-04-18 16:59:56 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50308	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:56 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 18686b3826d2821 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/6ahqg/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:56 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 36 33 35 31 38 63 38 30 34 31 33 38 62 3d 67 4e 34 69 51 6a 57 53 55 4f 73 6a 73 70 35 70 77 70 39 70 78 69 46 79 79 70 5a 69 37 78 37 4e 57 62 74 70 4c 78 57 2d 57 36 70 46 72 6a 43 57 51 70 6c 24 70 57 55 78 70 6d 70 6a 6c 55 6a 53 74 7a 70 33 69 56 67 68 59 37 4f 69 57 4c 4d 70 66 34 4e 36 70 67 5a 42 51 4c 70 74 42 2d 70 4a 70 37 55 71 34 70 32 69 57 6e 76 41 69 56 2d 37 70 78 72 6a 79 45 4b 69 70 4e 55 4f 67 41 34 6a 58 46 47 78 37 53 31 35 37 70 70 73 55 70 25 32 62 71 70 70 4f 58 37 70 77 58 34 70 56 39 73 42 70 37 7a 78 43 64 37 4d 70 66 32 55 76 37 79 73 76 34 4b 77 34 48 79 79 6f 33 6a 42 4c 52 4e 70 4d 35 74 70 24 74 37 43 6e 58 34 24 57 70 57 49 4f 57 24 68 34 6c 58 75 78 30 4e 38 72 36 72 64 68 68 37 53 4d 7a 2b 5a 69 41 4e 24 Data Ascii: v_87663518c804138b=gN4iQjWSUOsjsp5pwp9pxiFyypZi7x7NWbtpLxW-W6pFrjCWQpl$pWUxpmpjlUjStzp3iVghY7OiWLMpf4N6pgZBQLptB-pJp7Uq4p2iWnvAiV-7pxrjyEKipNUOgA4jXFGx7S157ppsUp%2bqppOX7pwX4pV9sBp7zxCd7Mpf2Uv7ysv4Kw4Hyyo3jBLRNpM5tp$t7CnX4$WpWIOW$h4lXux0N8r6rdhh7SMz+ZiAN$
2024-04-18 16:59:56 UTC	13430	OUT	Data Raw: 56 78 6a 73 57 7a 70 35 69 71 34 77 5a 70 72 74 71 70 39 70 64 70 32 42 59 78 4f 65 57 5a 70 67 69 6a 4e 57 4d 70 74 6a 66 24 24 6e 7a 6c 78 57 2d 57 6a 49 6a 68 57 4b 42 50 73 2d 69 4f 6e 70 4d 70 4d 78 56 55 70 35 47 64 78 56 43 70 56 70 36 78 74 73 57 32 70 74 78 4f 35 70 55 70 4d 78 70 72 70 72 70 37 72 66 6e 70 59 70 48 72 66 7a 57 6e 70 55 69 74 78 57 4c 70 66 58 66 35 57 49 70 4c 57 52 52 7a 36 70 66 58 6a 54 65 66 54 6e 54 39 57 69 6c 54 6f 70 56 51 57 53 70 53 69 66 62 57 44 70 74 70 74 69 55 39 70 66 70 4f 45 70 36 70 66 70 6a 70 6a 77 70 2b 69 74 4e 57 57 70 6a 4e 4a 78 6a 49 70 66 53 57 70 57 52 70 67 78 6a 35 70 6f 70 70 69 36 70 57 4b 70 38 72 4f 7a 57 45 70 57 72 57 70 57 33 70 32 72 70 65 57 42 70 35 78 70 50 65 32 34 46 54 75 78 70 75 70 Data Ascii: VxjsWzp5iq4wZprtqp9pdp2BYxOeWZpgijNWMptjf$$nzlxW-WjIjhWKBPs-iOnpMpMxVUp5GdxVCpVp6xtsW2ptxO5pUpMxprprp7rfnpYpHrfzWnpUitxWLpfXf5WIpLWRRz6pfXjTefTnT9WilTopVQWSpSifbWDptptiU9pfpOEp6pfpjpjwp+itNWWpjNJxjIpfSWpWRpgxj5poppi6pWKp8rOzWEpWrWpW3p2rpeWBp5xpPe24FTuxpup
2024-04-18 16:59:56 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:56 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: O5+hdbRWT3iRgrYVVA7AkK4EkVGITBx3XMbZXm7KW1LE4mtMASdlpxswm4wPxklM$ISxq+/y4r5qbCw32HOXjQg== vary: accept-encoding Server: cloudflare CF-RAY: 8766354f4b017b98-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:56 UTC	191	IN	Data Raw: 62 39 0d 0a 75 4d 43 42 65 34 57 66 6d 35 46 2f 6b 72 53 4b 6d 59 72 46 69 36 79 4b 73 4c 53 6b 6e 35 65 34 71 4b 53 33 30 37 75 6f 7a 64 75 31 79 70 76 52 31 4e 79 38 6f 4e 79 6d 34 38 54 65 75 4e 6a 6d 76 61 6a 43 38 62 54 4e 7a 72 65 30 77 72 58 74 74 4c 6e 37 38 67 44 57 31 74 7a 38 41 76 7a 53 43 50 55 42 2b 39 77 42 79 67 72 6e 42 74 76 47 38 50 44 50 36 76 49 4d 31 2b 6a 34 45 64 6e 35 44 41 54 31 2b 77 34 62 49 78 63 4c 43 67 51 71 36 77 62 33 42 76 77 75 4d 53 50 79 36 41 45 32 39 44 67 36 48 50 76 30 4f 66 6b 4f 4c 78 63 42 2b 30 51 39 41 51 67 34 49 0d 0a Data Ascii: b9uMCBe4Wfm5F/krSKmYrFi6yKsLSkn5e4qKS307uozdu1ypvR1Ny8oNym48TeuNjmvajC8bTNzre0wrXttLn78gDW1tz8AvzSCPUB+9wBygrnBtvG8PDP6vIM1+j4Edn5DAT1+w4bIxcLCgQq6wb3BvwuMSPy6AE29Dg6HPv0OfkOLxcB+0Q9AQg4I
2024-04-18 16:59:56 UTC	1369	IN	Data Raw: 61 65 32 0d 0a 7a 67 49 50 51 6f 49 45 41 6b 72 51 42 59 73 46 6c 51 56 4d 52 5a 5a 50 6c 4d 75 51 46 59 7a 56 31 6c 53 52 57 46 68 4a 32 42 6e 4c 46 74 41 52 46 6f 75 64 43 77 75 59 6e 68 4f 4c 31 64 34 56 47 31 62 58 45 68 31 55 49 49 2f 66 46 68 51 67 32 52 5a 69 31 52 4b 69 55 69 4e 63 6b 31 73 67 57 78 6d 55 35 56 6c 62 46 56 6d 68 32 31 63 6c 34 74 33 6f 47 4e 39 5a 6d 46 34 68 61 47 48 68 6e 79 66 65 4a 2b 6d 71 4b 65 4f 6b 48 5a 70 70 6e 56 35 68 49 57 39 6b 70 79 53 76 72 36 2b 70 49 43 51 66 5a 4b 65 79 5a 79 49 6d 36 2b 75 30 63 4c 4c 7a 72 54 50 77 35 44 47 6f 71 69 78 6c 63 58 53 76 5a 66 41 75 74 50 44 72 64 43 67 78 36 48 72 76 71 58 58 70 72 76 4e 30 4c 32 6c 7a 36 2b 31 38 36 2f 49 77 75 6e 4c 38 4d 7a 48 38 75 44 42 41 38 38 46 30 63 2b Data Ascii: ae2zgIPQoIEAkrQBYsFlQVMRZZPlMuQFYzV1lSRWFhJ2BnLFtARFoudCwuYnhOL1d4VG1bXEh1UII/fFhQg2RZi1RKiUiNck1sgWxmU5VlbFVmh21cl4t3oGN9ZmF4haGHhnyfeJ+mqKeOkHZppnV5hIW9kpySvr6+pICQfZKeyZyIm6+u0cLLzrTPw5DGoqixlcXSvZfAutPDrdCgx6HrvqXXprvN0L2lz6+186/IwunL8MzH8uDBA88F0c+
2024-04-18 16:59:56 UTC	1369	IN	Data Raw: 6b 35 4b 43 68 41 65 50 69 34 52 45 42 67 53 52 7a 74 48 52 7a 34 59 45 31 5a 44 4e 6b 4e 5a 56 44 56 69 4e 44 56 55 51 56 78 4e 4b 43 31 6b 61 58 42 4f 5a 6b 64 56 4b 32 70 4b 4e 56 31 4a 4f 31 46 72 59 57 4e 4f 57 6e 68 6d 4f 6d 52 39 56 46 57 47 69 57 6c 6d 61 46 36 4f 6c 59 42 56 6c 6d 42 35 5a 58 4e 53 54 35 42 6e 66 6d 79 59 6f 57 53 57 68 58 5a 36 66 4a 75 4b 61 4b 36 61 61 34 6d 68 6f 49 53 4b 66 36 65 58 67 57 75 71 6d 70 61 57 73 5a 39 34 64 34 71 78 6f 33 39 34 74 70 79 62 6b 37 71 6b 6c 59 53 4b 70 4a 79 6e 70 62 32 4c 6e 37 6a 46 6f 35 54 59 33 61 36 39 7a 61 6e 41 30 4d 54 51 77 72 37 6c 77 61 53 6e 37 4f 33 4b 34 39 43 74 72 2f 4c 47 71 73 6e 52 77 4d 33 35 38 38 54 70 35 66 58 52 31 38 38 42 37 66 33 69 35 4e 37 63 42 66 36 39 42 41 48 63 Data Ascii: k5KChAePi4REBgSRztHRz4YE1ZDNkNZVDViNDVUQVxNKC1kaXBOZkdVK2pKNV1JO1FrYWNOWnhmOmR9VFWGiWlmaF6OlYBVlmB5ZXNST5BnfmyYoWSWhXZ6fJuKaK6aa4mhoISKf6eXgWuqmpaWsZ94d4qxo394tpybk7qklYSKpJynpb2Ln7jFo5TY3a69zanA0MTQwr7lwaSn7O3K49Ctr/LGqsnRwM3588Tp5fXR188B7f3i5N7cBf69BAHc
2024-04-18 16:59:56 UTC	55	IN	Data Raw: 77 78 53 6a 4a 46 4f 69 31 4f 4b 44 35 57 50 54 35 42 50 69 4e 55 56 43 5a 42 61 79 5a 58 4b 56 64 4f 54 53 73 39 54 47 5a 52 54 56 4a 55 4d 30 39 47 62 6d 5a 0d 0a Data Ascii: wxSjJFOi1OKD5WPT5BPiNUVCZBayZXKVdOTSs9TGZRTVJUM09GbmZ
2024-04-18 16:59:56 UTC	1023	IN	Data Raw: 33 66 38 0d 0a 2b 61 6f 42 5a 66 58 46 66 5a 48 31 6f 68 56 70 43 58 32 74 6a 52 59 70 71 6a 55 74 2b 59 33 46 50 6b 57 36 4c 6b 6f 4f 58 66 6c 56 77 63 48 61 5a 67 5a 31 6a 67 59 65 43 68 48 6d 54 61 49 56 37 6d 49 4b 49 6b 32 79 6f 6a 36 64 76 64 48 6d 6b 6d 72 4f 4c 69 6e 47 32 73 37 79 61 6f 73 47 6e 76 71 4f 39 68 4d 65 56 6c 71 65 65 79 35 32 6d 6e 71 57 6d 73 4b 4b 31 74 36 7a 4c 71 72 4c 62 73 63 76 59 6f 63 7a 67 74 4e 43 32 77 73 50 59 79 2b 79 2b 33 63 2f 66 73 65 54 70 77 37 50 46 74 74 62 50 30 74 6e 64 30 2f 50 67 38 72 33 77 2b 50 76 41 39 4f 66 61 32 50 30 44 39 4e 59 43 2f 75 6e 61 34 76 73 4e 41 66 51 44 35 51 55 59 42 51 55 63 31 76 4c 5a 44 43 41 50 42 50 44 66 49 42 37 34 34 78 59 43 2f 75 72 70 4c 67 62 6f 38 52 59 7a 4a 66 45 34 4d Data Ascii: 3f8+aoBZfXFfZH1ohVpCX2tjRYpqjUt+Y3FPkW6LkoOXflVwcHaZgZ1jgYeChHmTaIV7mIKIk2yoj6dvdHmkmrOLinG2s7yaosGnvqO9hMeVlqeey52mnqWmsKK1t6zLqrLbscvYoczgtNC2wsPYy+y+3c/fseTpw7PFttbP0tnd0/Pg8r3w+PvA9Ofa2P0D9NYC/una4vsNAfQD5QUYBQUc1vLZDCAPBPDfIB744xYC/urpLgbo8RYzJfE4M
2024-04-18 16:59:56 UTC	260	IN	Data Raw: 66 65 0d 0a 79 4e 31 56 37 4f 57 78 4f 66 7a 6c 76 4e 31 31 34 63 7a 75 48 5a 6f 31 48 69 55 56 4d 55 57 64 4a 69 34 6c 49 6a 49 4e 54 6c 33 61 4a 56 35 74 32 6c 57 46 33 57 59 39 66 6d 70 70 61 5a 6e 52 72 6d 70 5a 72 6e 70 2b 5a 70 6f 42 78 66 37 57 53 6f 61 64 35 6b 71 6d 46 76 6f 32 65 6f 4d 4f 77 6e 70 35 38 74 6f 57 33 71 59 75 36 72 5a 79 73 69 62 72 49 6f 38 4f 54 7a 37 53 77 6f 70 71 32 30 74 33 59 72 63 2b 33 30 39 6a 64 30 37 6e 43 33 36 58 42 77 71 66 48 77 75 69 36 75 39 7a 62 77 63 4c 7a 73 38 6d 7a 79 38 69 34 79 63 71 38 34 66 48 53 37 66 44 65 31 64 50 32 34 50 58 37 44 51 33 46 43 73 66 4b 37 64 49 4a 45 42 62 54 36 50 6f 48 30 67 58 77 32 78 44 66 49 50 34 65 49 64 37 67 2b 51 48 30 43 69 66 33 2b 50 33 71 4b 67 77 75 48 69 77 53 4a 51 Data Ascii: feyN1V7OWxOfzlvN114czuHZo1HiUVMUWdJi4lIjINTl3aJV5t2lWF3WY9fmppaZnRrmpZrnp+ZpoBxf7WSoad5kqmFvo2eoMOwnp58toW3qYu6rZysibrIo8OTz7Swopq20t3Yrc+309jd07nC36XBwqfHwui6u9zbwcLzs8mzy8i4ycq84fHS7fDe1dP24PX7DQ3FCsfK7dIJEBbT6PoH0gXw2xDfIP4eId7g+QH0Cif3+P3qKgwuHiwSJQ
2024-04-18 16:59:56 UTC	430	IN	Data Raw: 31 61 37 0d 0a 53 4d 78 4b 77 59 4e 45 6a 42 41 4d 76 55 39 52 54 63 33 42 79 6f 69 42 51 52 50 51 44 45 75 4a 53 67 52 44 54 51 66 46 52 55 51 4e 54 49 77 54 56 41 76 57 6b 4d 76 55 54 70 59 4c 31 67 69 55 79 5a 43 4e 56 59 2f 62 32 78 68 61 57 78 54 61 57 78 45 64 32 4a 6e 4f 45 30 2b 56 46 55 33 61 32 42 33 58 6d 53 41 52 6f 6c 72 58 30 74 6c 62 48 32 4f 62 48 4a 6a 58 5a 42 71 68 6f 53 47 6c 6f 79 52 56 33 32 67 6d 35 47 58 62 70 52 33 6f 4b 42 61 58 36 4a 6f 71 4a 6d 6a 6d 6d 5a 6f 68 5a 75 6f 6c 71 79 45 61 72 70 30 65 6f 79 47 6b 35 31 39 74 48 71 4e 70 4c 47 58 74 4b 4f 69 78 6f 61 37 76 36 7a 4f 79 4a 75 7a 75 39 4c 47 72 64 62 41 71 63 4b 30 7a 4b 71 32 32 72 57 76 7a 61 7a 59 74 4d 66 6b 76 64 32 33 76 64 66 70 76 4b 33 65 37 64 50 4c 78 62 2f Data Ascii: 1a7SMxKwYNEjBAMvU9RTc3ByoiBQRPQDEuJSgRDTQfFRUQNTIwTVAvWkMvUTpYL1giUyZCNVY/b2xhaWxTaWxEd2JnOE0+VFU3a2B3XmSARolrX0tlbH2ObHJjXZBqhoSGloyRV32gm5GXbpR3oKBaX6JoqJmjmmZohZuolqyEarp0eoyGk519tHqNpLGXtKOixoa7v6zOyJuzu9LGrdbAqcK0zKq22rWvzazYtMfkvd23vdfpvK3e7dPLxb/
2024-04-18 16:59:56 UTC	258	IN	Data Raw: 66 63 0d 0a 4f 58 4a 71 64 6d 68 56 58 6d 70 54 4f 33 31 43 63 6c 51 2b 67 56 73 38 57 49 79 42 62 45 6c 75 69 6e 43 45 54 57 71 45 68 32 61 5a 62 33 79 51 6c 46 65 4b 6c 32 35 36 66 4a 39 79 6e 46 39 2f 66 5a 53 47 68 35 2b 74 68 47 75 6d 65 32 71 46 63 6f 4b 4a 75 4a 61 73 73 71 78 32 6c 36 75 75 77 49 32 32 77 34 47 53 6d 4d 69 52 69 6f 4f 31 6f 4a 32 72 6d 36 79 7a 71 39 53 39 31 36 6e 4b 79 4d 32 61 6d 64 71 71 76 4e 53 31 30 74 79 62 73 61 4f 67 70 4f 4b 71 79 63 57 34 37 4f 48 6a 76 66 4c 30 74 4f 32 76 31 63 72 32 30 73 37 61 31 72 43 37 39 74 37 73 79 38 50 43 76 2f 50 2b 33 2f 62 59 35 4d 66 72 2b 68 4c 52 34 73 30 55 34 65 37 54 79 75 51 53 31 68 6e 54 45 41 67 67 2b 42 48 66 37 50 55 41 33 66 45 63 43 50 6e 30 35 50 6a 37 45 51 6a 79 4d 76 41 Data Ascii: fcOXJqdmhVXmpTO31CclQ+gVs8WIyBbEluinCETWqEh2aZb3yQlFeKl256fJ9ynF9/fZSGh5+thGume2qFcoKJuJassqx2l6uuwI22w4GSmMiRioO1oJ2rm6yzq9S916nKyM2amdqqvNS10tybsaOgpOKqycW47OHjvfL0tO2v1cr20s7a1rC79t7sy8PCv/P+3/bY5Mfr+hLR4s0U4e7TyuQS1hnTEAgg+BHf7PUA3fEcCPn05Pj7EQjyMvA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50309	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:56 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:56 UTC	815	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 31 33 37 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 31 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 36 30 35 34 35 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 32 35 32 37 32 30 35 38 34 39 31 30 32 31 39 34 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 64 61 37 64 35 31 66 62 38 62 37 31 34 39 37 30 39 38 65 66 62 38 34 35 65 31 35 36 64 35 64 39 25 32 32 25 32 43 25 32 32 Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A137%2C%22time_on_page%22%3A61%2C%22time_on_page_ms%22%3A60545%2C%22visit_id%22%3A%2222527205849102194%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22da7d51fb8b71497098efb845e156d5d9%22%2C%22
2024-04-18 16:59:57 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 16:59:57 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 16:59:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 16:59:57 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 33 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 968086755e6642d7ac86a010f22fbca0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50310	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:56 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87663518c804138b/1713459591979/ENb54b6QumsEJ6F HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:57 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 16:59:57 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 87663552099d4545-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:57 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 1a 08 02 00 00 00 a1 19 32 9f 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+2IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50312	74.125.138.147	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:57 UTC	1013	OUT	GET /pagead/1p-user-list/982651595/?random=1713459593238&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqwcszhJW_PuRKZ4GeBijCXT1Yvpm6gmclq8jW7diZtzpGORWh&random=802722143&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
2024-04-18 16:59:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50311	74.125.138.147	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:57 UTC	1012	OUT	GET /pagead/1p-user-list/982651595/?random=1713459593334&cv=11&fst=1713456000000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v892451398za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fmarketing.docsend.com%2Fintegrations%2F&frm=2&tiba=Dropbox&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqUqpXDz2h0Jus_YXDGESDnJ6jT2mmcRhAevBkfF9XZSsawPqI&random=1294648323&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RWd5-GtYbuT5M1NKcitRQlufDD_IydNFiMhC1JCeT0fo1B7CWCR6w7VJPAdRyzNDNfTQw9YKzMRiJnL--gnTtPCCoT7bEEw0n7nLgTRAzNl3FEU7wbRi5ZcY9LbzkaCrxu59ef_yj0gF6U6Yvxp7u2-ANrZqwCG0gAdpMYXDQe4
2024-04-18 16:59:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 16:59:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 16:59:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50313	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:57 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:57 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d81f4508f8f44b458da1c20fe165c4c7 Connection: close
2024-04-18 16:59:57 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50314	104.17.2.184	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:58 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/424235195:1713457852:PYJ4Txkvs6_hwr0L6hUIyCsVP6vQfkl3TUyWXRQwHh0/87663518c804138b/18686b3826d2821 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 16:59:58 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 16:59:58 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: g9NeMegWkT0fqr15guyZNA==$k9iqCWw7C4fTY4GAfOxdmA== Server: cloudflare CF-RAY: 8766355a09afb0e2-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 16:59:58 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50315	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:58 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:58 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 16:59:58 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2dfa9e4b3abf474680a45633b42b86f9 Connection: close
2024-04-18 16:59:58 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50316	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 16:59:59 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 16:59:59 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 36 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 31 35 37 36 36 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 32 38 35 37 35 37 33 32 33 30 33 32 35 32 34 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 34 62 34 61 32 65 34 62 62 31 64 37 34 37 61 64 38 31 30 37 64 66 39 37 37 33 66 33 65 30 65 64 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A16%2C%22time_on_page_ms%22%3A15766%2C%22visit_id%22%3A%222857573230325241%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%224b4a2e4bb1d747ad8107df9773f3e0ed%22%2C%22url
2024-04-18 17:00:00 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 17:00:00 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 17:00:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 17:00:00 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 17:00:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 46d7f95add4245d48546bd2b5e904339 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50317	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:00 UTC	1848	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1917 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarylSXA7aeBcNcXGeYw Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:00 UTC	1917	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 53 58 41 37 61 65 42 63 4e 63 58 47 65 59 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 53 58 41 37 61 65 42 63 4e 63 58 47 65 59 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 53 58 41 37 61 65 42 63 4e 63 58 47 65 59 77 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarylSXA7aeBcNcXGeYwContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarylSXA7aeBcNcXGeYwContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundarylSXA7aeBcNcXGeYwCont
2024-04-18 17:00:00 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 17:00:00 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 17:00:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 17:00:00 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 21 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 16:59:59 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4dc52c361dee46f3854f11f1c36dd952 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50318	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:00 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:00 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 17:00:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c1541b5dd28c48f4a4366d06519c98ba Connection: close
2024-04-18 17:00:00 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50319	35.174.127.31	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:01 UTC	683	OUT	GET /pubsub/5-iqTteE0pIeyN6zsurBQLxz_nXj9EtYsDF2qVVpYzfdq3IuVOpwfZdcQUvCuJxLJo7WYPLV_jFxQiuYffg7rRGYwvDFB7qM-eDXGo?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.docsend.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: RFhdOjvQEbevxWzkogKKAg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50320	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:02 UTC	1848	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1878 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryWIVDNvxlarpdYRND Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:02 UTC	1878	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 49 56 44 4e 76 78 6c 61 72 70 64 59 52 4e 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 49 56 44 4e 76 78 6c 61 72 70 64 59 52 4e 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 49 56 44 4e 76 78 6c 61 72 70 64 59 52 4e 44 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryWIVDNvxlarpdYRNDContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryWIVDNvxlarpdYRNDContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryWIVDNvxlarpdYRNDCont
2024-04-18 17:00:02 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 17:00:02 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 17:00:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 17:00:02 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 33 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 17:00:01 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1e1d1ec2c0f1415fbdcafe4bd67dd8c0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50321	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:02 UTC	1337	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 411 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: eJmnI6KB5AayjWOaFqjZXMJi X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.privacy_consent-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:02 UTC	411	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 75 64 63 6c 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 Data Ascii: {"scopes":[],"known_namespaces":["udcl","uxa_events","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript
2024-04-18 17:00:03 UTC	596	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 102 X-Webkit-Csp: sandbox Content-Length: 1117 Date: Thu, 18 Apr 2024 17:00:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 611c31fb4f414546aeba2abcc8b88f0d Connection: close
2024-04-18 17:00:03 UTC	1117	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50323	162.125.9.18	443	1308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:03 UTC	634	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:03 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 18 Apr 2024 17:00:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4f881ecf1c694d8fbf959cac811a2e78 Connection: close
2024-04-18 17:00:03 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.4	50324	162.125.9.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:03 UTC	902	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docsend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:03 UTC	782	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 5f 6d 73 25 32 32 25 33 41 36 30 31 34 38 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 30 39 31 39 32 31 32 33 33 34 33 37 35 36 31 32 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 38 61 62 32 38 36 65 63 61 30 31 34 34 64 34 37 61 34 33 64 39 65 35 65 34 65 64 64 37 35 65 37 25 32 32 25 32 43 25 32 32 75 72 6c Data Ascii: event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A60%2C%22time_on_page_ms%22%3A60148%2C%22visit_id%22%3A%220919212334375612%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%228ab286eca0144d47a43d9e5e4edd75e7%22%2C%22url
2024-04-18 17:00:04 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 17:00:04 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 17:00:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 17:00:04 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 74 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 17:00:03 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b094e5a730a34753989d552c7294ce81 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.4	50325	162.125.9.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:04 UTC	627	OUT	GET /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:04 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Thu, 18 Apr 2024 17:00:04 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 052aed8312b14c8ea7ebc469a643e2e3 Connection: close
2024-04-18 17:00:04 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.4	50326	162.125.9.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:00:05 UTC	1848	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1878 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryA6FhP2h81i2j9BXB Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.docsend.com&sandbox_redirect=false&locale_override=en&parent_domain_consent_cookie=%257B%2522consentType%2522%253A1%252C%2522consentDate%2522%253A%25222024-04-18T16%253A59%253A22.622Z%2522%252C%2522expireDate%2522%253A%25222024-10-18T16%253A59%253A22.622Z%2522%252C%2522consentMonths%2522%253A6%252C%2522categories%2522%253A%257B%2522strictly%2520necessary%2522%253Atrue%252C%2522general%2520marketing%2520and%2520advertising%2522%253Atrue%252C%2522analytics%2522%253Atrue%252C%2522performance%2520and%2520functionality%2522%253Atrue%252C%2522social%2520media%2520advertising%2522%253Atrue%257D%252C%2522userInteracted%2522%253Atrue%252C%2522numDots%2522%253A2%257D&should_auto_open_options=false&privacy_consent_upgrade_flag=true&csrf_origin=https%253A%252F%252Fwww.docsend.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NDU1MDc5Mzg2NDY0NzQwNzM4NDkyNDcwNzkzNDkxMDEwNTM0MTE%3D; t=eJmnI6KB5AayjWOaFqjZXMJi; __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; locale=en; __Host-logged-out-session=ChDe5i7LO1wqD7bdwvkwxFxhEMeihbEGGi5BSmxaRDVjTnRpM0c1eG9iTmlxbndpbFZua3VHREJTOEF4VkR0ZXdwMWhoUkJB
2024-04-18 17:00:05 UTC	1878	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 36 46 68 50 32 68 38 31 69 32 6a 39 42 58 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 36 46 68 50 32 68 38 31 69 32 6a 39 42 58 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 65 4a 6d 6e 49 36 4b 42 35 41 61 79 6a 57 4f 61 46 71 6a 5a 58 4d 4a 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 36 46 68 50 32 68 38 31 69 32 6a 39 42 58 42 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryA6FhP2h81i2j9BXBContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryA6FhP2h81i2j9BXBContent-Disposition: form-data; name="t"eJmnI6KB5AayjWOaFqjZXMJi------WebKitFormBoundaryA6FhP2h81i2j9BXBCont
2024-04-18 17:00:05 UTC	3388	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-6qBsa6olnsURvJfiBPVY' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-6qBsa6olnsURvJfiBPVY' 'nonce-1z3DsXhCpHbEWu2o0gx7' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=eJmnI6KB5AayjWOaFqjZXMJi; Domain=dropbox.com; expires=Sun, 18 Apr 2027 17:00:05 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=eJmnI6KB5AayjWOaFqjZXMJi; expires=Sun, 18 Apr 2027 17:00:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=4D5o1qJMWY; expires=Sun, 18 Apr 2027 17:00:05 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 29 X-Xss-Protection: 1; mode=block Date: Thu, 18 Apr 2024 17:00:05 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 788228555319463a9620080d63693290 Connection: close

Target ID:	0
Start time:	18:58:29
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:58:31
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:58:34
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docsend.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	18:59:10
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6112 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	18:59:10
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6212 --field-trial-handle=2004,i,15040722951710102493,1480642005458844003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docsend.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Windows Analysis Report
https://docsend.com