| Source: unknown | Network traffic detected: HTTP traffic on port 49817 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49742 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49863 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49741 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49926 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49898 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49875 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50057 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50154 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50068 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50125 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49881 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49772 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49734 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49732 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49731 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49730 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49732 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49851 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50010 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50165 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49703 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50067 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50091 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50113 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50068 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50159 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49806 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49943 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49728 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49727 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49847 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49725 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49846 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49845 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49844 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49722 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49843 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50120 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49731 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49840 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50034 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50015 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49834 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49989 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50057 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50077 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49748 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50108 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50082 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49805 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49718 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49839 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49717 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49838 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49837 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49847 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49836 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49957 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49835 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49834 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49833 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49832 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49710 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49831 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50119 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49830 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49839 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49927 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49944 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50092 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50091 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50023 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49829 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49706 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49827 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49754 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49825 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49703 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49702 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49944 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49701 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49771 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49943 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50018 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50017 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50019 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49813 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50017 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49780 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50010 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49836 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50012 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50133 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50011 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50132 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50014 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50135 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50013 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50134 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50015 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49807 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49939 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49701 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50140 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49776 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49845 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49759 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49753 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49778 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49899 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49898 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49776 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49897 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49775 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49896 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49774 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49895 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49773 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49772 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49771 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49770 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50020 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50023 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49742 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50146 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50024 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50145 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49897 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49780 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49957 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49851 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50030 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50151 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49830 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50067 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49718 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49769 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49768 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49889 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49767 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49863 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49762 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49883 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50166 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49761 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49882 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50011 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49881 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49840 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49880 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49702 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50031 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50152 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49725 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49741 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50034 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50033 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50154 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50036 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50159 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49896 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50158 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49770 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50160 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50041 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49759 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49757 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49878 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49877 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49754 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49875 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49753 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49874 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49752 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49873 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49730 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49751 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49750 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50033 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49835 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50042 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50166 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50165 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49874 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50109 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49829 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49880 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50132 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50160 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49775 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50126 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49846 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49748 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49989 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49746 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49866 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49890 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50013 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50145 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50036 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50042 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50151 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49746 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49878 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49769 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49717 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49889 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49900 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49866 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50108 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49837 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50109 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50018 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50077 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50134 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49700 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49752 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49798 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50119 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49706 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49819 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49844 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49873 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50113 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50133 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49831 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50031 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49751 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50127 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49774 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49799 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49757 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49798 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50006 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50012 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50127 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49814 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50120 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50020 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50126 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49895 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50125 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49768 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49825 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50006 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50082 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49700 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49710 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50098 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49727 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50097 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49762 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50158 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50135 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49833 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49819 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49939 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49799 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49810 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49817 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49816 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49815 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50081 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49814 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49813 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49816 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49810 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50014 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50152 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49767 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50098 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49827 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49807 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49806 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49927 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49805 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49882 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49926 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49804 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49773 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49838 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49815 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50019 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50092 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49877 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49722 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50024 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49883 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50140 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49778 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50041 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49843 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50146 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49761 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49899 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50097 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49832 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50030 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49750 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49900 |
| Source: global traffic | HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: nnegri-ubaes.app.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /p/note?fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&hostname=nnegri-ubaes.app.box.com&subdomain=nnegri-ubaes HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nnegri-ubaes.app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1 |
| Source: global traffic | HTTP traffic detected: GET /app_init?authCode=&fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&listId=inbox&_=1679374985056 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: Tr9gVCJ9-w42hXxnX_5Uxx_Hi21DK0Mmfs3YX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; csrf-token=Tr9gVCJ9-w42hXxnX_5Uxx_Hi21DK0Mmfs3Y; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZB0b HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=dNoj73rV-wXZ6VQqjhkvWou5egCdw_ToUYqQ; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0= |
| Source: global traffic | HTTP traffic detected: GET /notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: nnegri-ubaes.app.box.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nnegri-ubaes.app.box.com/notes/1169500312889?s=93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=7iqhomnlh7r9rftq23ohtdj8hq; box_visitor_id=6418ca07b7dda1.75046658; bv=OPS-45995; cn=35; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0= |
| Source: global traffic | HTTP traffic detected: GET /p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10w HTTP/1.1Host: notes.services.box.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=dNoj73rV-wXZ6VQqjhkvWou5egCdw_ToUYqQ; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0= |
| Source: global traffic | HTTP traffic detected: GET /p/note?fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&hostname=nnegri-ubaes.app.box.com&subdomain=nnegri-ubaes HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nnegri-ubaes.app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=xSbj8GxY-mtWrEqAVmETT4k_mCdV_Mu0iOOE |
| Source: global traffic | HTTP traffic detected: GET /app_init?authCode=&fileId=1169500312889&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2F93wior2d16y21cmgyk3biklfy5s0q10w&listId=inbox&_=1679374988977 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: FWWoS97C-UgVjHP-oM_7SKpc3XZ2N1kJs5tUX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg2Mzc3LCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=FWWoS97C-UgVjHP-oM_7SKpc3XZ2N1kJs5tU |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZB-j HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=websocket&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=Sec-WebSocket-Key: rpeA2iWssT5xDcrR1m2AbQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZC3X&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0= |
| Source: global traffic | HTTP traffic detected: GET /api/v2/auth?users=key HTTP/1.1Host: auth.split.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aContent-Type: application/jsonAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZC8Y&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZCYs&sid=z5Pk-iNyt0hd5jCcAC5e HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0= |
| Source: global traffic | HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1169500312889&_=1679374988978 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"feature-flip-user-id: 2sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01csrf-token: ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vsX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=ma7Pcrmn-98hwalhV0wtQNowaRRIuLFV36vs; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDWQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=websocket&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQSec-WebSocket-Key: 6/NvyalbTRGzplcPLHZVJQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDcK&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZDkl&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZD-k&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /box-image?encoding=base64&fileId=1169506039580&fileName=Box%20Notes%20Image%202023-03-20%2010.57.19.png&sharedLink=https%3A%2F%2Fnnegri-ubaes.box.com%2Fs%2Fycxtnffruqg2kxke4dnh5vez243bhdxh&viewContext=inline HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZE3r&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=t5fuEI6O-d5dg4_uzEXMrW6T5JVhVaz-c9bQ |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZEp6&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc0OTg5ODYyLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZFOL&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZF_4&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZG8i&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /?oxhv HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0 HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4 |
| Source: global traffic | HTTP traffic detected: GET /__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0&sso_reload=true HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; fpc=AixEZYwpLzpIrwsgM305PIM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1 |
| Source: global traffic | HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/__//nzxxzy/zlfes2/g2.0/lfeszctkp?nwtpye_to=4765445m-32n6-49m0-83p6-1o93765276nl&cpotcpne_fct=seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qwlyotyrg2&cpdazydp_ejap=nzop%20to_ezvpy&dnzap=zapyto%20aczqtwp%20seead%3L%2Q%2Qhhh.zqqtnp.nzx%2Qg2%2QZqqtnpSzxp.Lww&cpdazydp_xzop=qzcx_azde&yzynp=637929903776466681.J2J4JuYuZHTeYHCwXt00YHCxWHPjYRPeYRXiX2CsYusxXxJ1YET3JxX5ZEXeZHPjYt00JHUuWEr5KOLeJxJjXurhZHQuXHFi&ft_wznlwpd=py-FD&xve=py-FD&delep=R-GwbnejIUzBlkYod6AHyH7RSM_UCXYNBYTdnxYx49j8hjMx0tzLmASkMP3ukAWRNjv2iWVZLbmUehEWEWOFbyLUQfY5Dt8LQuMIVjoksm6i4PTt3_Y0zQj9gGYSJMuHMjOA66e5x5Cl01qDTr5N_DtxTb8z1yawkPuj9Js5kkUX6JCtPT82TV6AkIjj32SL_42ami0OgKh525SanfGrXL1GHAKtNVQwj3UPyXAEs7Woqzz6h-4iUvFsvjhKwA-HfwxaZ3acCdpRJVMTGGawUh&i-nwtpye-DVF=TO_YPEDELYOLCO2_0&i-nwtpye-gpc=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; fpc=AixEZYwpLzpIrwsgM305PIM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_EH-q9hPYkBqq2xSfT_DcJw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://capitaltltleandescrow.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_aeb718e8cbcfba8bf6ed.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_02820b8eeff403f5e53a.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_dxlgfz8kx1amwm8vpguk7w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_cfi3giy70wfemn6mr5vbma2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIAc&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIUy&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIhy&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZIsW&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJ4h&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJZ1&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJjl&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJuk&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZJz6&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZK3M&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c0f2645501c8b52bd96c.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZKel&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZKin&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZL2u&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZLrA&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /?oxhv HTTP/1.1Host: capitaltltleandescrow.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=DWLIaeOQ64bC; qPdM.sig=kLXnx7q-6LHUdnSylPIRoAU1Vw4; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQ4AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrFeVO4zayWgLrLeaOQsvTCUO2eYm2sXrDtY0K6ai86Q_7epBSqsH1HkuaQNwkjD6P4gIVmiLBI5cJxohdSJEmW_sC99rJc_FnM2nKXI9l0L0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrPQYr3eNLbyLZdCoOXj4i_x3387h6g376yBTZkKu1a8AptVHg64kyVKMCf905mj-HgAyUIxnmoCf3wtQ7RsM-rLzHh9B_4VbuHZTYwqbvK7apJ-oI2KYJm_nWLsZOKwX-HI1lgCSMUTk7U1Ju9O68VxEaE9Q1rM3CU1r_hx7Mpz0AghZQLxvQ16maWBZVMSvv6rIWGX9yghndOocIQ5b2CkpleltsA5WPzg9h53suC4cxLx2pDU7exvBov52Ica5xX8PUbA5Ec5hPyHVKzpiD006ojyQGpVB1rCFK83LrVKkgAA; fpc=AixEZYwpLzpIrwsgM305PIO8Ae7AAQAAACPBqtsOAAAA; brcap=0; clrc={%2219437%22%3a[%229NAUIOEF%22%2c%22aZx4F1Rs%22]} |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_29802ca5075e6e054694.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://capitaltltleandescrow.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZMnv&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZMuN&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.office.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /wlivepackagefull_stPwvW3-5mShoxrbkAw2qw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /accountcorepackage_a5ARGmJHpEcannOQPbqa4A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /resetpasswordpackage_KtA9svVZ1uKletHP-U4v5A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZNyY&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZPPp&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /sse?channels=ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_control,ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_mySegments,ODc1NTA5MDQw_MjYwNzIzNzc1MQ%3D%3D_splits,%5B%3Foccupancy%3Dmetrics.publishers%5Dcontrol_pri,%5B%3Foccupancy%3Dmetrics.publishers%5Dcontrol_sec&accessToken=eyJhbGciOiJIUzI1NiIsImtpZCI6IkRQVkE3QS44czhnaVEiLCJ0eXAiOiJKV1QifQ.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.Xwvby8ehrHyip6YFX_KabqgtOyXkplaqTYvKTovqrUs&v=1.1&heartbeats=true&SplitSDKVersion=javascript-10.22.3&SplitSDKClientKey=b42a HTTP/1.1Host: streaming.split.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZRFx&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZT2V&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZUv7&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZWhm&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZX8u&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZYUF&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZVI&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZZR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZZdV&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZaUx&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZadP&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zahh&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zb3Q&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZcH7&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZdmN&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZduK&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Ze2U&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2Zeph&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZfDR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: global traffic | HTTP traffic detected: GET /3/9159/3001/socket.io/?clientVersion=8.2297.0&EIO=4&transport=polling&t=OS2ZfJR&sid=bafhQb8Iuy6TyutvAC5k HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1169500312889&hostname=nnegri-ubaes.app.box.com&sharedLink=https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=6418ca07b7dda1.75046658; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=jRhGy3PsAIX7pN6MrDb2KqSb; express_sid=s%3AoFkdi2pe1bJnITKagal2LvvlF0zJSNNJ.0tFeV8aSOYagOy6qEj26yNK%2FIfgjbpqhFrmtpsisKL0; csrf-token=Nqs0bSdR-YKUl3dQBkwCbWXaHVaqOGYxSF_8; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6IjdmYjcyMmQ4LTQ1YzktNGQ5Yi04YmNiLWMxNDEwNzg4MGYwZVIiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNjc5Mzc0OTg2MzczLCJsYXN0RXZlbnRUaW1lIjoxNjc5Mzc1MDA0ODAwLCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoyLCJzZXF1ZW5jZU51bWJlciI6M30= |
| Source: chromecache_307.1.dr | String found in binary or memory: http://angular-ui.github.com/ |
| Source: chromecache_307.1.dr | String found in binary or memory: http://angular-ui.github.io/bootstrap/ |
| Source: chromecache_286.1.dr | String found in binary or memory: http://angularjs.org |
| Source: chromecache_307.1.dr | String found in binary or memory: http://api.jquery.com/offset/ |
| Source: chromecache_307.1.dr | String found in binary or memory: http://api.jquery.com/position/ |
| Source: chromecache_293.1.dr | String found in binary or memory: http://getbootstrap.com) |
| Source: chromecache_293.1.dr | String found in binary or memory: http://github.com/angular-ui/ui-select |
| Source: chromecache_203.1.dr | String found in binary or memory: http://github.com/jquery/globalize |
| Source: chromecache_224.1.dr | String found in binary or memory: http://knockoutjs.com/ |
| Source: chromecache_224.1.dr | String found in binary or memory: http://opensource.org/licenses/mit-license.php) |
| Source: chromecache_307.1.dr | String found in binary or memory: http://placekitten.com/100/150 |
| Source: chromecache_307.1.dr | String found in binary or memory: http://placekitten.com/150/150 |
| Source: chromecache_307.1.dr | String found in binary or memory: http://underscorejs.org/LICENSE |
| Source: chromecache_274.1.dr | String found in binary or memory: http://www.bohemiancoding.com/sketch |
| Source: chromecache_224.1.dr | String found in binary or memory: http://www.json.org/json2.js |
| Source: chromecache_293.1.dr, chromecache_307.1.dr | String found in binary or memory: http://www.opensource.org/licenses/MIT |
| Source: chromecache_224.1.dr | String found in binary or memory: http://www.opensource.org/licenses/mit-license.php) |
| Source: chromecache_321.1.dr, chromecache_247.1.dr | String found in binary or memory: https://capitaltltleandescrow.net/?oxhv |
| Source: chromecache_293.1.dr | String found in binary or memory: https://github.com/DaftMonk/angular-tour |
| Source: chromecache_307.1.dr | String found in binary or memory: https://github.com/angular/angular.js/pull/10764 |
| Source: chromecache_293.1.dr | String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css |
| Source: chromecache_307.1.dr | String found in binary or memory: https://github.com/mbostock/d3/blob/master/src/format/requote.js |
| Source: chromecache_307.1.dr | String found in binary or memory: https://github.com/mgonto/angular-wizard |
| Source: chromecache_293.1.dr | String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE) |
| Source: chromecache_307.1.dr | String found in binary or memory: https://lodash.com/ |
| Source: chromecache_307.1.dr | String found in binary or memory: https://lodash.com/license |
| Source: chromecache_320.1.dr, chromecache_357.1.dr | String found in binary or memory: https://login.microsoftonline.com |
| Source: chromecache_320.1.dr, chromecache_357.1.dr | String found in binary or memory: https://login.windows-ppe.net |
| Source: chromecache_315.1.dr, chromecache_314.1.dr | String found in binary or memory: https://nnegri-ubaes.box.com/s/93wior2d16y21cmgyk3biklfy5s0q10w |
| Source: chromecache_321.1.dr, chromecache_247.1.dr | String found in binary or memory: https://nnegri-ubaes.box.com/s/ycxtnffruqg2kxke4dnh5vez243bhdxh |
| Source: chromecache_307.1.dr | String found in binary or memory: https://npms.io/search?q=ponyfill. |
| Source: chromecache_307.1.dr | String found in binary or memory: https://openjsf.org/ |
| Source: chromecache_293.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/fabmdl2.4.51.woff |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.eot |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.eot?iefix |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.ttf |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.woff |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot?iefix |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.ttf |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.woff |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot?iefi |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.ttf |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.woff |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot?ief |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.ttf |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.woff |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-light-final.svg#web |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg#web |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semibold-final.svg#web |
| Source: chromecache_341.1.dr | String found in binary or memory: https://res.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.svg#web |
| Source: chromecache_195.1.dr | String found in binary or memory: https://www.onenote.com |
Edit tour
chrome.exe (PID: 6080 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node