Windows Analysis Report
https://nnegri-ubaes.app.box.com/notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w

AV Detection

Source: https://nnegri-ubaes.app.box.com/notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10w	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://capitaltltleandescrow.net/?oxhv	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Source: Yara match	File source: 43432.5.pages.csv, type: HTML
Source: Yara match	File source: 89623.6.pages.csv, type: HTML
Source: Yara match	File source: 95241.9.pages.csv, type: HTML
Source: Yara match	File source: 89623.14.pages.csv, type: HTML

Source: https://capitaltltleandescrow.net	Matcher: Found strong image similarity, brand: Microsoft cache file: chromecache_259.1.dr			Jump to dropped file
Source: https://capitaltltleandescrow.net	Matcher: Found strong image similarity, brand: Microsoft cache file: chromecache_261.1.dr			Jump to dropped file
Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	Matcher: Found strong image similarity, brand: Microsoft image: 89623.img.3.gfk.csv EE5C8D9FB6248C938FD0DC19370E90BD

Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://capitaltltleandescrow.net/?oxhv	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: Number of links: 0
Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: Number of links: 0

Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://capitaltltleandescrow.net/?oxhv

HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx

Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: HTML title missing
Source: https://capitaltltleandescrow.net/?oxhv	HTTP Parser: HTML title missing
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: HTML title missing
Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: HTML title missing
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: HTML title missing

Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://capitaltltleandescrow.net/?oxhv	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: No <meta name="author".. found
Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: No <meta name="author".. found

Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://capitaltltleandescrow.net/?oxhv	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: No <meta name="copyright".. found
Source: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARMK_r-KN2d7bnloGnZ5W3H56xiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhTr17-q7zFa317o6PsI2MTGU6x6heXeaRaZgXl-hh4uPu4uBmWGrtlZLommbo6FoX7O3n7-YWFhboZZmVFuKfbGlsZTmATmsDGdIqN4QMbYwc7wyx2hgOcjAd4GX7wTVzz-fHLDafeegAA0&mkt=en-US	HTTP Parser: No <meta name="copyright".. found

Compliance

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Networking

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: nnegri-ubaes.app.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&hostname=nnegri-ubaes.app.box.com&subdomain=nnegri-ubaes HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nnegri-ubaes.app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1
Source: global traffic	HTTP traffic detected: GET /app_init?authCode=&fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&listId=inbox&_=1679374985056 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: Tr9gVCJ9-w42hXxnX_5Uxx_Hi21DK0Mmfs3YX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; csrf-token=Tr9gVCJ9-w42hXxnX_5Uxx_Hi21DK0Mmfs3Y; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZB0b HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=dNoj73rV-wXZ6VQqjhkvWou5egCdw_ToUYqQ; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: nnegri-ubaes.app.box.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nnegri-ubaes.app.box.com/notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=7iqhomnlh7r9rftq23ohtdj8hq; box_visitor_id=6418ca07b7dda1.75046658; bv=OPS-45995; cn=35; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: notes.services.box.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=dNoj73rV-wXZ6VQqjhkvWou5egCdw_ToUYqQ; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&hostname=nnegri-ubaes.app.box.com&subdomain=nnegri-ubaes HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nnegri-ubaes.app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=xSbj8GxY-mtWrEqAVmETT4k_mCdV_Mu0iOOE
Source: global traffic	HTTP traffic detected: GET /app_init?authCode=&fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&listId=inbox&_=1679374988977 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: FWWoS97C-UgVjHP-oM_7SKpc3XZ2N1kJs5tUX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=FWWoS97C-UgVjHP-oM_7SKpc3XZ2N1kJs5tU
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZB-j HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=websocket&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=Sec-WebSocket-Key: rpeA2iWssT5xDcrR1m2AbQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZC3X&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /api/v2/auth?users=key HTTP/1.1Host: auth.split.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aContent-Type: application/jsonAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZC8Y&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZCYs&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1169500312889&_=1679374988978 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 2sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vsX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDWQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=websocket&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQSec-WebSocket-Key: 6/NvyalbTRGzplcPLHZVJQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDcK&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDkl&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZD-k&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /box-image?encoding=base64&fileId=1169506039580&fileName=Box%20Notes%20Image%202023-03-20%2010.57.19.png&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2Fycxtnffruqg2kxke4dnh5vez243bhdxh&viewContext=inline HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZE3r&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZEp6&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZFOL&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZF_4&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZG8i&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /?oxhv HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0 HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4
Source: global traffic	HTTP traffic detected: GET /__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; fpc=AixEZYwpLzpIrwsgM305PIM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; fpc=AixEZYwpLzpIrwsgM305PIM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_EH-q9hPYkBqq2xSfT_DcJw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://capitaltltleandescrow.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_aeb718e8cbcfba8bf6ed.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_02820b8eeff403f5e53a.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_dxlgfz8kx1amwm8vpguk7w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_cfi3giy70wfemn6mr5vbma2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIAc&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIUy&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIhy&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIsW&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJ4h&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJZ1&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJjl&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJuk&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJz6&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZK3M&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c0f2645501c8b52bd96c.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZKel&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZKin&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZL2u&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZLrA&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /?oxhv HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQ4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrFeVO4zayWgLrLeaOQsvTCUO2eYm2sXrDtY0K6ai86Q_7epBSqsH1HkuaQNwkjD6P4gIVmiLBI5cJxohdSJEmW_sC99rJc_FnM2nKXI9l0L0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrPQYr3eNLbyLZdCoOXj4i_x3387h6g376yBTZkKu1a8AptVHg64kyVKMCf905mj-HgAyUIxnmoCf3wtQ7RsM-rLzHh9B_4VbuHZTYwqbvK7apJ-oI2KYJm_nWLsZOKwX-HI1lgCSMUTk7U1Ju9O68VxEaE9Q1rM3CU1r_hx7Mpz0AghZQLxvQ16maWBZVMSvv6rIWGX9yghndOocIQ5b2CkpleltsA5WPzg9h53suC4cxLx2pDU7exvBov52Ica5xX8PUbA5Ec5hPyHVKzpiD006ojyQGpVB1rCFK83LrVKkgAA; fpc=AixEZYwpLzpIrwsgM305PIO8Ae7AAQAAACPBqtsOAAAA; brcap=0; clrc={%2219437%22%3a[%229NAUIOEF%22%2c%22aZx4F1Rs%22]}
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_29802ca5075e6e054694.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZMnv&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZMuN&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.office.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wlivepackagefull_stPwvW3-5mShoxrbkAw2qw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accountcorepackage_a5ARGmJHpEcannOQPbqa4A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resetpasswordpackage_KtA9svVZ1uKletHP-U4v5A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZNyY&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZPPp&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /sse?channels=ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_control,ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_mySegments,ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_splits,%5B%3Foccupancy%3Dmetrics.publishers%5Dcontrol_pri,%5B%3Foccupancy%3Dmetrics.publishers%5Dcontrol_sec&accessToken=eyJhbGciOiJIUzI1NiIsImtpZCI6IkRQVkE3QS44czhnaVEiLCJ0eXAiOiJKV1QifQ.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.Xwvby8ehrHyip6YFX_KabqgtOyXkplaqTYvKTovqrUs&v=1.1&heartbeats=true&SplitSDKVersion=javascript-10.22.3&SplitSDKClientKey=b42a HTTP/1.1Host: streaming.split.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZRFx&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZT2V&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZUv7&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZWhm&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZX8u&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZYUF&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZVI&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZZR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZdV&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZaUx&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZadP&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zahh&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zb3Q&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZcH7&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZdmN&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZduK&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Ze2U&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zeph&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZfDR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=
Source: global traffic	HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZfJR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30=

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: ed7908f8-ea9a-42e4-a266-46624e770500x-ms-ests-server: 2.1.14816.6 - EUS ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}Referrer-Policy: strict-origin-when-cross-originX-XSS-Protection: 0Date: Mon, 20 Mar 2023 21:03:30 GMTConnection: closeContent-Length: 0

Source: chromecache_307.1.dr	String found in binary or memory: http://angular-ui.github.com/
Source: chromecache_307.1.dr	String found in binary or memory: http://angular-ui.github.io/bootstrap/
Source: chromecache_286.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_307.1.dr	String found in binary or memory: http://api.jquery.com/offset/
Source: chromecache_307.1.dr	String found in binary or memory: http://api.jquery.com/position/
Source: chromecache_293.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_293.1.dr	String found in binary or memory: http://github.com/angular-ui/ui-select
Source: chromecache_203.1.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_224.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_224.1.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.php)
Source: chromecache_307.1.dr	String found in binary or memory: http://placekitten.com/100/150
Source: chromecache_307.1.dr	String found in binary or memory: http://placekitten.com/150/150
Source: chromecache_307.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_274.1.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_224.1.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_293.1.dr, chromecache_307.1.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_224.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_321.1.dr, chromecache_247.1.dr	String found in binary or memory: https://capitaltltleandescrow.net/?oxhv
Source: chromecache_293.1.dr	String found in binary or memory: https://github.com/DaftMonk/angular-tour
Source: chromecache_307.1.dr	String found in binary or memory: https://github.com/angular/angular.js/pull/10764
Source: chromecache_293.1.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_307.1.dr	String found in binary or memory: https://github.com/mbostock/d3/blob/master/src/format/requote.js
Source: chromecache_307.1.dr	String found in binary or memory: https://github.com/mgonto/angular-wizard
Source: chromecache_293.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_307.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_307.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_320.1.dr, chromecache_357.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_320.1.dr, chromecache_357.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_315.1.dr, chromecache_314.1.dr	String found in binary or memory: https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10w
Source: chromecache_321.1.dr, chromecache_247.1.dr	String found in binary or memory: https://nnegri-ubaes.box.com/s/ycxtnffruqg2kxke4dnh5vez243bhdxh
Source: chromecache_307.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_307.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_293.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/fabmdl2.4.51.woff
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.eot
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.eot?iefix
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.ttf
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.woff
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot?iefix
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.ttf
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.woff
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot?iefi
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.ttf
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.woff
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot?ief
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.ttf
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.woff
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-light-final.svg#web
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg#web
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semibold-final.svg#web
Source: chromecache_341.1.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.svg#web
Source: chromecache_195.1.dr	String found in binary or memory: https://www.onenote.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg

System Summary

Source: classification engine

Classification label: mal68.phis.win@33/186@25/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1820,i,8349816860566181976,9620813474687927870,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nnegri-ubaes.app.box.com/notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1820,i,8349816860566181976,9620813474687927870,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior